This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa File: QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa (raw, json) Hash identifier: mPI+Fb4XV55VM/xg4rejvn4qKGbiuOmJ9YzbxU8HDUU= Subject key identifier: 41:7D:FE:CE:F0:B4:2E:A0:EB:81:FA:A9:70:66:FE:E1:66:D7:93:E3 Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b Certificate serial: 019B7F15ED05D910BB08FBA68C196E54F485 Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51561 IP address blocks: 185.207.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ed:05:d9:10:bb:08:fb:a6:8c:19:6e:54:f4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=417dfecef0b42ea0eb81faa97066fee166d793e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:cf:86:4e:35:27:3c:08:37:3c:dd:79:83: ba:11:29:66:58:db:2c:10:d1:63:e4:7b:27:13:96: cc:bd:23:d2:8e:7d:27:8e:30:2a:32:48:7e:3a:e7: be:35:8b:35:2d:73:4a:d5:f8:16:05:7c:c2:33:dd: 1c:b3:33:80:9d:1d:56:e5:3c:1d:c8:cc:85:b0:66: fd:b7:a9:60:b3:39:e4:8d:81:f4:9b:08:ae:a5:70: 8b:7b:d5:49:70:79:12:a7:52:12:e4:4c:9e:3d:d4: 28:a7:27:7b:55:74:65:be:ca:8c:e8:b7:ea:aa:d8: 8f:c3:7b:40:cd:c0:f5:fa:af:c1:08:5a:e3:e1:ec: 8a:da:67:6e:c5:f5:c4:c4:b6:37:95:5e:c6:f1:46: ec:1e:9d:c8:b8:3b:fa:04:03:84:8f:0c:38:a5:94: 4f:f2:47:eb:14:6e:b4:b3:20:65:44:2a:63:0f:6e: 69:77:b7:43:79:b9:4c:9f:20:32:74:cc:44:1f:f3: 7a:5b:6c:72:64:10:c1:ff:db:62:82:d9:99:b2:6f: 6c:8e:ca:e3:21:97:1f:4d:b4:56:b9:14:8e:52:e0: 41:93:60:c3:83:32:e1:26:f6:ec:f0:41:e4:17:d0: 5d:94:f8:6b:45:44:1e:e1:18:35:03:87:b5:3e:da: e7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:FE:CE:F0:B4:2E:A0:EB:81:FA:A9:70:66:FE:E1:66:D7:93:E3 X509v3 Authority Key Identifier: keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.140.0/22 Signature Algorithm: sha256WithRSAEncryption 09:07:ca:45:7a:fd:65:35:84:ed:e1:d7:31:8f:72:ea:96:d7: 97:0c:30:d4:be:71:d9:82:ba:c5:4f:08:c8:ef:2d:39:1d:e1: d8:28:04:07:66:24:58:0f:f4:0c:91:f7:8d:e3:28:a1:06:ba: 6e:ed:19:c1:20:84:1d:35:8e:08:81:e8:0a:33:d1:70:fe:76: c0:b2:f8:2d:10:86:87:21:ea:bb:3d:3c:ef:bc:82:70:ad:bc: c8:aa:62:a1:12:fe:40:ed:8d:16:0a:c3:0e:91:c7:af:c7:1f: 59:d5:5b:0e:45:8f:10:54:4b:32:0d:33:9d:62:06:79:e3:f1: dd:ee:58:1d:c6:57:7a:0b:ac:f4:ea:fd:7b:c8:af:14:76:b8: 5b:12:7a:43:f3:7d:be:1c:03:ce:b2:1d:47:74:f7:ac:cd:ad: 7e:a3:d3:8a:28:19:30:dc:91:3a:aa:3f:87:8c:75:40:1b:f7: b9:aa:50:ad:c9:81:9e:06:92:de:7d:a1:6d:c1:20:fb:69:35: cc:5d:2d:24:db:5a:7f:cc:ed:4c:f1:6e:a8:88:cc:1b:2d:89: 87:51:20:4e:e2:95:20:fc:b9:87:eb:1f:46:8e:78:74:96:e5: e2:16:1b:97:24:30:18:79:ce:73:ec:41:7b:87:ec:4e:f3:30: 60:f6:dd:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fe0F2RC7CPumjBluVPSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNGI1NGRmZDQxNjEwNzc0ZmU3ZjI0MmQ3ZGQzODczYTY1 ODQ3M2IwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTdkZmVjZWYwYjQyZWEwZWI4MWZhYTk3MDY2ZmVlMTY2ZDc5M2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ7Phk41JzwINzzdeYO6ESlmWNss ENFj5HsnE5bMvSPSjn0njjAqMkh+Oue+NYs1LXNK1fgWBXzCM90cszOAnR1W5Twd yMyFsGb9t6lgsznkjYH0mwiupXCLe9VJcHkSp1IS5EyePdQopyd7VXRlvsqM6Lfq qtiPw3tAzcD1+q/BCFrj4eyK2mduxfXExLY3lV7G8UbsHp3IuDv6BAOEjww4pZRP 8kfrFG60syBlRCpjD25pd7dDeblMnyAydMxEH/N6W2xyZBDB/9tigtmZsm9sjsrj IZcfTbRWuRSOUuBBk2DDgzLhJvbs8EHkF9BdlPhrRUQe4Rg1A4e1PtrnHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEF9/s7wtC6g64H6qXBm/uFm15PjMB8GA1UdIwQY MBaAFH5LVN/UFhB3T+fyQtfdOHOmWEc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEt Nzc0NGVmM2MwYjk5LzEvUVgzLXp2QzBMcURyZ2ZxcGNHYi00V2JYay1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEtNzc0NGVmM2MwYjk5 LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc+MMA0G CSqGSIb3DQEBCwUAA4IBAQAJB8pFev1lNYTt4dcxj3LqlteXDDDUvnHZgrrFTwjI 7y05HeHYKAQHZiRYD/QMkfeN4yihBrpu7RnBIIQdNY4IgegKM9Fw/nbAsvgtEIaH Ieq7PTzvvIJwrbzIqmKhEv5A7Y0WCsMOkcevxx9Z1VsORY8QVEsyDTOdYgZ54/Hd 7lgdxld6C6z06v17yK8UdrhbEnpD832+HAPOsh1HdPesza1+o9OKKBkw3JE6qj+H jHVAG/e5qlCtyYGeBpLefaFtwSD7aTXMXS0k21p/zO1M8W6oiMwbLYmHUSBO4pUg /LmH6x9Gjnh0luXiFhuXJDAYec5z7EF7h+xO8zBg9t3w -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:37 2026 by rpki-client