This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/qhCkwBj6GnED90E3xbK34LcjKis.roa File: qhCkwBj6GnED90E3xbK34LcjKis.roa (raw, json) Hash identifier: sb4gZUUWKHHhpKTxH1X0qzK99oh2HCmziKT/wMaI3QE= Subject key identifier: AA:10:A4:C0:18:FA:1A:71:03:F7:41:37:C5:B2:B7:E0:B7:23:2A:2B Certificate issuer: /CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be Certificate serial: 019B7A5B93FB2285A49EA95856EA9BB0FFAE Authority key identifier: CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/qhCkwBj6GnED90E3xbK34LcjKis.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213557 IP address blocks: 185.125.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:93:fb:22:85:a4:9e:a9:58:56:ea:9b:b0:ff:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa10a4c018fa1a7103f74137c5b2b7e0b7232a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:7b:61:35:98:a4:71:8b:22:f5:75:3d:a5: 38:9c:15:a6:30:2e:d5:9f:f4:62:1a:73:57:15:b2: 36:f2:5e:aa:12:4b:9d:94:6f:7c:90:79:01:58:ba: 79:23:29:a0:53:50:28:2a:06:86:7a:95:26:13:a4: c4:4b:42:68:42:cc:44:af:1e:e4:a7:03:a8:35:bf: 27:97:81:d6:d1:3b:3e:b4:8b:c0:22:09:12:65:79: 6a:87:0f:0b:fc:e7:39:b7:8c:de:d4:82:b1:27:85: ee:40:5a:3a:e2:05:28:b7:85:98:35:11:a4:3c:a2: c5:8c:f0:c4:2c:2c:f5:2e:5f:23:ba:b5:3d:92:4a: 2a:e5:4d:40:b1:39:65:66:84:fb:7d:42:9c:79:ad: f1:64:45:17:ac:d7:d4:bd:30:ed:7d:12:ac:c0:81: a9:c3:d4:69:a4:6c:16:2d:af:00:e1:fa:90:4c:bb: d2:f2:29:2d:74:12:71:fc:fd:78:b0:9e:65:3a:d2: f6:8b:49:d8:cb:3f:1f:f9:e4:c6:fb:44:01:1a:86: 9c:c2:4e:d5:de:c0:f0:86:19:56:b9:41:b6:23:53: dd:03:f6:9a:69:3f:5d:a5:a4:a7:6e:04:6c:3f:c6: 11:3b:fa:6d:c6:11:a0:2b:e3:ac:0f:e6:17:98:6d: 83:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:A4:C0:18:FA:1A:71:03:F7:41:37:C5:B2:B7:E0:B7:23:2A:2B X509v3 Authority Key Identifier: keyid:CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/qhCkwBj6GnED90E3xbK34LcjKis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.240.0/24 Signature Algorithm: sha256WithRSAEncryption ce:f0:df:99:d9:4e:e7:c3:40:c9:b6:7f:90:a1:25:2f:17:8d: 0a:a1:da:47:f2:b8:b8:2e:ec:19:58:9b:95:b8:44:4c:2a:99: 92:af:46:31:52:bc:5e:93:df:1e:12:a7:68:fb:e3:4e:8b:9e: 86:4b:59:ce:1b:23:59:9a:db:08:5b:87:30:7b:7c:ba:cd:6c: c5:47:30:b7:d3:56:62:0e:3e:cb:3e:33:67:9d:98:0f:52:dc: df:5a:e9:73:f0:22:dc:e7:87:87:eb:c8:8f:39:03:c2:19:f8: 14:c3:8a:58:e3:50:cd:b5:b6:55:12:4b:5a:77:61:db:36:68: 9b:eb:b7:ec:b0:0b:c4:78:bf:82:54:6e:d6:20:a2:34:6e:75: 83:22:19:b3:b3:f3:63:f7:46:02:52:11:08:94:10:b2:3e:af: ac:22:f3:72:ca:f2:86:f0:c4:a9:a7:8f:3e:30:ec:83:7b:b3: 54:1c:2d:7c:8e:71:3a:fd:f4:72:b4:af:dd:d6:a2:01:c2:31: 07:be:80:37:7d:e3:2d:2a:b5:b3:4f:c7:8b:b7:b9:1e:66:fb: db:4a:5b:8b:ba:c8:4d:5f:01:98:3f:fd:54:ae:f0:69:b2:58: c2:75:db:f9:65:f0:9e:0f:56:f3:e9:e7:2f:59:e3:7e:37:86: 52:60:04:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5P7IoWknqlYVuqbsP+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTQ2OTRlYzI0ZWE3MTVkY2EyZDI3YTMyMWMwNGJkMGIw YzkwYmUwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTEwYTRjMDE4ZmExYTcxMDNmNzQxMzdjNWIyYjdlMGI3MjMyYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIt7YTWYpHGLIvV1PaU4nBWmMC7V n/RiGnNXFbI28l6qEkudlG98kHkBWLp5IymgU1AoKgaGepUmE6TES0JoQsxErx7k pwOoNb8nl4HW0Ts+tIvAIgkSZXlqhw8L/Oc5t4ze1IKxJ4XuQFo64gUot4WYNRGk PKLFjPDELCz1Ll8jurU9kkoq5U1AsTllZoT7fUKcea3xZEUXrNfUvTDtfRKswIGp w9RppGwWLa8A4fqQTLvS8iktdBJx/P14sJ5lOtL2i0nYyz8f+eTG+0QBGoacwk7V 3sDwhhlWuUG2I1PdA/aaaT9dpaSnbgRsP8YRO/ptxhGgK+OsD+YXmG2DvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKoQpMAY+hpxA/dBN8Wyt+C3IyorMB8GA1UdIwQY MBaAFM/kaU7CTqcV3KLSejIcBL0LDJC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1ScFRzSk9weFhjb3RKNk1od0V2UXNNa0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NzMzOWMtY2RiZC00NjI2LWJlMjUt YzViNjRjNTI4ZTI4LzEvcWhDa3dCajZHbkVEOTBFM3hiSzM0TGNqS2lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NzMzOWMtY2RiZC00NjI2LWJlMjUtYzViNjRjNTI4ZTI4 LzEvei1ScFRzSk9weFhjb3RKNk1od0V2UXNNa0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX3wMA0G CSqGSIb3DQEBCwUAA4IBAQDO8N+Z2U7nw0DJtn+QoSUvF40KodpH8ri4LuwZWJuV uERMKpmSr0YxUrxek98eEqdo++NOi56GS1nOGyNZmtsIW4cwe3y6zWzFRzC301Zi Dj7LPjNnnZgPUtzfWulz8CLc54eH68iPOQPCGfgUw4pY41DNtbZVEktad2HbNmib 67fssAvEeL+CVG7WIKI0bnWDIhmzs/Nj90YCUhEIlBCyPq+sIvNyyvKG8MSpp48+ MOyDe7NUHC18jnE6/fRytK/d1qIBwjEHvoA3feMtKrWzT8eLt7keZvvbSluLushN XwGYP/1UrvBpsljCddv5ZfCeD1bz6ecvWeN+N4ZSYASS -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:03 2026 by rpki-client