This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/QLrva8cnLmPH0hjKUEwdPyYxrik.roa File: QLrva8cnLmPH0hjKUEwdPyYxrik.roa (raw, json) Hash identifier: ZbeD2fd9caY5fcARM6Ra4GSlJm2ocmtIyBY6lWiGmwc= Subject key identifier: 40:BA:EF:6B:C7:27:2E:63:C7:D2:18:CA:50:4C:1D:3F:26:31:AE:29 Certificate issuer: /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde Certificate serial: 019B7BA364B00F3B16EAE2A1997BB0FCF8F3 Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/QLrva8cnLmPH0hjKUEwdPyYxrik.roa Signing time: Thu 01 Jan 2026 22:17:44 +0000 ROA not before: Thu 01 Jan 2026 22:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60419 IP address blocks: 185.31.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:64:b0:0f:3b:16:ea:e2:a1:99:7b:b0:fc:f8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde Validity Not Before: Jan 1 22:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40baef6bc7272e63c7d218ca504c1d3f2631ae29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:5d:db:fb:6b:8f:6b:ad:a0:56:41:9c:4b: 44:b8:4b:6b:46:74:8c:f7:af:72:92:6a:db:dc:52: af:59:fb:ad:1a:53:ea:6b:30:68:97:48:62:f5:ed: 7d:0a:f4:b7:56:c4:8c:2c:31:4a:a5:40:2d:f1:e5: b4:fc:7f:cc:fd:84:f3:c3:e8:3a:93:72:f3:4e:72: e7:d4:64:8d:8e:0f:5f:3b:05:54:cf:f8:95:fe:5b: 99:47:c4:9f:3c:3c:1e:67:3f:9c:63:c1:07:23:b7: 14:07:9b:7d:c5:a1:1f:a5:b2:3a:82:69:a8:a2:8b: 04:fa:3c:d4:6f:8a:47:a0:25:00:05:c3:69:cf:95: 21:e1:bc:03:63:b1:ce:71:1c:62:d0:72:b7:42:ed: 93:e1:81:13:b3:6b:d2:6d:4a:19:66:ac:c3:c5:38: ce:d0:f4:28:14:70:d1:40:47:da:c2:79:37:fa:c4: f5:2e:b1:14:96:e9:e3:32:93:fc:4f:54:c3:3b:57: 31:22:6d:19:9b:6c:f4:83:53:47:bf:0c:22:a1:b7: 4e:40:f5:67:e3:6c:26:a0:4e:f3:2f:d3:ef:72:81: 30:8d:00:17:11:f0:c2:b4:dd:53:a2:63:f8:c4:cf: 7f:60:61:14:db:bd:93:09:b3:21:af:3b:22:43:96: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BA:EF:6B:C7:27:2E:63:C7:D2:18:CA:50:4C:1D:3F:26:31:AE:29 X509v3 Authority Key Identifier: keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/QLrva8cnLmPH0hjKUEwdPyYxrik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.84.0/22 Signature Algorithm: sha256WithRSAEncryption 57:c5:8f:77:2a:ae:20:2d:ad:71:7d:1e:db:5d:03:a5:37:0b: d1:6c:06:8c:13:b3:ed:f9:88:46:d9:1a:4a:a2:26:7b:cb:c6: 44:08:5b:0c:79:10:19:09:e2:e2:a4:54:ce:1f:f6:26:f2:28: d5:39:15:a0:ab:18:5b:6a:fd:5a:4d:1f:69:8f:d5:05:08:5e: ef:28:c2:14:08:79:05:c5:3a:0b:a7:2d:03:84:3c:af:30:bf: eb:45:0e:0b:43:b5:f5:c1:22:94:2e:34:f3:d5:d4:88:14:3d: bd:e1:49:81:dd:a7:e6:d4:c4:47:fd:75:f7:22:7f:10:32:10: 28:c9:dd:89:2b:07:d8:5a:e0:0f:42:ed:4c:ed:2f:b2:9a:10: ee:24:1f:86:77:ca:38:08:ac:2d:a8:d3:f9:14:37:b8:db:08: 90:b8:48:11:ce:7b:54:b5:2e:3e:ec:64:29:f2:0c:ab:01:dd: 08:bd:9c:14:2e:90:60:96:1f:20:c1:b5:bc:29:16:f4:32:1a: 13:a5:4e:7f:6b:1f:1b:a0:a1:ca:59:93:09:6b:b4:24:a9:cc: 94:c4:4b:5f:e3:d8:0d:fb:0a:10:84:24:43:72:08:15:21:0d: 82:8a:41:52:c3:b6:1d:58:e6:5f:d5:3a:ec:cc:12:c0:a1:56: 2c:14:f9:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o2SwDzsW6uKhmXuw/PjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YmQxYzZjNjg4YTE3NWFiYzhkNTk4ZmJjZDEwN2ZjYTUy NTRiZGUwHhcNMjYwMTAxMjIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGJhZWY2YmM3MjcyZTYzYzdkMjE4Y2E1MDRjMWQzZjI2MzFhZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Fd2/trj2utoFZBnEtEuEtrRnSM 969ykmrb3FKvWfutGlPqazBol0hi9e19CvS3VsSMLDFKpUAt8eW0/H/M/YTzw+g6 k3LzTnLn1GSNjg9fOwVUz/iV/luZR8SfPDweZz+cY8EHI7cUB5t9xaEfpbI6gmmo oosE+jzUb4pHoCUABcNpz5Uh4bwDY7HOcRxi0HK3Qu2T4YETs2vSbUoZZqzDxTjO 0PQoFHDRQEfawnk3+sT1LrEUlunjMpP8T1TDO1cxIm0Zm2z0g1NHvwwiobdOQPVn 42wmoE7zL9PvcoEwjQAXEfDCtN1TomP4xM9/YGEU272TCbMhrzsiQ5aeRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEC672vHJy5jx9IYylBMHT8mMa4pMB8GA1UdIwQY MBaAFHi9HGxoihdavI1Zj7zRB/ylJUveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUwwY2JHaUtGMXE4alZtUHZORUhfS1VsUzk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMmI0YTItMmIyZi00ZjZhLTliNDgt YzFmM2I5ZWRlNGRiLzEvUUxydmE4Y25MbVBIMGhqS1VFd2RQeVl4cmlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMmI0YTItMmIyZi00ZjZhLTliNDgtYzFmM2I5ZWRlNGRi LzEvZUwwY2JHaUtGMXE4alZtUHZORUhfS1VsUzk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR9UMA0G CSqGSIb3DQEBCwUAA4IBAQBXxY93Kq4gLa1xfR7bXQOlNwvRbAaME7Pt+YhG2RpK oiZ7y8ZECFsMeRAZCeLipFTOH/Ym8ijVORWgqxhbav1aTR9pj9UFCF7vKMIUCHkF xToLpy0DhDyvML/rRQ4LQ7X1wSKULjTz1dSIFD294UmB3afm1MRH/XX3In8QMhAo yd2JKwfYWuAPQu1M7S+ymhDuJB+Gd8o4CKwtqNP5FDe42wiQuEgRzntUtS4+7GQp 8gyrAd0IvZwULpBglh8gwbW8KRb0MhoTpU5/ax8boKHKWZMJa7QkqcyUxEtf49gN +woQhCRDcggVIQ2CikFSw7YdWOZf1TrszBLAoVYsFPkU -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:24 2026 by rpki-client