This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/pQ2drLxPsryPdhVyYNQpX9EijXg.roa File: pQ2drLxPsryPdhVyYNQpX9EijXg.roa (raw, json) Hash identifier: ShqxMKPVKSyn9EKNwIqoSKLih6ixisLm4mFx4jQ4Itw= Subject key identifier: A5:0D:9D:AC:BC:4F:B2:BC:8F:76:15:72:60:D4:29:5F:D1:22:8D:78 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA40901E4BFC52362E64A17F3C65C89 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/pQ2drLxPsryPdhVyYNQpX9EijXg.roa Signing time: Thu 01 Jan 2026 22:18:26 +0000 ROA not before: Thu 01 Jan 2026 22:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201138 IP address blocks: 185.125.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:09:01:e4:bf:c5:23:62:e6:4a:17:f3:c6:5c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a50d9dacbc4fb2bc8f76157260d4295fd1228d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:d4:2b:6a:57:ab:e1:80:b8:74:45:44:44: d2:c0:43:a7:ad:18:cb:57:65:a2:7e:ee:6b:2c:a9: e4:ce:9a:8d:ac:6b:0a:99:a7:c8:a7:dc:e4:cd:a6: 5f:28:8d:85:0b:9c:ea:66:17:c6:a0:95:cd:58:6d: f4:da:d8:8b:eb:31:dc:f1:68:58:dd:c4:f7:ae:ab: 61:b8:34:69:4d:4d:1b:86:b3:c7:7b:ab:cf:5f:c1: 33:25:ae:a9:96:5e:70:64:28:c1:14:c0:d5:bb:e9: 6e:08:6b:44:e6:32:e0:fe:c2:23:44:dc:dd:3d:b2: b4:cd:f5:1d:48:a5:8f:56:f4:0e:4d:3a:d0:ad:33: 2e:a7:5b:88:92:54:0f:3b:ba:49:8b:f8:2c:2c:cd: 02:e0:97:fb:9e:f2:a9:81:3e:bb:8a:c4:36:20:d8: d5:6e:11:3a:21:da:f7:52:92:a9:d0:56:3e:09:04: 75:93:09:13:7f:90:ad:3a:57:56:8d:a6:9c:95:99: 84:3a:bb:c1:48:8d:19:cd:62:7e:a2:b4:62:e7:20: 15:a0:ff:e1:61:b8:b2:08:33:95:b3:7e:d6:74:da: bb:a3:d0:9e:3c:c8:9f:f2:9b:0a:d1:00:6e:4f:de: f2:db:89:f6:ca:03:5b:72:e3:86:30:8a:ff:95:f7: 1d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0D:9D:AC:BC:4F:B2:BC:8F:76:15:72:60:D4:29:5F:D1:22:8D:78 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/pQ2drLxPsryPdhVyYNQpX9EijXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.229.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:ee:fc:ce:e3:d0:b4:ae:ca:ef:73:34:68:6c:86:90:a0:86: 48:b1:39:0f:0d:63:fe:fa:9c:22:82:1f:83:5a:52:3c:8b:88: ab:a9:98:c9:78:ac:db:b7:00:b4:49:36:c5:f8:2f:f5:e2:6f: 4e:23:a0:c5:1b:46:26:08:dd:cf:cd:8f:a1:d5:d5:22:bb:4e: 03:f8:af:1c:83:36:87:56:81:ae:44:a7:29:04:2c:e1:f0:29: 92:48:ba:e6:a9:86:68:61:30:a0:12:16:73:55:cf:93:ba:bc: 99:2c:ec:9a:58:e8:18:24:5a:6d:ec:65:86:36:79:57:f5:7d: 45:83:3d:b4:73:88:3a:0c:96:03:54:5c:ee:bf:39:c9:7a:a3: 47:be:13:2e:48:b8:54:13:6f:bf:82:a2:e9:99:17:a9:4e:cb: 35:9e:a8:e8:b9:e8:05:ba:ca:ba:10:6c:3b:46:d5:38:a1:09: 2f:f3:63:74:1d:f5:20:95:aa:58:95:4f:ab:aa:97:ba:c5:6a: de:10:63:16:35:1f:d2:e3:f3:39:e8:2b:f2:e2:80:51:26:a2: 71:61:1c:62:e2:fc:c8:7b:38:4c:88:31:7a:9b:47:eb:0e:89: 85:3e:55:d4:f0:ad:ac:9b:23:51:cb:04:8d:c1:fe:00:7d:90: a9:b1:53:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pAkB5L/FI2LmShfzxlyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTBkOWRhY2JjNGZiMmJjOGY3NjE1NzI2MGQ0Mjk1ZmQxMjI4ZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoPUK2pXq+GAuHRFRETSwEOnrRjL V2Wifu5rLKnkzpqNrGsKmafIp9zkzaZfKI2FC5zqZhfGoJXNWG302tiL6zHc8WhY 3cT3rqthuDRpTU0bhrPHe6vPX8EzJa6pll5wZCjBFMDVu+luCGtE5jLg/sIjRNzd PbK0zfUdSKWPVvQOTTrQrTMup1uIklQPO7pJi/gsLM0C4Jf7nvKpgT67isQ2INjV bhE6Idr3UpKp0FY+CQR1kwkTf5CtOldWjaaclZmEOrvBSI0ZzWJ+orRi5yAVoP/h YbiyCDOVs37WdNq7o9CePMif8psK0QBuT97y24n2ygNbcuOGMIr/lfcdzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKUNnay8T7K8j3YVcmDUKV/RIo14MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvcFEyZHJMeFBzcnlQZGhWeVlOUXBYOUVpalhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX3lMA0G CSqGSIb3DQEBCwUAA4IBAQB67vzO49C0rsrvczRobIaQoIZIsTkPDWP++pwigh+D WlI8i4irqZjJeKzbtwC0STbF+C/14m9OI6DFG0YmCN3PzY+h1dUiu04D+K8cgzaH VoGuRKcpBCzh8CmSSLrmqYZoYTCgEhZzVc+TuryZLOyaWOgYJFpt7GWGNnlX9X1F gz20c4g6DJYDVFzuvznJeqNHvhMuSLhUE2+/gqLpmRepTss1nqjouegFusq6EGw7 RtU4oQkv82N0HfUglapYlU+rqpe6xWreEGMWNR/S4/M56Cvy4oBRJqJxYRxi4vzI ezhMiDF6m0frDomFPlXU8K2smyNRywSNwf4AfZCpsVOU -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:06 2026 by rpki-client