This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/QB_L2flVKCSvWrhwILTxXBF9q1k.roa File: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (raw, json) Hash identifier: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko= Subject key identifier: 40:1F:CB:D9:F9:55:28:24:AF:5A:B8:70:20:B4:F1:5C:11:7D:AB:59 Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510 Certificate serial: 019B7F15EEA23C1677EAB3965DE2E598C61A Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/QB_L2flVKCSvWrhwILTxXBF9q1k.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50274 IP address blocks: 109.127.0.0/18 maxlen: 18 185.112.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ee:a2:3c:16:77:ea:b3:96:5d:e2:e5:98:c6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=401fcbd9f9552824af5ab87020b4f15c117dab59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:85:91:73:6a:63:06:43:ca:1f:8f:8d:f1: a8:9a:2a:c0:c5:8d:e5:73:f8:b6:d2:36:21:3f:d5: 82:ff:e0:7b:2d:83:aa:78:e3:03:4f:83:a2:02:55: 8c:c5:69:ee:ae:e2:41:49:14:8d:4d:8e:43:96:4a: 7b:78:ca:ff:16:ad:aa:d4:fc:85:8f:bb:63:72:2a: 9f:1e:2f:03:cb:ed:b4:dc:30:a9:56:14:00:43:ce: 66:44:21:6a:e3:dd:62:7c:89:f7:17:30:14:a8:82: 27:83:9c:f5:69:ed:7d:8f:ab:0c:1e:7e:ca:fa:5d: 03:89:cd:62:64:87:91:25:e2:cf:53:21:7b:ba:21: 26:30:8a:6d:31:0a:08:8f:2a:21:c5:84:d2:0b:17: 70:a4:62:f5:ca:26:bb:6c:dd:dd:56:fb:ea:81:f7: af:96:97:ce:4f:00:45:c1:5f:e0:c3:c4:11:a7:3a: f7:23:d0:74:32:7c:d7:c4:26:f3:f0:c1:a7:65:07: 16:57:35:33:17:80:0b:4b:65:a7:fc:e2:64:8a:ce: 1b:b9:96:32:92:f7:89:56:8c:b1:1e:0b:2c:f1:cb: 17:7e:90:4c:38:cf:1f:be:50:0b:1b:43:b3:b8:ef: bc:36:2f:12:b8:f8:f1:b4:d9:ed:ca:d4:90:e5:54: a0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1F:CB:D9:F9:55:28:24:AF:5A:B8:70:20:B4:F1:5C:11:7D:AB:59 X509v3 Authority Key Identifier: keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/QB_L2flVKCSvWrhwILTxXBF9q1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.127.0.0/18 185.112.192.0/22 Signature Algorithm: sha256WithRSAEncryption 93:23:f4:c1:62:9c:57:2b:ec:d4:2c:59:d6:91:fd:14:be:aa: cc:28:95:9c:d2:4e:4b:53:91:66:01:2b:f2:3d:44:41:aa:2b: 1e:10:41:5c:26:e4:cd:7d:3f:1f:d4:e6:d7:fa:bc:c5:c6:68: 36:c0:1d:e3:5b:60:59:25:48:6c:02:e1:f9:00:f2:50:eb:c3: d3:b8:c0:b4:ef:97:b9:4a:90:45:07:78:d0:70:3f:2a:4e:1e: dd:78:6e:c4:dc:61:5c:6a:ad:27:c6:98:59:bd:07:de:00:00: f0:5f:3b:ee:50:2c:f3:28:9d:7e:b0:c2:47:28:e7:ef:b1:de: 77:a0:d1:e4:09:8d:79:01:57:23:78:58:8d:77:09:43:7c:92: bb:07:1e:aa:bf:91:64:34:4c:73:ba:a1:28:85:26:c3:cc:37: dd:76:c4:be:41:6f:3b:e2:cd:be:20:32:3a:fe:3d:6f:02:6e: a0:65:25:c4:c1:55:e2:93:0b:1b:a4:35:5d:14:27:67:24:fc: e6:cb:a0:cd:9a:67:b9:9b:08:26:71:4d:b2:ed:e5:3c:11:78: aa:db:fd:f3:38:5f:ff:d7:1f:7f:ae:ba:8f:6b:32:df:11:c0: cf:b5:fe:cd:ba:11:eb:0c:2f:4d:a7:cd:9c:17:f3:19:5e:f3: 6a:8d:fb:ec -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/Fe6iPBZ36rOWXeLlmMYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlOGI0OTQ0NTUyNzdmZjUzMDAyNWNlZjJkNTFkZjdlYWI4 ZTQ1MTAwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDFmY2JkOWY5NTUyODI0YWY1YWI4NzAyMGI0ZjE1YzExN2RhYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQWFkXNqYwZDyh+PjfGomirAxY3l c/i20jYhP9WC/+B7LYOqeOMDT4OiAlWMxWnuruJBSRSNTY5Dlkp7eMr/Fq2q1PyF j7tjciqfHi8Dy+203DCpVhQAQ85mRCFq491ifIn3FzAUqIIng5z1ae19j6sMHn7K +l0Dic1iZIeRJeLPUyF7uiEmMIptMQoIjyohxYTSCxdwpGL1yia7bN3dVvvqgfev lpfOTwBFwV/gw8QRpzr3I9B0MnzXxCbz8MGnZQcWVzUzF4ALS2Wn/OJkis4buZYy kveJVoyxHgss8csXfpBMOM8fvlALG0OzuO+8Ni8SuPjxtNntytSQ5VSgfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEAfy9n5VSgkr1q4cCC08VwRfatZMB8GA1UdIwQY MBaAFP6LSURVJ3/1MAJc7y1R336rjkUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYt YzhjYzViMmQwYWVkLzEvUUJfTDJmbFZLQ1N2V3Jod0lMVHhYQkY5cTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYtYzhjYzViMmQwYWVk LzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGbX8AAwQC uXDAMA0GCSqGSIb3DQEBCwUAA4IBAQCTI/TBYpxXK+zULFnWkf0UvqrMKJWc0k5L U5FmASvyPURBqiseEEFcJuTNfT8f1ObX+rzFxmg2wB3jW2BZJUhsAuH5APJQ68PT uMC075e5SpBFB3jQcD8qTh7deG7E3GFcaq0nxphZvQfeAADwXzvuUCzzKJ1+sMJH KOfvsd53oNHkCY15AVcjeFiNdwlDfJK7Bx6qv5FkNExzuqEohSbDzDfddsS+QW87 4s2+IDI6/j1vAm6gZSXEwVXikwsbpDVdFCdnJPzmy6DNmme5mwgmcU2y7eU8EXiq 2/3zOF//1x9/rrqPazLfEcDPtf7NuhHrDC9Np82cF/MZXvNqjfvs -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:12 2026 by rpki-client