This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/qWMcoazuJWd0mzovPbjclSWnCpk.roa File: qWMcoazuJWd0mzovPbjclSWnCpk.roa (raw, json) Hash identifier: nWdd8YlV26SHwkLvSuGYiscACa3svh/Yxd8Z+LoR89Q= Subject key identifier: A9:63:1C:A1:AC:EE:25:67:74:9B:3A:2F:3D:B8:DC:95:25:A7:0A:99 Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Certificate serial: 019B7EA5129BCE2D26851B33239262735D6C Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/qWMcoazuJWd0mzovPbjclSWnCpk.roa Signing time: Fri 02 Jan 2026 12:18:26 +0000 ROA not before: Fri 02 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 185.123.252.0/24 maxlen: 24 185.123.253.0/24 maxlen: 24 185.123.254.0/24 maxlen: 24 185.123.255.0/24 maxlen: 24 185.128.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:12:9b:ce:2d:26:85:1b:33:23:92:62:73:5d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Validity Not Before: Jan 2 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9631ca1acee2567749b3a2f3db8dc9525a70a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:58:41:ef:38:85:fa:b3:68:6c:95:fe:cb: 95:fa:e7:ec:96:6f:dd:5a:26:f8:07:59:b2:d8:8f: 2e:cf:a3:2d:92:64:33:f4:2a:4d:5c:86:66:e6:ac: 95:a1:5e:55:63:88:31:d6:38:28:c4:88:96:ac:57: f4:e5:ae:2c:a0:ac:7f:7a:21:79:e1:b1:70:1a:03: 5b:6f:33:35:30:59:a9:64:59:a6:67:7d:df:ee:db: f8:0e:88:ae:95:25:a1:54:9f:22:4b:be:fc:65:ed: 9c:da:33:de:08:aa:b3:80:f6:46:78:6c:f6:3c:91: e1:f3:24:7a:4a:e4:a4:c7:c6:02:13:37:eb:63:9f: fc:e9:7b:d7:67:a8:7c:f6:09:90:3c:8a:9f:d7:5f: 82:bd:12:bc:3d:71:94:a2:84:37:16:bf:9d:3f:6c: 14:58:5a:36:ff:bd:df:78:dd:cf:69:e7:78:a3:b8: 11:11:b0:60:0f:0c:e4:51:28:3f:c6:bb:4a:40:a8: 92:01:d5:54:1e:ee:ed:15:c4:85:84:51:c9:27:8e: 0f:94:0e:72:72:4e:ef:51:a2:20:3b:8d:b4:cc:52: 0e:82:2b:01:97:31:fe:ca:26:3c:86:c8:8e:91:9a: e2:1e:b2:0f:4b:b6:aa:9e:9a:2c:bb:6c:ee:a1:25: 46:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:63:1C:A1:AC:EE:25:67:74:9B:3A:2F:3D:B8:DC:95:25:A7:0A:99 X509v3 Authority Key Identifier: keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/qWMcoazuJWd0mzovPbjclSWnCpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.252.0/22 185.128.135.0/24 Signature Algorithm: sha256WithRSAEncryption 85:e8:59:a3:a1:80:cd:0c:eb:31:96:02:49:2e:06:c5:2d:6c: 4a:14:68:02:75:18:1d:77:41:c3:8f:66:68:78:4d:ba:1a:e5: e5:c8:60:db:4f:0f:d3:90:4e:ed:4d:ed:ce:75:9c:68:56:f7: 1b:53:09:37:80:57:10:5a:97:28:69:23:11:8f:01:90:2e:2c: 4c:c0:60:39:02:d0:5a:3e:d8:d3:11:94:af:3a:82:0c:41:ad: f5:d3:b8:23:d1:1d:07:8f:2a:1f:8b:f7:98:86:d2:c7:be:43: 1d:3c:3d:c8:40:79:be:34:97:7b:9c:16:8e:8a:0e:3b:6e:1e: 98:cb:d9:d3:93:2c:2e:f0:80:4b:d6:18:e4:68:17:ee:c3:0d: e7:c7:14:e4:8e:30:3e:9f:e5:0c:40:cd:de:83:35:69:ab:ac: df:02:69:3d:51:1b:9b:a2:61:1d:2a:3c:af:e0:eb:2b:20:e3: 64:1d:ee:3a:f5:d0:e8:97:c7:86:04:b1:cf:77:c1:87:8d:d4: c5:88:1b:ce:ab:24:f4:68:f2:6d:ab:0d:25:fb:cc:e8:7f:ef: fe:82:ff:13:3d:03:51:30:9e:0b:4c:73:a9:de:3b:29:d9:20: 6d:00:28:de:b9:57:71:59:a9:95:da:3b:0e:a9:09:b4:ca:b7: 74:58:6b:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pRKbzi0mhRszI5Jic11sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh YTg1MjIwHhcNMjYwMTAyMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTYzMWNhMWFjZWUyNTY3NzQ5YjNhMmYzZGI4ZGM5NTI1YTcwYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0tYQe84hfqzaGyV/suV+ufslm/d Wib4B1my2I8uz6MtkmQz9CpNXIZm5qyVoV5VY4gx1jgoxIiWrFf05a4soKx/eiF5 4bFwGgNbbzM1MFmpZFmmZ33f7tv4DoiulSWhVJ8iS778Ze2c2jPeCKqzgPZGeGz2 PJHh8yR6SuSkx8YCEzfrY5/86XvXZ6h89gmQPIqf11+CvRK8PXGUooQ3Fr+dP2wU WFo2/73feN3Paed4o7gREbBgDwzkUSg/xrtKQKiSAdVUHu7tFcSFhFHJJ44PlA5y ck7vUaIgO420zFIOgisBlzH+yiY8hsiOkZriHrIPS7aqnposu2zuoSVGoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKljHKGs7iVndJs6Lz243JUlpwqZMB8GA1UdIwQY MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt NzBhMWFmNTFkZmJlLzEvcVdNY29henVKV2QwbXpvdlBiamNsU1duQ3BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuXv8AwQA uYCHMA0GCSqGSIb3DQEBCwUAA4IBAQCF6FmjoYDNDOsxlgJJLgbFLWxKFGgCdRgd d0HDj2ZoeE26GuXlyGDbTw/TkE7tTe3OdZxoVvcbUwk3gFcQWpcoaSMRjwGQLixM wGA5AtBaPtjTEZSvOoIMQa3107gj0R0Hjyofi/eYhtLHvkMdPD3IQHm+NJd7nBaO ig47bh6Yy9nTkywu8IBL1hjkaBfuww3nxxTkjjA+n+UMQM3egzVpq6zfAmk9URub omEdKjyv4OsrIONkHe469dDol8eGBLHPd8GHjdTFiBvOqyT0aPJtqw0l+8zof+/+ gv8TPQNRMJ4LTHOp3jsp2SBtACjeuVdxWamV2jsOqQm0yrd0WGtw -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:53 2026 by rpki-client