This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nqIDbGU-QZwYvKOVyTJ9yeLNiTA.roa File: nqIDbGU-QZwYvKOVyTJ9yeLNiTA.roa (raw, json) Hash identifier: z6kv2e6DqSB0Dk0W7tdDL0b0Ovqrx41LVb3wXmJ/tJY= Subject key identifier: 9E:A2:03:6C:65:3E:41:9C:18:BC:A3:95:C9:32:7D:C9:E2:CD:89:30 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA4020AB20F3733AD797CE555408DC5 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nqIDbGU-QZwYvKOVyTJ9yeLNiTA.roa Signing time: Thu 01 Jan 2026 22:18:24 +0000 ROA not before: Thu 01 Jan 2026 22:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56630 IP address blocks: 185.40.5.0/24 maxlen: 24 185.117.117.0/24 maxlen: 24 185.232.168.0/24 maxlen: 24 194.53.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:02:0a:b2:0f:37:33:ad:79:7c:e5:55:40:8d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea2036c653e419c18bca395c9327dc9e2cd8930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:a7:59:e0:e6:94:b8:6f:27:dc:5c:7b:da: 69:8c:1b:be:8d:15:d1:c4:13:8f:e1:d4:54:7c:ad: be:9e:21:61:c9:71:27:c6:3e:8d:a0:9c:f8:bb:a4: 17:a1:b6:cf:2c:e1:35:b2:f1:9e:7e:64:14:10:b5: 6b:4a:a2:92:bc:4f:8d:9a:24:df:51:de:61:88:fd: b6:91:fb:eb:9b:b6:c0:95:81:5d:2c:77:eb:89:9f: d1:b9:72:03:71:1d:f0:ef:27:ff:1e:2e:da:69:75: 18:4e:20:f4:f7:83:15:e2:4a:66:9a:53:0c:77:56: 02:8c:7b:9c:9d:c1:43:c9:a4:9e:cd:f3:1e:27:77: a4:58:e6:c9:a7:27:2c:6e:d7:e9:ae:55:d3:7d:3e: 64:ce:37:76:0e:d8:0a:88:df:f2:5b:0a:58:6a:45: ad:31:ed:bf:dd:e1:6e:cb:35:dc:0f:9e:06:fd:c3: ec:e9:e2:4e:8e:e7:25:09:a5:09:b3:2b:f4:f1:f2: 98:64:8a:44:17:99:80:81:f7:14:3b:87:62:d7:9d: d3:e1:ef:e0:03:c7:20:a0:57:47:f0:d8:d1:61:b1: c1:bc:f8:54:c3:46:51:9e:58:7b:da:d0:68:1c:5d: 76:7a:00:cd:af:16:e0:4f:14:33:25:06:2a:6e:36: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A2:03:6C:65:3E:41:9C:18:BC:A3:95:C9:32:7D:C9:E2:CD:89:30 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nqIDbGU-QZwYvKOVyTJ9yeLNiTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.5.0/24 185.117.117.0/24 185.232.168.0/24 194.53.55.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:aa:94:f4:4a:f6:22:31:02:1e:a5:6e:d4:7d:b1:13:6a:2e: 8f:1b:27:54:31:4d:af:be:a5:76:16:86:c1:34:f5:84:16:0a: a4:a5:72:c3:da:94:5d:b0:43:f4:0d:4e:1b:4d:4c:1f:b9:aa: 4b:60:e1:75:a4:45:34:0b:bb:49:23:08:25:ce:3c:3a:f0:66: 6d:60:48:0a:ef:55:43:70:4f:1c:f9:72:be:be:bf:84:64:3a: 3c:5e:20:de:32:e8:c7:cc:a2:3a:7a:30:96:63:97:4b:d6:32: f6:ce:43:35:70:60:c9:18:78:db:7c:18:16:10:01:a5:c3:0b: f5:03:92:98:69:c9:34:e5:2d:d9:0f:25:a0:07:44:77:87:96: 6b:a1:a4:6b:9d:72:ef:cd:29:ce:17:09:38:0c:78:8c:44:5e: d9:2f:b3:39:b0:ec:dc:df:ad:21:63:8b:a0:d6:52:e2:1c:50: 7b:c3:a8:55:5d:0f:28:7f:f3:f4:4b:ee:53:4e:a4:ff:ed:99: 88:cf:57:88:fd:aa:3e:28:ad:6f:c1:ee:22:66:5b:9c:85:92: 7b:be:b1:83:a2:11:52:ae:70:e4:50:d5:54:fc:1c:7a:96:6b: d3:53:47:2a:58:cf:68:09:56:be:95:45:20:8e:99:74:09:c6: a3:2b:15:d5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pAIKsg83M615fOVVQI3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWEyMDM2YzY1M2U0MTljMThiY2EzOTVjOTMyN2RjOWUyY2Q4OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6KnWeDmlLhvJ9xce9ppjBu+jRXR xBOP4dRUfK2+niFhyXEnxj6NoJz4u6QXobbPLOE1svGefmQUELVrSqKSvE+NmiTf Ud5hiP22kfvrm7bAlYFdLHfriZ/RuXIDcR3w7yf/Hi7aaXUYTiD094MV4kpmmlMM d1YCjHucncFDyaSezfMeJ3ekWObJpycsbtfprlXTfT5kzjd2DtgKiN/yWwpYakWt Me2/3eFuyzXcD54G/cPs6eJOjuclCaUJsyv08fKYZIpEF5mAgfcUO4di153T4e/g A8cgoFdH8NjRYbHBvPhUw0ZRnlh72tBoHF12egDNrxbgTxQzJQYqbjaGOwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJ6iA2xlPkGcGLyjlckyfcnizYkwMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvbnFJRGJHVS1RWndZdktPVnlUSjl5ZUxOaVRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuSgFAwQA uXV1AwQAueioAwQAwjU3MA0GCSqGSIb3DQEBCwUAA4IBAQBsqpT0SvYiMQIepW7U fbETai6PGydUMU2vvqV2FobBNPWEFgqkpXLD2pRdsEP0DU4bTUwfuapLYOF1pEU0 C7tJIwglzjw68GZtYEgK71VDcE8c+XK+vr+EZDo8XiDeMujHzKI6ejCWY5dL1jL2 zkM1cGDJGHjbfBgWEAGlwwv1A5KYack05S3ZDyWgB0R3h5ZroaRrnXLvzSnOFwk4 DHiMRF7ZL7M5sOzc360hY4ug1lLiHFB7w6hVXQ8of/P0S+5TTqT/7ZmIz1eI/ao+ KK1vwe4iZluchZJ7vrGDohFSrnDkUNVU/Bx6lmvTU0cqWM9oCVa+lUUgjpl0Ccaj KxXV -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:06 2026 by rpki-client