This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/cQtlxVVPO7JQa_rTQPIvZ0L_JT0.roa File: cQtlxVVPO7JQa_rTQPIvZ0L_JT0.roa (raw, json) Hash identifier: wGTkJ7+XtXJZbWxqtu6wY+OG6HIKs93TJ8T7CJvY3Ss= Subject key identifier: 71:0B:65:C5:55:4F:3B:B2:50:6B:FA:D3:40:F2:2F:67:42:FF:25:3D Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075 Certificate serial: 019BE66A16692666FAF5BC4382A72831F20E Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/cQtlxVVPO7JQa_rTQPIvZ0L_JT0.roa Signing time: Thu 22 Jan 2026 15:54:30 +0000 ROA not before: Thu 22 Jan 2026 15:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43242 IP address blocks: 185.135.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:6a:16:69:26:66:fa:f5:bc:43:82:a7:28:31:f2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42004477243ca20b95dc8efe07337639806f6075 Validity Not Before: Jan 22 15:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=710b65c5554f3bb2506bfad340f22f6742ff253d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:18:15:50:45:b5:16:91:70:a0:3f:b7:17: f4:52:09:98:f2:3e:95:93:e1:93:10:f2:2a:09:c5: c1:e5:01:35:3e:b1:9a:3e:2a:0f:2a:41:c1:90:19: 17:a6:e9:34:9d:61:25:57:db:23:65:45:67:4c:88: c8:bc:20:51:57:1b:a2:a2:18:79:53:d9:85:aa:02: 05:3d:99:b7:79:01:c9:88:a0:a6:28:b8:f3:00:02: b5:05:6f:d7:20:b0:ba:42:1f:6e:53:b8:1f:4d:4a: 22:6d:f0:c7:9c:22:2b:aa:e8:7f:92:72:85:9f:71: dc:b8:8c:7d:1a:58:ce:9a:bb:4c:04:d7:6c:9e:7b: f8:4c:d7:c8:c3:55:e4:9b:da:2a:a5:40:57:3b:fc: cb:93:8d:5c:89:92:60:69:90:ba:e6:40:ea:61:c2: de:04:fa:b5:83:4d:53:9a:66:8a:aa:d5:1f:fb:b8: 31:00:52:23:61:f3:3e:91:da:3c:ec:3c:87:ad:4f: bc:9f:cd:7a:55:04:da:3a:95:0f:ff:eb:02:ae:ac: 5c:91:ce:0a:b0:2f:c2:36:25:b2:ef:ec:ea:26:ee: 99:48:81:b2:00:24:4d:2e:cc:d9:c6:75:ef:2b:d2: ab:ad:ac:48:0d:dd:de:7f:5e:4c:a1:fa:17:4d:33: c7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0B:65:C5:55:4F:3B:B2:50:6B:FA:D3:40:F2:2F:67:42:FF:25:3D X509v3 Authority Key Identifier: keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/cQtlxVVPO7JQa_rTQPIvZ0L_JT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.96.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:a0:37:92:51:0d:bd:37:1d:0e:3b:4b:8a:ea:1c:fd:32:04: a7:43:5b:26:57:a3:d6:12:00:57:8b:78:15:75:bb:cf:b5:c0: 81:db:18:d5:9a:6f:75:d6:a0:3c:36:e5:9e:5d:ff:c8:1e:ce: c6:19:c7:5d:9f:96:72:b3:cf:b1:f9:c5:a6:b7:ff:d9:d2:4f: 5e:15:f2:63:9d:1a:2a:d3:f9:df:91:6e:dd:c3:a9:18:f5:78: 04:d0:a3:bf:71:b2:6f:46:8f:85:fc:ae:66:a6:2f:e1:ee:3f: 52:d3:44:4f:d5:97:87:f6:73:c6:5d:37:a5:98:cc:b3:6c:a9: 6f:cd:e9:df:c9:5b:bf:34:5d:a0:85:23:69:cb:5e:f2:6a:60: d0:b8:93:86:ce:12:54:cd:bb:f8:7f:28:b4:c8:cc:41:f8:a9: 99:ef:34:56:32:d4:a1:b9:be:dc:3b:9d:1c:50:4d:cc:65:d4: 53:a0:e3:30:e6:e1:95:e9:0b:95:5d:90:22:36:2d:c9:82:60: b6:be:ab:50:af:c0:d9:05:75:87:35:75:82:d4:0f:30:ba:a1: 40:39:a8:0d:a5:95:ab:bc:f8:0b:45:7d:e8:a0:34:84:32:a3: 71:a4:1c:b5:78:0e:91:16:4e:9d:9f:f7:a7:88:39:02:3a:7a: c7:ef:cf:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvmahZpJmb69bxDgqcoMfIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDA0NDc3MjQzY2EyMGI5NWRjOGVmZTA3MzM3NjM5ODA2 ZjYwNzUwHhcNMjYwMTIyMTU1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTBiNjVjNTU1NGYzYmIyNTA2YmZhZDM0MGYyMmY2NzQyZmYyNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3IYFVBFtRaRcKA/txf0UgmY8j6V k+GTEPIqCcXB5QE1PrGaPioPKkHBkBkXpuk0nWElV9sjZUVnTIjIvCBRVxuiohh5 U9mFqgIFPZm3eQHJiKCmKLjzAAK1BW/XILC6Qh9uU7gfTUoibfDHnCIrquh/knKF n3HcuIx9GljOmrtMBNdsnnv4TNfIw1Xkm9oqpUBXO/zLk41ciZJgaZC65kDqYcLe BPq1g01TmmaKqtUf+7gxAFIjYfM+kdo87DyHrU+8n816VQTaOpUP/+sCrqxckc4K sC/CNiWy7+zqJu6ZSIGyACRNLszZxnXvK9KrraxIDd3ef15MofoXTTPHfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHELZcVVTzuyUGv600DyL2dC/yU9MB8GA1UdIwQY MBaAFEIARHckPKILldyO/gczdjmAb2B1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mZDc1N2MtM2E3Yy00YjMxLWI0YTEt Y2ZhN2EzMTBkNTQyLzEvY1F0bHhWVlBPN0pRYV9yVFFQSXZaMExfSlQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mZDc1N2MtM2E3Yy00YjMxLWI0YTEtY2ZhN2EzMTBkNTQy LzEvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYdgMA0G CSqGSIb3DQEBCwUAA4IBAQBsoDeSUQ29Nx0OO0uK6hz9MgSnQ1smV6PWEgBXi3gV dbvPtcCB2xjVmm911qA8NuWeXf/IHs7GGcddn5Zys8+x+cWmt//Z0k9eFfJjnRoq 0/nfkW7dw6kY9XgE0KO/cbJvRo+F/K5mpi/h7j9S00RP1ZeH9nPGXTelmMyzbKlv zenfyVu/NF2ghSNpy17yamDQuJOGzhJUzbv4fyi0yMxB+KmZ7zRWMtShub7cO50c UE3MZdRToOMw5uGV6QuVXZAiNi3JgmC2vqtQr8DZBXWHNXWC1A8wuqFAOagNpZWr vPgLRX3ooDSEMqNxpBy1eA6RFk6dn/eniDkCOnrH788D -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:36 2026 by rpki-client