This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qCfLINRSTnoPgbYJOhiDJw9Y2nM.roa File: qCfLINRSTnoPgbYJOhiDJw9Y2nM.roa (raw, json) Hash identifier: +9EGfIvLxNzJ9dINgZyxE0KBcQV9BdkdttV/Nk8NTqo= Subject key identifier: A8:27:CB:20:D4:52:4E:7A:0F:81:B6:09:3A:18:83:27:0F:58:DA:73 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758BE39A4AB81E71BAA94D26F655BA1 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qCfLINRSTnoPgbYJOhiDJw9Y2nM.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213107 IP address blocks: 185.86.14.0/24 maxlen: 24 185.88.175.0/24 maxlen: 24 185.98.63.0/24 maxlen: 24 185.185.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:be:39:a4:ab:81:e7:1b:aa:94:d2:6f:65:5b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a827cb20d4524e7a0f81b6093a1883270f58da73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2a:91:d9:fc:57:b2:a7:4f:5d:95:54:9d:ab: 56:5f:ea:55:5a:09:38:c6:a9:fc:3e:c0:9a:a1:25: f4:01:e1:20:41:de:4a:6f:20:c9:17:d9:e2:5c:57: 27:08:17:8c:61:f3:3f:ba:42:a2:f4:d0:aa:37:74: c3:0c:98:9a:58:f4:64:ec:8f:54:46:4a:15:f4:8a: 0b:59:46:cf:eb:2b:f1:da:4f:a6:f8:3a:e6:80:9e: 05:3d:ee:64:17:f6:a7:1f:b1:d2:a1:a9:4a:7c:ac: c0:3d:fb:46:ba:a4:ac:8e:23:9e:93:86:e0:3a:47: 08:c4:c9:ae:e3:f0:af:3c:a7:b8:4b:7a:4c:c5:00: 6f:3c:24:2d:a0:b8:6e:f9:b6:07:19:46:75:c7:c5: 0b:21:95:69:9f:af:e2:df:a5:33:a9:62:72:79:6f: 93:37:1e:ae:e5:5a:f0:57:50:94:95:84:be:71:7d: 3d:69:41:ce:13:fe:de:bc:95:be:e3:f4:75:23:6d: 13:4d:58:db:59:dd:de:9e:47:20:97:e6:38:32:a4: 6d:d1:74:0d:41:5c:d4:9e:d4:a7:11:11:8a:c5:ec: b0:24:04:12:63:17:22:2a:ee:9e:a1:f4:9d:c5:13: 2f:34:8d:dd:8b:13:ad:ab:bb:3f:5c:04:da:d2:18: 44:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:27:CB:20:D4:52:4E:7A:0F:81:B6:09:3A:18:83:27:0F:58:DA:73 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qCfLINRSTnoPgbYJOhiDJw9Y2nM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.14.0/24 185.88.175.0/24 185.98.63.0/24 185.185.232.0/24 Signature Algorithm: sha256WithRSAEncryption 27:f3:bf:0d:5e:eb:d6:48:1e:75:34:75:44:63:37:c5:aa:ea: d1:4b:28:86:fc:a2:cc:75:6e:17:d0:3e:22:ed:e8:1e:ac:ac: 81:b3:9b:75:37:8f:76:da:f2:0b:a4:c7:3e:b5:0b:62:55:e2: 42:d0:c8:46:d3:62:49:92:65:17:e1:07:a0:b9:5d:88:4c:3d: 96:4e:60:b1:2f:32:44:15:4f:10:bf:31:f8:a5:f5:68:4b:96: 29:8a:2b:e8:b5:79:ca:06:6c:45:7f:d2:c7:9b:49:d9:5d:e5: 30:aa:f9:73:94:fd:c4:04:21:f2:b8:14:6c:35:4a:aa:94:39: dd:e6:45:58:1c:be:c4:28:eb:62:e9:64:1b:3f:89:1c:61:45: 24:82:4e:76:78:43:a7:2c:1b:af:fb:00:40:00:35:d5:ea:cb: b7:11:63:65:3a:e3:ad:54:14:b5:2e:d0:e8:2a:72:5f:c8:78: fc:a3:f8:81:cd:7e:19:35:08:bd:d5:de:18:11:5a:91:d3:30: 41:c3:ff:29:71:9b:80:85:e0:3b:70:64:56:05:fe:20:85:91: c9:2f:ff:3b:c9:72:a2:54:42:21:31:0f:a0:e3:2f:b7:fe:08: d7:4c:85:9d:11:81:33:dc:7b:86:47:d3:4f:0e:33:ca:41:c9: ff:a7:b6:a1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WL45pKuB5xuqlNJvZVuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODI3Y2IyMGQ0NTI0ZTdhMGY4MWI2MDkzYTE4ODMyNzBmNThkYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CqR2fxXsqdPXZVUnatWX+pVWgk4 xqn8PsCaoSX0AeEgQd5KbyDJF9niXFcnCBeMYfM/ukKi9NCqN3TDDJiaWPRk7I9U RkoV9IoLWUbP6yvx2k+m+DrmgJ4FPe5kF/anH7HSoalKfKzAPftGuqSsjiOek4bg OkcIxMmu4/CvPKe4S3pMxQBvPCQtoLhu+bYHGUZ1x8ULIZVpn6/i36UzqWJyeW+T Nx6u5VrwV1CUlYS+cX09aUHOE/7evJW+4/R1I20TTVjbWd3enkcgl+Y4MqRt0XQN QVzUntSnERGKxeywJAQSYxciKu6eofSdxRMvNI3dixOtq7s/XATa0hhEJQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKgnyyDUUk56D4G2CToYgycPWNpzMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvcUNmTElOUlNUbm9QZ2JZSk9oaURKdzlZMm5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuVYOAwQA uVivAwQAuWI/AwQAubnoMA0GCSqGSIb3DQEBCwUAA4IBAQAn878NXuvWSB51NHVE YzfFqurRSyiG/KLMdW4X0D4i7egerKyBs5t1N4922vILpMc+tQtiVeJC0MhG02JJ kmUX4QeguV2ITD2WTmCxLzJEFU8QvzH4pfVoS5YpiivotXnKBmxFf9LHm0nZXeUw qvlzlP3EBCHyuBRsNUqqlDnd5kVYHL7EKOti6WQbP4kcYUUkgk52eEOnLBuv+wBA ADXV6su3EWNlOuOtVBS1LtDoKnJfyHj8o/iBzX4ZNQi91d4YEVqR0zBBw/8pcZuA heA7cGRWBf4ghZHJL/87yXKiVEIhMQ+g4y+3/gjXTIWdEYEz3HuGR9NPDjPKQcn/ p7ah -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:45 2026 by rpki-client