This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/QlMmdjdXjri_CBWva21BaIFHBho.roa File: QlMmdjdXjri_CBWva21BaIFHBho.roa (raw, json) Hash identifier: tN7tjjqkm4W21ZyWVVJYjmkhiCizgF+fv67Iry9MGFU= Subject key identifier: 42:53:26:76:37:57:8E:B8:BF:08:15:AF:6B:6D:41:68:81:47:06:1A Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Certificate serial: 019B7C809C713BC43E9AEC865F9C70EC204A Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/QlMmdjdXjri_CBWva21BaIFHBho.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 92.119.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9c:71:3b:c4:3e:9a:ec:86:5f:9c:70:ec:20:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4253267637578eb8bf0815af6b6d41688147061a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:35:e6:bf:6a:36:da:34:a5:db:97:11:8c: f1:78:33:8d:48:98:bd:6c:2a:93:55:59:fd:eb:d1: 4c:6a:a1:c4:7b:7e:39:74:ae:92:11:2a:d2:ff:e9: ee:09:f2:f4:ce:6d:59:bc:b5:8d:fc:6b:99:37:f5: a0:dd:0a:95:5c:05:23:b5:63:23:9d:46:3f:e3:d5: bd:83:f8:97:b5:a8:37:a7:58:5a:05:f5:d5:4b:8c: 78:57:b3:0c:19:3e:ca:8a:d5:65:ae:72:de:a1:ed: 8b:32:bb:f7:08:ec:4a:50:cc:26:a8:7a:90:4b:34: 55:9a:38:8b:99:97:b0:3f:e4:67:1b:02:41:46:ad: 41:80:b7:be:31:b6:1f:28:5a:57:21:6f:62:0d:6a: cb:bb:f4:79:35:96:b3:f0:fd:20:20:05:89:d9:5a: 3e:93:d7:67:4b:09:69:d4:7d:54:e6:aa:88:61:9e: b5:f0:d2:e8:48:fc:cc:1b:b3:80:6a:20:35:f3:0d: ec:05:7d:58:33:30:06:2f:b5:9c:80:b0:83:a2:ac: 06:ce:cc:96:17:58:09:d4:70:4b:c6:1b:a7:70:1f: 26:d3:9c:e0:35:2c:10:bd:66:af:63:7e:d4:02:9f: 1a:e3:a0:72:09:e6:6c:36:34:9b:f2:09:47:d0:42: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:53:26:76:37:57:8E:B8:BF:08:15:AF:6B:6D:41:68:81:47:06:1A X509v3 Authority Key Identifier: keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/QlMmdjdXjri_CBWva21BaIFHBho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.157.0/24 Signature Algorithm: sha256WithRSAEncryption 20:f0:99:43:46:4e:b7:b3:63:c5:93:89:20:26:4a:44:dd:05: 1d:f0:13:3c:e6:a0:0f:37:27:7a:d7:bc:54:53:40:28:16:1c: 3e:17:e6:c3:51:26:d1:7f:76:eb:19:d1:d6:a5:ef:2b:e3:55: ea:b6:a0:eb:2d:64:db:17:38:0d:a7:a4:34:af:7c:7d:c5:3f: a6:d5:d9:c3:d2:81:bb:2b:41:22:d8:03:f7:af:71:89:2d:2f: f5:97:29:ae:ec:ec:1c:8a:9a:60:19:3f:3b:0b:60:99:48:9c: 11:9d:04:f4:b7:fb:85:55:4d:82:f5:4d:4c:a9:e0:3e:12:90: f4:24:d8:ff:bf:04:70:c8:5f:0f:77:34:3a:b9:b4:72:c2:f9: 45:55:01:0c:98:13:e0:f3:74:5c:b3:15:4a:02:2a:58:da:72: f7:7b:2e:a7:da:26:59:b3:0f:16:0d:71:27:64:89:0d:52:09: 65:82:f5:a0:2e:09:f6:4c:bc:13:0a:43:2c:8b:7b:99:f5:b4: 1e:5c:5d:49:cd:ab:5f:0f:9d:49:3f:b2:65:bf:9e:dc:c3:81: e9:11:9f:82:ad:95:dd:6b:ee:05:f1:49:50:fe:44:52:9a:80: e9:89:23:b9:f5:90:7d:e3:60:04:fb:54:f9:a1:d3:5c:7b:e7: ac:ac:28:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJxxO8Q+muyGX5xw7CBKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTAzZTViODM1ZjBhODEzODFkMWM0YzEyMzNkMzhmYjdk ZGYyM2QwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjUzMjY3NjM3NTc4ZWI4YmYwODE1YWY2YjZkNDE2ODgxNDcwNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ415r9qNto0pduXEYzxeDONSJi9 bCqTVVn969FMaqHEe345dK6SESrS/+nuCfL0zm1ZvLWN/GuZN/Wg3QqVXAUjtWMj nUY/49W9g/iXtag3p1haBfXVS4x4V7MMGT7KitVlrnLeoe2LMrv3COxKUMwmqHqQ SzRVmjiLmZewP+RnGwJBRq1BgLe+MbYfKFpXIW9iDWrLu/R5NZaz8P0gIAWJ2Vo+ k9dnSwlp1H1U5qqIYZ618NLoSPzMG7OAaiA18w3sBX1YMzAGL7WcgLCDoqwGzsyW F1gJ1HBLxhuncB8m05zgNSwQvWavY37UAp8a46ByCeZsNjSb8glH0EJn1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEJTJnY3V464vwgVr2ttQWiBRwYaMB8GA1UdIwQY MBaAFK9QPluDXwqBOB0cTBIz04+33fI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjct M2M1ZTE3NDRhY2RkLzEvUWxNbWRqZFhqcmlfQ0JXdmEyMUJhSUZIQmhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjctM2M1ZTE3NDRhY2Rk LzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHedMA0G CSqGSIb3DQEBCwUAA4IBAQAg8JlDRk63s2PFk4kgJkpE3QUd8BM85qAPNyd617xU U0AoFhw+F+bDUSbRf3brGdHWpe8r41XqtqDrLWTbFzgNp6Q0r3x9xT+m1dnD0oG7 K0Ei2AP3r3GJLS/1lymu7OwcippgGT87C2CZSJwRnQT0t/uFVU2C9U1MqeA+EpD0 JNj/vwRwyF8PdzQ6ubRywvlFVQEMmBPg83RcsxVKAipY2nL3ey6n2iZZsw8WDXEn ZIkNUgllgvWgLgn2TLwTCkMsi3uZ9bQeXF1JzatfD51JP7Jlv57cw4HpEZ+CrZXd a+4F8UlQ/kRSmoDpiSO59ZB942AE+1T5odNce+esrCgj -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:03 2026 by rpki-client