This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/QjFn6_kap5YT5wJGjuWydP9ovDM.roa File: QjFn6_kap5YT5wJGjuWydP9ovDM.roa (raw, json) Hash identifier: /kI/7NdcivqH51KbH9Az38dv1Sm+7SZzBZyhFKOG6OY= Subject key identifier: 42:31:67:EB:F9:1A:A7:96:13:E7:02:46:8E:E5:B2:74:FF:68:BC:33 Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002 Certificate serial: 019B7A5A8DB52B5206B7698588439A6A9227 Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/QjFn6_kap5YT5wJGjuWydP9ovDM.roa Signing time: Thu 01 Jan 2026 16:18:33 +0000 ROA not before: Thu 01 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205451 IP address blocks: 185.218.44.0/22 maxlen: 22 2a0c:8b00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8d:b5:2b:52:06:b7:69:85:88:43:9a:6a:92:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=423167ebf91aa79613e702468ee5b274ff68bc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:25:e7:20:30:74:5f:53:9e:75:c2:80:d2: a2:54:25:0f:02:51:1b:a4:a5:6d:fb:46:43:3b:47: 3a:9d:bd:78:4b:e6:a1:34:5c:2a:52:7e:b8:93:57: d0:4f:cc:33:f8:7f:d2:69:5a:b2:b4:20:e3:a7:c8: fb:1c:41:cd:55:16:e1:8b:81:50:a1:3f:9f:0c:d4: ad:fd:49:c4:27:9a:27:97:ed:c1:5a:f6:fa:17:d9: 1f:cf:b9:5f:32:8f:8c:3c:52:ab:16:3e:5a:b2:20: 19:5c:fe:01:e5:a3:83:3c:73:4d:42:62:26:3d:09: 5e:ca:d2:31:48:06:ae:b9:aa:fd:0e:2b:1f:2c:08: d4:a9:80:10:40:14:60:11:30:65:cd:70:6f:b3:0a: 0d:22:3e:d4:90:a5:54:2d:48:76:f1:a7:8f:a9:a9: 5f:74:52:19:f1:1a:db:1c:a5:7c:c7:bf:7f:0a:ef: 83:96:fc:99:37:57:98:ec:e2:3e:95:30:a1:51:1f: a7:fc:4c:0e:2c:39:39:ae:3c:1e:73:2b:03:42:e3: 26:ae:a3:99:5c:53:76:8d:96:b4:aa:ff:60:35:e9: 76:47:5a:0e:31:11:25:31:ac:e6:a1:2c:5d:f5:50: 12:4e:f2:26:1b:20:f2:28:ef:dd:57:50:41:69:fa: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:31:67:EB:F9:1A:A7:96:13:E7:02:46:8E:E5:B2:74:FF:68:BC:33 X509v3 Authority Key Identifier: keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/QjFn6_kap5YT5wJGjuWydP9ovDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.44.0/22 IPv6: 2a0c:8b00::/32 Signature Algorithm: sha256WithRSAEncryption 5d:2d:e7:16:ad:a5:17:2c:20:ff:e1:50:e6:bb:fd:3b:ce:61: 5f:dc:82:dd:3b:4a:93:0b:a1:b8:a5:11:4a:79:08:dc:67:8d: 16:b7:85:3a:c0:a6:fe:cd:d4:11:3e:83:b6:6a:d3:4c:82:eb: d7:0c:61:a9:e2:3e:e5:e5:90:6c:65:c5:55:7c:a0:42:18:4f: 63:a8:4c:6e:80:b3:58:6a:9c:5b:39:bb:1a:54:7b:6e:1a:27: 04:d3:ae:ad:f1:83:15:c3:ff:41:71:ab:7d:3d:af:a8:b6:e8: e8:6c:a2:33:78:12:f0:6f:fd:ee:70:54:11:84:7e:02:b8:51: 49:af:8e:65:2e:89:3e:8a:ef:11:f1:d7:d3:a5:3e:a6:45:d5: 9d:74:82:bb:d8:7f:da:63:ae:1e:45:31:5d:65:07:de:65:f6: 82:d0:21:a3:81:cf:f5:53:65:26:3e:85:dd:3c:9a:28:d7:6d: 04:66:87:d2:16:9e:48:d3:ae:22:1b:37:f7:4a:a2:95:15:8e: b3:d0:1c:aa:7c:69:87:e6:39:37:dc:8a:1c:ef:ec:48:59:b1: 02:c0:db:58:2b:85:a6:82:d2:e8:d5:6f:9e:bf:7f:a4:d7:f7: 0d:ff:83:d4:50:f4:cc:ba:eb:7c:5e:2d:d5:ab:59:65:c9:77: 4e:6c:da:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wo21K1IGt2mFiEOaapInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDAxZDc3MDI1ZjA1MmFmN2QwZTYyZTE3MDEwMTZiOWUy MmUwMDIwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjMxNjdlYmY5MWFhNzk2MTNlNzAyNDY4ZWU1YjI3NGZmNjhiYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLol5yAwdF9TnnXCgNKiVCUPAlEb pKVt+0ZDO0c6nb14S+ahNFwqUn64k1fQT8wz+H/SaVqytCDjp8j7HEHNVRbhi4FQ oT+fDNSt/UnEJ5onl+3BWvb6F9kfz7lfMo+MPFKrFj5asiAZXP4B5aODPHNNQmIm PQleytIxSAauuar9DisfLAjUqYAQQBRgETBlzXBvswoNIj7UkKVULUh28aePqalf dFIZ8RrbHKV8x79/Cu+DlvyZN1eY7OI+lTChUR+n/EwOLDk5rjwecysDQuMmrqOZ XFN2jZa0qv9gNel2R1oOMRElMazmoSxd9VASTvImGyDyKO/dV1BBafpmVwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEIxZ+v5GqeWE+cCRo7lsnT/aLwzMB8GA1UdIwQY MBaAFBoAHXcCXwUq99DmLhcBAWueIuACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8xZjljZWQtNmJjMi00ODZiLWE0YjYt MDliZGViNmFmYWJkLzEvUWpGbjZfa2FwNVlUNXdKR2p1V3lkUDlvdkRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8xZjljZWQtNmJjMi00ODZiLWE0YjYtMDliZGViNmFmYWJk LzEvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudosMA0E AgACMAcDBQAqDIsAMA0GCSqGSIb3DQEBCwUAA4IBAQBdLecWraUXLCD/4VDmu/07 zmFf3ILdO0qTC6G4pRFKeQjcZ40Wt4U6wKb+zdQRPoO2atNMguvXDGGp4j7l5ZBs ZcVVfKBCGE9jqExugLNYapxbObsaVHtuGicE066t8YMVw/9Bcat9Pa+otujobKIz eBLwb/3ucFQRhH4CuFFJr45lLok+iu8R8dfTpT6mRdWddIK72H/aY64eRTFdZQfe ZfaC0CGjgc/1U2UmPoXdPJoo120EZofSFp5I064iGzf3SqKVFY6z0ByqfGmH5jk3 3Ioc7+xIWbECwNtYK4WmgtLo1W+ev3+k1/cN/4PUUPTMuut8Xi3Vq1llyXdObNrI -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:21 2026 by rpki-client