This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/qMqM7n6f-KPTo3oe2dq3OGpBM4A.roa File: qMqM7n6f-KPTo3oe2dq3OGpBM4A.roa (raw, json) Hash identifier: not8eC9n1FQaCMdRnuKBK1UZKvUW8ljbh5d4usrwdB4= Subject key identifier: A8:CA:8C:EE:7E:9F:F8:A3:D3:A3:7A:1E:D9:DA:B7:38:6A:41:33:80 Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B36A3AB1A93FAF07D9D5C3AC4AC9263 Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/qMqM7n6f-KPTo3oe2dq3OGpBM4A.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400696 IP address blocks: 85.203.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a3:ab:1a:93:fa:f0:7d:9d:5c:3a:c4:ac:92:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8ca8cee7e9ff8a3d3a37a1ed9dab7386a413380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5a:f2:1e:6a:aa:26:8d:da:3d:de:71:31:27: 19:6c:c2:ab:44:6a:07:a1:30:5e:10:8c:43:c4:86: 2d:5e:a1:d6:5b:94:8c:f2:f6:bd:d2:af:b9:53:4e: ca:8c:84:aa:9f:20:61:15:89:22:4d:7f:13:61:5c: b9:d3:e8:e3:15:03:3e:08:a6:52:68:7b:f1:97:4e: 40:b0:1a:ef:cd:11:75:b7:16:3b:05:22:1c:c3:32: a5:c1:9c:d5:0a:08:bc:d2:31:c9:6c:e5:da:94:b5: eb:ae:80:2c:50:f7:9d:82:1f:f6:1f:bb:70:d4:45: 0a:04:86:d0:2e:2f:3d:58:f6:66:05:f4:3c:68:4c: c5:c5:a9:09:ad:40:fc:c6:b0:6c:58:79:d1:52:bb: 49:90:e5:0c:92:30:e8:d3:40:d4:06:46:f0:c8:42: 02:64:f9:df:e5:34:23:b5:46:35:3b:90:f1:6c:2b: 04:26:da:12:c7:91:7a:d1:1c:7b:67:6c:e3:aa:80: 2f:10:0e:79:69:02:63:d7:36:5c:f5:33:89:61:38: 82:5d:35:ee:2c:ea:70:b0:14:06:49:12:24:1b:ef: 42:16:95:91:1e:1e:ce:e6:0b:43:56:19:20:30:a7: 97:da:92:9d:6c:85:f9:df:71:12:4d:12:35:f6:e8: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CA:8C:EE:7E:9F:F8:A3:D3:A3:7A:1E:D9:DA:B7:38:6A:41:33:80 X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/qMqM7n6f-KPTo3oe2dq3OGpBM4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.19.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:a6:d7:4d:4f:80:26:f9:75:2a:1d:7f:f8:03:ea:9e:0f:e9: 4d:41:2b:dc:86:8d:f6:82:91:4b:ce:78:e0:b0:af:54:00:dd: dd:f8:bd:0c:5b:1f:99:51:2e:4d:96:2d:42:6b:58:8f:a7:1e: ad:ba:87:02:34:e1:e8:33:31:ff:b7:23:46:03:ac:fa:b5:8f: 35:15:1f:43:79:2a:95:d8:64:2d:1d:fd:bb:f8:b6:96:43:51: a9:4c:02:50:71:d3:b6:47:6e:a0:28:49:0d:ab:83:66:af:fd: cf:66:db:06:66:84:43:40:26:2c:83:c8:d4:00:a6:b9:8b:14: cd:f4:3d:1c:ae:14:be:6c:db:b2:1b:fd:7b:25:78:33:2d:43: 45:cb:49:53:b5:95:c3:79:76:e1:28:40:02:0b:6c:34:a5:3a: 71:f6:82:94:4b:3d:79:26:75:a7:d1:d3:c0:68:eb:a1:db:bf: 24:0b:38:97:4c:2c:b7:08:01:f4:59:ca:16:6e:f0:d7:e7:0b: b7:da:90:71:a2:fd:d8:6c:69:47:f7:30:26:d2:b9:90:12:8f: 45:60:6a:9e:cf:a9:9b:82:71:a5:51:04:4b:0c:f1:26:11:ef: 74:f4:83:0b:92:a5:d5:de:b9:aa:dc:0a:1f:17:c3:1b:24:45: f0:3e:b8:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqOrGpP68H2dXDrErJJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGNhOGNlZTdlOWZmOGEzZDNhMzdhMWVkOWRhYjczODZhNDEzMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FryHmqqJo3aPd5xMScZbMKrRGoH oTBeEIxDxIYtXqHWW5SM8va90q+5U07KjISqnyBhFYkiTX8TYVy50+jjFQM+CKZS aHvxl05AsBrvzRF1txY7BSIcwzKlwZzVCgi80jHJbOXalLXrroAsUPedgh/2H7tw 1EUKBIbQLi89WPZmBfQ8aEzFxakJrUD8xrBsWHnRUrtJkOUMkjDo00DUBkbwyEIC ZPnf5TQjtUY1O5DxbCsEJtoSx5F60Rx7Z2zjqoAvEA55aQJj1zZc9TOJYTiCXTXu LOpwsBQGSRIkG+9CFpWRHh7O5gtDVhkgMKeX2pKdbIX533ESTRI19ui7sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKjKjO5+n/ij06N6HtnatzhqQTOAMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvcU1xTTduNmYtS1BUbzNvZTJkcTNPR3BCTTRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcsTMA0G CSqGSIb3DQEBCwUAA4IBAQCfptdNT4Am+XUqHX/4A+qeD+lNQSvcho32gpFLznjg sK9UAN3d+L0MWx+ZUS5Nli1Ca1iPpx6tuocCNOHoMzH/tyNGA6z6tY81FR9DeSqV 2GQtHf27+LaWQ1GpTAJQcdO2R26gKEkNq4Nmr/3PZtsGZoRDQCYsg8jUAKa5ixTN 9D0crhS+bNuyG/17JXgzLUNFy0lTtZXDeXbhKEACC2w0pTpx9oKUSz15JnWn0dPA aOuh278kCziXTCy3CAH0WcoWbvDX5wu32pBxov3YbGlH9zAm0rmQEo9FYGqez6mb gnGlUQRLDPEmEe909IMLkqXV3rmq3AofF8MbJEXwPriX -----END CERTIFICATE-----Generated at Wed Jan 21 02:48:48 2026 by rpki-client