This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/QR6JCvg_yJC5a7s73DyQnmCM4I0.roa File: QR6JCvg_yJC5a7s73DyQnmCM4I0.roa (raw, json) Hash identifier: s2aQJ0ionOhGA/bORwEZg/xbj2CgaA7Pt0VzSP4Fylw= Subject key identifier: 41:1E:89:0A:F8:3F:C8:90:B9:6B:BB:3B:DC:3C:90:9E:60:8C:E0:8D Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb Certificate serial: 019B7B368A65FDD44EA00C876B93CC58F527 Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/QR6JCvg_yJC5a7s73DyQnmCM4I0.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56911 IP address blocks: 185.47.136.0/24 maxlen: 24 185.47.137.0/24 maxlen: 24 185.47.139.0/24 maxlen: 24 185.139.180.0/24 maxlen: 24 195.177.112.0/24 maxlen: 24 195.177.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8a:65:fd:d4:4e:a0:0c:87:6b:93:cc:58:f5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=411e890af83fc890b96bbb3bdc3c909e608ce08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:50:85:b9:7b:3f:86:72:b8:e5:be:46:3a:08: eb:ef:23:17:18:00:0d:4a:47:19:54:71:42:21:f8: 8f:5f:82:29:ac:e8:ba:d4:ec:af:5c:96:f5:c0:c3: cd:23:22:62:57:a1:4b:f4:1f:a5:f1:68:dd:df:08: 9e:06:a7:17:76:4b:8d:e1:ca:ec:17:ad:62:0f:af: 13:e7:35:31:a4:5b:47:05:c1:bf:dd:cb:8f:c5:43: fc:0c:d5:83:9e:5e:b7:84:93:ef:03:4e:36:b1:0d: a1:c6:89:ea:d4:42:12:6f:b3:32:e9:0e:73:54:d6: 40:a2:9a:18:39:cf:47:f2:10:33:28:aa:f3:db:8a: ab:4a:ca:96:1b:89:a8:a8:82:ec:9a:71:c1:0e:44: cc:20:8d:36:66:e5:b0:7a:b3:85:80:15:40:d3:28: cd:c1:47:86:ef:29:71:79:05:e7:eb:bf:bb:25:73: fb:a3:fb:1f:dc:7d:25:28:c9:bf:9f:2c:2f:79:b8: a7:33:c0:c5:18:5c:c2:79:2a:18:9a:8b:d6:72:12: 6e:c8:cb:ac:c8:e6:a7:54:a6:d7:ad:a9:65:3b:cb: 0d:61:5c:99:53:f8:72:57:87:15:5e:ec:b2:15:05: 93:0a:ef:b8:26:57:47:06:11:73:97:e7:16:2a:18: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1E:89:0A:F8:3F:C8:90:B9:6B:BB:3B:DC:3C:90:9E:60:8C:E0:8D X509v3 Authority Key Identifier: keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/QR6JCvg_yJC5a7s73DyQnmCM4I0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.47.136.0/23 185.47.139.0/24 185.139.180.0/24 195.177.112.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:97:2c:8f:a6:af:92:5c:dc:d1:ee:f9:e3:69:61:34:d7:f2: 2f:e3:35:f3:2a:7c:7a:1e:fc:ad:8c:13:4b:9b:27:44:48:c6: 4a:2d:bb:3e:e2:fb:f5:13:2d:c7:77:06:1f:c1:4a:0b:ed:ec: 9a:6a:ac:42:be:05:e6:00:c8:6c:60:5a:e7:27:07:d4:27:5e: 42:b6:93:91:e3:60:c6:03:5b:fd:af:c8:2b:01:8d:bf:ba:94: 05:70:12:51:72:b0:e8:c5:e9:b5:79:f5:24:cc:4a:02:3e:ec: 9a:2b:9b:d7:48:cd:52:27:0d:2b:cc:ec:7d:4f:e6:b2:3f:cf: d8:0d:84:d8:c7:c2:c6:fd:09:15:85:44:a1:22:fb:e3:53:6f: 1d:01:b7:19:8f:de:a4:53:22:89:12:fe:9c:0d:46:2e:8c:48: 62:ab:23:8a:ef:0d:ac:cf:1f:75:3b:3b:0b:86:66:15:82:3b: cc:43:26:89:9d:86:fe:e2:c2:a8:c1:40:07:00:af:6e:37:6f: 5a:28:19:3d:3e:a8:3e:3f:27:76:5b:15:9e:38:15:ca:de:99: 0b:40:62:2d:81:b9:f5:a8:07:9b:15:d0:ae:ef:cf:99:ac:58: e7:67:f3:21:88:65:4a:08:e6:26:ce:4e:a3:ea:4d:36:95:63: 0e:94:04:6d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7Nopl/dROoAyHa5PMWPUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzE3ZWE1NGI5NTk0MmZhZDgxYTk0M2VkYjFjMTBmOWRm OTRhZmIwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTFlODkwYWY4M2ZjODkwYjk2YmJiM2JkYzNjOTA5ZTYwOGNlMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FCFuXs/hnK45b5GOgjr7yMXGAAN SkcZVHFCIfiPX4IprOi61OyvXJb1wMPNIyJiV6FL9B+l8Wjd3wieBqcXdkuN4crs F61iD68T5zUxpFtHBcG/3cuPxUP8DNWDnl63hJPvA042sQ2hxonq1EISb7My6Q5z VNZAopoYOc9H8hAzKKrz24qrSsqWG4moqILsmnHBDkTMII02ZuWwerOFgBVA0yjN wUeG7ylxeQXn67+7JXP7o/sf3H0lKMm/nywvebinM8DFGFzCeSoYmovWchJuyMus yOanVKbXrallO8sNYVyZU/hyV4cVXuyyFQWTCu+4JldHBhFzl+cWKhh6wwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEEeiQr4P8iQuWu7O9w8kJ5gjOCNMB8GA1UdIwQY MBaAFKNxfqVLlZQvrYGpQ+2xwQ+d+Ur7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTct MTU3YWQwYWM1MjBhLzEvUVI2SkN2Z195SkM1YTdzNzNEeVFubUNNNEkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTctMTU3YWQwYWM1MjBh LzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBuS+IAwQA uS+LAwQAuYu0AwQBw7FwMA0GCSqGSIb3DQEBCwUAA4IBAQCPlyyPpq+SXNzR7vnj aWE01/Iv4zXzKnx6HvytjBNLmydESMZKLbs+4vv1Ey3HdwYfwUoL7eyaaqxCvgXm AMhsYFrnJwfUJ15CtpOR42DGA1v9r8grAY2/upQFcBJRcrDoxem1efUkzEoCPuya K5vXSM1SJw0rzOx9T+ayP8/YDYTYx8LG/QkVhUShIvvjU28dAbcZj96kUyKJEv6c DUYujEhiqyOK7w2szx91OzsLhmYVgjvMQyaJnYb+4sKowUAHAK9uN29aKBk9Pqg+ Pyd2WxWeOBXK3pkLQGItgbn1qAebFdCu78+ZrFjnZ/MhiGVKCOYmzk6j6k02lWMO lARt -----END CERTIFICATE-----Generated at Mon Jan 26 10:49:19 2026 by rpki-client