This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/QwNboN_9MI4QbK7an7tUKY8o-q0.roa File: QwNboN_9MI4QbK7an7tUKY8o-q0.roa (raw, json) Hash identifier: OratTvFz7yhhbwXN3POQgTrmHqy78LoHV2ykDq3UAs8= Subject key identifier: 43:03:5B:A0:DF:FD:30:8E:10:6C:AE:DA:9F:BB:54:29:8F:28:FA:AD Certificate issuer: /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b Certificate serial: 019B77589809CC94700A361D50C49ADA5800 Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/QwNboN_9MI4QbK7an7tUKY8o-q0.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25384 IP address blocks: 85.89.224.0/19 maxlen: 19 85.89.239.0/24 maxlen: 24 85.89.250.0/24 maxlen: 24 92.60.144.0/20 maxlen: 20 109.236.176.0/20 maxlen: 20 185.3.13.0/24 maxlen: 24 185.3.14.0/24 maxlen: 24 185.3.15.0/24 maxlen: 24 193.162.192.0/19 maxlen: 19 193.162.217.0/24 maxlen: 24 193.162.218.0/23 maxlen: 23 193.162.219.0/24 maxlen: 24 217.10.16.0/20 maxlen: 20 2001:15f8:1::/48 maxlen: 48 2001:15f8:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:98:09:cc:94:70:0a:36:1d:50:c4:9a:da:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43035ba0dffd308e106caeda9fbb54298f28faad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:56:57:71:4e:7b:ca:73:c4:76:bb:cb:2a: ce:15:a9:24:9e:fc:37:50:7e:c3:34:aa:f0:bd:15: d7:8c:00:62:9a:7e:60:f9:46:4f:e3:2e:9d:da:50: 8c:b9:85:34:d9:81:d0:af:c6:ed:bb:ff:88:f1:fc: 2f:07:a8:eb:e2:ac:0a:e4:6f:fa:35:f0:59:91:0f: a9:f0:66:16:2e:02:17:aa:b2:7e:31:88:92:96:1b: 8b:a5:a5:c0:7d:fb:81:7f:da:b9:89:b2:9b:80:d4: 80:f1:46:08:3c:5d:7e:b0:ee:6f:94:17:b0:31:a1: ce:ef:c2:f3:ce:0d:1a:bd:b8:a3:58:22:46:e2:ee: 8c:dd:f5:75:e3:a6:2d:8c:c0:99:19:b0:84:44:c4: 31:f2:0c:b0:74:c5:3f:62:ea:ce:72:b9:92:f2:85: 38:ef:a5:04:10:cb:78:d6:2c:e3:1b:56:7a:2d:3f: 72:2d:52:fb:a3:01:e2:00:9e:a2:64:78:f6:79:93: 3f:fc:7e:b5:f9:4d:a1:07:6f:60:ad:b5:48:e8:b3: 7d:e5:fb:df:25:14:59:29:5d:ff:bf:25:27:b0:9c: fe:b2:2e:80:5c:fd:f1:a3:6f:ce:58:15:51:29:33: b9:5f:69:3a:49:74:40:4f:33:b0:32:75:16:45:77: ae:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:5B:A0:DF:FD:30:8E:10:6C:AE:DA:9F:BB:54:29:8F:28:FA:AD X509v3 Authority Key Identifier: keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/QwNboN_9MI4QbK7an7tUKY8o-q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.89.224.0/19 92.60.144.0/20 109.236.176.0/20 185.3.13.0-185.3.15.255 193.162.192.0/19 217.10.16.0/20 IPv6: 2001:15f8:1::/48 2001:15f8:c00::/48 Signature