This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/qdXzckccTNRBLeVgvgBV-qMZrj0.roa File: qdXzckccTNRBLeVgvgBV-qMZrj0.roa (raw, json) Hash identifier: 3pjw8O0uhsqIQNn1FT30jie8vZXZn3/jYkrEa74ywGI= Subject key identifier: A9:D5:F3:72:47:1C:4C:D4:41:2D:E5:60:BE:00:55:FA:A3:19:AE:3D Certificate issuer: /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af Certificate serial: 019B7E37852A394382B9E05F9CA00C5EB686 Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/qdXzckccTNRBLeVgvgBV-qMZrj0.roa Signing time: Fri 02 Jan 2026 10:18:46 +0000 ROA not before: Fri 02 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44330 IP address blocks: 185.214.92.0/24 maxlen: 24 185.214.93.0/24 maxlen: 24 2a0b:9ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:85:2a:39:43:82:b9:e0:5f:9c:a0:0c:5e:b6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af Validity Not Before: Jan 2 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9d5f372471c4cd4412de560be0055faa319ae3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0f:f4:2b:c3:f9:9d:9a:9b:00:47:c2:01:0a: ec:d0:9c:a6:e5:8d:a6:6e:28:41:ad:17:6a:76:5e: 80:71:b4:02:61:77:f2:13:34:c8:97:f0:26:cb:77: 15:cb:ab:d4:7d:de:af:33:a4:e2:f6:58:21:ee:92: 31:74:06:90:22:85:c4:cb:76:84:98:06:61:f5:de: b0:43:4b:d6:6e:f1:f8:b9:9e:8c:c0:b7:00:da:2e: a9:0d:5e:73:ba:24:4b:23:1d:06:72:89:b2:f6:fb: 5e:50:19:d2:b0:f4:39:79:bb:f0:2c:1c:3b:9d:cf: 90:6a:53:b6:32:e2:cf:9d:8d:f2:cf:98:85:96:08: 57:31:2a:c4:d5:10:af:06:14:28:c7:50:0a:5f:c7: 94:c7:4a:61:6e:f5:a6:43:f4:c4:93:75:85:a0:04: 02:31:62:1b:2d:f3:31:7a:1b:b1:8c:15:54:ec:58: 35:da:9d:1b:73:e9:00:7f:4e:3b:af:93:7d:ed:81: 5e:3a:f0:69:96:29:e8:79:d2:12:f1:91:f7:89:fb: 01:3e:69:e4:20:34:75:25:16:fa:3d:a6:02:18:2b: 2c:e0:a0:6b:15:0e:bf:71:7d:4d:5d:87:b7:94:37: ac:39:5e:57:a6:e7:28:92:0e:12:7e:c2:af:23:41: f4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D5:F3:72:47:1C:4C:D4:41:2D:E5:60:BE:00:55:FA:A3:19:AE:3D X509v3 Authority Key Identifier: keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/qdXzckccTNRBLeVgvgBV-qMZrj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.92.0/23 IPv6: 2a0b:9ec0::/32 Signature Algorithm: sha256WithRSAEncryption c6:85:7e:29:58:1e:a2:2d:7e:f7:a1:60:a7:b2:c7:4d:df:bc: 65:73:1d:18:b0:03:bd:4b:0d:ac:a8:d2:77:a8:06:c6:51:b6: 6e:86:81:c8:ee:8d:68:43:8a:49:a4:3d:4c:43:7a:94:4d:ae: 33:9f:a8:e7:99:3a:93:78:4b:aa:7c:f2:49:fa:ec:fc:96:c2: f8:c0:c8:c5:9a:ce:09:34:52:52:96:b8:d1:89:7d:87:a9:62: 0d:aa:fd:25:a2:51:35:6b:0b:19:fb:53:8b:e9:2c:22:2b:af: c7:c9:68:30:93:b3:4d:cf:f0:a4:e8:db:08:8a:56:81:1e:66: b6:94:dc:9f:cc:a7:a1:27:2f:8b:e9:74:9a:ce:4d:5d:9a:36: a6:c9:75:e4:c3:d2:05:94:94:56:d7:87:29:2d:5f:e9:e6:db: f0:89:5b:50:6b:79:d6:1e:82:8c:a2:86:5a:25:70:32:5a:b2: 98:bf:50:6c:a8:ba:ef:82:b7:03:16:6a:8a:5e:4f:26:cb:a0: a9:6d:07:b8:4e:8d:c8:7f:cd:d6:bd:9d:d2:91:2b:b1:19:fd: 93:bc:3c:60:56:a4:54:58:f8:ec:8e:b9:22:bf:75:29:b0:37: 31:66:55:02:59:33:b5:88:03:9b:36:3b:6c:78:55:4f:cc:6d: 6b:2a:7f:4f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N4UqOUOCueBfnKAMXraGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzM2U1NTQ3YWViYzE3YTQ4MmI4Y2QxZWU4MTdkZDhjZWZm NmEzYWYwHhcNMjYwMTAyMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWQ1ZjM3MjQ3MWM0Y2Q0NDEyZGU1NjBiZTAwNTVmYWEzMTlhZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow/0K8P5nZqbAEfCAQrs0Jym5Y2m bihBrRdqdl6AcbQCYXfyEzTIl/Amy3cVy6vUfd6vM6Ti9lgh7pIxdAaQIoXEy3aE mAZh9d6wQ0vWbvH4uZ6MwLcA2i6pDV5zuiRLIx0Gcomy9vteUBnSsPQ5ebvwLBw7 nc+QalO2MuLPnY3yz5iFlghXMSrE1RCvBhQox1AKX8eUx0phbvWmQ/TEk3WFoAQC MWIbLfMxehuxjBVU7Fg12p0bc+kAf047r5N97YFeOvBplinoedIS8ZH3ifsBPmnk IDR1JRb6PaYCGCss4KBrFQ6/cX1NXYe3lDesOV5Xpucokg4SfsKvI0H0aQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKnV83JHHEzUQS3lYL4AVfqjGa49MB8GA1UdIwQY MBaAFOM+VUeuvBekgrjNHugX3Yzv9qOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHo1VlI2NjhGNlNDdU0wZTZCZmRqT18ybzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zOWE0N2YtMWJmZC00NDBlLWI0ZWYt YjA3MDFiOGI0MGM3LzEvcWRYemNrY2NUTlJCTGVWZ3ZnQlYtcU1acmowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zOWE0N2YtMWJmZC00NDBlLWI0ZWYtYjA3MDFiOGI0MGM3 LzEvNHo1VlI2NjhGNlNDdU0wZTZCZmRqT18ybzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBudZcMA0E AgACMAcDBQAqC57AMA0GCSqGSIb3DQEBCwUAA4IBAQDGhX4pWB6iLX73oWCnssdN 37xlcx0YsAO9Sw2sqNJ3qAbGUbZuhoHI7o1oQ4pJpD1MQ3qUTa4zn6jnmTqTeEuq fPJJ+uz8lsL4wMjFms4JNFJSlrjRiX2HqWINqv0lolE1awsZ+1OL6SwiK6/HyWgw k7NNz/Ck6NsIilaBHma2lNyfzKehJy+L6XSazk1dmjamyXXkw9IFlJRW14cpLV/p 5tvwiVtQa3nWHoKMooZaJXAyWrKYv1BsqLrvgrcDFmqKXk8my6CpbQe4To3If83W vZ3SkSuxGf2TvDxgVqRUWPjsjrkiv3UpsDcxZlUCWTO1iAObNjtseFVPzG1rKn9P -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:35 2026 by rpki-client