This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q_44ZVHpebF1tboSe773WpvQJ9k.roa File: q_44ZVHpebF1tboSe773WpvQJ9k.roa (raw, json) Hash identifier: jOJpKQBIdWjCeGVDCSYTU2dqKnuor8ZTV7lSnnSaFw0= Subject key identifier: AB:FE:38:65:51:E9:79:B1:75:B5:BA:12:7B:BE:F7:5A:9B:D0:27:D9 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C137EF2CCB8015FA4888AAFD413FC7E Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q_44ZVHpebF1tboSe773WpvQJ9k.roa Signing time: Fri 02 Jan 2026 00:20:11 +0000 ROA not before: Fri 02 Jan 2026 00:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153997 IP address blocks: 185.227.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:7e:f2:cc:b8:01:5f:a4:88:8a:af:d4:13:fc:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abfe386551e979b175b5ba127bbef75a9bd027d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:1c:94:22:38:26:fb:98:5e:2d:83:6f:0d: 94:7b:bd:07:4d:0c:d5:1a:39:4a:c8:27:75:fc:94: 9f:4e:cf:ae:6b:57:0f:d1:8f:98:bb:18:fd:b2:dd: 3b:a0:ad:24:d2:bb:7f:34:ca:da:3a:4e:e3:9d:84: 36:c1:53:21:78:f5:e5:51:3e:0a:19:e8:38:67:e8: a9:55:da:2a:ef:58:49:60:08:1b:f1:db:5a:ac:0f: 60:9b:4c:45:de:6e:2e:99:00:65:be:3e:11:e5:3f: 26:8e:4e:33:f7:05:29:ad:04:27:7a:1b:90:20:49: 99:12:94:43:52:ea:ff:bd:06:f4:43:63:d9:df:94: 91:f4:7e:bd:93:25:50:43:e5:9f:75:77:ec:3a:b3: 36:8d:e9:c9:f5:1b:c2:c2:85:5e:bc:a3:8f:a8:1a: f9:12:f5:5c:3e:13:eb:3c:d5:c4:73:87:08:b0:6f: 63:61:2c:15:37:70:42:49:65:0c:d7:30:4e:71:12: 35:09:c3:3d:06:74:05:db:47:b7:39:41:e2:76:c5: 9a:7e:13:3f:c9:80:14:76:08:3a:80:93:20:62:00: ae:07:3e:8a:47:90:51:76:f9:cf:67:cc:3b:f2:80: 2b:8b:aa:58:ee:87:7e:4b:80:f9:da:80:17:3b:e5: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FE:38:65:51:E9:79:B1:75:B5:BA:12:7B:BE:F7:5A:9B:D0:27:D9 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q_44ZVHpebF1tboSe773WpvQJ9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.146.0/24 Signature Algorithm: sha256WithRSAEncryption 82:90:50:50:95:41:19:8e:1a:aa:15:3d:ff:0f:14:37:15:ce: cf:f1:37:64:41:e1:19:82:8d:3e:d5:f0:9f:d3:1e:fd:fe:fe: 44:7a:06:93:79:a7:50:6b:62:f1:58:76:bb:61:97:e8:21:bb: 26:47:1f:9b:21:53:fa:6d:68:81:8e:22:4f:07:2a:a0:7c:cf: 02:57:cd:57:da:ff:1d:6f:05:a9:ad:69:03:83:6a:32:c5:f4: 1e:7a:9a:62:c4:a4:33:69:2b:b8:60:f0:eb:6e:35:0a:e4:32: 3d:a3:e6:20:a8:23:31:d0:9f:06:03:e6:9b:19:5b:b9:19:51: 8d:ef:b1:d8:3b:ef:7d:0b:61:75:93:ff:00:0f:50:0b:f6:bc: cb:6b:7d:1b:ea:2a:b3:f8:27:d3:65:72:af:27:02:e9:c5:03: 1a:97:a2:33:e2:cc:35:80:97:d4:f6:01:da:42:a6:17:af:ce: 53:e7:a8:da:e7:34:a6:a8:bd:84:67:ba:20:ed:ca:20:96:92: 97:5a:e6:87:3d:3b:a9:35:8f:74:ed:7c:a0:04:de:fc:5a:a4: 02:fb:7c:c7:c4:e1:41:06:ed:5f:3c:8f:9f:75:bf:22:d3:c4: a8:77:2f:8b:80:12:39:fb:a2:eb:04:c1:6e:f3:b3:00:e0:6d: 7a:a8:cb:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E37yzLgBX6SIiq/UE/x+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmZlMzg2NTUxZTk3OWIxNzViNWJhMTI3YmJlZjc1YTliZDAyN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ0clCI4JvuYXi2Dbw2Ue70HTQzV GjlKyCd1/JSfTs+ua1cP0Y+Yuxj9st07oK0k0rt/NMraOk7jnYQ2wVMhePXlUT4K Geg4Z+ipVdoq71hJYAgb8dtarA9gm0xF3m4umQBlvj4R5T8mjk4z9wUprQQnehuQ IEmZEpRDUur/vQb0Q2PZ35SR9H69kyVQQ+WfdXfsOrM2jenJ9RvCwoVevKOPqBr5 EvVcPhPrPNXEc4cIsG9jYSwVN3BCSWUM1zBOcRI1CcM9BnQF20e3OUHidsWafhM/ yYAUdgg6gJMgYgCuBz6KR5BRdvnPZ8w78oAri6pY7od+S4D52oAXO+WVTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKv+OGVR6XmxdbW6Enu+91qb0CfZMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvcV80NFpWSHBlYkYxdGJvU2U3NzNXcHZRSjlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueOSMA0G CSqGSIb3DQEBCwUAA4IBAQCCkFBQlUEZjhqqFT3/DxQ3Fc7P8TdkQeEZgo0+1fCf 0x79/v5EegaTeadQa2LxWHa7YZfoIbsmRx+bIVP6bWiBjiJPByqgfM8CV81X2v8d bwWprWkDg2oyxfQeeppixKQzaSu4YPDrbjUK5DI9o+YgqCMx0J8GA+abGVu5GVGN 77HYO+99C2F1k/8AD1AL9rzLa30b6iqz+CfTZXKvJwLpxQMal6Iz4sw1gJfU9gHa QqYXr85T56ja5zSmqL2EZ7og7coglpKXWuaHPTupNY907XygBN78WqQC+3zHxOFB Bu1fPI+fdb8i08Sody+LgBI5+6LrBMFu87MA4G16qMu7 -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:15 2026 by rpki-client