This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa File: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (raw, json) Hash identifier: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20= Subject key identifier: 2D:0E:D9:7E:69:8C:3D:A1:F4:89:A6:D9:E9:2A:44:B8:3C:15:C2:16 Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Certificate serial: 019B7C7F71AA8629261E0E1CE9D5FFD92966 Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa Signing time: Fri 02 Jan 2026 02:18:05 +0000 ROA not before: Fri 02 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36916 IP address blocks: 85.235.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:71:aa:86:29:26:1e:0e:1c:e9:d5:ff:d9:29:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Validity Not Before: Jan 2 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d0ed97e698c3da1f489a6d9e92a44b83c15c216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:1e:b4:93:3a:96:85:87:63:d9:a2:67:d0: fc:e1:e9:9d:fb:65:ef:b7:b4:93:b3:60:2d:8f:f6: b2:bb:04:f5:ab:fb:8c:1c:29:ec:c5:67:52:c5:4d: 76:9f:18:8f:e5:42:9c:7a:87:df:37:62:ae:7d:3d: 10:a6:bf:e2:88:c4:ac:d4:71:40:3b:10:df:ca:e1: ea:6f:3c:9f:dc:40:c7:6e:73:6e:e0:fc:13:95:2b: 84:8a:a0:5e:ba:34:86:81:b8:41:34:29:bc:8c:34: 84:4e:ef:40:bc:fc:16:21:7f:f0:ce:03:67:7c:a5: 8c:71:c3:f9:b3:64:cf:b7:21:0a:6d:46:0b:8f:2b: f8:00:b8:3e:c0:7e:1b:43:f2:b8:5c:ab:75:f3:e3: a1:73:b6:58:7e:f5:8c:7f:05:03:e0:89:dd:2f:67: 01:db:97:fc:28:38:81:71:54:e1:c4:fa:a0:12:81: df:6c:e8:93:37:14:ce:59:9f:35:21:25:0d:26:9a: 58:32:bd:28:36:6b:e2:c6:5e:62:74:ba:02:39:80: 96:0c:d9:a6:eb:07:a0:77:13:66:83:21:01:74:49: e3:77:3b:57:6e:06:23:c8:b4:1d:5d:25:17:39:ec: b2:85:04:74:32:06:21:54:5b:24:46:a0:db:0b:ce: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0E:D9:7E:69:8C:3D:A1:F4:89:A6:D9:E9:2A:44:B8:3C:15:C2:16 X509v3 Authority Key Identifier: keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.235.76.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:ad:d5:7e:1e:ad:6f:b4:96:e9:a8:af:11:74:aa:b2:85:b5: c2:ce:79:fc:21:da:e7:a4:57:07:a4:b7:7a:25:fe:90:bc:e0: 56:86:0c:c6:0d:60:c4:be:5c:ef:c8:97:81:c9:cb:4c:ad:b7: 94:39:55:ac:4a:90:e4:5e:a2:0f:56:d5:ab:01:be:68:23:4e: f3:d6:7c:12:d4:76:ec:63:c7:55:fb:a9:28:54:a4:d4:ab:27: 08:2e:75:08:04:59:fd:f4:3c:4e:0d:55:7f:86:1c:86:a6:b6: 4a:6b:f6:65:69:03:87:88:6c:8b:b6:52:74:a1:c6:ba:d8:d1: a1:32:74:e0:7d:87:34:e3:ad:88:bf:6f:34:f9:7c:9b:27:cf: 8d:82:c7:1b:ab:33:60:4d:1f:19:2c:4e:19:11:fd:49:91:49: 42:44:ad:96:84:67:4f:7a:66:63:e6:e1:82:c3:e8:21:70:2b: 60:d8:9a:5c:b6:be:a6:11:ea:8b:bb:61:eb:e0:4c:f1:fe:4f: c5:7a:e9:bf:a6:69:28:5d:d5:7d:21:c5:99:43:19:83:f1:7c: 41:ca:f5:bf:47:33:15:b8:90:f9:3d:59:61:b0:da:07:47:47: 07:2d:b7:27:85:0b:0b:27:2f:13:0a:34:f2:f1:87:4f:01:a5: 3d:a0:23:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3GqhikmHg4c6dX/2SlmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1 OGNiYzYwHhcNMjYwMTAyMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDBlZDk3ZTY5OGMzZGExZjQ4OWE2ZDllOTJhNDRiODNjMTVjMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWIetJM6loWHY9miZ9D84emd+2Xv t7STs2Atj/ayuwT1q/uMHCnsxWdSxU12nxiP5UKceoffN2KufT0Qpr/iiMSs1HFA OxDfyuHqbzyf3EDHbnNu4PwTlSuEiqBeujSGgbhBNCm8jDSETu9AvPwWIX/wzgNn fKWMccP5s2TPtyEKbUYLjyv4ALg+wH4bQ/K4XKt18+Ohc7ZYfvWMfwUD4IndL2cB 25f8KDiBcVThxPqgEoHfbOiTNxTOWZ81ISUNJppYMr0oNmvixl5idLoCOYCWDNmm 6wegdxNmgyEBdEnjdztXbgYjyLQdXSUXOeyyhQR0MgYhVFskRqDbC87nqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0O2X5pjD2h9Imm2ekqRLg8FcIWMB8GA1UdIwQY MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt OTBlNjU0MTIyNTJhLzEvTFE3WmZtbU1QYUgwaWFiWjZTcEV1RHdWd2hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVetMMA0G CSqGSIb3DQEBCwUAA4IBAQBdrdV+Hq1vtJbpqK8RdKqyhbXCznn8IdrnpFcHpLd6 Jf6QvOBWhgzGDWDEvlzvyJeByctMrbeUOVWsSpDkXqIPVtWrAb5oI07z1nwS1Hbs Y8dV+6koVKTUqycILnUIBFn99DxODVV/hhyGprZKa/ZlaQOHiGyLtlJ0oca62NGh MnTgfYc0462Iv280+XybJ8+NgscbqzNgTR8ZLE4ZEf1JkUlCRK2WhGdPemZj5uGC w+ghcCtg2Jpctr6mEeqLu2Hr4Ezx/k/Feum/pmkoXdV9IcWZQxmD8XxByvW/RzMV uJD5PVlhsNoHR0cHLbcnhQsLJy8TCjTy8YdPAaU9oCNW -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:08 2026 by rpki-client