This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/QbuCVG1sfh_qrKSvUTqqkkFtShU.roa File: QbuCVG1sfh_qrKSvUTqqkkFtShU.roa (raw, json) Hash identifier: vVlbCWR3CeEofOXACZ7iuxfcagqufnEEze+JXa0aiW8= Subject key identifier: 41:BB:82:54:6D:6C:7E:1F:EA:AC:A4:AF:51:3A:AA:92:41:6D:4A:15 Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64 Certificate serial: 019B79EC9EDEC18731FEF185DE65F9CF1173 Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/QbuCVG1sfh_qrKSvUTqqkkFtShU.roa Signing time: Thu 01 Jan 2026 14:18:28 +0000 ROA not before: Thu 01 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201587 IP address blocks: 85.194.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9e:de:c1:87:31:fe:f1:85:de:65:f9:cf:11:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64 Validity Not Before: Jan 1 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41bb82546d6c7e1feaaca4af513aaa92416d4a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:f0:0a:29:ee:cb:da:d0:17:69:13:64:77: a3:eb:0e:27:63:ce:d9:fd:6d:f4:46:0d:bf:95:88: ff:f1:d8:92:52:ba:65:d0:45:25:77:a5:2c:8c:be: 8a:04:1f:31:96:e5:db:1e:a0:17:00:2c:d2:92:90: c0:90:05:95:f8:38:85:46:02:83:77:e2:17:57:26: 95:13:36:d1:b1:22:83:6c:38:4a:73:12:4e:ae:e7: de:03:04:7d:f4:ed:45:48:9b:d6:a6:dd:8e:be:08: 41:53:e9:6d:72:f4:f3:e5:9a:ae:ea:c8:97:96:b9: ec:ea:46:db:ab:ad:8a:79:f4:58:26:4a:25:c4:c8: 87:76:e9:a3:7b:3d:77:bc:9a:b0:e9:88:61:59:cb: 80:fe:0e:a7:13:38:bc:13:aa:a7:84:a0:33:db:4a: e8:84:fb:41:1b:d3:dd:80:18:47:aa:57:e5:8c:39: 00:6b:db:39:df:43:b9:f2:aa:8c:94:11:57:41:14: 26:66:68:9e:80:2c:e5:b6:d4:88:c6:76:39:e5:af: c2:c2:85:61:06:23:0b:92:a8:8c:64:9d:2b:d7:12: f0:3c:6e:7e:bc:80:4e:12:7c:90:34:3e:42:a1:63: b2:6e:f0:02:51:6d:52:9b:a9:14:93:d3:0b:b2:08: c3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BB:82:54:6D:6C:7E:1F:EA:AC:A4:AF:51:3A:AA:92:41:6D:4A:15 X509v3 Authority Key Identifier: keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/QbuCVG1sfh_qrKSvUTqqkkFtShU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.194.224.0/21 Signature Algorithm: sha256WithRSAEncryption 45:f2:9f:dd:a7:a0:3d:35:2b:00:6a:b6:36:96:5e:c4:c0:41: 66:d0:54:82:5f:fb:1e:07:af:9a:00:df:35:cd:45:98:33:76: e7:d7:8b:ea:20:86:53:d6:c4:d2:d0:9c:06:d6:27:63:94:5b: 5a:db:bb:a3:e4:ac:70:42:de:e3:9f:af:a8:34:7c:63:f4:dd: c8:17:7d:8e:6b:62:42:13:d3:5e:f3:6a:d6:e9:b9:cb:b3:22: 9f:0f:b1:b8:8e:8e:56:f1:2e:3a:48:dc:cd:76:cf:c7:89:2c: 12:e9:e5:11:e9:9e:0e:19:34:cc:78:de:d8:3b:4f:0c:87:ee: 7b:5a:d7:36:58:c6:6a:5f:9f:2f:cf:25:35:5c:76:cc:e1:67: ce:99:15:91:7a:3d:18:2c:de:c2:3f:bb:4b:8f:d5:60:85:b3: e2:93:b1:3f:59:ee:aa:94:c5:f1:68:d5:f9:d7:f9:a2:d8:2f: 5f:09:05:4c:71:be:d2:56:5d:38:f9:6e:d3:09:50:d5:ab:b5: 36:81:eb:26:a7:2f:59:cd:10:f5:d5:40:04:ff:a5:8f:7b:79: 58:76:45:f6:75:74:21:7b:77:39:c5:a7:f9:00:cc:63:96:f7: 6f:4b:7b:cc:bc:6f:7d:28:ab:ff:c5:49:33:b1:b8:06:7f:8d: c4:05:9d:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57J7ewYcx/vGF3mX5zxFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmIwOTlhYTQzMDgxYWM4Mzk1ZWUwYjkwY2NmMWE4ODQ0 ZjhkNjQwHhcNMjYwMTAxMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWJiODI1NDZkNmM3ZTFmZWFhY2E0YWY1MTNhYWE5MjQxNmQ0YTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWvwCinuy9rQF2kTZHej6w4nY87Z /W30Rg2/lYj/8diSUrpl0EUld6UsjL6KBB8xluXbHqAXACzSkpDAkAWV+DiFRgKD d+IXVyaVEzbRsSKDbDhKcxJOrufeAwR99O1FSJvWpt2OvghBU+ltcvTz5Zqu6siX lrns6kbbq62KefRYJkolxMiHdumjez13vJqw6YhhWcuA/g6nEzi8E6qnhKAz20ro hPtBG9PdgBhHqlfljDkAa9s530O58qqMlBFXQRQmZmiegCzlttSIxnY55a/CwoVh BiMLkqiMZJ0r1xLwPG5+vIBOEnyQND5CoWOybvACUW1Sm6kUk9MLsgjDWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEG7glRtbH4f6qykr1E6qpJBbUoVMB8GA1UdIwQY MBaAFHj7CZqkMIGsg5XuC5DM8aiET41kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMt MmQ4YThkOTY2OWY4LzEvUWJ1Q1ZHMXNmaF9xcktTdlVUcXFra0Z0U2hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMtMmQ4YThkOTY2OWY4 LzEvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVcLgMA0G CSqGSIb3DQEBCwUAA4IBAQBF8p/dp6A9NSsAarY2ll7EwEFm0FSCX/seB6+aAN81 zUWYM3bn14vqIIZT1sTS0JwG1idjlFta27uj5KxwQt7jn6+oNHxj9N3IF32Oa2JC E9Ne82rW6bnLsyKfD7G4jo5W8S46SNzNds/HiSwS6eUR6Z4OGTTMeN7YO08Mh+57 Wtc2WMZqX58vzyU1XHbM4WfOmRWRej0YLN7CP7tLj9VghbPik7E/We6qlMXxaNX5 1/mi2C9fCQVMcb7SVl04+W7TCVDVq7U2gesmpy9ZzRD11UAE/6WPe3lYdkX2dXQh e3c5xaf5AMxjlvdvS3vMvG99KKv/xUkzsbgGf43EBZ0J -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:15 2026 by rpki-client