This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Qjw5IzowUZzLtbf0lhiIbzGOObU.roa File: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (raw, json) Hash identifier: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw= Subject key identifier: 42:3C:39:23:3A:30:51:9C:CB:B5:B7:F4:96:18:88:6F:31:8E:39:B5 Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1 Certificate serial: 019B7F1392E26B94399AA6372F63DB9BE04F Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Qjw5IzowUZzLtbf0lhiIbzGOObU.roa Signing time: Fri 02 Jan 2026 14:19:07 +0000 ROA not before: Fri 02 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50670 IP address blocks: 185.96.68.0/22 maxlen: 22 185.96.68.0/24 maxlen: 24 185.96.69.0/24 maxlen: 24 185.96.70.0/24 maxlen: 24 185.96.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:92:e2:6b:94:39:9a:a6:37:2f:63:db:9b:e0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1 Validity Not Before: Jan 2 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=423c39233a30519ccbb5b7f49618886f318e39b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:22:07:e3:c9:42:c9:01:0b:ad:ee:29:96: c8:3d:f7:b1:8c:aa:69:99:5a:fc:57:d5:ba:f9:79: 7f:dd:17:5d:21:1e:85:ad:ea:9b:3d:46:81:23:3d: f5:d5:4d:7c:55:d1:36:6d:fb:bc:b1:4b:0d:86:d8: a9:39:aa:86:0a:5a:97:95:f4:61:dd:b1:31:5a:58: 8d:fe:7d:23:b2:3d:20:c7:46:c9:05:0c:b8:70:54: 83:6c:bf:c9:6d:a7:63:33:b6:78:e0:56:33:2b:6a: 96:d7:ce:e8:3c:25:9d:28:15:15:43:22:bd:70:95: 86:10:22:9d:f2:44:39:23:e6:6a:00:a9:03:b4:57: dc:eb:44:68:d4:19:17:45:90:3c:8e:aa:80:0f:30: 40:39:a7:06:7e:79:6a:d3:70:2a:3d:8a:6e:a4:f0: cd:12:51:e8:c5:f1:30:80:a0:40:11:1e:41:76:39: fa:72:24:8d:2d:20:27:eb:69:19:25:9f:f7:40:b9: 2c:a6:61:8e:0c:66:dd:1f:2e:de:75:c4:e0:bf:36: 8c:5b:10:fd:9d:40:fb:5a:28:39:ed:47:7f:4b:ae: fb:ab:fe:5d:c3:48:44:41:45:da:57:ee:d9:6a:e3: fc:c3:d5:53:29:e4:88:5e:5f:18:cd:5a:71:91:47: 83:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3C:39:23:3A:30:51:9C:CB:B5:B7:F4:96:18:88:6F:31:8E:39:B5 X509v3 Authority Key Identifier: keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Qjw5IzowUZzLtbf0lhiIbzGOObU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.68.0/22 Signature Algorithm: sha256WithRSAEncryption 01:2b:cb:33:9c:0b:e1:ec:2a:79:24:8a:73:0f:0a:3c:35:7e: cc:2b:f4:2e:65:a3:ed:5d:21:93:1d:d4:1d:3d:74:f9:4d:46: 37:ae:63:09:00:dc:8c:d2:03:e8:c8:e9:09:4f:49:eb:f7:14: fe:21:13:eb:d8:70:a9:cc:fb:2c:94:09:f3:a5:b6:d0:64:44: 4f:60:ea:de:bd:04:d4:26:70:32:06:1e:1c:09:8e:a6:d0:f7: 0a:21:4c:6f:1f:67:4c:1b:ea:b2:a6:2e:90:d9:17:c0:3b:21: 07:09:0a:9f:39:b5:81:54:31:00:ef:3f:4a:3f:cb:0f:cb:65: 34:35:fe:88:66:b2:f5:d9:53:77:f4:f5:89:96:de:ed:b3:d7: 4e:fa:9f:c6:49:b3:84:6e:48:c7:60:1d:01:16:26:21:05:6d: 20:d1:c9:77:59:f4:44:e7:0b:b3:2d:46:06:ac:42:84:bf:66: 9d:fc:fa:ac:34:bc:2a:59:6c:fe:14:0e:b1:5d:39:7e:ed:e1: 96:b3:be:b6:98:ac:aa:01:87:06:83:54:39:13:f2:17:49:e5: 0b:2d:b7:df:f8:7e:10:f6:28:88:d5:03:d0:1f:4d:bc:55:8e: d6:a5:17:4a:83:db:07:b1:4a:3f:d7:36:36:86:74:36:4a:ee: 05:fe:29:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E5Lia5Q5mqY3L2Pbm+BPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5 YmE5ZjEwHhcNMjYwMTAyMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjNjMzkyMzNhMzA1MTljY2JiNWI3ZjQ5NjE4ODg2ZjMxOGUzOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm8iB+PJQskBC63uKZbIPfexjKpp mVr8V9W6+Xl/3RddIR6FreqbPUaBIz311U18VdE2bfu8sUsNhtipOaqGClqXlfRh 3bExWliN/n0jsj0gx0bJBQy4cFSDbL/JbadjM7Z44FYzK2qW187oPCWdKBUVQyK9 cJWGECKd8kQ5I+ZqAKkDtFfc60Ro1BkXRZA8jqqADzBAOacGfnlq03AqPYpupPDN ElHoxfEwgKBAER5Bdjn6ciSNLSAn62kZJZ/3QLkspmGODGbdHy7edcTgvzaMWxD9 nUD7Wig57Ud/S677q/5dw0hEQUXaV+7ZauP8w9VTKeSIXl8YzVpxkUeDiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEI8OSM6MFGcy7W39JYYiG8xjjm1MB8GA1UdIwQY MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt NjFkZWFhNTYzMWIyLzEvUWp3NUl6b3dVWnpMdGJmMGxoaUliekdPT2JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWBEMA0G CSqGSIb3DQEBCwUAA4IBAQABK8sznAvh7Cp5JIpzDwo8NX7MK/QuZaPtXSGTHdQd PXT5TUY3rmMJANyM0gPoyOkJT0nr9xT+IRPr2HCpzPsslAnzpbbQZERPYOrevQTU JnAyBh4cCY6m0PcKIUxvH2dMG+qypi6Q2RfAOyEHCQqfObWBVDEA7z9KP8sPy2U0 Nf6IZrL12VN39PWJlt7ts9dO+p/GSbOEbkjHYB0BFiYhBW0g0cl3WfRE5wuzLUYG rEKEv2ad/PqsNLwqWWz+FA6xXTl+7eGWs762mKyqAYcGg1Q5E/IXSeULLbff+H4Q 9iiI1QPQH028VY7WpRdKg9sHsUo/1zY2hnQ2Su4F/inZ -----END CERTIFICATE-----Generated at Fri Jan 2 21:10:40 2026 by rpki-client