This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/qcRxwVaFJKZNZxKItMTgD_sHnKI.roa File: qcRxwVaFJKZNZxKItMTgD_sHnKI.roa (raw, json) Hash identifier: zSxjrYYqoeDrJlezU9Vi0F+/e6UNxqHigCDZbFFsf0s= Subject key identifier: A9:C4:71:C1:56:85:24:A6:4D:67:12:88:B4:C4:E0:0F:FB:07:9C:A2 Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242 Certificate serial: 019B7EA734082D34FEC4781E8E20DAFA7340 Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/qcRxwVaFJKZNZxKItMTgD_sHnKI.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60820 IP address blocks: 185.171.40.0/22 maxlen: 24 2a0a:c700::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:34:08:2d:34:fe:c4:78:1e:8e:20:da:fa:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9c471c1568524a64d671288b4c4e00ffb079ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:16:2b:25:9c:50:df:9f:d9:28:1d:ad:ca:72: ac:58:8a:b7:d0:1c:f5:22:71:65:b5:f5:ff:1e:04: 2e:10:38:79:31:c8:5b:c4:14:b0:bf:ec:b5:dc:e2: f3:a6:79:7b:99:d7:fa:47:d4:2a:80:d4:d6:c6:d8: e9:63:de:69:ce:f0:bd:30:a9:82:90:13:11:87:fd: b0:58:48:be:bb:40:cd:d6:8d:e6:ef:39:b6:5e:c7: 68:e8:df:ea:63:73:14:ad:95:b3:3d:51:ff:e7:ef: 07:03:b2:01:64:53:0b:44:fd:9d:31:7e:33:d5:e3: 7e:1e:bb:d6:32:8f:8a:ef:ec:14:2b:81:cd:88:93: 74:e0:e9:9c:96:12:46:83:6d:2a:45:cb:ba:4c:63: dc:a3:9d:32:df:f4:03:5e:dd:13:b8:35:b8:13:34: 39:1d:6f:92:68:82:6e:71:1e:b9:f7:db:79:de:81: 48:6b:0b:e8:d1:f6:5f:64:a0:d4:5b:4b:49:6a:3e: a0:f4:70:79:fe:0d:f9:15:35:bf:2b:10:61:c1:38: be:27:11:4e:eb:79:00:34:35:71:a2:bf:fe:44:eb: f7:7a:87:c8:b1:96:83:7e:b4:aa:2d:59:c5:4d:b7: 3c:66:9e:31:43:ae:95:97:51:51:00:00:f7:03:fb: 9f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C4:71:C1:56:85:24:A6:4D:67:12:88:B4:C4:E0:0F:FB:07:9C:A2 X509v3 Authority Key Identifier: keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/qcRxwVaFJKZNZxKItMTgD_sHnKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.40.0/22 IPv6: 2a0a:c700::/29 Signature Algorithm: sha256WithRSAEncryption 1d:35:df:5a:3c:8f:e7:5e:9a:d6:26:3b:1d:ab:d4:7a:b6:7d: 58:4e:08:23:9c:39:53:10:39:51:b5:ed:4d:24:9b:9e:bb:ef: c1:1d:0a:13:ac:ac:aa:b1:48:ad:87:eb:e3:ee:7e:2a:7a:4b: 2e:8b:d3:1f:74:3f:d9:36:43:24:83:97:6c:0f:46:ff:c2:31: 99:3f:20:45:a7:ca:41:06:86:2a:a5:4e:00:9e:8a:95:f9:12: 77:b2:87:94:5d:48:35:24:be:37:1d:b0:4a:da:a3:88:aa:70: 09:cc:e7:63:73:21:04:14:6f:43:df:f6:93:58:37:f1:69:70: d3:da:82:2a:b4:70:a5:4e:fe:4d:fd:b5:b3:9e:82:60:d2:8d: 00:f4:43:76:87:08:e8:8a:58:11:59:f8:f8:e9:1c:6f:f7:c9: 24:e0:b0:1d:d8:76:c2:64:26:2a:f0:eb:e2:88:f0:7d:d8:8d: f4:ab:cc:57:e6:94:28:55:2e:cc:9c:28:87:c8:38:71:4f:31: 92:78:eb:39:bf:a8:63:fb:d6:01:6b:1d:c5:07:70:ca:95:1d: 1e:c9:14:13:26:97:14:88:e3:98:8b:59:35:d9:00:11:f1:fb: 6a:2a:38:27:71:ce:6c:8e:b5:30:ef:9a:86:ed:77:3b:f8:d0: 30:3f:f6:3f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pzQILTT+xHgejiDa+nNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZjM4NmQ0YThkMmUxODgzMmNmMjNmYmYzNWY2MjQwZGI4 ZWEyNDIwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWM0NzFjMTU2ODUyNGE2NGQ2NzEyODhiNGM0ZTAwZmZiMDc5Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRYrJZxQ35/ZKB2tynKsWIq30Bz1 InFltfX/HgQuEDh5MchbxBSwv+y13OLzpnl7mdf6R9QqgNTWxtjpY95pzvC9MKmC kBMRh/2wWEi+u0DN1o3m7zm2Xsdo6N/qY3MUrZWzPVH/5+8HA7IBZFMLRP2dMX4z 1eN+HrvWMo+K7+wUK4HNiJN04OmclhJGg20qRcu6TGPco50y3/QDXt0TuDW4EzQ5 HW+SaIJucR6599t53oFIawvo0fZfZKDUW0tJaj6g9HB5/g35FTW/KxBhwTi+JxFO 63kANDVxor/+ROv3eofIsZaDfrSqLVnFTbc8Zp4xQ66Vl1FRAAD3A/uf9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKnEccFWhSSmTWcSiLTE4A/7B5yiMB8GA1UdIwQY MBaAFJvzhtSo0uGIMs8j+/NfYkDbjqJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NDhiY2MtMDkxMS00ZjY0LWI2ZDEt MGEyZjI5YWVjZGIzLzEvcWNSeHdWYUZKS1pOWnhLSXRNVGdEX3NIbktJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82NDhiY2MtMDkxMS00ZjY0LWI2ZDEtMGEyZjI5YWVjZGIz LzEvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuasoMA0E AgACMAcDBQMqCscAMA0GCSqGSIb3DQEBCwUAA4IBAQAdNd9aPI/nXprWJjsdq9R6 tn1YTggjnDlTEDlRte1NJJueu+/BHQoTrKyqsUith+vj7n4qeksui9MfdD/ZNkMk g5dsD0b/wjGZPyBFp8pBBoYqpU4AnoqV+RJ3soeUXUg1JL43HbBK2qOIqnAJzOdj cyEEFG9D3/aTWDfxaXDT2oIqtHClTv5N/bWznoJg0o0A9EN2hwjoilgRWfj46Rxv 98kk4LAd2HbCZCYq8OviiPB92I30q8xX5pQoVS7MnCiHyDhxTzGSeOs5v6hj+9YB ax3FB3DKlR0eyRQTJpcUiOOYi1k12QAR8ftqKjgncc5sjrUw75qG7Xc7+NAwP/Y/ -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:24 2026 by rpki-client