This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QHqfZ4FwnYvSX9PnC_-3E8UCBfQ.roa File: QHqfZ4FwnYvSX9PnC_-3E8UCBfQ.roa (raw, json) Hash identifier: a11ctnWowo7VPpKSqM+R/EjsiNhq9AtbnT5OjSgXIq4= Subject key identifier: 40:7A:9F:67:81:70:9D:8B:D2:5F:D3:E7:0B:FF:B7:13:C5:02:05:F4 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB3FF468D16525BF7B53066F00BE1 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QHqfZ4FwnYvSX9PnC_-3E8UCBfQ.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 85.208.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b3:ff:46:8d:16:52:5b:f7:b5:30:66:f0:0b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=407a9f6781709d8bd25fd3e70bffb713c50205f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:b6:d9:04:40:45:85:50:05:c8:bd:f5:33: fd:61:49:7b:61:80:90:87:84:12:20:d9:89:5b:d0: 53:79:34:5a:c3:39:4d:76:fd:dc:ef:77:b6:88:0a: 0c:42:95:a7:3a:ba:7c:17:75:1c:a5:fb:52:40:1a: 53:8d:4a:cb:c3:1e:df:71:e0:2f:21:bb:2b:89:cf: 64:60:1f:5e:ee:c2:a0:71:4a:0c:2b:bf:97:2a:07: 7c:1c:de:02:71:8e:39:9f:36:37:50:8c:b0:40:56: 6a:6b:1c:03:64:d1:55:c4:a1:86:77:26:2b:2f:e6: 21:ec:5c:24:62:e9:60:9e:01:e8:42:48:ed:77:f8: f7:ec:1a:d7:4d:48:5f:57:1b:a9:12:0f:28:eb:1e: 0a:b2:fd:75:09:d8:df:ad:1a:c6:1f:e1:a1:43:4b: 6f:12:e6:34:b0:5d:da:8e:0d:51:2e:f0:34:ab:dc: 47:2e:85:17:a7:5a:14:ca:d2:f2:94:46:23:8f:cc: a9:28:b3:34:6a:3b:68:df:6b:e8:1a:a9:ff:09:4c: 31:ad:e0:a1:2b:99:30:af:42:fa:d2:bc:70:58:be: b7:7a:b5:02:f7:2a:05:59:15:c9:f0:62:a1:41:82: 5d:1a:be:f2:f7:c3:5d:76:94:00:5a:b7:9b:cc:4f: e8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7A:9F:67:81:70:9D:8B:D2:5F:D3:E7:0B:FF:B7:13:C5:02:05:F4 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QHqfZ4FwnYvSX9PnC_-3E8UCBfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.105.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:df:93:af:f5:1c:8d:6f:b0:18:c8:2c:6d:9e:c6:dd:a8:4a: e5:b4:8f:da:08:47:81:34:e5:1a:fe:2e:d1:a9:ba:a9:f0:0c: 31:f8:53:12:31:e8:20:25:c1:ef:23:e1:14:d1:61:81:79:c1: 5a:e5:68:02:ea:4b:26:32:cb:d3:21:f7:c2:05:15:5b:a6:22: 6b:c3:4c:f1:32:d3:e4:a7:ca:89:49:62:e4:50:1f:3e:89:d6: 08:a8:ef:8a:ab:37:24:62:db:97:5b:fd:5a:f0:3b:77:26:a4: b8:09:de:b1:64:53:62:a2:55:9e:3c:78:bb:8d:01:5c:48:cd: f0:08:a2:c9:e1:82:4c:fa:98:bc:65:9e:7d:3c:3a:c4:50:3e: f2:7d:f2:34:11:06:ce:a5:07:cc:e4:90:e7:83:7c:6d:4d:13: 99:ed:56:64:1b:d7:d6:8a:d6:37:2c:cd:a6:dd:ee:13:e0:e2: 0e:78:20:2e:7b:dc:91:87:72:40:dd:4e:e1:fb:1b:3c:51:dc: 80:73:71:ea:85:b4:fb:e4:b9:f1:5a:19:5a:61:4d:e9:c7:81: fb:fb:21:fe:30:1b:e5:0a:58:be:af:a2:a3:21:2e:09:6c:32: fd:7b:c2:b8:07:c2:35:cd:ca:13:39:11:08:6e:e6:9e:b4:2b: 92:d3:98:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rP/Ro0WUlv3tTBm8AvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDdhOWY2NzgxNzA5ZDhiZDI1ZmQzZTcwYmZmYjcxM2M1MDIwNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDi22QRARYVQBci99TP9YUl7YYCQ h4QSINmJW9BTeTRawzlNdv3c73e2iAoMQpWnOrp8F3UcpftSQBpTjUrLwx7fceAv Ibsric9kYB9e7sKgcUoMK7+XKgd8HN4CcY45nzY3UIywQFZqaxwDZNFVxKGGdyYr L+Yh7FwkYulgngHoQkjtd/j37BrXTUhfVxupEg8o6x4Ksv11CdjfrRrGH+GhQ0tv EuY0sF3ajg1RLvA0q9xHLoUXp1oUytLylEYjj8ypKLM0ajto32voGqn/CUwxreCh K5kwr0L60rxwWL63erUC9yoFWRXJ8GKhQYJdGr7y98NddpQAWrebzE/o0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEB6n2eBcJ2L0l/T5wv/txPFAgX0MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvUUhxZlo0RnduWXZTWDlQbkNfLTNFOFVDQmZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdBpMA0G CSqGSIb3DQEBCwUAA4IBAQAu35Ov9RyNb7AYyCxtnsbdqErltI/aCEeBNOUa/i7R qbqp8Awx+FMSMeggJcHvI+EU0WGBecFa5WgC6ksmMsvTIffCBRVbpiJrw0zxMtPk p8qJSWLkUB8+idYIqO+KqzckYtuXW/1a8Dt3JqS4Cd6xZFNiolWePHi7jQFcSM3w CKLJ4YJM+pi8ZZ59PDrEUD7yffI0EQbOpQfM5JDng3xtTROZ7VZkG9fWitY3LM2m 3e4T4OIOeCAue9yRh3JA3U7h+xs8UdyAc3HqhbT75LnxWhlaYU3px4H7+yH+MBvl Cli+r6KjIS4JbDL9e8K4B8I1zcoTOREIbuaetCuS05gP -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:57 2026 by rpki-client