This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa File: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (raw, json) Hash identifier: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0= Subject key identifier: 40:A4:81:98:FD:E0:CE:F8:50:CC:95:14:3C:13:5C:08:B5:87:28:73 Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d Certificate serial: 019B7AC90B995BF89D9FF56595D4DEF54A0D Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa Signing time: Thu 01 Jan 2026 18:19:14 +0000 ROA not before: Thu 01 Jan 2026 18:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43591 IP address blocks: 46.245.152.0/21 maxlen: 24 85.117.160.0/19 maxlen: 24 85.117.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0b:99:5b:f8:9d:9f:f5:65:95:d4:de:f5:4a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d Validity Not Before: Jan 1 18:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40a48198fde0cef850cc95143c135c08b5872873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:3b:c3:d0:8b:1c:fd:72:48:a9:e1:65:48: b4:3e:57:0f:8d:f4:69:b9:94:0d:28:70:69:6a:c5: b5:00:1a:a5:9d:f2:86:4b:d5:40:17:24:ce:d9:75: 00:54:b7:2a:fa:ae:f0:37:e5:a6:3d:ca:88:3b:fe: 32:7e:6e:0f:9d:98:9b:a3:bc:2b:20:70:65:a5:e5: d6:b9:8f:90:43:46:0b:4e:ac:85:7b:94:f6:43:90: df:15:34:d9:a6:c8:cc:69:98:2e:1b:a4:71:95:99: 3d:ee:06:53:2b:d2:9c:31:db:7c:41:98:b4:8c:72: 12:d6:59:9a:7f:3e:38:72:5c:0d:1c:d8:f0:10:d1: 9a:66:6f:db:dc:fa:99:62:c6:12:17:84:9e:52:2b: ed:e6:7c:39:ba:ba:f9:cf:c7:a4:e0:cb:1b:9d:a3: cd:2a:fe:c0:ea:cd:43:21:7f:0b:7f:5c:5a:b0:97: b9:70:65:6c:40:da:13:b9:59:30:b8:fd:a3:31:45: 64:3e:14:4e:1e:c2:a8:67:8e:04:ca:ff:b0:3e:4b: 24:5b:5b:77:35:90:1b:b3:26:37:c5:dd:8f:30:5c: 27:fd:ec:ba:4c:54:1d:cd:92:85:19:a7:f4:41:87: cf:85:2a:36:56:d5:fc:96:3e:82:b2:6f:e3:7e:d9: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A4:81:98:FD:E0:CE:F8:50:CC:95:14:3C:13:5C:08:B5:87:28:73 X509v3 Authority Key Identifier: keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.152.0/21 85.117.160.0-85.117.223.255 Signature Algorithm: sha256WithRSAEncryption 4b:e0:80:61:82:28:e7:37:9f:72:03:bc:fb:88:a6:8b:e3:0f: 82:89:ab:db:1a:1e:8e:c6:d0:dd:c5:5b:c3:9e:bc:c1:89:e1: b9:34:49:87:6d:e8:4e:fe:29:0a:f1:2a:c1:aa:9a:0c:9d:b8: 68:15:30:7e:b3:fc:2e:3a:55:5a:0a:3e:96:ea:b2:d1:1b:63: 34:6a:89:cc:32:9a:42:86:bd:a9:3e:fd:d2:47:5e:74:e8:35: 70:11:95:01:d1:34:9e:a0:b3:2c:57:51:25:a9:56:f9:fb:af: 30:08:ad:a6:90:72:39:38:14:02:1c:24:45:46:b3:85:73:6a: b4:e2:de:32:5f:1f:5e:cb:50:32:57:cf:4b:5f:5e:68:83:9c: dc:5e:65:bc:d2:f4:99:ac:ba:1d:a6:9a:af:4f:6e:5e:84:66: 2d:1f:5d:f9:16:1b:0f:66:90:0a:5e:23:22:e5:e2:b8:8a:f9: d7:2f:ec:0f:d4:11:e8:14:0a:59:ba:0b:32:ce:82:7a:33:60: b3:cd:6e:34:8b:88:5c:6f:70:02:de:07:55:f2:39:99:0d:7c: 77:32:a3:56:36:1e:3c:09:53:89:8d:0c:8e:1e:02:64:7b:ed: 5c:c0:46:d4:15:ae:79:7c:d5:a9:b5:ae:b2:24:05:e3:5e:cf: b8:3a:b9:13 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6yQuZW/idn/VlldTe9UoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMmE4YWMzMDI4YjcwOTExY2I2MTExZmZkYTNhMmVmZTU1 ODg2MmQwHhcNMjYwMTAxMTgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGE0ODE5OGZkZTBjZWY4NTBjYzk1MTQzYzEzNWMwOGI1ODcyODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOU7w9CLHP1ySKnhZUi0PlcPjfRp uZQNKHBpasW1ABqlnfKGS9VAFyTO2XUAVLcq+q7wN+WmPcqIO/4yfm4PnZibo7wr IHBlpeXWuY+QQ0YLTqyFe5T2Q5DfFTTZpsjMaZguG6RxlZk97gZTK9KcMdt8QZi0 jHIS1lmafz44clwNHNjwENGaZm/b3PqZYsYSF4SeUivt5nw5urr5z8ek4MsbnaPN Kv7A6s1DIX8Lf1xasJe5cGVsQNoTuVkwuP2jMUVkPhROHsKoZ44Eyv+wPkskW1t3 NZAbsyY3xd2PMFwn/ey6TFQdzZKFGaf0QYfPhSo2VtX8lj6Csm/jftmkswIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFECkgZj94M74UMyVFDwTXAi1hyhzMB8GA1UdIwQY MBaAFHsqisMCi3CRHLYRH/2jou/lWIYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEt ODU4ZGQxYjE2MTdmLzEvUUtTQm1QM2d6dmhRekpVVVBCTmNDTFdIS0hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEtODU4ZGQxYjE2MTdm LzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDLvWYMAwD BAVVdaADBAVVdcAwDQYJKoZIhvcNAQELBQADggEBAEvggGGCKOc3n3IDvPuIpovj D4KJq9saHo7G0N3FW8OevMGJ4bk0SYdt6E7+KQrxKsGqmgyduGgVMH6z/C46VVoK PpbqstEbYzRqicwymkKGvak+/dJHXnToNXARlQHRNJ6gsyxXUSWpVvn7rzAIraaQ cjk4FAIcJEVGs4VzarTi3jJfH17LUDJXz0tfXmiDnNxeZbzS9Jmsuh2mmq9Pbl6E Zi0fXfkWGw9mkApeIyLl4riK+dcv7A/UEegUClm6CzLOgnozYLPNbjSLiFxvcALe B1XyOZkNfHcyo1Y2HjwJU4mNDI4eAmR77VzARtQVrnl81am1rrIkBeNez7g6uRM= -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:58 2026 by rpki-client