This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/QZaZGDE-cuakmV83Cz5Lef8Azck.roa File: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (raw, json) Hash identifier: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM= Subject key identifier: 41:96:99:18:31:3E:72:E6:A4:99:5F:37:0B:3E:4B:79:FF:00:CD:C9 Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5 Certificate serial: 019B7E3805D0654D057ACEEAD32C8C839C37 Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/QZaZGDE-cuakmV83Cz5Lef8Azck.roa Signing time: Fri 02 Jan 2026 10:19:19 +0000 ROA not before: Fri 02 Jan 2026 10:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1257 IP address blocks: 185.118.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:05:d0:65:4d:05:7a:ce:ea:d3:2c:8c:83:9c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5 Validity Not Before: Jan 2 10:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41969918313e72e6a4995f370b3e4b79ff00cdc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:46:a6:d7:dd:dc:ec:0f:bf:b9:0f:56:1d: 99:26:26:4a:e0:15:ba:4c:44:ca:b9:8a:6c:70:d8: 1e:18:cb:e6:2b:4b:74:ba:28:77:a9:99:53:52:9e: de:3a:b6:aa:5e:2a:c9:43:bb:6c:af:ef:32:36:10: 1d:ab:00:c1:1f:4a:10:b9:ee:f0:02:5f:d3:0c:5e: c8:ac:e5:72:b9:76:5c:36:e4:76:10:63:21:6d:9c: 69:b0:55:0c:3b:38:ac:52:32:ee:d7:7c:13:a7:09: 3e:df:c6:04:ca:10:a7:f5:3b:fd:62:5f:9d:78:b0: fd:60:d6:11:5a:09:bf:8e:69:97:31:ca:d0:be:e9: 67:cc:04:ba:d9:13:e1:bb:a8:f2:8a:ac:42:16:c6: 63:01:5f:82:09:f9:67:e9:1a:c0:ef:f3:55:66:1d: 0c:76:fc:5b:c0:80:a5:72:8d:eb:39:e4:c8:dc:52: 45:21:01:10:ee:d8:1b:f9:d8:bf:1a:2f:79:64:25: 77:fc:29:4c:57:b9:4f:14:da:25:bf:82:a0:69:22: b0:2f:d8:fa:11:08:b5:23:7b:de:5a:37:11:6d:85: 48:41:e1:d0:2c:aa:37:cb:d0:35:2c:ac:f4:1f:2a: 76:77:b4:55:7b:76:06:e0:9d:7d:b4:41:7d:bd:23: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:96:99:18:31:3E:72:E6:A4:99:5F:37:0B:3E:4B:79:FF:00:CD:C9 X509v3 Authority Key Identifier: keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/QZaZGDE-cuakmV83Cz5Lef8Azck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.160.0/22 Signature Algorithm: sha256WithRSAEncryption 56:ca:a1:7a:70:e1:69:5f:5b:62:a3:c0:d2:76:ec:bb:51:fe: 94:c5:f8:4f:97:6a:1c:5d:74:32:43:42:5d:28:2d:c5:76:53: 60:b4:b5:e7:7e:d1:d6:55:ab:d3:4a:c3:73:e3:2a:5f:60:93: 3c:b7:05:f8:dc:70:16:d7:59:3f:b9:cb:db:8c:3a:4e:d5:d6: cc:90:bf:ec:e6:a0:b5:da:88:e3:d5:3b:33:b3:89:03:64:fa: 0b:ea:85:da:05:fd:4e:f8:cb:e9:a5:fb:cb:5e:ce:ab:da:6d: f0:7a:e7:f5:6c:8d:a7:5b:be:61:b5:f2:8d:13:81:d8:9c:f7: 53:f8:cf:50:9f:9c:7e:b3:df:df:d8:5c:0a:93:ba:48:1f:b3: cb:60:ad:bd:90:b2:0d:31:02:eb:9b:ea:ce:e5:27:0c:58:83: 01:08:d9:7a:36:57:04:ae:b7:60:f1:f1:b7:0a:ca:8c:d8:6f: ad:94:f2:1c:d0:60:84:38:69:6b:01:1b:84:fa:23:e2:ec:94: 7b:0d:c0:ae:1b:30:9d:6d:e0:9a:36:b2:d5:f2:78:6d:66:8f: 36:71:81:6c:4c:8f:93:38:67:80:16:96:cc:32:4d:78:d4:8f: 26:25:d2:4a:88:bc:e4:4b:c6:de:49:c4:cf:3b:cf:4f:ac:67: ef:e2:d6:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OAXQZU0Fes7q0yyMg5w3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDBiZjFhZDdmYzM2OWQ4ZmJmNDNlNjJkZTk3YTRmYWNm ZWY2YjUwHhcNMjYwMTAyMTAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTk2OTkxODMxM2U3MmU2YTQ5OTVmMzcwYjNlNGI3OWZmMDBjZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLBGptfd3OwPv7kPVh2ZJiZK4BW6 TETKuYpscNgeGMvmK0t0uih3qZlTUp7eOraqXirJQ7tsr+8yNhAdqwDBH0oQue7w Al/TDF7IrOVyuXZcNuR2EGMhbZxpsFUMOzisUjLu13wTpwk+38YEyhCn9Tv9Yl+d eLD9YNYRWgm/jmmXMcrQvulnzAS62RPhu6jyiqxCFsZjAV+CCfln6RrA7/NVZh0M dvxbwIClco3rOeTI3FJFIQEQ7tgb+di/Gi95ZCV3/ClMV7lPFNolv4KgaSKwL9j6 EQi1I3veWjcRbYVIQeHQLKo3y9A1LKz0Hyp2d7RVe3YG4J19tEF9vSN4kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGWmRgxPnLmpJlfNws+S3n/AM3JMB8GA1UdIwQY MBaAFNXQvxrX/Dadj79D5i3pek+s/va1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2Ut ZWI3ZTljMGQzNzQ3LzEvUVphWkdERS1jdWFrbVY4M0N6NUxlZjhBemNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2UtZWI3ZTljMGQzNzQ3 LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXagMA0G CSqGSIb3DQEBCwUAA4IBAQBWyqF6cOFpX1tio8DSduy7Uf6UxfhPl2ocXXQyQ0Jd KC3FdlNgtLXnftHWVavTSsNz4ypfYJM8twX43HAW11k/ucvbjDpO1dbMkL/s5qC1 2ojj1Tszs4kDZPoL6oXaBf1O+MvppfvLXs6r2m3weuf1bI2nW75htfKNE4HYnPdT +M9Qn5x+s9/f2FwKk7pIH7PLYK29kLINMQLrm+rO5ScMWIMBCNl6NlcErrdg8fG3 CsqM2G+tlPIc0GCEOGlrARuE+iPi7JR7DcCuGzCdbeCaNrLV8nhtZo82cYFsTI+T OGeAFpbMMk141I8mJdJKiLzkS8beScTPO89PrGfv4tZs -----END CERTIFICATE-----Generated at Mon Jan 26 14:04:29 2026 by rpki-client