This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/qKzL_ME8UuHWQc0CLPTCLEEBp0E.roa File: qKzL_ME8UuHWQc0CLPTCLEEBp0E.roa (raw, json) Hash identifier: Nj/emuAe0XidzndkLYnMG2PIERjSJH89bACx94cpGMg= Subject key identifier: A8:AC:CB:FC:C1:3C:52:E1:D6:41:CD:02:2C:F4:C2:2C:41:01:A7:41 Certificate issuer: /CN=90b3a3a0d662d14da8404bd21dc489e63945624e Certificate serial: 019B7EA639652A0DA57598A508FD28B8DA48 Authority key identifier: 90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/qKzL_ME8UuHWQc0CLPTCLEEBp0E.roa Signing time: Fri 02 Jan 2026 12:19:41 +0000 ROA not before: Fri 02 Jan 2026 12:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205704 IP address blocks: 185.200.148.0/23 maxlen: 23 185.200.148.0/24 maxlen: 24 185.200.149.0/24 maxlen: 24 185.200.150.0/23 maxlen: 23 185.200.150.0/24 maxlen: 24 185.200.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:39:65:2a:0d:a5:75:98:a5:08:fd:28:b8:da:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b3a3a0d662d14da8404bd21dc489e63945624e Validity Not Before: Jan 2 12:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8accbfcc13c52e1d641cd022cf4c22c4101a741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:6f:9d:3d:22:bd:6d:c7:5c:6f:b9:b1:2e: 50:be:48:e3:d8:a6:de:b4:a0:42:c1:31:08:91:a7: e6:e5:98:b5:be:1c:ed:0b:ed:d1:c8:35:7a:3d:c1: e2:89:a2:da:78:4f:5a:51:eb:0b:f0:99:3b:38:29: a1:ef:0c:24:37:30:b4:44:58:21:b5:c6:9a:7f:6b: 23:a1:b0:90:0a:db:18:3b:d9:e3:93:99:39:f7:af: f0:9d:6a:99:92:fa:9e:38:20:e5:7d:85:59:21:da: 7f:cd:7f:3c:c0:0b:36:34:f0:d5:e2:3f:b7:b5:c0: 03:bf:3e:8d:d9:f5:60:5c:50:ff:f9:17:cd:e3:ad: b7:b8:eb:61:d1:98:24:41:43:92:73:6e:2a:d5:f4: 3f:c1:02:85:da:a7:85:c7:98:37:62:1b:6a:4e:d3: 21:d3:fc:30:22:37:47:6c:34:c1:4b:5a:aa:0f:f8: e8:7f:3f:7e:40:1e:04:61:93:7b:83:d5:f3:ec:ef: 45:c9:45:78:3b:b8:53:0d:c2:12:af:84:ed:3d:bc: ce:7b:3c:c2:b7:44:e3:b0:05:c5:ac:12:7e:18:cc: 39:57:1e:ae:10:15:a0:97:8d:5b:d6:8b:5d:ea:5d: ad:33:1c:43:51:a4:9c:14:62:4e:c0:4f:18:07:21: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AC:CB:FC:C1:3C:52:E1:D6:41:CD:02:2C:F4:C2:2C:41:01:A7:41 X509v3 Authority Key Identifier: keyid:90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/qKzL_ME8UuHWQc0CLPTCLEEBp0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.148.0/22 Signature Algorithm: sha256WithRSAEncryption 31:c4:fe:22:24:19:93:6f:05:9f:65:79:9a:0f:c9:12:f2:c7: 97:be:d6:b8:ae:d0:3e:57:44:2e:2a:0a:41:75:72:09:c9:99: 