This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qvYAP-lSXmNoClOM3rygyr0zdI0.roa File: qvYAP-lSXmNoClOM3rygyr0zdI0.roa (raw, json) Hash identifier: XZWaUj3+lj06izt55k5PBSAGEgz79sdEGihL99kraEo= Subject key identifier: AA:F6:00:3F:E9:52:5E:63:68:0A:53:8C:DE:BC:A0:CA:BD:33:74:8D Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6CF7BEAE19C7347B736E36B1AA064 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qvYAP-lSXmNoClOM3rygyr0zdI0.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212025 IP address blocks: 85.158.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cf:7b:ea:e1:9c:73:47:b7:36:e3:6b:1a:a0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaf6003fe9525e63680a538cdebca0cabd33748d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:a3:eb:34:95:81:56:32:b7:dd:b0:50:0f: 6a:0b:a1:12:d7:81:ad:27:34:45:9b:a3:ee:3c:e4: 48:24:57:73:a4:d3:52:91:e7:d6:49:57:51:65:ff: f8:33:a7:41:d1:bb:f2:08:93:8d:51:5c:dc:0a:66: 97:0e:e6:63:2e:78:fb:62:7a:ba:15:18:15:61:ac: 03:d1:ae:b4:cb:c1:d5:2b:16:fa:88:bb:0e:d6:38: f7:f6:4e:4e:7e:36:10:54:20:3e:a0:7d:f6:f4:10: f2:62:5c:0e:32:ca:11:91:aa:f7:d8:fe:fa:6c:06: 85:ba:b1:b4:ea:e0:0d:64:31:af:0d:9d:e4:5b:b4: 8a:55:a6:60:7b:cb:0e:96:64:bd:a5:c5:a1:6b:7e: 31:bc:e2:af:b4:4a:d8:6f:a0:2a:7f:ea:2e:06:aa: 9b:3c:bf:bf:7f:50:fe:96:f7:45:31:1b:89:a7:0f: 54:60:53:61:30:35:c1:66:4f:ac:3e:6b:89:ac:3e: 87:9f:b6:35:03:20:17:ff:37:d4:a4:1b:93:b8:e7: 0e:1b:31:76:88:bd:35:ed:c7:c7:ec:f3:22:5e:20: f0:53:62:d2:cc:d9:80:51:44:54:e5:88:11:03:ec: 69:6d:66:93:ce:b7:8e:fb:7d:a2:25:ba:6b:e0:cf: df:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F6:00:3F:E9:52:5E:63:68:0A:53:8C:DE:BC:A0:CA:BD:33:74:8D X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qvYAP-lSXmNoClOM3rygyr0zdI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.145.0/24 Signature Algorithm: sha256WithRSAEncryption b7:cb:a5:df:c0:8f:08:f8:d8:42:d4:02:24:98:ed:91:81:f3: 33:da:6e:51:9c:df:af:b5:76:2f:27:82:ad:dd:e0:0c:91:a7: a6:5a:26:c5:3c:c5:87:22:4b:d3:3f:34:2d:39:a8:fb:0e:c6: 66:36:ca:7a:45:fd:b7:07:03:6d:fd:f1:7f:73:cc:30:83:b3: f2:72:df:e1:95:26:db:4a:5c:25:84:d6:9e:f1:a7:94:99:2f: 1a:f7:52:2a:9b:33:50:b7:6e:24:0f:f6:60:00:cc:2c:b2:7c: 22:5f:39:b7:2a:17:7c:6e:b9:40:6c:26:b0:33:54:10:b6:bc: f4:7c:90:90:6a:c7:e4:43:a4:ee:c5:37:70:04:dd:1c:c4:3b: 06:3c:a8:d2:64:32:f2:b5:54:6f:0a:3b:30:4e:57:01:83:67: 3f:78:63:b7:f2:39:79:bd:85:70:1d:ff:0b:99:e4:d3:3d:9b: 43:42:04:4c:ca:0b:8c:00:dd:44:f7:48:31:e7:51:e1:b9:ab: 6b:4c:0e:41:29:10:6d:08:30:01:fe:84:e6:c3:85:1b:1d:fa: 48:ab:34:e3:34:8e:4f:ff:72:1f:22:f7:8e:05:77:8f:16:3a: c5:e1:ce:03:c4:f4:50:7f:a7:3f:2b:85:54:f7:0a:64:ca:6c: f7:46:cb:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xs976uGcc0e3NuNrGqBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWY2MDAzZmU5NTI1ZTYzNjgwYTUzOGNkZWJjYTBjYWJkMzM3NDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u2j6zSVgVYyt92wUA9qC6ES14Gt JzRFm6PuPORIJFdzpNNSkefWSVdRZf/4M6dB0bvyCJONUVzcCmaXDuZjLnj7Ynq6 FRgVYawD0a60y8HVKxb6iLsO1jj39k5OfjYQVCA+oH329BDyYlwOMsoRkar32P76 bAaFurG06uANZDGvDZ3kW7SKVaZge8sOlmS9pcWha34xvOKvtErYb6Aqf+ouBqqb PL+/f1D+lvdFMRuJpw9UYFNhMDXBZk+sPmuJrD6Hn7Y1AyAX/zfUpBuTuOcOGzF2 iL017cfH7PMiXiDwU2LSzNmAUURU5YgRA+xpbWaTzreO+32iJbpr4M/fSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKr2AD/pUl5jaApTjN68oMq9M3SNMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvcXZZQVAtbFNYbU5vQ2xPTTNyeWd5cjB6ZEkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZ6RMA0G CSqGSIb3DQEBCwUAA4IBAQC3y6XfwI8I+NhC1AIkmO2RgfMz2m5RnN+vtXYvJ4Kt 3eAMkaemWibFPMWHIkvTPzQtOaj7DsZmNsp6Rf23BwNt/fF/c8wwg7Pyct/hlSbb SlwlhNae8aeUmS8a91IqmzNQt24kD/ZgAMwssnwiXzm3Khd8brlAbCawM1QQtrz0 fJCQasfkQ6TuxTdwBN0cxDsGPKjSZDLytVRvCjswTlcBg2c/eGO38jl5vYVwHf8L meTTPZtDQgRMyguMAN1E90gx51HhuatrTA5BKRBtCDAB/oTmw4UbHfpIqzTjNI5P /3IfIveOBXePFjrF4c4DxPRQf6c/K4VU9wpkymz3Rsv8 -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:01 2026 by rpki-client