This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/QGMHAWeIiva_ANIU0MC7CU9-6f8.roa File: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (raw, json) Hash identifier: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4= Subject key identifier: 40:63:07:01:67:88:8A:F6:BF:00:D2:14:D0:C0:BB:09:4F:7E:E9:FF Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019B7C11EC895404A704835F395791583C37 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/QGMHAWeIiva_ANIU0MC7CU9-6f8.roa Signing time: Fri 02 Jan 2026 00:18:28 +0000 ROA not before: Fri 02 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 185.189.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ec:89:54:04:a7:04:83:5f:39:57:91:58:3c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jan 2 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4063070167888af6bf00d214d0c0bb094f7ee9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:5c:fa:fd:c7:f2:a6:af:fb:b9:81:cf:f1: e7:ae:cd:2f:68:84:53:72:f5:b7:5e:ba:6b:7a:4a: e6:16:67:31:df:0e:f7:fa:25:c7:b7:0f:c8:59:6b: f6:f5:b7:da:54:b0:9c:5e:17:30:fb:37:11:45:35: f8:5d:95:93:8d:7d:e9:a9:48:c4:e2:ea:ba:43:17: 00:64:9d:0c:18:1d:b0:06:bb:47:f5:2b:f4:0d:ea: 18:e8:51:4f:0e:d8:a0:47:03:3a:c5:cc:58:b8:cd: e9:3e:bd:53:2d:55:64:66:64:23:2f:25:f0:b5:d9: 01:6b:8a:a6:16:35:bb:0d:fb:f8:28:fc:cd:e6:57: 8e:71:9d:2e:e3:07:f7:11:85:59:05:c1:6a:04:e1: f1:27:5e:7d:bb:f4:c9:36:75:5b:fa:bd:8a:06:4c: 81:38:cb:f2:f0:ea:bb:b7:2b:f0:a1:27:52:0e:71: a4:e1:74:9f:00:34:16:2b:c5:b0:b1:b6:20:8d:1b: 83:c7:89:a4:7d:0f:fa:58:89:27:41:bd:80:64:6e: de:88:ea:69:be:55:65:8e:7f:4f:d0:62:e6:36:78: b9:72:dd:d0:46:f0:9a:cb:84:53:0f:59:40:1f:6a: bd:c5:9a:dd:1b:64:8e:87:58:ed:90:be:8e:32:d1: b2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:63:07:01:67:88:8A:F6:BF:00:D2:14:D0:C0:BB:09:4F:7E:E9:FF X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/QGMHAWeIiva_ANIU0MC7CU9-6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.34.0/24 Signature Algorithm: sha256WithRSAEncryption 40:f1:ab:55:57:06:6e:e5:f3:80:81:b0:e7:85:01:c1:07:24: de:e4:29:24:66:76:b5:78:b4:a5:b8:9b:6c:13:2b:96:c7:ec: a0:62:59:14:44:39:73:52:4e:d4:0d:8b:84:37:9a:ea:18:03: 35:ce:a5:f0:05:fd:90:6b:ec:97:55:22:05:0c:9f:e3:15:70: 6f:ad:80:c5:af:f7:77:36:97:cf:45:8e:e2:ca:37:c5:e3:4b: f3:cd:c9:2f:06:f4:45:ce:e3:a3:0a:4d:79:8e:e8:73:d7:13: 8b:1f:b6:af:bc:85:fd:42:08:dc:58:9a:ca:95:58:f3:4f:9b: 3f:e8:8e:c7:9f:97:e0:6f:91:07:e0:3f:d2:80:de:f4:c4:c8: 98:34:e8:ad:a3:ee:84:3c:21:56:0e:1f:1b:d5:66:4c:07:e3: 91:47:68:48:a1:db:0a:ad:da:63:cd:32:f3:50:64:32:18:87: 00:52:cd:95:0c:3d:be:2f:d7:97:17:07:d5:c2:a5:85:e1:e8: 43:f2:29:d7:c0:cd:f5:94:8d:d9:ae:a1:57:b4:59:98:48:c5: 23:91:d4:f3:9f:18:b0:18:88:2d:b4:00:45:3b:42:95:7b:90: 03:21:5e:bd:78:a2:2d:4a:c6:6c:98:d8:b3:8e:eb:fc:6b:3d: cf:27:d9:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EeyJVASnBINfOVeRWDw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwMTAyMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDYzMDcwMTY3ODg4YWY2YmYwMGQyMTRkMGMwYmIwOTRmN2VlOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvABc+v3H8qav+7mBz/Hnrs0vaIRT cvW3XrprekrmFmcx3w73+iXHtw/IWWv29bfaVLCcXhcw+zcRRTX4XZWTjX3pqUjE 4uq6QxcAZJ0MGB2wBrtH9Sv0DeoY6FFPDtigRwM6xcxYuM3pPr1TLVVkZmQjLyXw tdkBa4qmFjW7Dfv4KPzN5leOcZ0u4wf3EYVZBcFqBOHxJ159u/TJNnVb+r2KBkyB OMvy8Oq7tyvwoSdSDnGk4XSfADQWK8WwsbYgjRuDx4mkfQ/6WIknQb2AZG7eiOpp vlVljn9P0GLmNni5ct3QRvCay4RTD1lAH2q9xZrdG2SOh1jtkL6OMtGyOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBjBwFniIr2vwDSFNDAuwlPfun/MB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEvUUdNSEFXZUlpdmFfQU5JVTBNQzdDVTktNmY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub0iMA0G CSqGSIb3DQEBCwUAA4IBAQBA8atVVwZu5fOAgbDnhQHBByTe5CkkZna1eLSluJts EyuWx+ygYlkURDlzUk7UDYuEN5rqGAM1zqXwBf2Qa+yXVSIFDJ/jFXBvrYDFr/d3 NpfPRY7iyjfF40vzzckvBvRFzuOjCk15juhz1xOLH7avvIX9QgjcWJrKlVjzT5s/ 6I7Hn5fgb5EH4D/SgN70xMiYNOito+6EPCFWDh8b1WZMB+ORR2hIodsKrdpjzTLz UGQyGIcAUs2VDD2+L9eXFwfVwqWF4ehD8inXwM31lI3ZrqFXtFmYSMUjkdTznxiw GIgttABFO0KVe5ADIV69eKItSsZsmNizjuv8az3PJ9n3 -----END CERTIFICATE-----Generated at Fri Jan 2 18:03:51 2026 by rpki-client