This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/QPm5_PDWMrxWuR6yCX-RrxN3H3c.roa File: QPm5_PDWMrxWuR6yCX-RrxN3H3c.roa (raw, json) Hash identifier: F4rOeKQIIr+v8+zO3vdMMRp/iT0j1wFRvBSXZLKj3lw= Subject key identifier: 40:F9:B9:FC:F0:D6:32:BC:56:B9:1E:B2:09:7F:91:AF:13:77:1F:77 Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Certificate serial: 019B7758AF8B97D339A976C17CCC8007DE40 Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/QPm5_PDWMrxWuR6yCX-RrxN3H3c.roa Signing time: Thu 01 Jan 2026 02:17:39 +0000 ROA not before: Thu 01 Jan 2026 02:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210927 IP address blocks: 185.178.228.0/24 maxlen: 24 185.178.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:af:8b:97:d3:39:a9:76:c1:7c:cc:80:07:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Validity Not Before: Jan 1 02:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40f9b9fcf0d632bc56b91eb2097f91af13771f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:60:68:ed:71:89:e8:53:af:2d:08:26:b2: 3a:85:26:71:36:46:ee:9d:ec:08:9c:fe:03:3f:6a: 5d:65:d1:95:b6:f8:3c:32:3a:86:e1:8e:9a:f6:c4: c9:dd:03:0a:83:7b:1c:9c:ec:ec:aa:ad:10:2b:18: fa:64:08:1e:2f:64:e1:8b:1f:5c:59:17:86:2a:e4: 7f:81:23:38:18:fc:5e:75:f5:fb:d8:76:b6:86:ea: 97:cb:f3:e4:3d:b2:ee:42:24:0c:5d:2a:33:c4:b5: 8e:69:c8:cd:2b:0b:6d:4c:5c:64:ba:e4:80:26:d4: 99:76:f4:ac:74:a1:b7:09:96:7c:43:50:6e:1a:c5: ba:2a:ff:8d:bb:5d:56:d3:4e:f7:e0:5a:c6:df:00: ea:7a:86:3d:99:49:0b:39:ec:dd:94:91:92:27:a4: 17:3d:bc:80:2f:4d:94:e1:56:8e:26:a3:ef:1f:3a: 3d:4f:b2:ff:86:0a:29:64:10:64:a6:d2:07:d1:4f: 10:44:31:6e:dc:be:1e:6c:fd:e8:96:9c:62:8b:da: 2f:63:5f:c4:0e:38:70:af:0d:3b:7b:ae:cf:9d:dc: fd:35:7a:27:f7:a1:87:d4:74:f0:21:84:4c:77:5b: 44:12:57:75:38:52:59:e2:fc:1e:40:65:c0:a4:fb: 59:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F9:B9:FC:F0:D6:32:BC:56:B9:1E:B2:09:7F:91:AF:13:77:1F:77 X509v3 Authority Key Identifier: keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/QPm5_PDWMrxWuR6yCX-RrxN3H3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.228.0/23 Signature Algorithm: sha256WithRSAEncryption 19:04:87:ac:02:b0:7d:47:33:9b:2e:ce:46:99:99:e4:17:5e: d8:e4:93:ef:81:54:a4:d9:ae:8d:cb:a2:55:ec:65:65:8f:b6: 23:f0:7f:34:e0:fc:f6:32:53:35:62:a7:35:db:19:67:66:e1: a6:2e:09:3b:25:b4:4b:e0:49:61:52:eb:6b:32:1a:61:3e:d9: 84:92:64:5d:d7:4e:43:bb:aa:87:17:4b:a0:e7:76:03:12:22: e2:a7:65:8f:4f:5b:0f:c8:b5:d2:bc:d4:ce:06:37:78:44:22: e5:53:b9:12:02:90:ae:b2:f9:e3:5a:04:f8:cb:8d:0f:ee:7f: 50:99:5a:5c:c4:65:36:c9:bf:83:ab:b0:e1:66:94:d3:ea:4a: 9c:66:b5:5f:49:e8:60:85:bf:9a:6f:bb:f3:29:56:83:74:e7: 83:1b:9f:73:9c:47:77:40:17:a8:52:7a:f5:ae:75:f0:2d:8c: b3:de:66:11:0c:c6:c2:ac:5d:8a:cd:52:be:a5:b1:47:c6:de: 79:cf:3b:7d:f8:70:0a:70:a9:3f:b3:f3:f5:5d:cd:16:f4:6f: 38:8b:d6:4f:25:b5:c8:25:0a:b7:2d:7b:56:67:ea:4b:da:2d: 7c:90:12:89:09:1f:8f:1f:f2:19:ce:22:4d:23:d7:c6:4d:c7: b6:13:c0:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WK+Ll9M5qXbBfMyAB95AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0 Y2IxNzEwHhcNMjYwMTAxMDIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGY5YjlmY2YwZDYzMmJjNTZiOTFlYjIwOTdmOTFhZjEzNzcxZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiJgaO1xiehTry0IJrI6hSZxNkbu newInP4DP2pdZdGVtvg8MjqG4Y6a9sTJ3QMKg3scnOzsqq0QKxj6ZAgeL2Thix9c WReGKuR/gSM4GPxedfX72Ha2huqXy/PkPbLuQiQMXSozxLWOacjNKwttTFxkuuSA JtSZdvSsdKG3CZZ8Q1BuGsW6Kv+Nu11W00734FrG3wDqeoY9mUkLOezdlJGSJ6QX PbyAL02U4VaOJqPvHzo9T7L/hgopZBBkptIH0U8QRDFu3L4ebP3olpxii9ovY1/E Djhwrw07e67Pndz9NXon96GH1HTwIYRMd1tEEld1OFJZ4vweQGXApPtZVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFED5ufzw1jK8Vrkesgl/ka8Tdx93MB8GA1UdIwQY MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt MTI2Y2UwODE1MjlhLzEvUVBtNV9QRFdNcnhXdVI2eUNYLVJyeE4zSDNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubLkMA0G CSqGSIb3DQEBCwUAA4IBAQAZBIesArB9RzObLs5GmZnkF17Y5JPvgVSk2a6Ny6JV 7GVlj7Yj8H804Pz2MlM1Yqc12xlnZuGmLgk7JbRL4ElhUutrMhphPtmEkmRd105D u6qHF0ug53YDEiLip2WPT1sPyLXSvNTOBjd4RCLlU7kSApCusvnjWgT4y40P7n9Q mVpcxGU2yb+Dq7DhZpTT6kqcZrVfSehghb+ab7vzKVaDdOeDG59znEd3QBeoUnr1 rnXwLYyz3mYRDMbCrF2KzVK+pbFHxt55zzt9+HAKcKk/s/P1Xc0W9G84i9ZPJbXI JQq3LXtWZ+pL2i18kBKJCR+PH/IZziJNI9fGTce2E8Cv -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:34 2026 by rpki-client