This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/qt--VLkqB3FoWkRNj2ZXuSn-S6w.roa File: qt--VLkqB3FoWkRNj2ZXuSn-S6w.roa (raw, json) Hash identifier: +/UEoQ8DkmQntw0ZyYufnau70EapjulIrEn1Jx0czaY= Subject key identifier: AA:DF:BE:54:B9:2A:07:71:68:5A:44:4D:8F:66:57:B9:29:FE:4B:AC Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b Certificate serial: 019B7C7F731FB5F1F830B1145A727C08859F Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/qt--VLkqB3FoWkRNj2ZXuSn-S6w.roa Signing time: Fri 02 Jan 2026 02:18:05 +0000 ROA not before: Fri 02 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62141 IP address blocks: 185.38.92.0/22 maxlen: 22 2a04:74c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:73:1f:b5:f1:f8:30:b1:14:5a:72:7c:08:85:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b Validity Not Before: Jan 2 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aadfbe54b92a0771685a444d8f6657b929fe4bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:ed:ec:d6:c5:1b:8d:b2:38:92:56:07:c2: 72:56:d1:23:41:dc:0e:22:7b:80:4d:54:3e:72:55: 70:5c:7d:30:dc:bb:d6:bb:20:83:16:42:03:34:25: fe:fe:60:82:3b:87:3d:cf:35:fc:9f:66:41:12:d4: 6b:cd:e1:96:c1:c3:0a:47:1f:0d:1c:ef:02:b2:d6: 0b:67:28:ba:7c:33:80:e5:65:9c:d6:cb:10:d9:b7: 97:70:a6:78:9c:23:0e:b8:25:a4:7b:f5:f6:e5:f8: 8f:66:ab:a9:e7:24:60:89:8c:73:aa:5a:e1:e5:7f: e3:86:30:16:90:88:5d:cf:6d:4e:f3:4f:08:76:41: 3e:1c:8b:f2:84:7b:f2:12:64:95:cc:45:4b:73:03: 11:41:c5:f9:e8:be:cb:e1:92:6e:19:2d:26:f3:2a: dc:dc:e1:2a:53:9a:73:a5:55:16:95:7e:57:74:f7: fe:e1:e8:5d:fe:ea:5b:1e:d6:f6:c4:65:1d:7d:14: e6:df:de:fe:f0:f3:27:a8:4c:c0:b9:19:d1:da:fb: 51:c0:6c:39:78:ed:e6:b0:78:0e:22:39:aa:59:07: 0c:93:0b:2c:7c:ee:26:cf:ee:8e:f9:ef:4d:3f:6b: 39:9c:1c:f5:ef:4d:c6:0b:90:a4:63:8e:31:6e:23: 7b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DF:BE:54:B9:2A:07:71:68:5A:44:4D:8F:66:57:B9:29:FE:4B:AC X509v3 Authority Key Identifier: keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/qt--VLkqB3FoWkRNj2ZXuSn-S6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.92.0/22 IPv6: 2a04:74c0::/29 Signature Algorithm: sha256WithRSAEncryption 35:9f:89:f2:97:c4:2b:89:bb:fe:d5:90:32:47:41:f3:ae:3c: 5c:f6:a3:16:34:81:d9:43:1d:b6:c8:1a:7b:91:ac:8a:16:dd: f8:0a:c2:60:24:b4:64:a2:83:7a:cc:1d:97:7a:5e:e7:18:47: fb:b7:1b:fb:29:6a:5d:80:2e:ef:9d:9b:dc:a0:5a:af:87:f1: df:fd:79:79:0c:ab:2d:d3:e9:fd:78:97:3c:96:18:aa:aa:e8: 0a:81:04:4a:b8:7a:c1:59:08:27:25:aa:ec:54:e6:81:54:3d: 39:dc:7e:47:e0:8a:88:b7:1b:e0:2a:74:f9:2a:a5:d8:49:6f: 78:33:63:d4:74:b8:ee:11:1c:38:8c:48:e6:f6:03:67:1f:a9: c7:ba:bc:41:5b:00:86:eb:bb:fc:e8:0a:34:eb:e5:57:47:87: cc:1d:5d:bc:9a:43:a8:e7:f1:6e:85:cf:06:ab:9d:5e:bc:f4: b5:93:32:9b:16:aa:a0:78:4c:54:b2:08:df:6c:ba:9f:58:d6: 19:c7:17:70:4a:f2:c4:1b:97:87:91:4d:27:52:c2:82:d7:ea: ed:2b:ae:ee:29:c1:b7:81:25:34:1a:7f:0d:c9:ec:a0:b5:dc: 53:0c:0e:4b:d9:84:d8:e3:0f:af:2c:a0:1c:3c:6e:2b:d6:4b: a0:79:60:09 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f3MftfH4MLEUWnJ8CIWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNjViMmZhOGJiYWQ2NTAxYzdkMjFlZjQ3NWRjNDQ1NDEz ZmIyOGIwHhcNMjYwMTAyMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWRmYmU1NGI5MmEwNzcxNjg1YTQ0NGQ4ZjY2NTdiOTI5ZmU0YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyjt7NbFG42yOJJWB8JyVtEjQdwO InuATVQ+clVwXH0w3LvWuyCDFkIDNCX+/mCCO4c9zzX8n2ZBEtRrzeGWwcMKRx8N HO8CstYLZyi6fDOA5WWc1ssQ2beXcKZ4nCMOuCWke/X25fiPZqup5yRgiYxzqlrh 5X/jhjAWkIhdz21O808IdkE+HIvyhHvyEmSVzEVLcwMRQcX56L7L4ZJuGS0m8yrc 3OEqU5pzpVUWlX5XdPf+4ehd/upbHtb2xGUdfRTm397+8PMnqEzAuRnR2vtRwGw5 eO3msHgOIjmqWQcMkwssfO4mz+6O+e9NP2s5nBz1703GC5CkY44xbiN7lQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKrfvlS5KgdxaFpETY9mV7kp/kusMB8GA1UdIwQY MBaAFG9lsvqLutZQHH0h70ddxEVBP7KLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMt N2Y2NzQ0MmY5ZjMyLzEvcXQtLVZMa3FCM0ZvV2tSTmoyWlh1U24tUzZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMtN2Y2NzQ0MmY5ZjMy LzEvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSZcMA0E AgACMAcDBQMqBHTAMA0GCSqGSIb3DQEBCwUAA4IBAQA1n4nyl8Qribv+1ZAyR0Hz rjxc9qMWNIHZQx22yBp7kayKFt34CsJgJLRkooN6zB2Xel7nGEf7txv7KWpdgC7v nZvcoFqvh/Hf/Xl5DKst0+n9eJc8lhiqqugKgQRKuHrBWQgnJarsVOaBVD053H5H 4IqItxvgKnT5KqXYSW94M2PUdLjuERw4jEjm9gNnH6nHurxBWwCG67v86Ao06+VX R4fMHV28mkOo5/Fuhc8Gq51evPS1kzKbFqqgeExUsgjfbLqfWNYZxxdwSvLEG5eH kU0nUsKC1+rtK67uKcG3gSU0Gn8NyeygtdxTDA5L2YTY4w+vLKAcPG4r1kugeWAJ -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:19 2026 by rpki-client