This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Q1cIxRkGly1GF2hc9mnjGBYP5qA.roa File: Q1cIxRkGly1GF2hc9mnjGBYP5qA.roa (raw, json) Hash identifier: AeO2mPF3zltuXVVKNaQgNNyQq8sxigRkXL0aEpGEp7I= Subject key identifier: 43:57:08:C5:19:06:97:2D:46:17:68:5C:F6:69:E3:18:16:0F:E6:A0 Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019BF49392629404C495333829ABEB886F6C Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Q1cIxRkGly1GF2hc9mnjGBYP5qA.roa Signing time: Sun 25 Jan 2026 09:54:30 +0000 ROA not before: Sun 25 Jan 2026 09:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 185.248.169.0/24 maxlen: 24 185.248.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:93:92:62:94:04:c4:95:33:38:29:ab:eb:88:6f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 25 09:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=435708c51906972d4617685cf669e318160fe6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:3a:14:7d:6a:38:00:88:d7:5f:cf:c1:d8: 80:5d:80:9a:49:8f:61:74:fe:34:91:13:6e:c5:da: 76:85:e9:ef:bb:9a:1a:90:60:b9:60:b4:93:26:f4: 07:3d:ad:69:9e:2e:b5:9b:14:0c:68:4a:eb:37:bd: fe:e7:cf:81:38:b1:bc:a8:c3:96:84:f5:0a:a0:18: e9:1c:9d:4a:c8:89:aa:bc:8d:35:7f:7e:4e:76:44: 8f:f5:75:d7:77:72:56:99:70:43:56:da:04:b0:48: db:8e:73:6d:8d:e6:db:7b:28:cf:e6:70:38:a1:63: 1c:9b:57:e7:d0:ce:91:62:6f:7b:04:ca:2f:16:b9: 8d:47:ad:50:2f:07:33:9b:9a:72:8d:e6:74:da:80: c4:75:93:36:69:c1:fd:89:c8:bf:7c:a3:0a:6d:92: 4f:c1:87:e3:5b:ca:f1:7f:32:70:67:a4:87:4a:89: b5:42:17:a4:b3:8a:3c:c9:2d:34:7c:d1:32:54:a7: f1:40:4e:99:34:fc:8c:9d:bf:1e:2b:ca:e6:4f:66: 7c:76:29:52:06:2c:63:7e:0f:36:43:c5:fa:86:4b: 96:ca:9a:c0:ea:77:a3:c4:54:c8:ec:16:15:61:38: 00:07:b3:cb:9e:57:41:cd:df:f2:5f:6c:a5:5f:a4: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:57:08:C5:19:06:97:2D:46:17:68:5C:F6:69:E3:18:16:0F:E6:A0 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Q1cIxRkGly1GF2hc9mnjGBYP5qA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.169.0-185.248.170.255 Signature Algorithm: sha256WithRSAEncryption 82:c6:4e:45:fd:11:21:5a:bb:d2:43:a4:c5:c0:5a:69:50:51: 1b:07:6a:d0:6a:9b:3a:aa:be:45:02:0e:4e:6f:2d:e2:51:ec: 3d:49:4e:fa:96:53:a8:55:14:cb:0b:a8:07:a9:4b:1d:78:33: 6e:09:f7:38:01:98:a3:eb:48:24:0e:5a:39:5a:9c:6a:4f:db: 7a:21:17:3a:7e:ee:69:a7:9d:d4:1e:9d:00:3e:d8:09:52:38: 86:e7:84:61:9a:43:f6:f0:ca:25:f6:13:56:2a:af:14:7f:56: fd:ed:25:ce:cf:b1:65:eb:b0:8b:f7:06:74:ec:1b:58:34:6f: 46:95:84:17:b0:df:80:1c:3c:a9:44:e9:0c:d8:46:72:30:ea: 92:54:80:31:7d:9d:20:46:9c:81:06:d5:0f:79:9b:36:5f:49: 2e:4f:08:2d:79:c7:3c:80:b0:65:ad:e4:70:00:16:bc:b9:96: d0:96:7e:d9:47:c9:e3:bc:25:bd:76:42:9a:0c:69:37:dd:60: 72:aa:76:6e:97:2f:2c:75:90:da:9a:cf:af:df:62:ee:17:6d: 62:bb:a8:11:07:5e:85:34:bb:50:24:8a:b9:ef:a9:17:51:4c: 41:2f:2e:7e:ae:1a:3a:c4:f0:ef:42:9d:f8:97:f1:27:b6:97: 61:d7:32:5e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZv0k5JilATElTM4KavriG9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTI1MDk1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzU3MDhjNTE5MDY5NzJkNDYxNzY4NWNmNjY5ZTMxODE2MGZlNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMk6FH1qOACI11/PwdiAXYCaSY9h dP40kRNuxdp2henvu5oakGC5YLSTJvQHPa1pni61mxQMaErrN73+58+BOLG8qMOW hPUKoBjpHJ1KyImqvI01f35OdkSP9XXXd3JWmXBDVtoEsEjbjnNtjebbeyjP5nA4 oWMcm1fn0M6RYm97BMovFrmNR61QLwczm5pyjeZ02oDEdZM2acH9ici/fKMKbZJP wYfjW8rxfzJwZ6SHSom1Qheks4o8yS00fNEyVKfxQE6ZNPyMnb8eK8rmT2Z8dilS Bixjfg82Q8X6hkuWyprA6nejxFTI7BYVYTgAB7PLnldBzd/yX2ylX6RI4QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFENXCMUZBpctRhdoXPZp4xgWD+agMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvUTFjSXhSa0dseTFHRjJoYzltbmpHQllQNXFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5+KkD BAC5+KowDQYJKoZIhvcNAQELBQADggEBAILGTkX9ESFau9JDpMXAWmlQURsHatBq mzqqvkUCDk5vLeJR7D1JTvqWU6hVFMsLqAepSx14M24J9zgBmKPrSCQOWjlanGpP 23ohFzp+7mmnndQenQA+2AlSOIbnhGGaQ/bwyiX2E1YqrxR/Vv3tJc7PsWXrsIv3 BnTsG1g0b0aVhBew34AcPKlE6QzYRnIw6pJUgDF9nSBGnIEG1Q95mzZfSS5PCC15 xzyAsGWt5HAAFry5ltCWftlHyeO8Jb12QpoMaTfdYHKqdm6XLyx1kNqaz6/fYu4X bWK7qBEHXoU0u1AkirnvqRdRTEEvLn6uGjrE8O9CnfiX8Se2l2HXMl4= -----END CERTIFICATE-----Generated at Mon Jan 26 23:23:17 2026 by rpki-client