This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/quXPd4m3roGOFCgsU-cq5zkXqMM.roa File: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (raw, json) Hash identifier: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ= Subject key identifier: AA:E5:CF:77:89:B7:AE:81:8E:14:28:2C:53:E7:2A:E7:39:17:A8:C3 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019B7C11EE1B20331D656156C5EA5CE501F5 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/quXPd4m3roGOFCgsU-cq5zkXqMM.roa Signing time: Fri 02 Jan 2026 00:18:28 +0000 ROA not before: Fri 02 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 185.189.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ee:1b:20:33:1d:65:61:56:c5:ea:5c:e5:01:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jan 2 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aae5cf7789b7ae818e14282c53e72ae73917a8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:76:d0:9d:ed:75:fd:0b:95:de:dd:b5:c7: 5f:0e:fa:e8:49:07:96:62:94:92:15:c6:ae:6a:c7: fd:8d:01:54:32:2d:fa:35:ff:97:d8:f3:6a:f3:c3: 21:04:a6:59:5f:46:b0:f2:85:9a:8f:c9:11:c9:d5: 7f:61:a0:b6:b7:d0:e3:56:eb:7f:26:3f:4e:f4:b1: 09:fd:08:9e:27:34:57:e7:89:7c:60:9d:a8:58:f1: 16:5e:36:1d:e0:36:64:6d:e4:2e:32:ca:f1:20:33: 62:3c:36:c7:71:6a:61:90:c3:f4:1c:aa:fc:68:67: 94:dc:d8:5f:2c:9b:4b:89:61:ae:36:2d:93:23:88: 70:63:ed:3f:2b:39:79:44:1c:30:b9:81:27:0d:4b: 55:82:33:a1:0a:82:89:b3:6e:a7:61:62:a9:b2:8d: d9:ac:9a:3f:d8:a7:c9:f9:11:98:ec:82:32:05:99: 2b:bf:b7:01:d5:2e:42:0f:c4:b0:a4:38:3f:a8:cf: 92:a6:10:1f:7a:33:f6:f3:e9:1a:7e:48:b1:22:9b: 77:48:03:d8:ab:51:b9:34:7a:26:06:0a:ba:5a:74: 7c:31:52:d7:1d:14:03:c6:02:de:c9:8e:bf:16:39: a8:6f:12:25:e4:57:43:09:ca:7a:a9:ff:7d:83:61: 5d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E5:CF:77:89:B7:AE:81:8E:14:28:2C:53:E7:2A:E7:39:17:A8:C3 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/quXPd4m3roGOFCgsU-cq5zkXqMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.35.0/24 Signature Algorithm: sha256WithRSAEncryption 61:c1:77:3f:36:0b:ba:92:95:45:e8:ad:07:5b:8a:69:d9:b9: 37:6c:65:40:03:17:51:c6:bd:51:0b:a7:21:6a:83:89:4f:0f: c1:16:42:80:6d:74:2c:e3:82:6a:3e:07:9b:72:2c:9c:89:e3: 72:7d:b4:8b:34:6a:3b:cf:9d:bc:f3:49:25:60:4d:b1:43:67: 08:ce:19:20:d6:c4:21:6c:35:56:8c:82:02:cc:b2:24:1a:96: 74:75:66:f7:2c:63:24:e8:79:a8:af:db:7f:a8:32:96:f3:e3: ab:9d:80:b7:a4:18:5d:22:b3:b3:18:50:8c:09:91:3b:ce:0a: 63:52:66:41:9a:f2:50:d4:37:61:b9:09:ad:21:af:bc:a2:04: 7e:57:67:de:5f:25:80:01:07:14:6f:34:6d:fb:64:b7:32:c3: 59:62:2f:52:24:70:3a:33:d3:bf:79:dc:68:03:4b:db:9a:be: ad:48:13:80:39:90:74:fe:26:3c:3c:00:a2:36:1e:85:ce:99: a2:9f:fb:4c:5e:e0:bf:78:6f:f4:55:5d:1b:7f:77:e8:1f:77: 47:f4:e2:9e:39:4a:8f:14:6f:2f:6f:71:57:93:94:e9:b6:d0: b7:30:78:35:48:74:de:16:93:99:bb:f7:8e:cf:dd:7e:28:c3: cc:f0:10:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ee4bIDMdZWFWxepc5QH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwMTAyMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWU1Y2Y3Nzg5YjdhZTgxOGUxNDI4MmM1M2U3MmFlNzM5MTdhOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTB20J3tdf0Lld7dtcdfDvroSQeW YpSSFcauasf9jQFUMi36Nf+X2PNq88MhBKZZX0aw8oWaj8kRydV/YaC2t9DjVut/ Jj9O9LEJ/QieJzRX54l8YJ2oWPEWXjYd4DZkbeQuMsrxIDNiPDbHcWphkMP0HKr8 aGeU3NhfLJtLiWGuNi2TI4hwY+0/Kzl5RBwwuYEnDUtVgjOhCoKJs26nYWKpso3Z rJo/2KfJ+RGY7IIyBZkrv7cB1S5CD8SwpDg/qM+SphAfejP28+kafkixIpt3SAPY q1G5NHomBgq6WnR8MVLXHRQDxgLeyY6/FjmobxIl5FdDCcp6qf99g2FdRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrlz3eJt66BjhQoLFPnKuc5F6jDMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEvcXVYUGQ0bTNyb0dPRkNnc1UtY3E1emtYcU1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub0jMA0G CSqGSIb3DQEBCwUAA4IBAQBhwXc/Ngu6kpVF6K0HW4pp2bk3bGVAAxdRxr1RC6ch aoOJTw/BFkKAbXQs44JqPgebciycieNyfbSLNGo7z52880klYE2xQ2cIzhkg1sQh bDVWjIICzLIkGpZ0dWb3LGMk6Hmor9t/qDKW8+OrnYC3pBhdIrOzGFCMCZE7zgpj UmZBmvJQ1DdhuQmtIa+8ogR+V2feXyWAAQcUbzRt+2S3MsNZYi9SJHA6M9O/edxo A0vbmr6tSBOAOZB0/iY8PACiNh6Fzpmin/tMXuC/eG/0VV0bf3foH3dH9OKeOUqP FG8vb3FXk5TpttC3MHg1SHTeFpOZu/eOz91+KMPM8BAL -----END CERTIFICATE-----Generated at Fri Jan 2 18:03:48 2026 by rpki-client