This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/qMQrhVdpokolQWUOh4o5Ri8JueU.roa File: qMQrhVdpokolQWUOh4o5Ri8JueU.roa (raw, json) Hash identifier: kVKK0WjFieFltJV66QufbgDou6/7+zDDk1pZJHeL88k= Subject key identifier: A8:C4:2B:85:57:69:A2:4A:25:41:65:0E:87:8A:39:46:2F:09:B9:E5 Certificate issuer: /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1 Certificate serial: 019B7D5CF29838752BB4FD7F3A3D3DCC7BB4 Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/qMQrhVdpokolQWUOh4o5Ri8JueU.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64442 IP address blocks: 185.161.100.0/22 maxlen: 22 185.161.100.0/24 maxlen: 24 2a07:c180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f2:98:38:75:2b:b4:fd:7f:3a:3d:3d:cc:7b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1 Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8c42b855769a24a2541650e878a39462f09b9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:bb:2d:2d:0f:83:f1:1c:6e:68:4d:b0:ef: e1:d1:20:f3:d3:98:7e:4a:15:b7:25:56:d2:40:5b: 72:9d:38:d6:5d:c4:83:2a:74:bf:80:95:c6:cf:03: 02:23:6c:fd:af:b2:70:70:18:65:fa:c5:3c:d8:c4: f4:fc:87:4f:4d:40:0b:f0:2a:e0:99:e2:6c:da:d1: b8:19:e6:3c:ce:b1:e8:b2:ee:fc:25:dc:bc:8f:88: aa:81:4a:3a:ab:86:06:6a:ce:61:7b:a1:33:49:67: be:6c:ff:7b:03:38:90:6a:0b:97:e3:6b:a7:b8:c5: a1:b9:4f:4d:2f:ed:43:3a:ba:cf:b6:43:76:84:cf: f1:3a:6a:b7:74:88:78:63:03:80:99:99:44:b1:5f: 39:a4:6e:ea:b7:9c:e8:3f:2d:74:61:b0:b1:9e:71: 47:e8:2f:15:cd:6b:ca:0a:74:3f:01:4c:05:b6:69: 67:2b:3f:3c:39:1c:b2:78:b6:d9:ee:c4:43:a1:b5: 8d:53:c3:08:02:31:d6:05:76:2b:4a:bf:12:6d:e4: cb:c2:f3:f3:c3:1d:f6:60:35:1a:12:be:79:58:41: 5f:b6:56:72:d2:ee:03:dc:43:40:e8:70:fb:a8:f7: 35:22:44:7b:fc:38:8d:01:e2:a8:5e:d4:d4:a0:e6: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C4:2B:85:57:69:A2:4A:25:41:65:0E:87:8A:39:46:2F:09:B9:E5 X509v3 Authority Key Identifier: keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/qMQrhVdpokolQWUOh4o5Ri8JueU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.100.0/22 IPv6: 2a07:c180::/29 Signature Algorithm: sha256WithRSAEncryption 88:d5:e9:5d:d2:dc:8c:2d:12:49:67:1b:c8:ef:9c:3b:5b:86: 4e:be:83:fb:9d:b1:c0:35:b3:0a:b7:cd:b8:8a:ed:ca:8d:c9: cb:e3:48:94:f8:d2:db:bd:cc:d6:f8:5a:18:66:6d:1b:19:97: 53:77:07:f7:31:81:bb:eb:d4:aa:f7:91:76:39:45:96:06:5e: 7b:3f:b9:53:57:84:0b:3d:31:8c:1c:42:79:15:28:7a:b0:6d: be:a9:fd:b2:82:07:60:be:25:e2:b5:a3:ac:55:5d:40:c2:db: ee:e3:41:13:44:39:3a:22:a4:3b:62:4d:9e:56:7d:0c:11:69: 83:20:b8:bf:6d:49:04:fb:07:ce:64:ec:31:ec:2d:ef:1b:c2: 58:4b:63:59:d2:f1:31:aa:e0:59:d5:38:d6:79:40:29:a5:75: 97:43:c2:44:ed:c9:dc:bf:34:9a:96:a4:c1:da:88:26:04:87: b6:25:d9:1c:ed:9e:fe:1b:5d:02:d8:83:50:18:2e:cb:c5:a8: 46:f1:a0:64:0e:48:e7:49:e2:6e:af:28:07:c0:c9:c0:e3:56: e9:df:67:2d:07:05:1a:c9:08:cb:5b:0c:db:90:e4:3e:8d:f1: 3a:66:d3:a1:ab:15:ae:ff:21:2c:53:87:6d:4c:d2:d6:4f:6c: 02:1b:78:3a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XPKYOHUrtP1/Oj09zHu0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ODFmYTY2YmUyY2VhMzRiNTg4M2MyMWM2ZjgzZjM0NjRl MmVlZTEwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGM0MmI4NTU3NjlhMjRhMjU0MTY1MGU4NzhhMzk0NjJmMDliOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ha7LS0Pg/EcbmhNsO/h0SDz05h+ ShW3JVbSQFtynTjWXcSDKnS/gJXGzwMCI2z9r7JwcBhl+sU82MT0/IdPTUAL8Crg meJs2tG4GeY8zrHosu78Jdy8j4iqgUo6q4YGas5he6EzSWe+bP97AziQaguX42un uMWhuU9NL+1DOrrPtkN2hM/xOmq3dIh4YwOAmZlEsV85pG7qt5zoPy10YbCxnnFH 6C8VzWvKCnQ/AUwFtmlnKz88ORyyeLbZ7sRDobWNU8MIAjHWBXYrSr8SbeTLwvPz wx32YDUaEr55WEFftlZy0u4D3ENA6HD7qPc1IkR7/DiNAeKoXtTUoOa7+QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKjEK4VXaaJKJUFlDoeKOUYvCbnlMB8GA1UdIwQY MBaAFNaB+ma+LOo0tYg8Icb4PzRk4u7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNDAxNjUtZDk3NC00MjliLWExYzEt YTNlZjBhNGEzMTE5LzEvcU1RcmhWZHBva29sUVdVT2g0bzVSaThKdWVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yNDAxNjUtZDk3NC00MjliLWExYzEtYTNlZjBhNGEzMTE5 LzEvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaFkMA0E AgACMAcDBQMqB8GAMA0GCSqGSIb3DQEBCwUAA4IBAQCI1eld0tyMLRJJZxvI75w7 W4ZOvoP7nbHANbMKt824iu3KjcnL40iU+NLbvczW+FoYZm0bGZdTdwf3MYG769Sq 95F2OUWWBl57P7lTV4QLPTGMHEJ5FSh6sG2+qf2yggdgviXitaOsVV1Awtvu40ET RDk6IqQ7Yk2eVn0MEWmDILi/bUkE+wfOZOwx7C3vG8JYS2NZ0vExquBZ1TjWeUAp pXWXQ8JE7cncvzSalqTB2ogmBIe2Jdkc7Z7+G10C2INQGC7LxahG8aBkDkjnSeJu rygHwMnA41bp32ctBwUayQjLWwzbkOQ+jfE6ZtOhqxWu/yEsU4dtTNLWT2wCG3g6 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:24 2026 by rpki-client