This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/QDfZ7AwR1vnl2odXIs1lbLCmIvk.roa File: QDfZ7AwR1vnl2odXIs1lbLCmIvk.roa (raw, json) Hash identifier: 4519qprAup/lJdXUWIchgD8pBdPIWBPEB8cWp+wWY0k= Subject key identifier: 40:37:D9:EC:0C:11:D6:F9:E5:DA:87:57:22:CD:65:6C:B0:A6:22:F9 Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Certificate serial: 019C2D26F1A91321912D1954105F3379F542 Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/QDfZ7AwR1vnl2odXIs1lbLCmIvk.roa Signing time: Thu 05 Feb 2026 09:34:12 +0000 ROA not before: Thu 05 Feb 2026 09:34:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.200.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:26:f1:a9:13:21:91:2d:19:54:10:5f:33:79:f5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Validity Not Before: Feb 5 09:34:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4037d9ec0c11d6f9e5da875722cd656cb0a622f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:18:aa:24:ff:82:82:b6:8b:29:05:99:f5: 8c:69:19:41:c5:29:3d:74:72:41:1c:65:90:f2:0e: de:9e:cc:2d:51:ef:6f:05:d3:e3:49:11:49:f7:7b: f3:a8:0f:5d:f1:8a:b5:70:f3:00:ff:28:52:34:50: 14:b4:d6:9b:b7:10:61:a1:29:36:41:45:9e:54:7b: 67:52:a1:01:77:7e:4b:c7:fd:ba:23:94:8a:1e:cc: a7:b7:41:50:71:cb:c6:17:a6:05:0e:92:66:1c:d9: 73:ae:d1:0c:c0:c6:07:27:3e:2e:30:72:72:d2:4a: 09:2f:a6:5d:55:c8:b4:33:94:af:25:d2:57:50:22: 7a:23:b8:0e:b1:1e:9c:e0:f6:f8:89:05:2d:d8:5c: 8b:6b:5f:ab:79:fa:8e:84:f7:8c:13:91:ca:2b:35: ba:89:0f:3c:61:0b:8c:04:ab:48:91:fe:09:9a:03: 5e:ee:7b:53:07:d2:99:11:e5:79:9f:99:a8:24:08: 73:2b:b0:cb:86:53:a9:49:98:76:1c:4a:4f:2b:1e: b3:94:fa:72:b3:0a:d4:25:6e:39:f5:3d:d8:08:ca: b7:e2:f7:33:8d:7f:8b:53:54:48:ac:d1:87:af:98: b7:4a:b9:bd:f6:83:4d:96:1c:f4:9c:5a:46:aa:bb: 89:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:37:D9:EC:0C:11:D6:F9:E5:DA:87:57:22:CD:65:6C:B0:A6:22:F9 X509v3 Authority Key Identifier: keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/QDfZ7AwR1vnl2odXIs1lbLCmIvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.244.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:aa:02:2c:9d:d8:12:01:b2:8f:bf:9d:07:fe:06:a7:4b:03: cb:5d:2a:62:83:dd:d6:b8:d7:d8:c6:2e:d9:f3:c6:25:e5:7f: 47:47:00:95:d2:91:3d:c8:6b:8f:f2:72:e4:e4:75:cd:07:cb: c0:79:61:f2:9c:ad:40:d2:d7:66:f4:73:cb:76:02:fc:f5:95: 35:ec:1a:3d:d6:cb:7a:77:e3:00:41:40:2b:68:35:2d:e8:36: 3e:4e:bb:94:69:50:18:07:e2:f4:ba:8f:a8:1f:fb:db:9f:14: ab:50:ff:12:39:26:99:39:17:73:65:0e:11:32:0b:63:e4:b9: 8b:64:b2:1c:de:2c:78:50:7c:da:a1:52:dd:44:81:b2:7d:b6: d3:5e:c1:ef:a6:81:85:1c:ef:23:eb:81:7f:77:6d:c8:58:43: df:76:51:89:da:ba:43:dc:a0:99:22:0a:84:23:f0:3b:85:dd: 6a:88:7c:38:1c:57:04:0c:e9:1d:2d:80:e3:fa:29:68:41:9c: 06:34:ee:9d:3c:c1:87:9a:aa:d1:e1:47:e6:12:3a:36:f5:d7: 56:6d:3e:e8:ed:3a:c5:5a:2c:2f:67:ef:b2:1b:ce:1e:72:e9: 50:19:2c:3b:06:31:ff:83:14:60:0b:db:eb:34:10:29:0b:ea: 03:99:87:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwtJvGpEyGRLRlUEF8zefVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZGU0YjNiODJmMjA5YjcwMWFlMzQwY2Y1M2I5NzQwNzhm MTZhOWYwHhcNMjYwMjA1MDkzNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDM3ZDllYzBjMTFkNmY5ZTVkYTg3NTcyMmNkNjU2Y2IwYTYyMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqcYqiT/goK2iykFmfWMaRlBxSk9 dHJBHGWQ8g7enswtUe9vBdPjSRFJ93vzqA9d8Yq1cPMA/yhSNFAUtNabtxBhoSk2 QUWeVHtnUqEBd35Lx/26I5SKHsynt0FQccvGF6YFDpJmHNlzrtEMwMYHJz4uMHJy 0koJL6ZdVci0M5SvJdJXUCJ6I7gOsR6c4Pb4iQUt2FyLa1+refqOhPeME5HKKzW6 iQ88YQuMBKtIkf4JmgNe7ntTB9KZEeV5n5moJAhzK7DLhlOpSZh2HEpPKx6zlPpy swrUJW459T3YCMq34vczjX+LU1RIrNGHr5i3Srm99oNNlhz0nFpGqruJxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEA32ewMEdb55dqHVyLNZWywpiL5MB8GA1UdIwQY MBaAFF3eSzuC8gm3Aa40DPU7l0B48WqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWIt ODZhNTUxOGUyZDUyLzEvUURmWjdBd1Ixdm5sMm9kWElzMWxiTENtSXZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWItODZhNTUxOGUyZDUy LzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucj0MA0G CSqGSIb3DQEBCwUAA4IBAQA7qgIsndgSAbKPv50H/ganSwPLXSpig93WuNfYxi7Z 88Yl5X9HRwCV0pE9yGuP8nLk5HXNB8vAeWHynK1A0tdm9HPLdgL89ZU17Bo91st6 d+MAQUAraDUt6DY+TruUaVAYB+L0uo+oH/vbnxSrUP8SOSaZORdzZQ4RMgtj5LmL ZLIc3ix4UHzaoVLdRIGyfbbTXsHvpoGFHO8j64F/d23IWEPfdlGJ2rpD3KCZIgqE I/A7hd1qiHw4HFcEDOkdLYDj+iloQZwGNO6dPMGHmqrR4UfmEjo29ddWbT7o7TrF WiwvZ++yG84eculQGSw7BjH/gxRgC9vrNBApC+oDmYcV -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:12 2026 by rpki-client