This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/QsLpU8hJ4ATxawddQAfsVH71Yrc.roa File: QsLpU8hJ4ATxawddQAfsVH71Yrc.roa (raw, json) Hash identifier: 8LAE+r4LCdI7plc1J5/y/lKsTqyUBWlK/iV7nFAj/Ks= Subject key identifier: 42:C2:E9:53:C8:49:E0:04:F1:6B:07:5D:40:07:EC:54:7E:F5:62:B7 Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0 Certificate serial: 019B7AC8869CE285A171476F735771C794E2 Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/QsLpU8hJ4ATxawddQAfsVH71Yrc.roa Signing time: Thu 01 Jan 2026 18:18:40 +0000 ROA not before: Thu 01 Jan 2026 18:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202565 IP address blocks: 185.160.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:86:9c:e2:85:a1:71:47:6f:73:57:71:c7:94:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0 Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42c2e953c849e004f16b075d4007ec547ef562b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:c8:fc:9a:c4:a0:c4:a3:e7:93:ee:f9:12: 16:0b:72:4f:14:a1:e4:ea:e5:c5:2f:79:7f:3e:cc: a2:22:50:01:05:7a:bc:c0:97:cb:dc:92:ac:c4:9f: 44:41:6c:fc:71:3c:11:e4:bc:89:e4:7e:62:c3:28: 97:bc:31:73:3d:c1:82:8b:d9:4f:31:57:0f:1c:73: fa:09:72:c8:9b:3a:d8:02:70:f7:e3:0d:8d:b0:8f: 5a:01:cd:c7:79:0e:41:b5:81:6d:aa:22:70:06:9e: 62:3e:1e:ee:cd:a6:9e:1c:f8:42:0c:5e:c6:f8:94: 69:d4:12:65:57:a8:09:90:16:28:69:ef:b5:da:13: 3c:66:02:7b:73:e3:03:d5:5d:2c:56:83:ac:82:80: 88:43:71:1d:b5:43:95:bd:0b:fd:df:69:bf:4b:87: 59:bc:e6:aa:3e:8f:bd:35:bf:73:9f:db:18:72:2d: b5:93:eb:b9:cb:d2:1f:a6:cd:b9:8e:33:9d:07:14: 91:11:ae:04:98:8b:d3:c2:54:f5:d4:82:64:ea:91: 8f:30:26:49:d9:3f:59:3a:e1:c8:be:df:8b:35:1f: d0:39:c2:9b:bf:83:51:34:05:d0:7d:d6:bb:dd:9b: e6:ac:30:fe:4c:ea:3c:77:e0:91:a6:f7:8e:38:bf: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C2:E9:53:C8:49:E0:04:F1:6B:07:5D:40:07:EC:54:7E:F5:62:B7 X509v3 Authority Key Identifier: keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/QsLpU8hJ4ATxawddQAfsVH71Yrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.148.0/22 Signature Algorithm: sha256WithRSAEncryption b2:27:94:2d:1c:b1:87:80:85:be:70:13:70:75:44:0a:a4:3b: b9:7a:05:45:f7:35:9b:ad:35:53:db:04:81:6b:05:ba:ad:6b: 27:8f:b8:66:22:ee:ed:38:0a:13:70:d5:aa:0e:d4:c5:45:1f: 61:ba:00:cb:06:ae:9f:16:28:d2:94:ec:63:21:d2:c4:d2:4e: 93:7f:b9:b0:8f:cc:a7:57:61:56:1c:82:cf:22:ab:0a:dd:35: 20:80:86:57:73:7d:16:32:44:11:12:44:83:c8:64:70:03:33: fd:c8:44:7f:cb:43:9d:5e:1e:3b:d4:a4:1f:73:1e:de:ba:47: 1d:70:c7:d9:7f:6c:63:a7:75:25:97:fb:ac:89:20:76:f5:9e: 5a:5e:a9:dc:70:f5:56:c8:4a:a7:3f:2a:5b:46:53:59:b1:be: 80:90:4a:41:a4:ad:f8:4b:e0:73:c1:41:49:e1:90:45:15:d0: 89:87:1e:a4:a3:35:50:1d:2e:e5:d4:07:25:66:59:89:f9:9d: aa:f1:ad:7e:0d:f4:87:1e:fa:d6:03:30:bb:99:a9:90:b5:13: da:c4:1e:1b:1c:fc:99:f3:90:31:c1:2a:7f:94:f6:22:42:4e: 4e:36:05:b9:45:a0:8b:2a:e7:41:de:e8:bd:39:db:48:93:a8: 51:00:a6:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yIac4oWhcUdvc1dxx5TiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OWMyNjNlODE4NDg2Y2ZkODMxYzI0NWRkZmFjY2E5MWZi ZDgxYzAwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmMyZTk1M2M4NDllMDA0ZjE2YjA3NWQ0MDA3ZWM1NDdlZjU2MmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJjI/JrEoMSj55Pu+RIWC3JPFKHk 6uXFL3l/PsyiIlABBXq8wJfL3JKsxJ9EQWz8cTwR5LyJ5H5iwyiXvDFzPcGCi9lP MVcPHHP6CXLImzrYAnD34w2NsI9aAc3HeQ5BtYFtqiJwBp5iPh7uzaaeHPhCDF7G +JRp1BJlV6gJkBYoae+12hM8ZgJ7c+MD1V0sVoOsgoCIQ3EdtUOVvQv932m/S4dZ vOaqPo+9Nb9zn9sYci21k+u5y9Ifps25jjOdBxSREa4EmIvTwlT11IJk6pGPMCZJ 2T9ZOuHIvt+LNR/QOcKbv4NRNAXQfda73ZvmrDD+TOo8d+CRpveOOL+7LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFELC6VPISeAE8WsHXUAH7FR+9WK3MB8GA1UdIwQY MBaAFEicJj6BhIbP2DHCRd36zKkfvYHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMt MmNhM2FhNzFlYzVmLzEvUXNMcFU4aEo0QVR4YXdkZFFBZnNWSDcxWXJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMtMmNhM2FhNzFlYzVm LzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaCUMA0G CSqGSIb3DQEBCwUAA4IBAQCyJ5QtHLGHgIW+cBNwdUQKpDu5egVF9zWbrTVT2wSB awW6rWsnj7hmIu7tOAoTcNWqDtTFRR9hugDLBq6fFijSlOxjIdLE0k6Tf7mwj8yn V2FWHILPIqsK3TUggIZXc30WMkQREkSDyGRwAzP9yER/y0OdXh471KQfcx7eukcd cMfZf2xjp3Ull/usiSB29Z5aXqnccPVWyEqnPypbRlNZsb6AkEpBpK34S+BzwUFJ 4ZBFFdCJhx6kozVQHS7l1AclZlmJ+Z2q8a1+DfSHHvrWAzC7mamQtRPaxB4bHPyZ 85AxwSp/lPYiQk5ONgW5RaCLKudB3ui9OdtIk6hRAKb3 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:45 2026 by rpki-client