Algorithm: sha256WithRSAEncryption 41:a2:7c:f0:e5:0e:c8:5e:b8:82:5a:3b:29:b4:42:8e:0c:37: 28:82:99:f6:c2:b6:6c:7b:f3:48:54:1d:5c:a8:71:01:e0:37: 7d:1f:ba:86:48:c0:e3:ed:3f:37:0a:33:df:29:63:55:45:32: 03:56:6b:df:78:7f:6d:73:3e:4b:1d:1b:b7:d1:08:af:66:87: d5:ba:f5:0e:0c:55:d0:22:d2:33:bc:7f:da:3f:2f:26:7f:cb: ae:7c:a4:46:30:29:f6:fb:52:74:78:cd:37:f8:3b:e3:3e:ce: d1:33:c2:ee:41:cc:ef:78:73:d0:bf:50:5f:bb:02:00:ff:87: 5a:68:0a:70:2c:96:5c:21:5a:90:29:79:cb:46:92:9e:33:dc: 30:18:a0:05:ea:0d:33:a2:ba:e9:35:fa:18:44:60:a5:1c:0f: 44:68:b2:2b:fa:75:d8:02:76:1e:49:54:b4:7d:6a:e4:b5:c9: a6:cc:8a:e0:5d:58:d9:e6:e4:67:c8:f5:0e:cd:51:f6:2d:8f: ed:5d:2b:20:b2:16:5d:8c:79:6e:9e:f7:71:9f:04:a5:04:15: cf:67:4d:29:2b:d6:d8:48:b3:ba:d8:c2:03:cb:0c:25:97:98: c9:51:65:a1:76:5e:60:57:12:55:1a:1b:96:95:f6:24:38:9e: 97:92:3e:6e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt3WJgJzJRwCjYdUMSa2lgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OWM3MTNjNTE5ODdlMWZmYTU0ODIyNzdmNWYxYzhjYjcy MmY0NGIwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzAzNWJhMGRmZmQzMDhlMTA2Y2FlZGE5ZmJiNTQyOThmMjhmYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYVWV3FOe8pzxHa7yyrOFakknvw3 UH7DNKrwvRXXjABimn5g+UZP4y6d2lCMuYU02YHQr8btu/+I8fwvB6jr4qwK5G/6 NfBZkQ+p8GYWLgIXqrJ+MYiSlhuLpaXAffuBf9q5ibKbgNSA8UYIPF1+sO5vlBew MaHO78Lzzg0avbijWCJG4u6M3fV146YtjMCZGbCERMQx8gywdMU/YurOcrmS8oU4 76UEEMt41izjG1Z6LT9yLVL7owHiAJ6iZHj2eZM//H61+U2hB29grbVI6LN95fvf JRRZKV3/vyUnsJz+si6AXP3xo2/OWBVRKTO5X2k6SXRATzOwMnUWRXeuwwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFEMDW6Df/TCOEGyu2p+7VCmPKPqtMB8GA1UdIwQY MBaAFDaccTxRmH4f+lSCJ39fHIy3IvRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAt NzZjMDVjZjVmMmU2LzEvUXdOYm9OXzlNSTRRYks3YW43dFVLWThvLXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAtNzZjMDVjZjVmMmU2 LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAyBAIAATAsAwQFVVngAwQE XDyQAwQEbeywMAwDBAC5Aw0DBAS5AwADBAXBosADBATZChAwGAQCAAIwEgMHACAB FfgAAQMHACABFfgMADANBgkqhkiG9w0BAQsFAAOCAQEAQaJ88OUOyF64glo7KbRC jgw3KIKZ9sK2bHvzSFQdXKhxAeA3fR+6hkjA4+0/Nwoz3yljVUUyA1Zr33h/bXM+ Sx0bt9EIr2aH1br1DgxV0CLSM7x/2j8vJn/LrnykRjAp9vtSdHjNN/g74z7O0TPC 7kHM73hz0L9QX7sCAP+HWmgKcCyWXCFakCl5y0aSnjPcMBigBeoNM6K66TX6GERg pRwPRGiyK/p12AJ2HklUtH1q5LXJpsyK4F1Y2ebkZ8j1Ds1R9i2P7V0rILIWXYx5 bp73cZ8EpQQVz2dNKSvW2EizutjCA8sMJZeYyVFloXZeYFcSVRoblpX2JDiel5I+ bg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:13 2026 by rpki-client