This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/Q_p3RQQ_HXAPjFO1R7wMSzG_ctY.roa File: Q_p3RQQ_HXAPjFO1R7wMSzG_ctY.roa (raw, json) Hash identifier: FFF1GXtrqdDjFsaeT8BSbn/j24vTOF2Mi08IWvzfgUY= Subject key identifier: 43:FA:77:45:04:3F:1D:70:0F:8C:53:B5:47:BC:0C:4B:31:BF:72:D6 Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176 Certificate serial: 019B7CECC4B70C05B012334E777CFFE75FE0 Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/Q_p3RQQ_HXAPjFO1R7wMSzG_ctY.roa Signing time: Fri 02 Jan 2026 04:17:30 +0000 ROA not before: Fri 02 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31202 IP address blocks: 185.23.61.0/24 maxlen: 24 185.23.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c4:b7:0c:05:b0:12:33:4e:77:7c:ff:e7:5f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176 Validity Not Before: Jan 2 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43fa7745043f1d700f8c53b547bc0c4b31bf72d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:26:38:ac:06:2d:37:93:5f:cb:04:4c:16: 1e:4b:f9:5b:16:1c:3c:1c:a3:ef:76:93:1d:0a:d3: f2:38:de:b5:94:0d:68:72:a4:f5:7a:38:c6:51:90: 23:19:de:9e:65:9c:ca:ee:25:c6:30:72:19:de:86: 24:3d:5e:81:a0:ff:f2:62:d1:f9:23:14:3d:e2:5d: 70:02:1d:6b:22:b4:aa:e6:7e:a4:10:de:2a:d4:b2: fb:25:85:a5:01:53:81:e7:24:f1:a2:56:d3:60:bd: af:90:7f:da:e1:eb:3e:9e:29:0a:00:a5:bd:e1:50: 73:a5:37:55:12:1e:6f:0c:a7:3a:5c:0b:38:32:0f: 37:3a:b4:05:ab:3f:80:92:17:c1:0c:ef:30:ec:a0: 09:93:db:1f:a2:af:10:f1:60:77:3b:2d:c0:03:fa: d1:73:1a:1d:e2:73:a9:18:7a:c0:a4:35:ac:82:38: 93:b7:6e:33:6c:ca:e1:e7:54:63:1a:09:2c:ae:51: c1:82:f0:f8:59:bd:cf:0a:13:5f:75:04:35:a2:65: 6a:a9:2d:ae:99:1e:5a:73:9d:11:72:63:1d:f2:f7: 7c:63:ab:3f:89:43:c7:f7:2b:c1:d2:c5:7d:dd:54: bd:13:1c:c0:49:d1:95:69:92:bc:81:3c:28:49:79: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FA:77:45:04:3F:1D:70:0F:8C:53:B5:47:BC:0C:4B:31:BF:72:D6 X509v3 Authority Key Identifier: keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/Q_p3RQQ_HXAPjFO1R7wMSzG_ctY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.61.0-185.23.62.255 Signature Algorithm: sha256WithRSAEncryption 14:54:a3:9e:69:14:f6:ba:9b:95:19:d0:4a:5b:62:0a:eb:91: c2:f6:5e:72:a7:b0:c6:8e:4f:d3:62:56:59:81:f2:f7:05:61: f5:2f:a9:a0:ba:2e:51:de:60:85:d7:4a:43:c1:0a:0a:c3:53: cb:ea:33:2a:58:fd:56:30:fa:41:b5:58:83:25:59:ab:cd:64: 95:9f:d5:17:f0:ea:c7:32:8b:0c:53:39:e5:bd:14:34:c5:3e: 79:20:34:d8:88:5f:41:f1:25:46:b1:9b:49:5c:32:4a:4f:26: 77:39:62:d0:ad:fa:31:3c:fa:d3:da:21:58:15:9b:71:3a:ce: 88:46:34:9e:17:c9:8d:ac:b6:18:51:a7:38:82:2f:f1:49:63: 5a:42:7a:4d:12:7a:f4:66:6e:af:f1:1b:fe:e5:a9:37:8b:f5: ff:38:08:7a:55:89:ff:80:2f:64:79:8c:ff:16:55:46:2f:73: 67:54:92:38:5e:e8:01:97:e0:72:23:23:5b:f7:da:32:de:3c: 65:6c:01:f1:66:0a:fa:ec:d2:4a:e8:c4:f8:68:7b:80:89:6b: 22:a5:bf:8c:85:ad:3b:52:cb:c3:d4:0a:0f:17:22:4f:54:56: ad:38:f3:00:a4:fa:eb:fd:53:0f:fc:0d:85:88:2e:ca:d0:f9: 0f:59:25:cd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87MS3DAWwEjNOd3z/51/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGUxN2ZkYWEyOTE4N2I4ZTQwZDYzMGFkZGViZDlmZDI0 YzAxNzYwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2ZhNzc0NTA0M2YxZDcwMGY4YzUzYjU0N2JjMGM0YjMxYmY3MmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHkmOKwGLTeTX8sETBYeS/lbFhw8 HKPvdpMdCtPyON61lA1ocqT1ejjGUZAjGd6eZZzK7iXGMHIZ3oYkPV6BoP/yYtH5 IxQ94l1wAh1rIrSq5n6kEN4q1LL7JYWlAVOB5yTxolbTYL2vkH/a4es+nikKAKW9 4VBzpTdVEh5vDKc6XAs4Mg83OrQFqz+AkhfBDO8w7KAJk9sfoq8Q8WB3Oy3AA/rR cxod4nOpGHrApDWsgjiTt24zbMrh51RjGgksrlHBgvD4Wb3PChNfdQQ1omVqqS2u mR5ac50RcmMd8vd8Y6s/iUPH9yvB0sV93VS9ExzASdGVaZK8gTwoSXktBQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEP6d0UEPx1wD4xTtUe8DEsxv3LWMB8GA1UdIwQY MBaAFEqOF/2qKRh7jkDWMK3evZ/STAF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU280WF9hb3BHSHVPUU5Zd3JkNjluOUpNQVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMjQzNDEtYTdjZi00Mjc1LWFjNGYt NWM3NjVjNTM3M2EzLzEvUV9wM1JRUV9IWEFQakZPMVI3d01TekdfY3RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jMjQzNDEtYTdjZi00Mjc1LWFjNGYtNWM3NjVjNTM3M2Ez LzEvU280WF9hb3BHSHVPUU5Zd3JkNjluOUpNQVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5Fz0D BAC5Fz4wDQYJKoZIhvcNAQELBQADggEBABRUo55pFPa6m5UZ0EpbYgrrkcL2XnKn sMaOT9NiVlmB8vcFYfUvqaC6LlHeYIXXSkPBCgrDU8vqMypY/VYw+kG1WIMlWavN ZJWf1Rfw6scyiwxTOeW9FDTFPnkgNNiIX0HxJUaxm0lcMkpPJnc5YtCt+jE8+tPa IVgVm3E6zohGNJ4XyY2sthhRpziCL/FJY1pCek0SevRmbq/xG/7lqTeL9f84CHpV if+AL2R5jP8WVUYvc2dUkjhe6AGX4HIjI1v32jLePGVsAfFmCvrs0kroxPhoe4CJ ayKlv4yFrTtSy8PUCg8XIk9UVq048wCk+uv9Uw/8DYWILsrQ+Q9ZJc0= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:06 2026 by rpki-client