This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/QLNnaM3mDrJY5OzuKKR1lA5zTOg.roa File: QLNnaM3mDrJY5OzuKKR1lA5zTOg.roa (raw, json) Hash identifier: eKp6GN6lOfR9UrD6nqU3foj29LSJ6HMnSsJ3VnYQEiM= Subject key identifier: 40:B3:67:68:CD:E6:0E:B2:58:E4:EC:EE:28:A4:75:94:0E:73:4C:E8 Certificate issuer: /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6 Certificate serial: 019B77592A6E3618AA4DA55031E04CCFAF7D Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/QLNnaM3mDrJY5OzuKKR1lA5zTOg.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200695 IP address blocks: 185.98.232.0/22 maxlen: 22 185.98.232.0/23 maxlen: 23 185.98.232.0/24 maxlen: 24 185.98.233.0/24 maxlen: 24 185.98.234.0/23 maxlen: 23 185.98.234.0/24 maxlen: 24 185.98.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2a:6e:36:18:aa:4d:a5:50:31:e0:4c:cf:af:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6 Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40b36768cde60eb258e4ecee28a475940e734ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:34:c4:d0:ed:7e:ed:7d:62:7b:5c:69:29: 69:52:9a:2f:e8:3b:fb:9e:2d:ea:db:2b:07:93:65: 8e:50:89:68:ab:22:bb:07:ba:fa:ac:49:31:eb:94: 09:21:d3:6b:3c:16:3a:64:24:b4:55:57:9c:e2:06: 1b:d8:c7:ce:22:a3:e9:ac:4d:62:02:fe:af:0a:aa: 13:a4:9c:d1:48:9c:d2:cf:7e:01:f2:05:ca:84:a1: 97:82:79:d5:5c:b4:3e:30:20:2a:b0:7d:47:41:5d: 03:dc:9d:21:0b:84:e1:67:d1:af:d4:e7:34:c2:0c: ac:43:19:6f:f8:4a:1f:57:e3:c3:10:6f:fe:b3:f8: 01:5f:6c:a8:91:85:a2:71:1e:9e:81:e1:84:fe:17: 21:cb:16:e5:a4:72:1a:55:e4:04:ad:68:fa:71:5b: d8:d2:cc:f4:3d:40:c5:4b:c0:ca:b6:17:36:b2:cd: 7c:d8:48:df:69:ed:f9:04:b5:0c:32:87:03:eb:b1: 00:12:bf:4a:ce:4d:b5:0a:29:d1:86:dd:3a:72:1f: 99:41:10:d8:47:de:b8:36:4c:be:ea:c4:b0:32:cd: 25:c9:52:6e:92:e7:c4:bc:6a:64:f9:b1:62:b1:a7: 1c:6c:93:3e:70:9d:06:e6:d5:ca:75:95:cc:bb:50: 82:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B3:67:68:CD:E6:0E:B2:58:E4:EC:EE:28:A4:75:94:0E:73:4C:E8 X509v3 Authority Key Identifier: keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/QLNnaM3mDrJY5OzuKKR1lA5zTOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.232.0/22 Signature Algorithm: sha256WithRSAEncryption 76:34:fe:0f:0f:65:a0:01:5c:06:51:9a:92:8b:58:7e:f1:17: d2:60:75:20:e9:62:f1:dc:7f:b9:cd:a3:52:68:95:72:86:19: b7:99:c8:53:2f:e6:02:21:df:70:ac:46:3f:fa:c0:d2:b1:37: 2a:b0:62:87:60:ee:ca:30:cf:fb:7a:cc:00:5e:5d:97:a1:5d: 9c:31:1b:7f:bd:65:06:6b:2c:c5:fd:4c:75:c4:35:ee:30:51: 4d:4a:70:50:9a:70:12:5f:c4:28:4f:2f:2f:fc:80:62:d7:16: dd:31:10:a2:4f:c7:44:99:51:3e:7e:c4:55:22:7c:88:5f:d8: d1:80:95:f3:cd:26:fe:28:5e:2c:a6:04:d4:53:d2:74:9e:a6: 53:72:22:df:e4:88:6c:83:4d:a0:23:95:d0:17:9f:07:82:e4: 3e:f6:f6:62:20:86:c6:20:92:d8:1d:85:fd:3e:1c:15:40:f9: b4:36:f4:b4:30:60:ef:ea:39:2d:47:08:10:8c:57:55:b5:d2: 85:9f:4e:57:fd:a6:09:b0:0a:bd:f8:e1:cc:54:29:6f:3f:81: 7b:63:65:83:ba:07:ff:f4:ec:a1:43:b7:9a:32:10:26:95:c2: af:11:76:c1:8a:41:f9:03:d4:d1:ef:3f:9e:e7:be:15:d2:4c: 9f:a0:6d:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSpuNhiqTaVQMeBMz699MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MmNjNGUzZjExYTBmNWVlN2M1NmY2N2NlMDk5NjAxYTRj ZmJiYjYwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGIzNjc2OGNkZTYwZWIyNThlNGVjZWUyOGE0NzU5NDBlNzM0Y2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZU0xNDtfu19YntcaSlpUpov6Dv7 ni3q2ysHk2WOUIloqyK7B7r6rEkx65QJIdNrPBY6ZCS0VVec4gYb2MfOIqPprE1i Av6vCqoTpJzRSJzSz34B8gXKhKGXgnnVXLQ+MCAqsH1HQV0D3J0hC4ThZ9Gv1Oc0 wgysQxlv+EofV+PDEG/+s/gBX2yokYWicR6egeGE/hchyxblpHIaVeQErWj6cVvY 0sz0PUDFS8DKthc2ss182Ejfae35BLUMMocD67EAEr9Kzk21CinRht06ch+ZQRDY R964Nky+6sSwMs0lyVJukufEvGpk+bFisaccbJM+cJ0G5tXKdZXMu1CCfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFECzZ2jN5g6yWOTs7iikdZQOc0zoMB8GA1UdIwQY MBaAFAksxOPxGg9e58VvZ84JlgGkz7u2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1N6RTRfRWFEMTdueFc5bnpnbVdBYVRQdTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hYzdmYTMtZGJlOC00OTNiLWI4YTct M2JlMDMxM2VjNTkwLzEvUUxObmFNM21EckpZNU96dUtLUjFsQTV6VE9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hYzdmYTMtZGJlOC00OTNiLWI4YTctM2JlMDMxM2VjNTkw LzEvQ1N6RTRfRWFEMTdueFc5bnpnbVdBYVRQdTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWLoMA0G CSqGSIb3DQEBCwUAA4IBAQB2NP4PD2WgAVwGUZqSi1h+8RfSYHUg6WLx3H+5zaNS aJVyhhm3mchTL+YCId9wrEY/+sDSsTcqsGKHYO7KMM/7eswAXl2XoV2cMRt/vWUG ayzF/Ux1xDXuMFFNSnBQmnASX8QoTy8v/IBi1xbdMRCiT8dEmVE+fsRVInyIX9jR gJXzzSb+KF4spgTUU9J0nqZTciLf5Ihsg02gI5XQF58HguQ+9vZiIIbGIJLYHYX9 PhwVQPm0NvS0MGDv6jktRwgQjFdVtdKFn05X/aYJsAq9+OHMVClvP4F7Y2WDugf/ 9OyhQ7eaMhAmlcKvEXbBikH5A9TR7z+e574V0kyfoG2s -----END CERTIFICATE-----Generated at Tue Feb 10 07:29:48 2026 by rpki-client