This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/QGW4LwlvDICFL2rpJRW4EK0DFIc.roa File: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (raw, json) Hash identifier: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q= Subject key identifier: 40:65:B8:2F:09:6F:0C:80:85:2F:6A:E9:25:15:B8:10:AD:03:14:87 Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483 Certificate serial: 019B7E37D383DB363E7D47A4F36039F1102B Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/QGW4LwlvDICFL2rpJRW4EK0DFIc.roa Signing time: Fri 02 Jan 2026 10:19:06 +0000 ROA not before: Fri 02 Jan 2026 10:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55222 IP address blocks: 185.80.124.0/22 maxlen: 24 2a05:7c40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d3:83:db:36:3e:7d:47:a4:f3:60:39:f1:10:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965473d68572ea2238bdd875afa725a0405de483 Validity Not Before: Jan 2 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4065b82f096f0c80852f6ae92515b810ad031487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:29:fd:68:7d:2e:47:8e:9c:52:17:3b:21: 09:cb:ae:13:e5:33:38:16:11:78:47:03:21:d3:28: bf:b7:a6:31:01:ad:a7:c1:60:e2:ba:d6:21:ef:3e: 9f:28:3e:86:08:c5:d5:58:1b:11:3f:7f:fb:b7:25: 44:99:f2:50:b3:a9:2d:9e:cb:94:42:9c:39:6f:bc: a3:56:1a:db:55:89:55:09:55:4b:8a:0b:58:ef:b6: 8b:46:53:87:68:e0:d0:fe:1b:f5:1b:34:6b:82:c0: 6b:60:92:1b:af:4b:85:b7:30:c3:24:7c:15:f6:72: 4a:47:dd:0e:02:80:1c:51:b6:81:c9:c2:d3:6c:5b: c7:c8:2f:6b:d6:5d:fe:a3:8a:46:95:5a:61:3d:2c: 68:1f:4f:aa:dd:70:e1:7a:27:b0:a1:dc:b5:77:58: 9f:19:98:9d:90:cb:6f:e0:d5:fb:32:89:60:47:69: 8d:7e:c3:ee:01:07:24:e1:70:46:0f:bb:51:75:36: 85:83:6b:a6:9b:db:ca:ec:87:07:7e:50:bf:0f:db: 97:cb:5b:49:56:71:2e:29:68:fb:94:90:70:e1:18: c9:cc:98:41:d6:6c:85:57:bc:79:e6:71:74:16:3a: f3:de:75:50:ea:8f:ef:e0:0a:2d:bd:90:63:0f:c3: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:65:B8:2F:09:6F:0C:80:85:2F:6A:E9:25:15:B8:10:AD:03:14:87 X509v3 Authority Key Identifier: keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/QGW4LwlvDICFL2rpJRW4EK0DFIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.124.0/22 IPv6: 2a05:7c40::/29 Signature Algorithm: sha256WithRSAEncryption 8a:ac:64:e9:40:6b:fc:67:c5:66:5b:fe:77:40:e9:07:f8:b4: 23:6b:b5:d9:cc:88:ba:2a:35:ce:eb:1a:b4:37:d5:3e:57:2a: dc:53:ad:a3:4e:f1:3b:f2:fb:e2:b2:32:d5:ec:f5:36:52:49: fd:dd:a0:7f:40:fe:85:5e:b6:eb:b1:d2:c8:de:58:d3:5e:95: ba:88:b7:67:25:44:39:68:fd:11:92:1f:0d:25:72:7f:ed:ad: de:dc:77:85:12:3b:67:98:81:c9:f3:58:9c:d8:89:3d:63:75: e5:97:ed:f9:2e:49:e4:34:a8:2c:9a:e7:5e:9f:f3:45:89:76: 6b:6b:63:66:b6:e8:c7:89:8b:cc:a8:f8:39:6c:03:ea:0e:c1: 10:05:2d:de:49:b6:f2:5e:15:11:5a:16:24:ac:09:6a:f1:95: c2:53:86:41:0a:d9:6e:78:35:12:55:ce:25:88:89:8f:d5:d2: e4:39:30:58:98:b0:8a:6f:f0:84:6c:a8:74:14:42:3c:a3:1b: 1c:93:bc:4d:3b:9e:56:2f:72:e3:dd:a8:ca:b1:1b:9b:0c:0a: d0:d5:53:6c:f8:45:ed:5c:ad:45:ed:02:00:c2:e8:ec:c7:bc: 50:c1:94:04:4d:cf:ab:27:0f:ec:75:80:c6:09:e7:10:d2:b5: 27:23:62:73 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N9OD2zY+fUek82A58RArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NTQ3M2Q2ODU3MmVhMjIzOGJkZDg3NWFmYTcyNWEwNDA1 ZGU0ODMwHhcNMjYwMTAyMTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDY1YjgyZjA5NmYwYzgwODUyZjZhZTkyNTE1YjgxMGFkMDMxNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVEp/Wh9LkeOnFIXOyEJy64T5TM4 FhF4RwMh0yi/t6YxAa2nwWDiutYh7z6fKD6GCMXVWBsRP3/7tyVEmfJQs6ktnsuU Qpw5b7yjVhrbVYlVCVVLigtY77aLRlOHaODQ/hv1GzRrgsBrYJIbr0uFtzDDJHwV 9nJKR90OAoAcUbaBycLTbFvHyC9r1l3+o4pGlVphPSxoH0+q3XDheiewody1d1if GZidkMtv4NX7MolgR2mNfsPuAQck4XBGD7tRdTaFg2umm9vK7IcHflC/D9uXy1tJ VnEuKWj7lJBw4RjJzJhB1myFV7x55nF0Fjrz3nVQ6o/v4AotvZBjD8NR2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEBluC8JbwyAhS9q6SUVuBCtAxSHMB8GA1UdIwQY MBaAFJZUc9aFcuoiOL3Yda+nJaBAXeSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMt NDVmODI5YzZkZDExLzEvUUdXNEx3bHZESUNGTDJycEpSVzRFSzBERkljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMtNDVmODI5YzZkZDEx LzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVB8MA0E AgACMAcDBQMqBXxAMA0GCSqGSIb3DQEBCwUAA4IBAQCKrGTpQGv8Z8VmW/53QOkH +LQja7XZzIi6KjXO6xq0N9U+VyrcU62jTvE78vvisjLV7PU2Ukn93aB/QP6FXrbr sdLI3ljTXpW6iLdnJUQ5aP0Rkh8NJXJ/7a3e3HeFEjtnmIHJ81ic2Ik9Y3Xll+35 LknkNKgsmuden/NFiXZra2NmtujHiYvMqPg5bAPqDsEQBS3eSbbyXhURWhYkrAlq 8ZXCU4ZBCtlueDUSVc4liImP1dLkOTBYmLCKb/CEbKh0FEI8oxsck7xNO55WL3Lj 3ajKsRubDArQ1VNs+EXtXK1F7QIAwujsx7xQwZQETc+rJw/sdYDGCecQ0rUnI2Jz -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:25 2026 by rpki-client