This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/Q7VU1IAhmqh6QnPsRjKtqye9cFY.roa File: Q7VU1IAhmqh6QnPsRjKtqye9cFY.roa (raw, json) Hash identifier: 5hCbvviVC6DjaUoU7fXbjYQV9Lo078pPrQ3MKFzmu/U= Subject key identifier: 43:B5:54:D4:80:21:9A:A8:7A:42:73:EC:46:32:AD:AB:27:BD:70:56 Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Certificate serial: 019B7BA4F802F9C13329CFD6E1F1A13A789A Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/Q7VU1IAhmqh6QnPsRjKtqye9cFY.roa Signing time: Thu 01 Jan 2026 22:19:27 +0000 ROA not before: Thu 01 Jan 2026 22:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205676 IP address blocks: 185.207.32.0/24 maxlen: 24 2a0b:1d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f8:02:f9:c1:33:29:cf:d6:e1:f1:a1:3a:78:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Validity Not Before: Jan 1 22:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43b554d480219aa87a4273ec4632adab27bd7056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:ea:ef:86:e3:9a:89:7f:05:e4:42:00:70: 60:89:95:bf:a9:7e:d6:e8:3c:77:82:19:33:d4:54: b8:a9:99:67:2f:b4:b0:49:b3:78:8d:e0:a5:40:d5: e6:00:45:b4:a4:fa:88:dd:d5:19:11:cf:37:d3:c3: ca:93:67:58:b5:c3:26:65:b1:46:21:09:52:10:02: 77:db:3f:ec:9b:78:74:55:af:27:83:b3:2a:42:ca: 20:ef:ba:9a:fb:fb:18:97:37:42:b6:a0:dd:6a:66: 1f:ea:0a:1a:53:aa:e7:c7:46:c7:3a:87:cb:2f:86: aa:38:e0:02:c5:91:73:6e:f0:cf:72:6a:09:69:9b: 09:70:8d:71:08:a7:38:90:22:c5:27:30:4d:11:83: a9:0b:21:b8:51:96:7c:1b:ec:c4:a9:1d:c6:3c:94: 77:54:f0:c6:d9:00:f9:f2:c1:bb:c6:d3:5e:74:33: 66:dc:2d:d1:55:56:27:cc:9b:9d:12:77:35:3d:9b: f2:aa:af:98:39:f4:8a:c0:a8:76:af:56:7e:17:58: 91:9b:85:b7:0b:ce:bf:05:64:d7:a7:14:7e:c1:49: 2b:14:f4:8c:4b:d7:5a:fe:96:58:dd:2f:68:b0:2b: cb:cd:59:c5:ad:ef:d5:69:7e:ac:f3:3f:14:8a:a6: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B5:54:D4:80:21:9A:A8:7A:42:73:EC:46:32:AD:AB:27:BD:70:56 X509v3 Authority Key Identifier: keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/Q7VU1IAhmqh6QnPsRjKtqye9cFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.32.0/24 IPv6: 2a0b:1d40::/32 Signature Algorithm: sha256WithRSAEncryption 18:af:6c:6a:f5:a4:eb:e0:65:5e:2b:58:81:5e:d4:d6:9c:7a: 7c:31:f5:48:01:cc:05:7b:0e:60:24:f5:ca:44:77:44:78:ca: b1:cb:cd:e0:79:2e:ae:ad:d2:2a:d7:a1:2a:08:e7:25:77:b9: fa:81:61:2c:e2:c1:f5:d4:9b:b9:e2:9b:04:ac:1b:49:ab:7f: 61:e3:a1:e5:3b:13:6a:7f:eb:c9:b6:ce:22:c6:e8:5d:a1:26: a9:05:c7:a9:9d:f3:b6:cb:af:d6:91:98:72:0d:96:66:84:3e: be:88:d6:26:47:4d:69:77:fa:52:f1:50:5e:38:9a:5b:bb:9e: 85:43:8b:47:c8:24:be:a0:c6:03:86:d7:e1:d1:c3:8b:55:6a: 10:8c:6e:ed:61:2a:2d:ae:21:21:a7:9a:96:d3:07:7b:d4:cd: ef:16:9d:77:0c:a7:f2:84:4d:8a:b6:6e:dd:e7:02:94:1d:92: eb:d1:aa:19:0e:f9:0d:14:fa:ed:18:12:ec:5b:f6:f7:9a:14: b4:c3:f6:b5:fc:a6:a0:e3:a0:10:3a:cf:47:34:71:02:49:ac: 8a:dd:0d:b8:09:e1:11:9e:f3:9a:2e:55:38:32:d0:bc:64:10: 96:e4:7f:7a:42:fd:91:b3:3d:98:34:f3:2a:1e:b9:0c:c9:db: 4c:09:87:5e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pPgC+cEzKc/W4fGhOniaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw MjhlY2QwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2I1NTRkNDgwMjE5YWE4N2E0MjczZWM0NjMyYWRhYjI3YmQ3MDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9nq74bjmol/BeRCAHBgiZW/qX7W 6Dx3ghkz1FS4qZlnL7SwSbN4jeClQNXmAEW0pPqI3dUZEc8308PKk2dYtcMmZbFG IQlSEAJ32z/sm3h0Va8ng7MqQsog77qa+/sYlzdCtqDdamYf6goaU6rnx0bHOofL L4aqOOACxZFzbvDPcmoJaZsJcI1xCKc4kCLFJzBNEYOpCyG4UZZ8G+zEqR3GPJR3 VPDG2QD58sG7xtNedDNm3C3RVVYnzJudEnc1PZvyqq+YOfSKwKh2r1Z+F1iRm4W3 C86/BWTXpxR+wUkrFPSMS9da/pZY3S9osCvLzVnFre/VaX6s8z8UiqaGswIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEO1VNSAIZqoekJz7EYyrasnvXBWMB8GA1UdIwQY MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt NTJjYWQ2Njc1ZmM2LzEvUTdWVTFJQWhtcWg2UW5Qc1JqS3RxeWU5Y0ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2 LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuc8gMA0E AgACMAcDBQAqCx1AMA0GCSqGSIb3DQEBCwUAA4IBAQAYr2xq9aTr4GVeK1iBXtTW nHp8MfVIAcwFew5gJPXKRHdEeMqxy83geS6urdIq16EqCOcld7n6gWEs4sH11Ju5 4psErBtJq39h46HlOxNqf+vJts4ixuhdoSapBcepnfO2y6/WkZhyDZZmhD6+iNYm R01pd/pS8VBeOJpbu56FQ4tHyCS+oMYDhtfh0cOLVWoQjG7tYSotriEhp5qW0wd7 1M3vFp13DKfyhE2Ktm7d5wKUHZLr0aoZDvkNFPrtGBLsW/b3mhS0w/a1/Kag46AQ Os9HNHECSayK3Q24CeERnvOaLlU4MtC8ZBCW5H96Qv2Rsz2YNPMqHrkMydtMCYde -----END CERTIFICATE-----Generated at Tue Jan 20 18:35:51 2026 by rpki-client