This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/qUJVzkvCS28CT-LmqvhYZclQCzE.roa File: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (raw, json) Hash identifier: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34= Subject key identifier: A9:42:55:CE:4B:C2:4B:6F:02:4F:E2:E6:AA:F8:58:65:C9:50:0B:31 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA69348EC313D41F8098AC9810F2031 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/qUJVzkvCS28CT-LmqvhYZclQCzE.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 185.100.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:93:48:ec:31:3d:41:f8:09:8a:c9:81:0f:20:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a94255ce4bc24b6f024fe2e6aaf85865c9500b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:c4:62:4e:9b:76:eb:fb:ac:7c:b9:0a:18: dc:13:21:4c:f3:c2:58:43:4b:ec:01:48:08:56:af: 61:e4:7d:0e:0f:00:61:88:e7:93:c9:69:b0:bb:95: 32:14:ef:c4:db:38:30:57:1e:07:8d:29:a0:d3:74: 0b:9b:da:3b:68:c1:69:95:23:9d:a2:cf:d8:31:43: b2:57:b7:ad:21:4c:6f:3a:90:51:4e:f6:ac:e8:a0: dd:a6:ec:44:a4:65:5f:22:16:c5:59:b7:6a:3e:c0: 20:84:ff:2a:15:7a:b4:b1:cd:f0:a7:dd:87:25:82: dc:f5:60:40:6e:f6:fc:b1:f3:34:3e:c8:e0:a3:6b: e6:8a:de:c3:59:bc:2e:28:63:48:fa:f1:ef:5d:54: ee:9b:0a:07:15:c1:c6:44:0d:e9:ca:89:cc:ec:b2: d7:9d:85:b7:45:0b:1d:a1:3c:31:f6:90:57:9c:07: 39:e4:f1:26:94:17:44:0d:cc:bf:0f:1a:4a:ad:f7: f4:9d:d9:e7:16:ce:b2:c2:75:c4:35:ab:70:f0:6d: 32:f0:c6:e2:e5:21:46:89:39:cf:69:21:41:44:61: fb:19:49:5a:e8:d5:3e:56:11:c0:12:f9:5e:97:ec: 08:79:37:3e:3f:23:b5:65:1d:66:46:6a:63:f0:6e: a5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:42:55:CE:4B:C2:4B:6F:02:4F:E2:E6:AA:F8:58:65:C9:50:0B:31 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/qUJVzkvCS28CT-LmqvhYZclQCzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.168.0/24 Signature Algorithm: sha256WithRSAEncryption 77:ff:c6:b8:9b:3c:ec:df:15:e9:f5:54:c6:aa:ed:3a:a8:51: ef:96:f3:e0:d9:ca:10:55:17:2e:92:ec:3d:e0:51:b5:fb:bd: 46:43:68:0c:73:88:d0:85:e3:31:c4:ea:bd:ba:bd:1a:0b:e1: 25:b3:96:bd:b8:2d:6e:35:b9:a7:b7:3b:a5:8e:13:de:cd:75: 8f:fb:9e:d8:45:fc:a0:7e:4f:83:7d:23:d1:0e:7d:4c:83:fa: 2a:2f:30:1d:56:95:ab:dc:d8:cd:14:4e:a2:b5:0d:f0:8f:4e: f1:9e:b7:50:c7:dd:0f:c1:2e:4f:a3:d4:f9:2b:b2:7c:02:3c: e6:b2:d3:67:bc:f3:c1:70:54:c4:30:13:46:f8:83:10:fe:ff: af:b4:dd:4b:2c:56:c5:7b:44:24:a3:f0:44:8f:51:9a:8c:82: fa:3a:8b:98:77:24:d2:73:f2:2d:11:7d:9f:1d:56:c7:bf:b3: c7:5b:c6:c1:73:c6:cc:56:4f:b6:25:f6:68:26:13:cd:19:1a: a1:84:63:bc:35:23:fe:ec:6e:12:5e:48:1f:1e:14:c1:9b:b0: 5d:d8:dc:2e:be:74:60:00:34:37:1f:c1:ae:d7:ca:73:ab:ae: ff:4a:ca:0d:27:f7:c6:ac:74:a3:73:3a:d0:3c:64:d4:24:51: 34:55:25:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppNI7DE9QfgJismBDyAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTQyNTVjZTRiYzI0YjZmMDI0ZmUyZTZhYWY4NTg2NWM5NTAwYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTvEYk6bduv7rHy5ChjcEyFM88JY Q0vsAUgIVq9h5H0ODwBhiOeTyWmwu5UyFO/E2zgwVx4HjSmg03QLm9o7aMFplSOd os/YMUOyV7etIUxvOpBRTvas6KDdpuxEpGVfIhbFWbdqPsAghP8qFXq0sc3wp92H JYLc9WBAbvb8sfM0Psjgo2vmit7DWbwuKGNI+vHvXVTumwoHFcHGRA3pyonM7LLX nYW3RQsdoTwx9pBXnAc55PEmlBdEDcy/DxpKrff0ndnnFs6ywnXENatw8G0y8Mbi 5SFGiTnPaSFBRGH7GUla6NU+VhHAEvlel+wIeTc+PyO1ZR1mRmpj8G6l+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKlCVc5LwktvAk/i5qr4WGXJUAsxMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvcVVKVnprdkNTMjhDVC1MbXF2aFlaY2xRQ3pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWSoMA0G CSqGSIb3DQEBCwUAA4IBAQB3/8a4mzzs3xXp9VTGqu06qFHvlvPg2coQVRcukuw9 4FG1+71GQ2gMc4jQheMxxOq9ur0aC+Els5a9uC1uNbmntzuljhPezXWP+57YRfyg fk+DfSPRDn1Mg/oqLzAdVpWr3NjNFE6itQ3wj07xnrdQx90PwS5Po9T5K7J8Ajzm stNnvPPBcFTEMBNG+IMQ/v+vtN1LLFbFe0Qko/BEj1GajIL6OouYdyTSc/ItEX2f HVbHv7PHW8bBc8bMVk+2JfZoJhPNGRqhhGO8NSP+7G4SXkgfHhTBm7Bd2NwuvnRg ADQ3H8Gu18pzq67/SsoNJ/fGrHSjczrQPGTUJFE0VSVt -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:18 2026 by rpki-client