This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/QQeKybyvUtPZq8rtSA1qJFplh-8.roa File: QQeKybyvUtPZq8rtSA1qJFplh-8.roa (raw, json) Hash identifier: Q+OBW6DZJdlZ5hkFmp4+rBZr4bNQDjXlXvwILFLY5Hw= Subject key identifier: 41:07:8A:C9:BC:AF:52:D3:D9:AB:CA:ED:48:0D:6A:24:5A:65:87:EF Certificate issuer: /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c Certificate serial: 019B79EC315E612AC2162A45E5832DB036D2 Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/QQeKybyvUtPZq8rtSA1qJFplh-8.roa Signing time: Thu 01 Jan 2026 14:18:00 +0000 ROA not before: Thu 01 Jan 2026 14:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 185.152.20.0/24 maxlen: 24 185.152.21.0/24 maxlen: 24 185.152.22.0/24 maxlen: 24 185.152.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:31:5e:61:2a:c2:16:2a:45:e5:83:2d:b0:36:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c Validity Not Before: Jan 1 14:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41078ac9bcaf52d3d9abcaed480d6a245a6587ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:f0:50:cc:70:79:9a:1d:94:31:d9:15:c2: 0b:46:5f:5d:97:d0:08:07:73:3e:6a:ff:d1:f7:49: a2:c5:71:49:8c:bb:f3:1c:81:64:cc:b3:67:a9:08: 4d:3c:df:82:c3:8b:d3:14:79:8d:76:82:50:8a:89: 7b:09:98:d8:d1:61:cd:1a:c1:14:7f:d8:ba:30:c9: b0:4e:db:9b:36:a1:10:f5:02:94:fd:2e:62:72:d9: 81:4a:b6:11:0c:22:a6:e0:8e:7c:e8:46:13:3e:f9: 37:f2:ba:d7:f2:6d:22:52:08:3b:99:d8:49:41:c8: 46:16:3e:c8:02:ab:af:1f:23:88:2d:e8:83:c0:f4: 75:3e:fa:9f:60:36:56:af:16:5b:ba:b4:fc:f5:5b: 85:86:e4:7d:b0:36:87:73:a5:17:40:3f:11:2f:b2: 75:23:55:15:49:b3:d5:fe:9f:f3:ef:bd:d7:7e:55: f1:7f:7d:75:d1:d3:48:d0:7e:ba:d3:56:8c:71:b7: 02:65:02:a4:2f:4e:13:f2:4e:c5:22:0e:fd:21:9d: d4:1f:d7:67:9b:9a:5d:c6:6e:a3:2f:7c:6d:b7:37: 62:59:94:64:d1:dd:58:13:95:90:84:f1:98:17:af: 1e:cf:b9:53:e5:6a:60:d2:34:3a:62:3c:5a:bb:df: dd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:07:8A:C9:BC:AF:52:D3:D9:AB:CA:ED:48:0D:6A:24:5A:65:87:EF X509v3 Authority Key Identifier: keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/QQeKybyvUtPZq8rtSA1qJFplh-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.20.0/22 Signature Algorithm: sha256WithRSAEncryption 98:5a:26:21:33:44:ac:50:70:6f:70:ce:05:d9:eb:df:18:f2: df:1c:34:de:26:6c:6a:8f:e8:16:6f:63:94:8c:38:3e:40:93: 34:da:eb:78:f8:0a:29:b3:af:00:fe:28:89:fa:44:78:10:e8: 44:6e:f9:21:17:56:ba:d5:53:61:f1:1c:89:66:17:6f:e7:95: 24:d7:24:7d:cd:0c:03:7b:7c:0a:20:9b:70:7b:2f:a6:a2:09: a6:91:e3:ff:ba:27:1f:df:98:b5:a7:22:11:6a:40:a2:6e:d1: d7:64:85:04:85:d3:94:6d:f0:50:35:42:98:2e:5b:2e:a3:60: 15:f8:34:1f:f7:ff:78:f9:6c:71:d0:01:78:fa:3a:1c:c4:0d: 6a:19:0d:3c:f1:74:be:3a:31:83:8b:3f:cf:a1:57:e7:32:9e: c6:80:de:93:dc:cd:68:4c:c1:8d:d3:15:1b:84:b4:16:a5:59: 1c:77:9e:15:c3:1b:f0:bd:30:09:b8:cc:f5:2b:4c:6f:a8:98: cd:eb:5e:f0:72:40:4d:1f:eb:97:a4:2e:aa:1f:89:da:24:18: 48:23:c1:38:5c:9f:0b:3b:56:72:d8:46:e3:76:cf:5e:59:1a: 6b:c7:12:ce:4a:47:19:80:64:50:55:92:40:29:8a:30:61:f4: 4c:8b:75:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57DFeYSrCFipF5YMtsDbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZWZkYmQ3MjdmYjViZDUzY2VjNjk1N2EyOWI0N2MyYzM0 YTgzNGMwHhcNMjYwMTAxMTQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTA3OGFjOWJjYWY1MmQzZDlhYmNhZWQ0ODBkNmEyNDVhNjU4N2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzTwUMxweZodlDHZFcILRl9dl9AI B3M+av/R90mixXFJjLvzHIFkzLNnqQhNPN+Cw4vTFHmNdoJQiol7CZjY0WHNGsEU f9i6MMmwTtubNqEQ9QKU/S5ictmBSrYRDCKm4I586EYTPvk38rrX8m0iUgg7mdhJ QchGFj7IAquvHyOILeiDwPR1PvqfYDZWrxZburT89VuFhuR9sDaHc6UXQD8RL7J1 I1UVSbPV/p/z773XflXxf3110dNI0H6601aMcbcCZQKkL04T8k7FIg79IZ3UH9dn m5pdxm6jL3xttzdiWZRk0d1YE5WQhPGYF68ez7lT5Wpg0jQ6Yjxau9/d9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEEHism8r1LT2avK7UgNaiRaZYfvMB8GA1UdIwQY MBaAFBHv29cn+1vVPOxpV6KbR8LDSoNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVfYjF5ZjdXOVU4N0dsWG9wdEh3c05LZzB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wNDdjZTQtNDRhZS00MjczLTk0ZmEt ZGM2MzRlOGFhMmEzLzEvUVFlS3lieXZVdFBacThydFNBMXFKRnBsaC04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wNDdjZTQtNDRhZS00MjczLTk0ZmEtZGM2MzRlOGFhMmEz LzEvRWVfYjF5ZjdXOVU4N0dsWG9wdEh3c05LZzB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZgUMA0G CSqGSIb3DQEBCwUAA4IBAQCYWiYhM0SsUHBvcM4F2evfGPLfHDTeJmxqj+gWb2OU jDg+QJM02ut4+Aops68A/iiJ+kR4EOhEbvkhF1a61VNh8RyJZhdv55Uk1yR9zQwD e3wKIJtwey+mogmmkeP/uicf35i1pyIRakCibtHXZIUEhdOUbfBQNUKYLlsuo2AV +DQf9/94+Wxx0AF4+jocxA1qGQ088XS+OjGDiz/PoVfnMp7GgN6T3M1oTMGN0xUb hLQWpVkcd54VwxvwvTAJuMz1K0xvqJjN617wckBNH+uXpC6qH4naJBhII8E4XJ8L O1Zy2Ebjds9eWRprxxLOSkcZgGRQVZJAKYowYfRMi3VX -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:37 2026 by rpki-client