This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/qLJSTzTBMdJIikbxRR_u5Z_U3GY.roa File: qLJSTzTBMdJIikbxRR_u5Z_U3GY.roa (raw, json) Hash identifier: iJfkw1OmyUQC6ekqyi7may7oFP/+ECL2L9/K1hz0sgo= Subject key identifier: A8:B2:52:4F:34:C1:31:D2:48:8A:46:F1:45:1F:EE:E5:9F:D4:DC:66 Certificate issuer: /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be Certificate serial: 019B78A271074B51D554E3319D20978E1A19 Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/qLJSTzTBMdJIikbxRR_u5Z_U3GY.roa Signing time: Thu 01 Jan 2026 08:17:50 +0000 ROA not before: Thu 01 Jan 2026 08:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200183 IP address blocks: 185.28.76.0/24 maxlen: 24 185.28.77.0/24 maxlen: 24 185.28.78.0/24 maxlen: 24 185.28.79.0/24 maxlen: 24 2a02:ce80::/48 maxlen: 48 2a02:ce80:1::/48 maxlen: 48 2a02:ce80:2::/48 maxlen: 48 2a02:ce80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:71:07:4b:51:d5:54:e3:31:9d:20:97:8e:1a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be Validity Not Before: Jan 1 08:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b2524f34c131d2488a46f1451feee59fd4dc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:5b:c4:12:93:85:eb:e1:8f:8a:ad:ec:02: f4:a5:a7:d9:2b:b9:3c:84:9c:85:c1:d8:84:17:86: d1:8e:c2:b3:7f:59:f9:5d:5a:0c:a3:9d:74:0a:4e: 47:70:6c:60:c2:aa:f0:77:ce:7d:9b:1e:35:2e:69: a4:00:bd:5c:0f:32:ea:9e:1e:b1:14:e2:80:0f:30: 2f:57:28:ed:cf:f3:f5:09:eb:81:88:ed:60:c9:42: 07:76:f2:9d:5f:30:65:b7:6f:4d:52:84:d8:15:1d: f1:8c:7b:31:a7:17:65:53:d4:a9:79:de:44:ba:a0: d1:45:27:3f:c5:33:cd:8e:a8:ac:c9:79:af:24:0b: ee:07:16:a0:55:b9:ce:58:56:3f:fc:22:e3:8b:5a: 89:b7:04:f7:a3:d3:32:7e:bd:37:36:ec:a2:2f:8b: d5:28:8b:4e:36:e6:c4:ff:e7:3b:97:87:57:64:a9: 1e:e6:23:16:7e:4a:03:18:fa:95:79:4d:0a:52:f7: 77:dc:d8:3e:92:00:50:ea:16:c8:de:a4:0e:9a:c5: 64:33:60:6c:c0:36:1e:8e:e9:33:43:96:a7:9b:90: 4a:4d:1b:af:ac:5b:a6:9c:e8:8f:bf:49:ef:af:55: d3:3c:37:54:21:a0:72:66:35:7e:35:91:a2:76:15: 1b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B2:52:4F:34:C1:31:D2:48:8A:46:F1:45:1F:EE:E5:9F:D4:DC:66 X509v3 Authority Key Identifier: keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/qLJSTzTBMdJIikbxRR_u5Z_U3GY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.76.0/22 IPv6: 2a02:ce80::/46 Signature Algorithm: sha256WithRSAEncryption 84:13:dd:b0:79:38:ff:13:c0:09:81:6e:ec:8d:69:24:89:18: 47:4b:0e:f5:85:8a:f4:a2:d7:5e:7c:55:43:a3:ce:95:3e:53: 