This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/qDecB_BWF1K9skoTX1OzF0T-DQQ.roa File: qDecB_BWF1K9skoTX1OzF0T-DQQ.roa (raw, json) Hash identifier: AAPazeOH0UyI2v6icXzRiwrdFOTR+zzuLsPnN6L+as4= Subject key identifier: A8:37:9C:07:F0:56:17:52:BD:B2:4A:13:5F:53:B3:17:44:FE:0D:04 Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee Certificate serial: 019B797ED707FE51F68407545AF6FDC17AC5 Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/qDecB_BWF1K9skoTX1OzF0T-DQQ.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.120.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d7:07:fe:51:f6:84:07:54:5a:f6:fd:c1:7a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8379c07f0561752bdb24a135f53b31744fe0d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:90:94:4b:cc:46:8d:94:8a:97:3d:0d:ce: d8:af:cb:74:90:18:7b:4a:19:5e:91:de:96:c7:12: 8b:ff:d5:36:1b:59:3e:40:c3:55:77:22:c0:22:41: 2a:ec:ce:2f:29:00:e3:1e:72:0b:8a:7a:af:77:6f: 81:64:5e:61:9c:af:0e:ab:e7:c1:15:00:fb:49:87: 22:3f:48:d0:1a:28:b7:dd:74:51:47:d5:cc:b2:ac: 66:c6:39:ce:45:be:fc:8b:90:5b:dd:8a:a2:ea:b7: 47:1b:b6:ae:7c:54:1c:30:5d:12:84:f7:2d:5e:a0: 70:9f:b0:a7:56:1f:95:4c:9e:1a:26:c7:d5:bf:2f: 64:77:81:61:bf:11:86:bc:de:d7:eb:4b:52:0d:8a: 77:84:47:f8:26:48:fe:00:e5:6c:a0:1b:39:d4:05: 76:b8:fe:93:c7:36:23:a0:6f:ca:5e:c9:7c:69:85: ee:10:f4:2a:2e:10:69:01:68:a8:cc:0d:88:9f:f2: e1:37:ed:c4:82:26:9c:25:aa:a7:d6:b1:e7:b9:18: 64:4b:b5:fa:8a:28:4d:68:3a:26:02:16:ac:8e:2a: 30:a8:c2:ed:83:58:f3:ee:6e:d6:89:47:b9:4a:cc: da:d7:04:83:63:d6:c4:1a:62:14:f6:f3:f3:87:58: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:37:9C:07:F0:56:17:52:BD:B2:4A:13:5F:53:B3:17:44:FE:0D:04 X509v3 Authority Key Identifier: keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/qDecB_BWF1K9skoTX1OzF0T-DQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.140.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:9f:35:4d:1d:02:c8:2e:41:dd:67:1f:f1:fe:73:d1:b1:22: fb:1f:ae:32:6e:b5:d0:b8:f2:20:2c:f1:dc:45:9b:86:cf:45: 39:a4:0c:6b:de:da:67:56:df:96:8a:ad:9e:e1:e6:9b:a5:2a: e3:24:05:eb:a3:f5:96:1a:31:7d:f7:f4:7c:21:60:9f:08:32: 97:07:a2:b7:02:7e:e9:bb:34:17:47:23:16:62:02:ed:91:93: a3:26:96:20:e1:13:ff:4b:8a:8b:6f:ac:57:5d:16:42:92:f3: e3:b5:c0:6a:78:f1:71:26:9b:d4:4f:4d:be:3d:fb:1e:bc:7d: a4:82:b2:e3:45:fe:a1:8c:b6:6a:d4:c9:58:7c:cf:20:3d:83: a4:f7:3d:f2:80:ff:bf:7f:a8:c4:78:11:c0:bd:9c:13:0d:28: d8:b4:83:4b:e4:f7:87:42:7a:f1:d2:e9:57:66:e0:7d:86:35: 24:c6:8b:a5:c6:5d:72:ad:ad:2c:19:50:2f:8e:b1:01:1c:95: a6:40:ed:a5:4a:20:c7:cf:37:34:44:9b:86:59:0c:64:41:a1: b9:41:ef:6b:ef:95:5a:f6:3b:ac:de:21:ee:43:db:50:19:48: e1:bb:8f:01:68:04:57:fa:43:4f:98:9e:ab:28:95:f0:df:27: 80:1e:aa:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftcH/lH2hAdUWvb9wXrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjdiMGMwZmU3YzA4OTM1ZTI1ODcxM2ZjZjkwZmU5NThl ZTAzZWUwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODM3OWMwN2YwNTYxNzUyYmRiMjRhMTM1ZjUzYjMxNzQ0ZmUwZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCSQlEvMRo2Uipc9Dc7Yr8t0kBh7 Shlekd6WxxKL/9U2G1k+QMNVdyLAIkEq7M4vKQDjHnILinqvd2+BZF5hnK8Oq+fB FQD7SYciP0jQGii33XRRR9XMsqxmxjnORb78i5Bb3Yqi6rdHG7aufFQcMF0ShPct XqBwn7CnVh+VTJ4aJsfVvy9kd4FhvxGGvN7X60tSDYp3hEf4Jkj+AOVsoBs51AV2 uP6TxzYjoG/KXsl8aYXuEPQqLhBpAWiozA2In/LhN+3EgiacJaqn1rHnuRhkS7X6 iihNaDomAhasjiowqMLtg1jz7m7WiUe5Ssza1wSDY9bEGmIU9vPzh1gfzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKg3nAfwVhdSvbJKE19TsxdE/g0EMB8GA1UdIwQY MBaAFEEnsMD+fAiTXiWHE/z5D+lY7gPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQt YmQxZDQ4ZDUxMmNlLzEvcURlY0JfQldGMUs5c2tvVFgxT3pGMFQtRFFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQtYmQxZDQ4ZDUxMmNl LzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXiMMA0G CSqGSIb3DQEBCwUAA4IBAQB6nzVNHQLILkHdZx/x/nPRsSL7H64ybrXQuPIgLPHc RZuGz0U5pAxr3tpnVt+Wiq2e4eabpSrjJAXro/WWGjF99/R8IWCfCDKXB6K3An7p uzQXRyMWYgLtkZOjJpYg4RP/S4qLb6xXXRZCkvPjtcBqePFxJpvUT02+PfsevH2k grLjRf6hjLZq1MlYfM8gPYOk9z3ygP+/f6jEeBHAvZwTDSjYtINL5PeHQnrx0ulX ZuB9hjUkxoulxl1yra0sGVAvjrEBHJWmQO2lSiDHzzc0RJuGWQxkQaG5Qe9r75Va 9jus3iHuQ9tQGUjhu48BaARX+kNPmJ6rKJXw3yeAHqpy -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:53 2026 by rpki-client