This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/qK1qsq6SydRQsph0pcOe7ljWypU.roa File: qK1qsq6SydRQsph0pcOe7ljWypU.roa (raw, json) Hash identifier: GQsQePKWU4sUFb7047+SEDBy9k0n6p9UubN0V6aD1Oo= Subject key identifier: A8:AD:6A:B2:AE:92:C9:D4:50:B2:98:74:A5:C3:9E:EE:58:D6:CA:95 Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab Certificate serial: 019B7A59E9C82FAE4E412FDA7DDE0EB0C28D Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/qK1qsq6SydRQsph0pcOe7ljWypU.roa Signing time: Thu 01 Jan 2026 16:17:51 +0000 ROA not before: Thu 01 Jan 2026 16:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.92.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:e9:c8:2f:ae:4e:41:2f:da:7d:de:0e:b0:c2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab Validity Not Before: Jan 1 16:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8ad6ab2ae92c9d450b29874a5c39eee58d6ca95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:2b:c6:4a:6e:7f:a9:af:d9:a9:8a:b7:18: 9f:53:5c:32:4e:16:4c:6f:f5:6a:8d:4b:be:cc:02: 73:86:09:61:d9:ce:0c:1f:8d:04:f5:6e:b1:74:27: 4e:38:78:92:04:eb:bc:54:45:42:b7:ea:37:35:2f: f7:78:e0:30:55:83:aa:db:67:b7:eb:e7:5b:fe:47: 91:2e:8e:02:e7:6e:93:7c:0d:3b:10:64:89:ca:cf: df:e9:c0:c7:e3:2c:a8:ac:6b:ad:df:44:de:4e:e7: 55:9f:25:db:be:da:ff:80:ae:27:7b:b9:db:75:21: 32:c4:73:2e:ba:6c:a1:c0:37:ed:00:cf:fc:2a:a1: bc:e6:68:38:e0:71:43:ad:c5:e8:2a:88:51:fa:f6: 21:d0:57:d4:ac:4e:02:7a:ba:5f:a0:aa:45:77:b0: 02:8f:77:eb:32:8a:ef:fa:d2:c5:1c:c7:00:ec:79: 95:18:0d:4e:f7:f7:4d:04:a3:95:c8:6a:54:6b:7a: e8:92:34:86:66:a3:31:99:9f:9d:8d:90:5c:54:6f: 27:dd:34:03:d0:4c:99:ca:d8:9b:22:54:29:42:e9: 8c:36:43:42:30:bb:e1:da:fa:d0:37:77:c0:7d:27: 29:8c:41:23:1a:d9:fd:76:b7:2b:b5:78:54:7c:4f: cb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AD:6A:B2:AE:92:C9:D4:50:B2:98:74:A5:C3:9E:EE:58:D6:CA:95 X509v3 Authority Key Identifier: keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/qK1qsq6SydRQsph0pcOe7ljWypU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.208.0/24 Signature Algorithm: sha256WithRSAEncryption df:f5:ae:eb:ac:51:96:40:72:f2:d5:5e:29:b4:c3:6e:dc:1a: 8f:55:a2:6e:78:48:e5:ce:f4:c8:3f:61:e5:a8:ce:01:d1:93: e3:c0:cc:df:90:f2:47:59:84:eb:ca:1b:59:0a:8b:e1:1d:0f: 22:34:ab:b4:79:3d:4e:5f:fe:d1:8c:b7:70:3e:f9:ae:54:cf: 54:75:31:6b:37:7d:43:97:2c:09:f8:78:4c:90:61:07:83:df: 5f:57:39:47:80:b8:ce:f2:61:bb:a4:20:d0:3b:d0:88:da:4a: c0:99:bb:bf:ec:44:70:d6:c2:69:40:5c:ec:00:17:fa:a6:f6: 38:df:9c:0a:01:e2:c7:db:27:6a:9d:c6:b2:1d:20:88:5a:6d: ab:28:2c:95:0e:59:9d:0c:1e:b6:e8:08:e9:33:58:33:69:38: b3:48:f2:a9:bd:5b:a6:d8:d0:24:97:0b:85:18:ca:b7:39:0d: ce:50:3d:fe:38:f2:b3:6a:3b:5e:9a:ec:31:6a:a3:2e:5c:ef: 9b:d1:f1:3d:bb:56:24:8a:58:1d:4c:09:df:df:38:63:34:3c: 32:a0:04:f4:46:cb:5d:9b:64:06:23:a1:69:db:3b:2d:cb:4d: 66:f5:ca:07:c9:7e:e8:8a:18:ba:c0:2c:b8:1f:70:f8:35:14: 4e:ac:32:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WenIL65OQS/afd4OsMKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZmUyMzM5ZWJlMDk3ZmY2OThhYjMwZTViNjNlY2MyMWEy YTIzYWIwHhcNMjYwMTAxMTYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGFkNmFiMmFlOTJjOWQ0NTBiMjk4NzRhNWMzOWVlZTU4ZDZjYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Arxkpuf6mv2amKtxifU1wyThZM b/VqjUu+zAJzhglh2c4MH40E9W6xdCdOOHiSBOu8VEVCt+o3NS/3eOAwVYOq22e3 6+db/keRLo4C526TfA07EGSJys/f6cDH4yyorGut30TeTudVnyXbvtr/gK4ne7nb dSEyxHMuumyhwDftAM/8KqG85mg44HFDrcXoKohR+vYh0FfUrE4CerpfoKpFd7AC j3frMorv+tLFHMcA7HmVGA1O9/dNBKOVyGpUa3rokjSGZqMxmZ+djZBcVG8n3TQD 0EyZytibIlQpQumMNkNCMLvh2vrQN3fAfScpjEEjGtn9drcrtXhUfE/L+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKitarKuksnUULKYdKXDnu5Y1sqVMB8GA1UdIwQY MBaAFGj+Iznr4Jf/aYqzDltj7MIaKiOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVA0ak9ldmdsXzlwaXJNT1cyUHN3aG9xSTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lN2UwZDgtY2YyYi00ZTE1LWFmMjct ZWVhOGFmMTQzNGQ5LzEvcUsxcXNxNlN5ZFJRc3BoMHBjT2U3bGpXeXBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lN2UwZDgtY2YyYi00ZTE1LWFmMjctZWVhOGFmMTQzNGQ5 LzEvYVA0ak9ldmdsXzlwaXJNT1cyUHN3aG9xSTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVzQMA0G CSqGSIb3DQEBCwUAA4IBAQDf9a7rrFGWQHLy1V4ptMNu3BqPVaJueEjlzvTIP2Hl qM4B0ZPjwMzfkPJHWYTryhtZCovhHQ8iNKu0eT1OX/7RjLdwPvmuVM9UdTFrN31D lywJ+HhMkGEHg99fVzlHgLjO8mG7pCDQO9CI2krAmbu/7ERw1sJpQFzsABf6pvY4 35wKAeLH2ydqncayHSCIWm2rKCyVDlmdDB626AjpM1gzaTizSPKpvVum2NAklwuF GMq3OQ3OUD3+OPKzajtemuwxaqMuXO+b0fE9u1YkilgdTAnf3zhjNDwyoAT0Rstd m2QGI6Fp2zsty01m9coHyX7oihi6wCy4H3D4NRROrDKy -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:47 2026 by rpki-client