This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/qimpL4GnPOyoUuwHADETW2Ca-BA.roa File: qimpL4GnPOyoUuwHADETW2Ca-BA.roa (raw, json) Hash identifier: 1Q13z0RPNiBFNEdoqsP4b2RZwfD+sGSDYlp0PmV8cak= Subject key identifier: AA:29:A9:2F:81:A7:3C:EC:A8:52:EC:07:00:31:13:5B:60:9A:F8:10 Certificate issuer: /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe Certificate serial: 019B77C7312B321D02FC0210B1A8351D8769 Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/qimpL4GnPOyoUuwHADETW2Ca-BA.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205834 IP address blocks: 185.202.176.0/22 maxlen: 24 2a0e:c000::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:31:2b:32:1d:02:fc:02:10:b1:a8:35:1d:87:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa29a92f81a73ceca852ec070031135b609af810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:6b:44:67:09:60:2f:e3:14:d4:93:20:74: db:09:c5:54:36:b6:e7:64:74:be:5c:8c:ed:cf:93: 8b:b7:2f:b4:d7:1a:53:1d:e4:ad:2b:15:6a:1e:0a: 6b:78:b2:db:5a:2a:49:3c:ce:d9:da:81:d4:fb:12: e4:77:70:d3:f1:44:ce:f3:df:65:de:e2:6a:32:12: 83:62:2d:a0:24:79:0f:07:e1:89:3e:4f:5d:cd:81: a7:96:24:4f:da:95:0d:7a:7a:40:2e:57:b0:0b:44: d5:30:e8:9e:55:1a:e8:3d:1d:0a:e8:4f:8a:51:c7: aa:ef:ee:af:93:87:30:55:70:89:b9:bb:8d:7e:c7: 40:50:91:14:65:9c:f5:d5:11:3f:24:f9:0b:c1:11: ce:27:f5:28:a3:76:19:ce:ae:ab:2b:fb:7f:94:93: 4a:99:d8:2d:81:4f:c3:4c:be:01:03:c7:61:51:6f: 12:1a:35:3e:2d:33:00:c2:88:a9:30:69:d7:b7:1b: a2:d0:f0:2d:b3:de:e3:5d:e8:f0:ca:06:37:2c:07: ba:72:b5:5b:56:f4:9f:42:8b:0a:56:21:a4:56:e7: 58:f7:3f:ba:d8:f2:28:65:6c:0a:50:bc:35:a1:c2: 2f:78:1e:2e:e4:48:a8:91:36:6b:a0:4e:fe:cc:0a: f0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:A9:2F:81:A7:3C:EC:A8:52:EC:07:00:31:13:5B:60:9A:F8:10 X509v3 Authority Key Identifier: keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/qimpL4GnPOyoUuwHADETW2Ca-BA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.176.0/22 IPv6: 2a0e:c000::/29 Signature Algorithm: sha256WithRSAEncryption 50:e7:c2:de:28:68:41:6a:09:29:72:01:f4:6b:99:ee:e7:35: fd:49:f1:98:b2:9a:da:92:33:a8:14:ba:b1:85:35:29:a2:db: fe:eb:ef:94:b8:3b:21:91:39:52:db:b3:01:79:6e:0d:ca:9f: 14:14:4a:ec:d1:f9:7d:dd:8f:7a:04:72:35:ba:49:55:36:b2: 27:77:4a:f3:d1:bc:c8:a6:0b:88:86:60:9f:c9:0e:e2:35:d5: 09:7f:ae:8b:52:d7:1f:d8:3d:74:b2:fe:ac:d7:49:35:da:d9: 15:09:c1:ae:d2:8a:31:80:1b:3e:ad:47:4b:64:be:92:dd:2b: d6:f1:a2:33:1a:22:6e:58:36:88:57:ab:0a:86:d3:91:ff:a8: 8a:45:63:92:d9:e9:4c:4b:ae:32:d9:47:0a:e2:92:a0:f0:48: 79:42:37:58:6a:f0:fa:4a:a5:9c:14:37:42:cc:3f:13:32:5c: 9c:59:7f:87:0f:d6:2e:54:ca:4d:53:5d:c5:8a:dc:24:e5:da: 34:ae:d2:80:74:86:99:51:46:85:a6:4b:bc:c7:67:a4:eb:f0: 36:be:68:93:17:83:39:b5:c2:e5:a8:66:7a:e5:6f:15:19:91: 2f:80:57:31:ff:df:56:2c:69:0f:47:03:5c:dc:be:4b:c1:d2: 4c:c7:dd:e7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xzErMh0C/AIQsag1HYdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzE0NGVlMzJmZGQ3NTAxM2U3ZjFiOGMyZDgwN2QzZGFl ZDhiYmUwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTI5YTkyZjgxYTczY2VjYTg1MmVjMDcwMDMxMTM1YjYwOWFmODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLxrRGcJYC/jFNSTIHTbCcVUNrbn ZHS+XIztz5OLty+01xpTHeStKxVqHgpreLLbWipJPM7Z2oHU+xLkd3DT8UTO899l 3uJqMhKDYi2gJHkPB+GJPk9dzYGnliRP2pUNenpALlewC0TVMOieVRroPR0K6E+K Uceq7+6vk4cwVXCJubuNfsdAUJEUZZz11RE/JPkLwRHOJ/Uoo3YZzq6rK/t/lJNK mdgtgU/DTL4BA8dhUW8SGjU+LTMAwoipMGnXtxui0PAts97jXejwygY3LAe6crVb VvSfQosKViGkVudY9z+62PIoZWwKULw1ocIveB4u5EiokTZroE7+zArw3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKopqS+BpzzsqFLsBwAxE1tgmvgQMB8GA1UdIwQY MBaAFOLBRO4y/ddQE+fxuMLYB9Pa7Yu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNGRTdqTDkxMUFUNV9HNHd0Z0gwOXJ0aTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81OWUxNGUtNDE1Zi00MDFhLWFkY2Ut ZTFkZjQ1OTgwYzc4LzEvcWltcEw0R25QT3lvVXV3SEFERVRXMkNhLUJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC81OWUxNGUtNDE1Zi00MDFhLWFkY2UtZTFkZjQ1OTgwYzc4 LzEvNHNGRTdqTDkxMUFUNV9HNHd0Z0gwOXJ0aTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucqwMA0E AgACMAcDBQMqDsAAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ58LeKGhBagkpcgH0a5nu 5zX9SfGYsprakjOoFLqxhTUpotv+6++UuDshkTlS27MBeW4Nyp8UFErs0fl93Y96 BHI1uklVNrInd0rz0bzIpguIhmCfyQ7iNdUJf66LUtcf2D10sv6s10k12tkVCcGu 0ooxgBs+rUdLZL6S3SvW8aIzGiJuWDaIV6sKhtOR/6iKRWOS2elMS64y2UcK4pKg 8Eh5QjdYavD6SqWcFDdCzD8TMlycWX+HD9YuVMpNU13Fitwk5do0rtKAdIaZUUaF pku8x2ek6/A2vmiTF4M5tcLlqGZ65W8VGZEvgFcx/99WLGkPRwNc3L5LwdJMx93n -----END CERTIFICATE-----Generated at Tue Feb 10 04:13:59 2026 by rpki-client