This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/QZ1nQEGPtuWi9XAcZCDjVZxeYlw.roa File: QZ1nQEGPtuWi9XAcZCDjVZxeYlw.roa (raw, json) Hash identifier: QW6eD5LudJ7sNotpMCDqrxlbZtx90rILczwwlFeS39g= Subject key identifier: 41:9D:67:40:41:8F:B6:E5:A2:F5:70:1C:64:20:E3:55:9C:5E:62:5C Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0 Certificate serial: 019B7E3747C0DDDB1DD45E6010C090B1F5CC Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/QZ1nQEGPtuWi9XAcZCDjVZxeYlw.roa Signing time: Fri 02 Jan 2026 10:18:30 +0000 ROA not before: Fri 02 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47132 IP address blocks: 185.227.90.0/24 maxlen: 24 185.236.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:47:c0:dd:db:1d:d4:5e:60:10:c0:90:b1:f5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0 Validity Not Before: Jan 2 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=419d6740418fb6e5a2f5701c6420e3559c5e625c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:e3:4f:1d:7a:3b:73:c6:b2:de:ab:6c:33: 95:21:af:52:dd:11:1c:17:ae:fa:2a:12:0b:d3:3e: 48:54:a5:48:36:9c:e4:d7:77:0d:be:01:4c:43:a9: 5b:a8:80:dc:60:e2:8c:cb:03:e4:24:d9:c2:19:4b: 8d:9b:ec:a7:72:68:f2:34:93:1c:9c:30:33:89:b8: 6b:46:08:29:0a:66:b8:7e:21:91:d6:8c:1c:2c:75: 36:e4:65:0b:e9:9a:63:4e:e6:81:4f:e1:82:27:a2: cc:06:bb:ed:13:32:73:92:89:a5:e4:a8:30:88:74: d7:ec:43:c4:c5:f2:69:b0:03:72:94:51:9d:64:da: 46:48:92:92:59:b7:96:bb:bf:3a:7f:e0:68:ec:47: 4e:0c:26:09:a1:39:35:4e:2d:0f:ba:b9:ed:ee:68: 96:3f:b9:76:1e:92:a5:70:fb:4e:59:e5:57:59:a5: 6e:85:d2:46:17:81:2f:b8:a5:27:81:ef:4a:3f:37: 82:b2:c2:36:35:e9:0d:32:0d:ec:39:b9:4b:23:88: eb:10:da:15:5e:c7:4c:66:f1:c4:ee:8f:cd:63:9e: 44:25:07:4a:38:92:cc:57:2a:52:a7:dd:cb:1f:04: ff:22:77:f3:99:54:ec:92:6f:b3:99:13:6e:ba:d6: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9D:67:40:41:8F:B6:E5:A2:F5:70:1C:64:20:E3:55:9C:5E:62:5C X509v3 Authority Key Identifier: keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/QZ1nQEGPtuWi9XAcZCDjVZxeYlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.90.0/24 185.236.167.0/24 Signature Algorithm: sha256WithRSAEncryption 85:ed:0a:41:86:68:b6:96:89:cb:2e:3c:21:86:16:4a:e4:e0: 07:7e:d2:22:77:9d:20:56:95:23:bc:0c:60:82:16:70:48:23: d0:88:35:5b:a9:b6:3b:d3:16:bf:db:a6:2c:7c:63:05:7c:45: 5a:e3:5d:19:ce:c3:00:95:27:c4:07:be:2c:49:e2:09:0f:e5: 30:f2:6e:a7:d7:c9:87:3b:2e:0d:26:e8:78:91:d5:17:23:6a: 9c:09:e8:81:99:74:fe:03:d8:5c:ff:56:26:01:ef:9f:62:84: 01:0a:f6:06:da:6e:5b:7f:06:0b:dd:1f:65:4d:7c:6d:a1:31: 49:e1:1d:bc:25:d7:d5:fc:23:c1:19:58:24:d9:f6:e0:42:23: 16:14:5d:60:03:23:99:ef:e1:f1:83:32:c1:c3:5c:de:f7:f1: 96:28:df:c5:4b:3a:db:04:92:da:43:95:0d:1c:ea:e7:13:cf: 59:95:fb:89:9f:37:2b:d6:11:33:60:bf:4b:20:f2:e0:53:bd: aa:d6:d8:64:7b:79:f9:29:f4:a0:79:1e:2b:d6:eb:7d:85:bf: 3f:a5:68:7f:51:94:a7:63:82:0c:ca:52:ed:c5:0f:2f:aa:7d: 05:e1:be:72:96:18:32:b9:58:d1:19:7a:2a:28:be:6a:c6:43: 39:0e:da:de -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N0fA3dsd1F5gEMCQsfXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDY0YmE5ZDI2Mzg1ZjU0ZGY2MjU0YWMyNDg5MjZkMzcw NDQ1YjAwHhcNMjYwMTAyMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTlkNjc0MDQxOGZiNmU1YTJmNTcwMWM2NDIwZTM1NTljNWU2MjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth7jTx16O3PGst6rbDOVIa9S3REc F676KhIL0z5IVKVINpzk13cNvgFMQ6lbqIDcYOKMywPkJNnCGUuNm+yncmjyNJMc nDAzibhrRggpCma4fiGR1owcLHU25GUL6ZpjTuaBT+GCJ6LMBrvtEzJzkoml5Kgw iHTX7EPExfJpsANylFGdZNpGSJKSWbeWu786f+Bo7EdODCYJoTk1Ti0Purnt7miW P7l2HpKlcPtOWeVXWaVuhdJGF4EvuKUnge9KPzeCssI2NekNMg3sOblLI4jrENoV XsdMZvHE7o/NY55EJQdKOJLMVypSp93LHwT/InfzmVTskm+zmRNuutb8hwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEGdZ0BBj7blovVwHGQg41WcXmJcMB8GA1UdIwQY MBaAFLxGS6nSY4X1TfYlSsJIkm03BEWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVaTHFkSmpoZlZOOWlWS3draVNiVGNFUmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQt ZDczZGM0YjQxY2UxLzEvUVoxblFFR1B0dVdpOVhBY1pDRGpWWnhlWWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQtZDczZGM0YjQxY2Ux LzEvdkVaTHFkSmpoZlZOOWlWS3draVNiVGNFUmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueNaAwQA ueynMA0GCSqGSIb3DQEBCwUAA4IBAQCF7QpBhmi2lonLLjwhhhZK5OAHftIid50g VpUjvAxgghZwSCPQiDVbqbY70xa/26YsfGMFfEVa410ZzsMAlSfEB74sSeIJD+Uw 8m6n18mHOy4NJuh4kdUXI2qcCeiBmXT+A9hc/1YmAe+fYoQBCvYG2m5bfwYL3R9l TXxtoTFJ4R28JdfV/CPBGVgk2fbgQiMWFF1gAyOZ7+HxgzLBw1ze9/GWKN/FSzrb BJLaQ5UNHOrnE89ZlfuJnzcr1hEzYL9LIPLgU72q1thke3n5KfSgeR4r1ut9hb8/ pWh/UZSnY4IMylLtxQ8vqn0F4b5ylhgyuVjRGXoqKL5qxkM5Dtre -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:13 2026 by rpki-client