07:3c:1e:c8:3a:58:fa:fd:25:56:aa:25:5d:6f:9a:bf:95:4f: 8c:46:d9:87:65:2c:64:f2:a4:a4:13:ed:bb:c4:b8:0b:ac:6a: 75:37:78:d8:a4:08:cf:ea:6c:16:3c:35:ac:bb:d7:2b:73:93: 93:c6:69:e9:b6:bf:71:34:05:e4:7f:44:5b:a9:18:52:3a:3d: cd:b7:02:94:75:a5:d8:13:9e:6c:c7:5b:d9:34:6f:69:c5:1d: 3a:80:65:e1:94:21:b3:09:68:f5:59:5b:ed:f9:a6:b4:b5:2c: 2a:0e:62:65:98:af:fb:d4:4a:da:90:35:55:42:fc:d1:d4:90: 05:22:e0:6d:ae:4e:1f:0d:6f:88:7f:69:2d:a2:be:cf:05:49: 93:df:b8:1d:2d:49:3a:b2:5c:59:1a:07:99:79:8a:59:08:fc: f3:e0:ba:a1:0b:b5:71:98:0a:05:81:fd:1a:52:4f:df:3d:6e: 9c:7e:96:29:fa:7c:a6:f7:5b:6b:e8:ea:ef:fe:5a:02:e2:fb: bf:3e:60:00:bf:a8:6f:2a:64:62:51:f2:8c:a8:fd:23:c3:27: da:af:4e:cf -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4onEHS1HVVOMxnSCXjhoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYjVhYjI2MmZmMjgxNTU2NzQzMzE4Zjc4Y2VhZWI0OWY4 YmQxYmUwHhcNMjYwMTAxMDgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGIyNTI0ZjM0YzEzMWQyNDg4YTQ2ZjE0NTFmZWVlNTlmZDRkYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4xbxBKThevhj4qt7AL0pafZK7k8 hJyFwdiEF4bRjsKzf1n5XVoMo510Ck5HcGxgwqrwd859mx41LmmkAL1cDzLqnh6x FOKADzAvVyjtz/P1CeuBiO1gyUIHdvKdXzBlt29NUoTYFR3xjHsxpxdlU9Sped5E uqDRRSc/xTPNjqisyXmvJAvuBxagVbnOWFY//CLji1qJtwT3o9Myfr03NuyiL4vV KItONubE/+c7l4dXZKke5iMWfkoDGPqVeU0KUvd33Ng+kgBQ6hbI3qQOmsVkM2Bs wDYejukzQ5anm5BKTRuvrFumnOiPv0nvr1XTPDdUIaByZjV+NZGidhUbOwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKiyUk80wTHSSIpG8UUf7uWf1NxmMB8GA1UdIwQY MBaAFLG1qyYv8oFVZ0Mxj3jOrrSfi9G+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2JXckppX3lnVlZuUXpHUGVNNnV0Si1MMGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zZjRlNTgtZDU4ZC00N2RlLTkyZjct ZTg5ZmZmOTc3NjJjLzEvcUxKU1R6VEJNZEpJaWtieFJSX3U1Wl9VM0dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zZjRlNTgtZDU4ZC00N2RlLTkyZjctZTg5ZmZmOTc3NjJj LzEvc2JXckppX3lnVlZuUXpHUGVNNnV0Si1MMGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuRxMMA8E AgACMAkDBwIqAs6AAAAwDQYJKoZIhvcNAQELBQADggEBAIQT3bB5OP8TwAmBbuyN aSSJGEdLDvWFivSi1158VUOjzpU+Uwc8Hsg6WPr9JVaqJV1vmr+VT4xG2YdlLGTy pKQT7bvEuAusanU3eNikCM/qbBY8Nay71ytzk5PGaem2v3E0BeR/RFupGFI6Pc23 ApR1pdgTnmzHW9k0b2nFHTqAZeGUIbMJaPVZW+35prS1LCoOYmWYr/vUStqQNVVC /NHUkAUi4G2uTh8Nb4h/aS2ivs8FSZPfuB0tSTqyXFkaB5l5ilkI/PPguqELtXGY CgWB/RpST989bpx+lin6fKb3W2vo6u/+WgLi+78+YAC/qG8qZGJR8oyo/SPDJ9qv Ts8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:36 2026 by rpki-client