60:c5:63:67:72:5d:7e:79:44:cc:a6:ed:bb:6f:94:22:a2:84: a9:89:69:5d:8e:f0:a2:65:9d:80:4e:8c:4c:0d:75:12:d8:9d: 0a:d1:d4:3f:94:d4:8a:d1:35:6c:48:86:8d:07:29:f2:88:bb: c9:37:f9:e2:98:b6:8c:76:65:3f:2f:4d:69:f0:37:e3:4e:31: 20:e3:23:ab:67:22:c7:c0:8a:cd:f4:64:8a:77:0d:38:4a:f7: d2:ca:d5:d2:09:ab:dd:39:6e:e5:a8:7f:71:07:b5:9d:12:6c: f8:e6:e5:40:9a:4d:ed:72:67:1f:a6:c9:17:2f:23:52:df:13: 0d:29:f2:33:5d:45:1f:78:5c:dc:a9:f7:88:5f:b0:a0:f8:71: d2:b4:37:98:81:45:fd:3d:25:4c:65:fc:17:e4:f9:a6:5a:0a: 97:3a:13:7e:23:fc:6d:9d:79:7b:66:fd:15:47:d3:e4:94:dd: ed:6f:db:e0:ea:03:36:ea:5b:9b:d2:57:54:fa:b4:de:1b:6d: 60:92:74:43:ef:a0:04:5b:9b:74:af:ca:01:a9:fc:3e:56:8d: 2a:0a:5d:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pjllKg2ldZilCP0ouNpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYjNhM2EwZDY2MmQxNGRhODQwNGJkMjFkYzQ4OWU2Mzk0 NTYyNGUwHhcNMjYwMTAyMTIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGFjY2JmY2MxM2M1MmUxZDY0MWNkMDIyY2Y0YzIyYzQxMDFhNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrFvnT0ivW3HXG+5sS5Qvkjj2Kbe tKBCwTEIkafm5Zi1vhztC+3RyDV6PcHiiaLaeE9aUesL8Jk7OCmh7wwkNzC0RFgh tcaaf2sjobCQCtsYO9njk5k596/wnWqZkvqeOCDlfYVZIdp/zX88wAs2NPDV4j+3 tcADvz6N2fVgXFD/+RfN4623uOth0ZgkQUOSc24q1fQ/wQKF2qeFx5g3YhtqTtMh 0/wwIjdHbDTBS1qqD/jofz9+QB4EYZN7g9Xz7O9FyUV4O7hTDcISr4TtPbzOezzC t0TjsAXFrBJ+GMw5Vx6uEBWgl41b1otd6l2tMxxDUaScFGJOwE8YByFayQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKisy/zBPFLh1kHNAiz0wixBAadBMB8GA1UdIwQY MBaAFJCzo6DWYtFNqEBL0h3EieY5RWJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0xPam9OWmkwVTJvUUV2U0hjU0o1amxGWWs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83ZmI0ZWEtNWJiYy00YzhjLThiNWQt Mjg4Y2ZkMWMyYTNkLzEvcUt6TF9NRThVdUhXUWMwQ0xQVENMRUVCcDBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83ZmI0ZWEtNWJiYy00YzhjLThiNWQtMjg4Y2ZkMWMyYTNk LzEva0xPam9OWmkwVTJvUUV2U0hjU0o1amxGWWs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuciUMA0G CSqGSIb3DQEBCwUAA4IBAQAxxP4iJBmTbwWfZXmaD8kS8seXvta4rtA+V0QuKgpB dXIJyZlgxWNncl1+eUTMpu27b5QiooSpiWldjvCiZZ2AToxMDXUS2J0K0dQ/lNSK 0TVsSIaNBynyiLvJN/nimLaMdmU/L01p8DfjTjEg4yOrZyLHwIrN9GSKdw04SvfS ytXSCavdOW7lqH9xB7WdEmz45uVAmk3tcmcfpskXLyNS3xMNKfIzXUUfeFzcqfeI X7Cg+HHStDeYgUX9PSVMZfwX5PmmWgqXOhN+I/xtnXl7Zv0VR9PklN3tb9vg6gM2 6lub0ldU+rTeG21gknRD76AEW5t0r8oBqfw+Vo0qCl1X -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:13 2026 by rpki-client