This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/q2cMBXCMV2TKXbIKxSlGdHYqSnQ.roa File: q2cMBXCMV2TKXbIKxSlGdHYqSnQ.roa (raw, json) Hash identifier: 8gAaZY+bZ3BGIX0aq+TEUyX+bxVegXyhlIPRaI0W4hI= Subject key identifier: AB:67:0C:05:70:8C:57:64:CA:5D:B2:0A:C5:29:46:74:76:2A:4A:74 Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699 Certificate serial: 019B76EAB4E159CA234BC60D47B51051104C Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/q2cMBXCMV2TKXbIKxSlGdHYqSnQ.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211326 IP address blocks: 185.134.80.0/22 maxlen: 22 185.134.80.0/23 maxlen: 23 185.134.80.0/24 maxlen: 24 185.134.81.0/24 maxlen: 24 185.134.82.0/23 maxlen: 23 185.134.82.0/24 maxlen: 24 185.134.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b4:e1:59:ca:23:4b:c6:0d:47:b5:10:51:10:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab670c05708c5764ca5db20ac5294674762a4a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:d5:e3:ba:0f:80:14:25:07:0e:0d:b3:bf: f4:d1:0c:a4:c4:47:62:36:8d:41:a5:3d:8e:c0:47: dc:da:ed:6e:a2:01:c3:f5:5d:f3:13:8f:b5:15:71: 9d:b7:be:c1:8d:e3:fe:a9:7c:6f:b4:1c:4e:80:d9: 2f:05:43:24:7d:ac:f5:36:48:d7:20:fe:e9:67:75: 24:ba:f2:66:3e:52:84:ed:5c:96:c8:6b:05:97:30: fc:5b:a4:d3:38:67:84:a2:17:cb:e8:4e:20:12:9f: 2d:ff:d8:6c:a1:2f:85:bc:69:41:b4:76:de:72:59: 71:41:2c:34:cd:7e:cd:46:bd:6c:2a:16:37:42:36: 1f:d2:d7:33:d3:6d:15:05:ed:2e:a3:ba:d7:aa:7e: ef:64:97:f6:3c:b9:1f:c8:99:7a:08:ed:1a:e5:f5: f5:7c:4a:3c:d1:40:94:51:79:ef:58:44:67:10:08: ce:45:83:48:d5:19:9b:4a:ce:6a:d3:e6:f0:58:f5: 7d:18:6b:0f:31:a1:c6:2c:64:98:0d:58:b2:f3:c4: eb:d1:f7:3c:b7:00:00:89:41:0b:71:81:80:29:98: 59:c6:dd:94:42:59:d2:65:0e:7f:0c:9a:8f:b8:3d: 16:08:26:ad:48:d8:e6:9d:a6:82:7b:d7:81:6e:03: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:67:0C:05:70:8C:57:64:CA:5D:B2:0A:C5:29:46:74:76:2A:4A:74 X509v3 Authority Key Identifier: keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/q2cMBXCMV2TKXbIKxSlGdHYqSnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.80.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:cc:50:93:c0:0d:20:8c:c5:3a:48:0b:6a:e7:f6:51:da:f7: cf:4f:08:e4:a9:7f:19:46:99:0a:4e:e1:b2:f0:88:ca:17:e0: 93:b8:50:4d:13:bf:a9:7a:ce:0a:94:86:bc:fc:b3:05:d4:00: a8:ae:88:26:a5:8b:a3:e5:11:97:47:5a:70:00:4f:f2:ee:58: 60:91:da:2d:d3:45:16:7e:2e:be:c5:0d:1d:de:89:65:35:ca: bb:dd:4d:4f:c8:0f:42:3e:4d:cd:0b:5a:be:07:75:b6:a8:d7: 8c:3a:a5:d5:6d:85:51:ac:44:3d:0e:07:06:85:26:0c:08:c4: 5b:68:ab:70:a7:02:a7:f3:ed:73:d4:77:2b:25:94:1c:8b:1d: 30:ac:bb:12:be:96:9b:77:47:da:4d:a8:30:92:68:ff:78:1f: fe:72:d9:be:ee:cd:5a:4b:f1:e8:7c:f1:91:ce:30:92:9c:9e: 9c:c4:33:ed:62:c4:4e:6b:b9:15:2f:f8:ea:07:dd:06:67:7a: 1f:dd:81:5c:7a:54:0f:be:d0:6d:a4:46:f8:3e:3a:e0:c7:e0: c0:f0:83:ee:a4:46:a9:81:f1:b1:7a:35:1a:5b:4a:45:a0:80: 75:91:a9:42:f5:85:fb:cb:af:e1:0b:b6:40:fa:fe:de:ee:41: 42:89:33:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rThWcojS8YNR7UQURBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDA0ODQzYzRmM2E0ZTc2Njk0ZGIzY2ZiZjliZTNhOWI2 N2M2OTkwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjY3MGMwNTcwOGM1NzY0Y2E1ZGIyMGFjNTI5NDY3NDc2MmE0YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruXV47oPgBQlBw4Ns7/00QykxEdi No1BpT2OwEfc2u1uogHD9V3zE4+1FXGdt77BjeP+qXxvtBxOgNkvBUMkfaz1NkjX IP7pZ3UkuvJmPlKE7VyWyGsFlzD8W6TTOGeEohfL6E4gEp8t/9hsoS+FvGlBtHbe cllxQSw0zX7NRr1sKhY3QjYf0tcz020VBe0uo7rXqn7vZJf2PLkfyJl6CO0a5fX1 fEo80UCUUXnvWERnEAjORYNI1RmbSs5q0+bwWPV9GGsPMaHGLGSYDViy88Tr0fc8 twAAiUELcYGAKZhZxt2UQlnSZQ5/DJqPuD0WCCatSNjmnaaCe9eBbgPQwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtnDAVwjFdkyl2yCsUpRnR2Kkp0MB8GA1UdIwQY MBaAFCfQSEPE86TnZpTbPPv5vjqbZ8aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wYjY0N2YtYTZlNS00NmYzLWI5OWMt YjA5YjkzODVkNzI3LzEvcTJjTUJYQ01WMlRLWGJJS3hTbEdkSFlxU25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8wYjY0N2YtYTZlNS00NmYzLWI5OWMtYjA5YjkzODVkNzI3 LzEvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYZQMA0G CSqGSIb3DQEBCwUAA4IBAQAvzFCTwA0gjMU6SAtq5/ZR2vfPTwjkqX8ZRpkKTuGy 8IjKF+CTuFBNE7+pes4KlIa8/LMF1ACorogmpYuj5RGXR1pwAE/y7lhgkdot00UW fi6+xQ0d3ollNcq73U1PyA9CPk3NC1q+B3W2qNeMOqXVbYVRrEQ9DgcGhSYMCMRb aKtwpwKn8+1z1HcrJZQcix0wrLsSvpabd0faTagwkmj/eB/+ctm+7s1aS/HofPGR zjCSnJ6cxDPtYsROa7kVL/jqB90GZ3of3YFcelQPvtBtpEb4Pjrgx+DA8IPupEap gfGxejUaW0pFoIB1kalC9YX7y6/hC7ZA+v7e7kFCiTOJ -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:27 2026 by rpki-client