This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/pqiBFTplBLtHWoMHzRforQTq8dI.roa File: pqiBFTplBLtHWoMHzRforQTq8dI.roa (raw, json) Hash identifier: wl+v61veOlULrNd8VjKMUyPIgjxBb6XbU3q/woMIXVM= Subject key identifier: A6:A8:81:15:3A:65:04:BB:47:5A:83:07:CD:17:E8:AD:04:EA:F1:D2 Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Certificate serial: 019B7A5ABB90E422CD3D4742FF0C936EEC28 Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/pqiBFTplBLtHWoMHzRforQTq8dI.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215944 IP address blocks: 185.114.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bb:90:e4:22:cd:3d:47:42:ff:0c:93:6e:ec:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6a881153a6504bb475a8307cd17e8ad04eaf1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:df:30:53:4e:b8:e5:7b:32:b5:d6:30:89: 09:fc:26:3e:97:06:6e:66:09:c6:5b:bf:3c:78:1c: 13:67:f3:91:e9:e1:7a:57:4d:6a:aa:e9:1e:b6:48: be:ff:27:e6:63:3e:66:9a:29:a8:f6:ea:a5:b3:7e: c4:b3:5b:3b:09:db:f1:d9:99:09:ff:9b:49:f2:a8: b7:34:e8:40:06:3f:07:96:13:ef:9c:ab:54:09:84: 4d:fc:1a:ae:98:69:c7:8c:c0:c9:72:8b:7e:e4:a9: e3:99:c1:a4:9a:1d:51:94:cc:e3:3e:4b:b2:cc:90: 95:e3:93:35:a3:0a:3a:d1:1e:7a:e8:fe:fa:90:62: 0b:bc:66:0d:d0:13:fc:73:e4:f2:c1:01:4a:89:bb: 62:8a:71:36:dd:70:8a:9d:47:b1:5c:04:d5:1a:4d: d4:be:a0:ef:20:06:83:04:d8:06:1f:4b:93:d4:00: 8e:9d:a3:ba:d7:7f:69:e4:ba:2c:96:9c:f7:34:62: 1f:e4:5f:78:33:c9:d7:da:5d:b1:5d:fc:a1:fc:5c: 28:70:d8:81:8f:13:a6:a1:14:bb:64:0d:b7:fa:ba: 1f:7e:8b:15:9a:55:6e:42:d7:20:76:ce:48:bd:ea: 02:27:61:2c:0a:ac:15:76:7a:5c:21:e2:17:5f:ec: 09:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A8:81:15:3A:65:04:BB:47:5A:83:07:CD:17:E8:AD:04:EA:F1:D2 X509v3 Authority Key Identifier: keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/pqiBFTplBLtHWoMHzRforQTq8dI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.150.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:06:39:ab:1b:c7:fc:d0:fd:18:8b:be:78:ef:97:13:2f:6b: 0b:73:d5:4a:59:a5:9d:c7:68:91:73:6c:0e:bd:5a:8a:66:f8: d1:60:a2:83:00:5f:f6:4e:eb:ff:4b:e6:ff:85:4b:d2:95:f4: de:31:97:ac:24:81:49:19:83:18:7a:d5:25:b1:67:ff:9b:2f: bb:a3:ff:ca:0e:88:68:7d:22:e9:2b:ae:e2:ca:0e:44:cf:ed: c4:2f:97:fd:83:c9:68:a7:90:ee:09:e6:8c:7c:93:13:a0:20: 4d:4a:eb:f3:f1:ed:bf:d2:41:f7:36:3a:51:ad:ef:cc:ef:cb: a9:72:35:de:83:a7:20:0b:50:11:fd:d6:2e:36:57:1d:82:e1: 71:8c:3c:72:b5:90:15:46:87:45:c5:ad:88:31:19:04:ba:e1: a1:81:16:37:5a:06:31:df:fe:2b:55:fb:a9:11:de:20:4a:b7: 3e:80:4d:4b:2a:4c:c4:4e:f2:fc:43:9a:91:96:33:58:02:3b: e1:da:6f:fd:c3:c5:6b:cf:91:99:0b:ff:cc:4c:f3:74:17:fa: ca:cd:10:00:b8:da:e8:3d:a7:23:15:56:fb:7e:1d:e3:36:3d: 55:e5:7e:50:13:15:47:48:10:79:42:78:c2:03:1a:9c:97:d5: 3b:47:2f:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WruQ5CLNPUdC/wyTbuwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWY2MTViOTE4MzlmNTFlZDNhNWI1Mzc1M2IyN2IwMmM3 NmRhOTUwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmE4ODExNTNhNjUwNGJiNDc1YTgzMDdjZDE3ZThhZDA0ZWFmMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3jfMFNOuOV7MrXWMIkJ/CY+lwZu ZgnGW788eBwTZ/OR6eF6V01qquketki+/yfmYz5mmimo9uqls37Es1s7Cdvx2ZkJ /5tJ8qi3NOhABj8HlhPvnKtUCYRN/BqumGnHjMDJcot+5KnjmcGkmh1RlMzjPkuy zJCV45M1owo60R566P76kGILvGYN0BP8c+TywQFKibtiinE23XCKnUexXATVGk3U vqDvIAaDBNgGH0uT1ACOnaO6139p5Loslpz3NGIf5F94M8nX2l2xXfyh/FwocNiB jxOmoRS7ZA23+roffosVmlVuQtcgds5IveoCJ2EsCqwVdnpcIeIXX+wJRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKaogRU6ZQS7R1qDB80X6K0E6vHSMB8GA1UdIwQY MBaAFP8fYVuRg59R7TpbU3U7J7AsdtqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQt NzQ3NWY3MGRmOWZhLzEvcHFpQkZUcGxCTHRIV29NSHpSZm9yUVRxOGRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQtNzQ3NWY3MGRmOWZh LzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXKWMA0G CSqGSIb3DQEBCwUAA4IBAQBOBjmrG8f80P0Yi75475cTL2sLc9VKWaWdx2iRc2wO vVqKZvjRYKKDAF/2Tuv/S+b/hUvSlfTeMZesJIFJGYMYetUlsWf/my+7o//KDoho fSLpK67iyg5Ez+3EL5f9g8lop5DuCeaMfJMToCBNSuvz8e2/0kH3NjpRre/M78up cjXeg6cgC1AR/dYuNlcdguFxjDxytZAVRodFxa2IMRkEuuGhgRY3WgYx3/4rVfup Ed4gSrc+gE1LKkzETvL8Q5qRljNYAjvh2m/9w8Vrz5GZC//MTPN0F/rKzRAAuNro PacjFVb7fh3jNj1V5X5QExVHSBB5QnjCAxqcl9U7Ry/P -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:03 2026 by rpki-client