This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/QJIHXrlx2h7E7i6UtpfWxVUUONM.roa File: QJIHXrlx2h7E7i6UtpfWxVUUONM.roa (raw, json) Hash identifier: 2w1MhIhKH0RtqtveAelYHW2NpRlKqfQtzCDlxY2v2IY= Subject key identifier: 40:92:07:5E:B9:71:DA:1E:C4:EE:2E:94:B6:97:D6:C5:55:14:38:D3 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019BC78ACA442E224211053038E800FF3EEA Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/QJIHXrlx2h7E7i6UtpfWxVUUONM.roa Signing time: Fri 16 Jan 2026 16:02:00 +0000 ROA not before: Fri 16 Jan 2026 16:02:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209737 IP address blocks: 109.236.49.0/24 maxlen: 24 109.236.51.0/24 maxlen: 24 185.86.6.0/24 maxlen: 24 185.254.28.0/24 maxlen: 24 193.35.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:8a:ca:44:2e:22:42:11:05:30:38:e8:00:ff:3e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 16 16:02:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4092075eb971da1ec4ee2e94b697d6c5551438d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:9a:ef:56:94:99:8d:69:34:02:d5:90:00: f7:a4:51:d4:a8:f3:87:05:a4:72:72:8a:3b:e1:e6: 28:09:e8:ba:39:df:5d:2c:20:9b:a0:d7:7d:93:0c: a2:87:67:58:e0:9f:02:00:5f:db:b8:93:47:a1:26: 04:71:c1:15:c2:ea:09:8a:01:f4:8f:ba:1b:b8:24: df:b2:5f:ed:f5:77:e2:86:4a:1d:15:3d:33:3c:27: 55:1e:55:74:2c:a2:60:e7:a6:58:11:58:fd:00:49: f6:5f:7f:b2:3d:fd:3b:84:d9:64:a1:a4:29:c5:50: e0:6b:9a:ee:be:e2:e1:c4:0d:f4:7a:ce:ab:7e:ad: a7:93:28:55:58:d4:58:7b:b1:a4:c1:02:d0:13:b0: 43:be:03:8c:b6:b0:47:06:2e:54:e1:e7:fe:35:06: 19:0e:dd:28:a7:5b:97:b3:d7:52:ce:0d:53:cd:c4: b2:97:ac:61:05:b7:e6:34:2c:ed:8c:02:2d:1b:14: f4:2d:79:1b:bf:34:ab:7f:a5:40:93:5e:e9:0b:69: cb:7a:9a:f3:21:23:0b:23:f5:dd:98:6c:00:4b:f7: c5:88:ce:f0:7a:9f:c6:f1:2d:44:bd:45:9b:09:29: a7:f5:13:c1:0e:e1:90:a8:bb:ef:63:15:48:67:b7: f5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:92:07:5E:B9:71:DA:1E:C4:EE:2E:94:B6:97:D6:C5:55:14:38:D3 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/QJIHXrlx2h7E7i6UtpfWxVUUONM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.49.0/24 109.236.51.0/24 185.86.6.0/24 185.254.28.0/24 193.35.155.0/24 Signature Algorithm: sha256WithRSAEncryption 62:91:5c:11:4e:43:39:7d:38:8c:5a:a9:64:f5:ee:33:d0:4a: 2d:ef:c6:87:9e:40:2a:78:41:54:4a:68:6d:39:8a:5a:04:46: f2:57:64:19:a2:47:8a:c1:27:84:4e:2b:fa:69:75:9c:25:15: 9a:57:66:ff:2d:73:fa:65:35:3c:25:17:f0:ee:a7:82:de:af: 0a:ba:64:4b:ed:d4:88:26:f7:c8:5c:f7:83:86:f9:99:ac:be: cf:54:90:f2:0a:6f:0e:ab:ca:a7:d0:de:e4:2c:23:32:b0:3c: 6c:98:0a:81:73:b5:b9:10:fc:c7:44:f0:20:79:71:94:0a:11: 0a:de:55:87:80:79:30:24:45:a8:c7:4e:75:56:6c:1e:aa:a7: 9b:f0:14:76:a6:00:51:72:e1:c2:d3:ad:9d:ca:c8:57:45:a4: 98:1e:3c:a4:84:3b:62:c4:ca:58:d3:04:3c:49:5d:77:5a:b6: d5:41:5d:40:f4:3b:8d:a9:f6:16:95:25:63:3d:b8:ce:a3:02: f3:1d:c6:63:00:a3:3d:a0:0e:ef:47:40:32:a0:30:59:9f:c3: 6b:b8:3b:d9:24:28:3b:fc:e0:8c:30:12:e4:9f:cf:84:90:95: e3:79:10:cb:b4:f0:bd:66:68:e0:90:fe:51:16:eb:5e:f8:a9: 84:e4:94:d2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvHispELiJCEQUwOOgA/z7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTE2MTYwMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDkyMDc1ZWI5NzFkYTFlYzRlZTJlOTRiNjk3ZDZjNTU1MTQzOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq72a71aUmY1pNALVkAD3pFHUqPOH BaRycoo74eYoCei6Od9dLCCboNd9kwyih2dY4J8CAF/buJNHoSYEccEVwuoJigH0 j7obuCTfsl/t9XfihkodFT0zPCdVHlV0LKJg56ZYEVj9AEn2X3+yPf07hNlkoaQp xVDga5ruvuLhxA30es6rfq2nkyhVWNRYe7GkwQLQE7BDvgOMtrBHBi5U4ef+NQYZ Dt0op1uXs9dSzg1TzcSyl6xhBbfmNCztjAItGxT0LXkbvzSrf6VAk17pC2nLeprz ISMLI/XdmGwAS/fFiM7wep/G8S1EvUWbCSmn9RPBDuGQqLvvYxVIZ7f1MwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFECSB165cdoexO4ulLaX1sVVFDjTMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvUUpJSFhybHgyaDdFN2k2VXRwZld4VlVVT05NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAbewxAwQA bewzAwQAuVYGAwQAuf4cAwQAwSObMA0GCSqGSIb3DQEBCwUAA4IBAQBikVwRTkM5 fTiMWqlk9e4z0Eot78aHnkAqeEFUSmhtOYpaBEbyV2QZokeKwSeETiv6aXWcJRWa V2b/LXP6ZTU8JRfw7qeC3q8KumRL7dSIJvfIXPeDhvmZrL7PVJDyCm8Oq8qn0N7k LCMysDxsmAqBc7W5EPzHRPAgeXGUChEK3lWHgHkwJEWox051Vmweqqeb8BR2pgBR cuHC062dyshXRaSYHjykhDtixMpY0wQ8SV13WrbVQV1A9DuNqfYWlSVjPbjOowLz HcZjAKM9oA7vR0AyoDBZn8NruDvZJCg7/OCMMBLkn8+EkJXjeRDLtPC9ZmjgkP5R Fute+KmE5JTS -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:54 2026 by rpki-client