This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/Q_pklcKoKOD_nN51CeHDazpdFrU.roa File: Q_pklcKoKOD_nN51CeHDazpdFrU.roa (raw, json) Hash identifier: KJqqca0qhwgoToM/nVHmRLq690y4UQj7F7FRwDzqOxw= Subject key identifier: 43:FA:64:95:C2:A8:28:E0:FF:9C:DE:75:09:E1:C3:6B:3A:5D:16:B5 Certificate issuer: /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e Certificate serial: 019B7FF200192B28045E90D493A5F15F41C9 Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/Q_pklcKoKOD_nN51CeHDazpdFrU.roa Signing time: Fri 02 Jan 2026 18:22:04 +0000 ROA not before: Fri 02 Jan 2026 18:22:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44454 IP address blocks: 85.202.144.0/20 maxlen: 32 178.216.88.0/21 maxlen: 32 185.46.104.0/22 maxlen: 32 2a01:8160::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:00:19:2b:28:04:5e:90:d4:93:a5:f1:5f:41:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e Validity Not Before: Jan 2 18:22:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43fa6495c2a828e0ff9cde7509e1c36b3a5d16b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:1d:22:b1:77:47:c2:fb:a0:99:fa:5d:b4: 08:ca:f4:64:a5:f2:14:39:cc:41:4c:6c:2f:31:bb: 2f:86:00:9f:d1:09:0e:f0:1d:79:fe:76:cb:fb:49: 19:77:3b:1b:18:f3:12:f7:6d:8e:ad:7a:0e:62:30: 30:f3:d6:79:ff:2b:e5:70:4c:f9:00:9c:57:57:59: 06:51:fb:9d:cf:d7:54:a6:b0:0e:42:a5:6c:70:78: 5e:7f:f2:33:84:f3:c4:90:a1:50:9d:41:a0:d9:1e: 23:30:8f:11:63:cd:82:36:78:04:59:4e:41:e6:aa: 96:4f:9c:58:35:8e:67:14:a3:1b:57:8d:b8:b2:73: b0:86:11:34:8d:a5:06:a8:9c:03:4c:f5:08:fe:69: 3c:63:f4:94:10:b6:88:fb:22:f6:9c:e2:10:de:e3: 97:91:56:bb:1d:8d:4d:51:9e:c6:14:d3:01:b3:da: 17:fd:4e:e6:23:ed:05:e8:c1:83:ae:54:a6:b2:f2: 59:ba:bf:93:56:e4:fc:3f:ba:f3:53:91:42:90:25: f8:f7:b7:e1:5d:88:20:07:b5:2a:13:d8:e0:08:08: 9d:ca:e3:6a:6f:dc:28:93:13:1e:9f:99:ad:b2:19: a2:a3:5e:5a:5a:31:fa:f8:ea:85:0b:c5:53:85:2f: 89:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FA:64:95:C2:A8:28:E0:FF:9C:DE:75:09:E1:C3:6B:3A:5D:16:B5 X509v3 Authority Key Identifier: keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/Q_pklcKoKOD_nN51CeHDazpdFrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.144.0/20 178.216.88.0/21 185.46.104.0/22 IPv6: 2a01:8160::/32 Signature Algorithm: sha256WithRSAEncryption 64:27:89:6e:48:94:b1:82:89:ee:62:6e:f0:54:3f:97:21:7c: 8d:b2:00:37:92:35:48:df:7d:12:2b:15:2a:67:e0:9e:8d:29: 81:75:9f:c2:37:a3:5f:1e:5e:76:4c:c2:03:61:d5:0b:3b:cf: e1:f1:08:42:91:89:b0:d6:53:a6:6b:d3:cd:ac:b5:f2:b5:ba: d2:61:fe:40:5e:8b:fb:58:dd:2d:8e:a5:8b:62:62:81:ac:44: d8:be:bc:9f:c4:23:8e:25:39:6e:c7:ac:91:a7:44:d2:7e:41: a4:d7:dd:93:31:4b:2e:5d:65:df:f2:a0:ca:9c:13:75:15:97: b2:f9:81:a8:d8:12:61:19:f3:a7:bd:17:68:e7:f4:b9:ac:63: af:d9:7d:63:02:77:26:c5:8f:c4:1b:25:78:2d:05:d4:d9:19: 20:5f:58:77:82:89:59:4c:07:5d:09:74:64:41:03:75:65:da: 70:19:8a:ae:c7:94:13:56:1a:38:4e:3a:45:33:f9:d6:30:c3: f1:84:ce:6d:b4:91:2d:19:a5:7b:b0:81:4f:10:01:f6:8d:7f: 0a:30:7e:82:e1:31:a3:65:0a:62:aa:cc:92:fc:9f:da:96:79: 45:f4:84:38:fe:af:08:ce:04:e6:18:d2:d4:90:4e:51:0d:45: cc:cf:37:2e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/8gAZKygEXpDUk6XxX0HJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjZiNDliZTRkNjBhMDcyYTRiYTZjYTk3OTNmODkzYjU5 ZTRjOWUwHhcNMjYwMTAyMTgyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2ZhNjQ5NWMyYTgyOGUwZmY5Y2RlNzUwOWUxYzM2YjNhNWQxNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ0dIrF3R8L7oJn6XbQIyvRkpfIU OcxBTGwvMbsvhgCf0QkO8B15/nbL+0kZdzsbGPMS922OrXoOYjAw89Z5/yvlcEz5 AJxXV1kGUfudz9dUprAOQqVscHhef/IzhPPEkKFQnUGg2R4jMI8RY82CNngEWU5B 5qqWT5xYNY5nFKMbV424snOwhhE0jaUGqJwDTPUI/mk8Y/SUELaI+yL2nOIQ3uOX kVa7HY1NUZ7GFNMBs9oX/U7mI+0F6MGDrlSmsvJZur+TVuT8P7rzU5FCkCX497fh XYggB7UqE9jgCAidyuNqb9wokxMen5mtshmio15aWjH6+OqFC8VThS+JmQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEP6ZJXCqCjg/5zedQnhw2s6XRa1MB8GA1UdIwQY MBaAFLi2tJvk1goHKkumypeT+JO1nkyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMt OTliNGQ0YWNlNjkzLzEvUV9wa2xjS29LT0Rfbk41MUNlSERhenBkRnJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMtOTliNGQ0YWNlNjkz LzEvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEVcqQAwQD sthYAwQCuS5oMA0EAgACMAcDBQAqAYFgMA0GCSqGSIb3DQEBCwUAA4IBAQBkJ4lu SJSxgonuYm7wVD+XIXyNsgA3kjVI330SKxUqZ+CejSmBdZ/CN6NfHl52TMIDYdUL O8/h8QhCkYmw1lOma9PNrLXytbrSYf5AXov7WN0tjqWLYmKBrETYvryfxCOOJTlu x6yRp0TSfkGk192TMUsuXWXf8qDKnBN1FZey+YGo2BJhGfOnvRdo5/S5rGOv2X1j AncmxY/EGyV4LQXU2RkgX1h3golZTAddCXRkQQN1ZdpwGYqux5QTVho4TjpFM/nW MMPxhM5ttJEtGaV7sIFPEAH2jX8KMH6C4TGjZQpiqsyS/J/alnlF9IQ4/q8IzgTm GNLUkE5RDUXMzzcu -----END CERTIFICATE-----Generated at Mon Jan 12 08:31:10 2026 by rpki-client