This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/IQlxprbZWn6kmT88iXMsUKqlSGA.roa File: IQlxprbZWn6kmT88iXMsUKqlSGA.roa (raw, json) Hash identifier: +SL0WG5Y9XJmvXvnpXW2Z20p66kDbNhiVMxrQpPirP0= Subject key identifier: 21:09:71:A6:B6:D9:5A:7E:A4:99:3F:3C:89:73:2C:50:AA:A5:48:60 Certificate issuer: /CN=ab344b32f58b564c897a1ffa6967089198f2c822 Certificate serial: 019B7BA54366573606C4EE6AAE2AF0FF476A Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/IQlxprbZWn6kmT88iXMsUKqlSGA.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201764 IP address blocks: 185.40.248.0/22 maxlen: 22 2a01:50a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:43:66:57:36:06:c4:ee:6a:ae:2a:f0:ff:47:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=210971a6b6d95a7ea4993f3c89732c50aaa54860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:87:3e:7a:1e:c4:d7:07:4b:b7:92:c7:9f: 2b:5e:60:c9:2e:4a:03:50:50:66:4b:dc:be:d0:1b: 2f:b8:ce:66:81:0b:4b:bf:bf:fa:66:ed:7b:0c:31: dc:7b:66:5e:fa:ac:6f:82:50:73:d5:d5:b6:78:14: 11:46:b7:35:50:c6:0b:2a:e2:48:75:b4:6c:3a:9b: 58:5a:12:e3:1b:f5:46:1c:b8:bf:1c:46:24:be:09: 71:9a:77:21:d9:da:9a:f6:5b:32:2a:fa:f5:ab:de: be:33:cc:0d:a5:8a:4f:7c:d3:62:f8:72:dc:b6:80: 3a:6e:52:1d:bb:90:e0:cf:46:5d:4e:01:e7:71:c8: bd:b1:9b:78:3e:a3:7a:a7:1b:db:d0:33:ba:ec:1e: 72:22:8e:18:05:77:8e:15:dc:de:f0:ff:75:83:82: 30:06:be:19:73:64:e9:a1:39:31:fd:75:75:4d:d5: 2b:41:9c:a5:73:ad:84:7c:3c:a3:15:1d:87:68:74: 43:16:02:d1:43:4f:d7:0d:62:ce:ec:95:cf:fe:c4: aa:77:94:02:51:76:71:21:a6:11:60:27:f9:cb:af: 74:32:00:c2:19:fd:df:2b:71:56:a1:08:d6:87:b8: 44:2f:7c:f4:9b:f0:8c:24:f9:b2:2b:a2:d8:bd:9d: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:09:71:A6:B6:D9:5A:7E:A4:99:3F:3C:89:73:2C:50:AA:A5:48:60 X509v3 Authority Key Identifier: keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/IQlxprbZWn6kmT88iXMsUKqlSGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.248.0/22 IPv6: 2a01:50a0::/32 Signature Algorithm: sha256WithRSAEncryption ac:27:3a:a6:97:04:7d:cb:16:9c:f5:2e:5d:03:c1:74:8b:c0: 28:a5:34:16:5d:f0:89:af:c7:7b:36:ff:be:4e:1d:ad:27:dc: 91:21:13:ae:c1:0c:d1:91:83:d9:af:57:f4:b8:5c:7e:6e:e6: e6:48:a2:3f:e6:d7:7a:cd:26:40:ba:66:be:4b:16:b6:b2:ef: 38:d6:5f:e5:e9:10:bf:21:9f:00:f9:e8:95:9f:9d:02:22:ae: fe:b9:8c:b3:9f:91:f6:eb:1b:e9:02:11:ad:d0:54:dd:f7:cf: f5:dc:7d:d4:89:26:95:80:ed:61:f8:99:79:e7:59:c9:46:96: b4:ab:02:ae:db:83:bc:e2:fe:18:53:9f:f8:d3:9c:7f:ee:6d: 94:c4:53:0e:7f:5f:63:22:a4:39:ae:8c:30:ff:0f:1d:44:27: 36:0a:48:68:0b:db:93:8f:7a:a3:49:de:40:7f:6d:43:29:7e: 3f:5b:cf:8e:26:71:03:ca:d1:fa:17:80:79:d2:3f:26:0f:d0: a2:15:4d:93:45:32:e7:a6:39:dc:97:37:d4:1f:a8:d7:89:18: 73:9f:9e:86:29:75:d6:a3:e7:f3:51:db:4a:49:58:83:26:63: 76:2a:09:56:40:76:33:d1:fe:15:73:7a:8a:2e:1c:ef:83:9e: b4:a3:cf:63 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pUNmVzYGxO5qrirw/0dqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMzQ0YjMyZjU4YjU2NGM4OTdhMWZmYTY5NjcwODkxOThm MmM4MjIwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTA5NzFhNmI2ZDk1YTdlYTQ5OTNmM2M4OTczMmM1MGFhYTU0ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsqHPnoexNcHS7eSx58rXmDJLkoD UFBmS9y+0BsvuM5mgQtLv7/6Zu17DDHce2Ze+qxvglBz1dW2eBQRRrc1UMYLKuJI dbRsOptYWhLjG/VGHLi/HEYkvglxmnch2dqa9lsyKvr1q96+M8wNpYpPfNNi+HLc toA6blIdu5Dgz0ZdTgHncci9sZt4PqN6pxvb0DO67B5yIo4YBXeOFdze8P91g4Iw Br4Zc2TpoTkx/XV1TdUrQZylc62EfDyjFR2HaHRDFgLRQ0/XDWLO7JXP/sSqd5QC UXZxIaYRYCf5y690MgDCGf3fK3FWoQjWh7hEL3z0m/CMJPmyK6LYvZ2NRQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCEJcaa22Vp+pJk/PIlzLFCqpUhgMB8GA1UdIwQY MBaAFKs0SzL1i1ZMiXof+mlnCJGY8sgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80MThiNmEtYmNmYy00NTYwLWI5YjEt MDFhZWM5MjBjNzJlLzEvSVFseHByYlpXbjZrbVQ4OGlYTXNVS3FsU0dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80MThiNmEtYmNmYy00NTYwLWI5YjEtMDFhZWM5MjBjNzJl LzEvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSj4MA0E AgACMAcDBQAqAVCgMA0GCSqGSIb3DQEBCwUAA4IBAQCsJzqmlwR9yxac9S5dA8F0 i8AopTQWXfCJr8d7Nv++Th2tJ9yRIROuwQzRkYPZr1f0uFx+bubmSKI/5td6zSZA uma+Sxa2su841l/l6RC/IZ8A+eiVn50CIq7+uYyzn5H26xvpAhGt0FTd98/13H3U iSaVgO1h+Jl551nJRpa0qwKu24O84v4YU5/405x/7m2UxFMOf19jIqQ5roww/w8d RCc2CkhoC9uTj3qjSd5Af21DKX4/W8+OJnEDytH6F4B50j8mD9CiFU2TRTLnpjnc lzfUH6jXiRhzn56GKXXWo+fzUdtKSViDJmN2KglWQHYz0f4Vc3qKLhzvg560o89j -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:54 2026 by rpki-client