This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/QNpprllplAM88mMrWtN3ag177fE.roa File: QNpprllplAM88mMrWtN3ag177fE.roa (raw, json) Hash identifier: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4= Subject key identifier: 40:DA:69:AE:59:69:94:03:3C:F2:63:2B:5A:D3:77:6A:0D:7B:ED:F1 Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Certificate serial: 019B7DCB6817EBF07B18586923A49FEF3BAE Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/QNpprllplAM88mMrWtN3ag177fE.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51167 IP address blocks: 94.250.201.0/24 maxlen: 32 94.250.202.0/24 maxlen: 32 94.250.203.0/24 maxlen: 32 176.57.150.0/24 maxlen: 32 176.57.184.0/24 maxlen: 32 176.57.188.0/24 maxlen: 32 176.57.189.0/24 maxlen: 32 185.137.122.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:68:17:eb:f0:7b:18:58:69:23:a4:9f:ef:3b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40da69ae596994033cf2632b5ad3776a0d7bedf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:31:63:65:29:75:a2:9a:2a:bc:81:b9:28:d0: 66:7c:d0:28:7b:e5:8b:02:d2:cf:6f:6f:08:99:95: 47:f3:29:68:f5:e5:02:a0:d8:19:86:ef:e8:f0:97: 21:a0:f4:a6:0e:1f:86:71:14:6a:f4:17:a0:02:21: 61:92:d1:4f:fe:ac:5e:9d:71:da:e3:13:bc:81:81: d3:7e:62:51:83:39:ea:5a:e8:17:cc:5f:e9:42:ac: 52:58:e0:7a:ca:b5:83:5a:64:6c:15:eb:5e:6b:2b: 60:c2:d8:f7:eb:4c:30:58:80:76:26:86:c5:a4:de: f2:82:11:fa:1c:34:00:27:f2:28:48:9a:4d:1a:6c: ae:92:52:77:2a:03:7c:1b:73:a0:cb:2a:bb:ec:af: e6:3f:a7:41:7f:92:11:c2:f4:2d:fd:a5:09:ce:e8: 4a:5d:10:bc:a8:d8:ee:ec:29:90:dd:63:0a:31:8a: 32:96:9b:cc:86:e7:9f:02:0f:c7:6e:88:68:e3:5c: 93:66:64:78:08:10:f2:ab:10:20:fc:63:a5:94:e3: 33:f2:85:04:ab:45:4b:1b:43:b2:64:50:cc:87:37: 3d:fb:16:77:28:6d:0d:54:7d:0c:5e:d3:ad:61:0e: 70:fd:bc:50:ae:51:48:df:66:bb:6a:f4:3a:82:c6: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DA:69:AE:59:69:94:03:3C:F2:63:2B:5A:D3:77:6A:0D:7B:ED:F1 X509v3 Authority Key Identifier: keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/QNpprllplAM88mMrWtN3ag177fE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.250.201.0-94.250.203.255 176.57.150.0/24 176.57.184.0/24 176.57.188.0/23 185.137.122.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:45:90:06:2c:a2:2c:d7:0a:de:fb:3a:75:9c:0a:84:66:d4: b0:6f:82:d9:73:97:02:0f:90:52:97:5c:0b:b5:8a:6a:29:05: fb:3a:b8:24:fb:e5:1a:f7:20:44:bd:fb:7a:f2:7b:73:ca:68: 61:19:90:aa:51:3c:10:f9:68:df:6b:b2:2a:3c:99:35:0c:99: e7:9e:59:5b:e7:b5:11:ff:bf:e2:b4:b6:4a:c0:d1:e0:73:3f: da:92:cc:2d:e5:4c:9f:e6:5e:92:a9:6d:cd:f6:25:04:d4:df: ee:4b:e5:d8:6d:2f:d5:c2:68:10:98:d9:f7:39:7f:ab:37:fc: 7a:3e:85:e8:c9:cc:a6:9b:f3:38:6c:95:16:e9:52:48:91:c2: 56:35:92:a4:b5:ac:34:34:60:4a:9d:99:2e:f1:97:7a:96:2f: 2e:e4:16:68:c3:5b:22:dc:9c:6f:62:d9:01:75:57:77:9e:fb: ce:98:7d:14:0a:73:44:7a:dd:c1:69:fa:38:c8:c6:3e:0b:34: b7:b5:c6:18:5c:ae:b2:96:2e:20:8d:91:4a:8d:71:e6:de:96: 38:37:5d:0a:66:5b:50:d3:5b:d5:91:43:6c:52:9a:64:71:69: 90:ce:b1:2a:55:60:7f:6b:9b:5c:d8:e0:24:86:b6:fc:bb:76: e1:af:8c:5b -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt9y2gX6/B7GFhpI6Sf7zuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy MjBmYzIwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGRhNjlhZTU5Njk5NDAzM2NmMjYzMmI1YWQzNzc2YTBkN2JlZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DFjZSl1opoqvIG5KNBmfNAoe+WL AtLPb28ImZVH8ylo9eUCoNgZhu/o8JchoPSmDh+GcRRq9BegAiFhktFP/qxenXHa 4xO8gYHTfmJRgznqWugXzF/pQqxSWOB6yrWDWmRsFeteaytgwtj360wwWIB2JobF pN7yghH6HDQAJ/IoSJpNGmyuklJ3KgN8G3Ogyyq77K/mP6dBf5IRwvQt/aUJzuhK XRC8qNju7CmQ3WMKMYoylpvMhuefAg/Hboho41yTZmR4CBDyqxAg/GOllOMz8oUE q0VLG0OyZFDMhzc9+xZ3KG0NVH0MXtOtYQ5w/bxQrlFI32a7avQ6gsZWKQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFEDaaa5ZaZQDPPJjK1rTd2oNe+3xMB8GA1UdIwQY MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz LWE4OWY4MTc3NjQwNi8xL1FOcHBybGxwbEFNODhtTXJXdE4zYWcxNzdmRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQzLWE4OWY4MTc3NjQw Ni8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUHAQcBAf8EMDAuMCwEAgABMCYwDAMEAF76 yQMEAl76yAMEALA5lgMEALA5uAMEAbA5vAMEALmJejANBgkqhkiG9w0BAQsFAAOC AQEAe0WQBiyiLNcK3vs6dZwKhGbUsG+C2XOXAg+QUpdcC7WKaikF+zq4JPvlGvcg RL37evJ7c8poYRmQqlE8EPlo32uyKjyZNQyZ555ZW+e1Ef+/4rS2SsDR4HM/2pLM LeVMn+ZekqltzfYlBNTf7kvl2G0v1cJoEJjZ9zl/qzf8ej6F6MnMppvzOGyVFulS SJHCVjWSpLWsNDRgSp2ZLvGXepYvLuQWaMNbItycb2LZAXVXd577zph9FApzRHrd wWn6OMjGPgs0t7XGGFyuspYuII2RSo1x5t6WODddCmZbUNNb1ZFDbFKaZHFpkM6x KlVgf2ubXNjgJIa2/Lt24a+MWw== -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:51 2026 by rpki-client