This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/QDmIW26JPLiCQPg0QkWFjA_yXvQ.roa File: QDmIW26JPLiCQPg0QkWFjA_yXvQ.roa (raw, json) Hash identifier: lNF+nwAKLXvKgpTrABWuuKjeHqZ2vPmIOlH0x80veow= Subject key identifier: 40:39:88:5B:6E:89:3C:B8:82:40:F8:34:42:45:85:8C:0F:F2:5E:F4 Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978 Certificate serial: 019B7F834BB54D1E161F54F9BB3F0F637BE6 Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/QDmIW26JPLiCQPg0QkWFjA_yXvQ.roa Signing time: Fri 02 Jan 2026 16:21:09 +0000 ROA not before: Fri 02 Jan 2026 16:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204697 IP address blocks: 185.235.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:4b:b5:4d:1e:16:1f:54:f9:bb:3f:0f:63:7b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978 Validity Not Before: Jan 2 16:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4039885b6e893cb88240f8344245858c0ff25ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fb:4f:d2:6f:3f:71:c1:21:b0:7d:75:9f:65: cb:a2:34:b8:a7:07:b3:43:05:8b:e5:5e:f9:32:b0: 43:fa:7f:f3:69:61:46:d0:4f:b0:32:e0:d4:31:44: e6:60:28:89:a1:26:27:9c:d1:86:8a:e4:cb:30:d4: 97:9d:ec:57:fe:ee:57:b9:01:f5:f9:eb:52:42:8b: 64:e4:bc:47:c8:ed:f2:76:59:6a:69:dc:b4:c3:fd: 21:e1:dc:46:40:7e:54:f1:e6:97:fa:34:73:78:7a: 3d:59:5d:aa:98:47:7e:16:0d:9a:f3:24:8a:c5:4c: 27:ea:09:47:ce:74:5a:78:ee:df:e3:f4:5b:16:ec: 68:72:50:f8:81:3f:7d:1f:c9:78:24:23:4f:2b:4a: 11:d8:c7:ab:aa:39:e1:4a:10:4a:9c:8e:1a:5a:44: d0:40:c9:c7:a0:14:7d:37:77:42:93:43:8f:75:f1: 32:2b:aa:94:a1:9f:69:e5:1e:09:8c:e2:60:a6:5f: 1f:8f:3d:8c:2b:94:54:7e:a3:14:dc:4a:51:2e:aa: f9:05:10:73:3a:31:bb:b2:bd:f5:cb:6c:b5:9f:f7: e6:28:41:bf:20:51:6f:b2:0f:64:8f:b9:ac:35:93: 5e:f0:6c:47:e6:d9:f1:a4:52:aa:10:49:f4:5d:cb: 9a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:39:88:5B:6E:89:3C:B8:82:40:F8:34:42:45:85:8C:0F:F2:5E:F4 X509v3 Authority Key Identifier: keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/QDmIW26JPLiCQPg0QkWFjA_yXvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.159.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:e8:0e:e3:4d:8b:dd:bb:96:b5:42:a0:bb:13:a3:12:59:35: 83:28:b4:65:85:a7:32:87:b2:7f:61:0e:bd:62:c5:a2:0e:16: 66:9d:83:5a:ce:e0:c6:90:91:73:23:18:57:0a:68:b9:68:b1: 41:8f:96:b1:28:b8:f3:b8:1c:3c:cc:89:f0:20:d8:5f:c8:3f: 36:f5:64:01:13:ef:56:58:25:32:ee:6b:2c:60:1f:62:77:1e: 5f:88:70:ce:25:bc:9f:98:03:27:ef:98:e7:28:ef:81:b7:4e: 63:f1:ac:fc:82:45:1f:c6:0d:4f:0a:cd:bd:0e:7b:72:85:2b: c8:27:b3:46:38:2e:bf:f1:0e:c6:d5:6e:1c:ee:16:3c:d1:cd: a2:03:97:3f:4a:54:28:b3:1f:13:71:2a:e4:3d:90:00:07:80: bd:f6:00:8f:b1:14:87:6b:b4:20:d3:06:78:0d:25:bf:07:49: a4:ce:e3:a3:67:ec:3a:e0:f4:e3:30:b1:07:04:22:97:9e:09: 54:fc:3b:f4:00:a5:c3:b1:fa:e6:41:9c:b2:70:0b:d8:80:46: f1:db:7b:0f:da:0a:bf:7e:5b:1f:f2:d9:0b:a2:35:36:bc:94: 08:40:39:90:5b:46:c3:bd:43:03:5c:5e:06:19:3f:54:b8:c9: e4:80:6d:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g0u1TR4WH1T5uz8PY3vmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl ZGU5NzgwHhcNMjYwMTAyMTYyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDM5ODg1YjZlODkzY2I4ODI0MGY4MzQ0MjQ1ODU4YzBmZjI1ZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ftP0m8/ccEhsH11n2XLojS4pwez QwWL5V75MrBD+n/zaWFG0E+wMuDUMUTmYCiJoSYnnNGGiuTLMNSXnexX/u5XuQH1 +etSQotk5LxHyO3ydllqady0w/0h4dxGQH5U8eaX+jRzeHo9WV2qmEd+Fg2a8ySK xUwn6glHznRaeO7f4/RbFuxoclD4gT99H8l4JCNPK0oR2MerqjnhShBKnI4aWkTQ QMnHoBR9N3dCk0OPdfEyK6qUoZ9p5R4JjOJgpl8fjz2MK5RUfqMU3EpRLqr5BRBz OjG7sr31y2y1n/fmKEG/IFFvsg9kj7msNZNe8GxH5tnxpFKqEEn0XcuaKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEA5iFtuiTy4gkD4NEJFhYwP8l70MB8GA1UdIwQY MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt NDZhNDNlZjAyMjFiLzEvUURtSVcyNkpQTGlDUVBnMFFrV0ZqQV95WHZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueufMA0G CSqGSIb3DQEBCwUAA4IBAQBM6A7jTYvdu5a1QqC7E6MSWTWDKLRlhacyh7J/YQ69 YsWiDhZmnYNazuDGkJFzIxhXCmi5aLFBj5axKLjzuBw8zInwINhfyD829WQBE+9W WCUy7mssYB9idx5fiHDOJbyfmAMn75jnKO+Bt05j8az8gkUfxg1PCs29DntyhSvI J7NGOC6/8Q7G1W4c7hY80c2iA5c/SlQosx8TcSrkPZAAB4C99gCPsRSHa7Qg0wZ4 DSW/B0mkzuOjZ+w64PTjMLEHBCKXnglU/Dv0AKXDsfrmQZyycAvYgEbx23sP2gq/ flsf8tkLojU2vJQIQDmQW0bDvUMDXF4GGT9UuMnkgG0L -----END CERTIFICATE-----Generated at Sat Jan 10 14:12:53 2026 by rpki-client