This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa File: qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa (raw, json) Hash identifier: L3v1rQi5VlfE6vsx7Nat97JoOxMImNy/mcNcKtk07FU= Subject key identifier: A9:7F:A2:35:57:4E:04:95:8A:06:F3:AE:ED:EC:98:5C:30:27:11:01 Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f Certificate serial: 019B7D5BB5D941D2A190234878C17A021428 Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa Signing time: Fri 02 Jan 2026 06:18:40 +0000 ROA not before: Fri 02 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.162.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b5:d9:41:d2:a1:90:23:48:78:c1:7a:02:14:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f Validity Not Before: Jan 2 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a97fa235574e04958a06f3aeedec985c30271101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:ae:d0:d6:e5:dc:30:90:6f:78:c2:5c:79: a4:62:26:33:a1:30:1e:b4:13:68:b6:92:e4:5c:76: e0:87:0f:f6:9a:17:cc:59:31:44:9c:87:bc:25:01: 22:e3:76:7f:dc:85:b7:46:48:e9:93:c5:42:22:35: d9:20:12:a0:54:e2:51:a9:db:0c:ed:e2:85:bb:14: 24:10:27:25:35:28:dc:11:39:4c:de:be:29:8c:90: c7:96:e0:ba:32:49:47:a0:22:2d:d2:82:b5:36:39: 2c:af:e3:b9:5d:40:ba:b2:ff:8f:5a:69:39:0a:52: 98:72:bf:99:a7:ef:bc:a8:06:2e:a3:91:c9:e5:7f: c9:2c:8c:bc:0f:02:8f:6e:17:d9:ea:0b:5b:08:71: 2b:5c:5c:0b:8c:e0:91:6d:42:27:59:34:93:6b:f9: b2:02:fe:44:ef:26:eb:de:1a:5d:39:1a:af:d9:c9: 41:36:1d:49:38:9a:fd:8d:8d:e2:cb:e8:ac:d0:63: 52:44:a7:a7:b3:54:df:71:e5:fd:2c:50:f8:68:6d: 78:e7:2d:af:a4:3d:99:2e:f4:e5:1c:7c:ff:a1:29: 3f:98:b5:5d:ad:d5:e7:07:57:28:bc:5d:48:b6:63: f8:f5:66:a7:15:ef:4e:af:b0:18:ce:43:78:f0:e8: 32:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7F:A2:35:57:4E:04:95:8A:06:F3:AE:ED:EC:98:5C:30:27:11:01 X509v3 Authority Key Identifier: keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.148.0/22 Signature Algorithm: sha256WithRSAEncryption c3:fe:5a:c2:4c:2b:7f:3a:f4:70:5e:56:e6:7a:ef:0f:04:07: cb:73:be:48:f5:a5:06:d1:ec:f3:b9:3b:3f:2e:9d:23:aa:6a: 0d:fb:8e:3c:b7:6e:d9:20:74:ec:32:30:4d:3b:16:9c:d5:1d: 83:54:b1:3c:49:25:0b:46:f1:97:6a:62:c4:b1:92:a2:1a:c2: 0a:4a:76:00:4d:59:76:5b:49:79:2e:9f:86:8f:c9:ea:85:5d: 21:63:75:57:c0:24:75:6a:61:de:aa:18:59:c1:2e:76:d3:8a: e3:ff:85:b3:1f:0c:69:e6:f6:45:88:07:30:a9:66:a5:40:53: 4d:3e:08:80:77:b4:18:a0:5e:d0:1e:31:76:48:e8:f9:ca:7c: 23:b7:01:46:55:f7:9a:49:e4:5a:b6:7a:7b:e4:d0:ce:bc:29: c7:5a:be:f8:12:cc:4b:cf:00:6d:45:7d:f4:66:cc:4e:c1:5d: e2:af:db:8f:fe:c6:b1:59:d9:2b:a4:4f:8a:5f:93:b8:82:2e: e0:c0:9e:d9:63:8c:2d:70:64:d3:a3:5e:9e:a3:92:29:aa:48: 99:b0:e9:e2:08:0d:77:20:6f:e3:c4:e6:c8:f3:1a:8d:11:fb: 4a:7f:f4:74:f1:02:3b:2e:b6:d5:d7:e4:98:c2:e3:23:15:7e: f7:da:d8:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W7XZQdKhkCNIeMF6AhQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NWU1ZjQ4ZjUzYThkYjljYTYwZmE4ZjE4MzdkMDdmMzE5 MTEwNGYwHhcNMjYwMTAyMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTdmYTIzNTU3NGUwNDk1OGEwNmYzYWVlZGVjOTg1YzMwMjcxMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFGu0Nbl3DCQb3jCXHmkYiYzoTAe tBNotpLkXHbghw/2mhfMWTFEnIe8JQEi43Z/3IW3Rkjpk8VCIjXZIBKgVOJRqdsM 7eKFuxQkECclNSjcETlM3r4pjJDHluC6MklHoCIt0oK1Njksr+O5XUC6sv+PWmk5 ClKYcr+Zp++8qAYuo5HJ5X/JLIy8DwKPbhfZ6gtbCHErXFwLjOCRbUInWTSTa/my Av5E7ybr3hpdORqv2clBNh1JOJr9jY3iy+is0GNSRKens1TfceX9LFD4aG145y2v pD2ZLvTlHHz/oSk/mLVdrdXnB1covF1ItmP49WanFe9Or7AYzkN48OgyWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKl/ojVXTgSVigbzru3smFwwJxEBMB8GA1UdIwQY MBaAFJdeX0j1Oo25ymD6jxg30H8xkRBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmIt NjNmNTAzNWYzNDQ2LzEvcVgtaU5WZE9CSldLQnZPdTdleVlYREFuRVFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmItNjNmNTAzNWYzNDQ2 LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaKUMA0G CSqGSIb3DQEBCwUAA4IBAQDD/lrCTCt/OvRwXlbmeu8PBAfLc75I9aUG0ezzuTs/ Lp0jqmoN+448t27ZIHTsMjBNOxac1R2DVLE8SSULRvGXamLEsZKiGsIKSnYATVl2 W0l5Lp+Gj8nqhV0hY3VXwCR1amHeqhhZwS5204rj/4WzHwxp5vZFiAcwqWalQFNN PgiAd7QYoF7QHjF2SOj5ynwjtwFGVfeaSeRatnp75NDOvCnHWr74EsxLzwBtRX30 ZsxOwV3ir9uP/saxWdkrpE+KX5O4gi7gwJ7ZY4wtcGTTo16eo5IpqkiZsOniCA13 IG/jxObI8xqNEftKf/R08QI7LrbV1+SYwuMjFX732tgu -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:47 2026 by rpki-client