This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/QNKjsNYl40H8qS_OmmUbDRHp_R0.roa File: QNKjsNYl40H8qS_OmmUbDRHp_R0.roa (raw, json) Hash identifier: GhfQFXVRCo9fwAs1bLrZZyBrkFQV/H6WcDnsJN7q33o= Subject key identifier: 40:D2:A3:B0:D6:25:E3:41:FC:A9:2F:CE:9A:65:1B:0D:11:E9:FD:1D Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7 Certificate serial: 019B7C7FF01CC06F1AFBA58678809407A2BE Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/QNKjsNYl40H8qS_OmmUbDRHp_R0.roa Signing time: Fri 02 Jan 2026 02:18:37 +0000 ROA not before: Fri 02 Jan 2026 02:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49178 IP address blocks: 185.237.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f0:1c:c0:6f:1a:fb:a5:86:78:80:94:07:a2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7 Validity Not Before: Jan 2 02:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40d2a3b0d625e341fca92fce9a651b0d11e9fd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:af:49:96:ac:5b:b1:d7:01:41:02:9d:e5: 5e:4f:8c:d9:63:15:cd:57:59:24:4c:87:4b:61:93: 15:e0:c1:90:2f:a2:cd:10:e1:bc:b2:a5:42:26:94: c6:02:3c:76:27:b7:33:b0:a1:d0:51:e9:7f:89:4c: 51:e7:11:2e:39:5a:95:09:47:fc:cd:5c:a5:f0:36: c0:f3:87:47:03:06:a2:59:2c:36:56:d8:71:31:aa: 6d:f2:57:c6:fe:ef:c9:02:e0:39:af:88:bf:be:3a: c8:00:f8:29:3a:e2:a6:bd:3f:31:46:8b:94:6d:07: 9a:d9:e2:8f:37:cb:bd:ee:a6:77:8f:7e:3b:b0:73: a3:77:3b:d9:9b:04:67:67:33:59:3f:12:92:ac:7f: 8e:29:73:36:45:cd:af:b1:01:60:6d:28:64:92:6f: c4:ef:33:96:e2:73:6f:92:b7:13:dc:e8:a4:2d:ac: f9:70:2f:7b:68:d4:7a:0c:c0:c7:3d:26:f4:1a:0c: bb:6d:a4:f5:65:db:1c:77:19:1e:1a:08:9e:04:3e: 0c:b9:fa:56:a9:72:4b:c8:70:4d:21:7e:44:2c:d8: d2:06:3d:3c:2b:71:bf:b4:75:60:9f:33:4e:df:2d: 64:57:48:fd:25:e8:fa:11:1e:6b:21:e8:26:22:fc: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D2:A3:B0:D6:25:E3:41:FC:A9:2F:CE:9A:65:1B:0D:11:E9:FD:1D X509v3 Authority Key Identifier: keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/QNKjsNYl40H8qS_OmmUbDRHp_R0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.180.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:8e:c1:71:16:73:8f:90:2a:30:f4:ed:d4:09:9c:7c:f8:45: 13:71:a3:33:58:64:c4:b5:50:19:4b:df:f8:22:90:f3:34:ca: f5:c1:de:07:7d:af:7f:4f:18:f5:3e:67:90:24:a1:0c:8b:da: 6d:97:c1:90:64:a0:e2:bf:9f:03:9d:b6:46:76:ba:a7:b6:d8: 23:3a:7c:73:94:47:ce:31:37:6e:5b:85:70:0e:87:c2:95:89: c8:7a:97:07:bd:39:e6:9a:6d:14:2e:0b:31:be:95:7e:d7:43: 0a:ea:da:ae:3a:32:b8:1a:0e:e6:ed:b9:4a:2b:52:b4:96:41: 48:5f:96:e7:92:c3:05:c6:82:49:cd:4d:ff:9f:67:b8:e2:bd: 06:d3:96:f0:08:40:b7:33:12:30:78:4b:b7:ab:fe:f4:76:bd: 51:2e:0d:dc:75:e4:c9:4d:d5:8a:e7:81:62:d6:e6:5d:5a:a4: ba:64:11:f7:0c:bb:5d:68:cb:73:4c:70:c6:a1:13:54:92:e2: 73:a1:fd:53:85:57:27:dd:46:d3:7b:5b:f8:a8:4e:a4:e6:7a: 7d:4b:ed:7b:36:7d:d8:df:29:e0:ad:83:ac:73:87:94:1f:9d: e5:2f:86:ff:cc:f8:b5:6e:93:4a:57:db:45:12:60:d7:e0:ec: b7:90:dc:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/AcwG8a+6WGeICUB6K+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmZjOTMzM2RiNDNlMjRiM2YyM2JjNjRhM2FlMTNmNDBm YjBhYTcwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGQyYTNiMGQ2MjVlMzQxZmNhOTJmY2U5YTY1MWIwZDExZTlmZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9SvSZasW7HXAUECneVeT4zZYxXN V1kkTIdLYZMV4MGQL6LNEOG8sqVCJpTGAjx2J7czsKHQUel/iUxR5xEuOVqVCUf8 zVyl8DbA84dHAwaiWSw2VthxMapt8lfG/u/JAuA5r4i/vjrIAPgpOuKmvT8xRouU bQea2eKPN8u97qZ3j347sHOjdzvZmwRnZzNZPxKSrH+OKXM2Rc2vsQFgbShkkm/E 7zOW4nNvkrcT3OikLaz5cC97aNR6DMDHPSb0Ggy7baT1ZdscdxkeGgieBD4MufpW qXJLyHBNIX5ELNjSBj08K3G/tHVgnzNO3y1kV0j9Jej6ER5rIegmIvxvMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEDSo7DWJeNB/KkvzpplGw0R6f0dMB8GA1UdIwQY MBaAFMMvyTM9tD4ks/I7xko64T9A+wqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWIt YTY3MTkxNWVlOTlhLzEvUU5LanNOWWw0MEg4cVNfT21tVWJEUkhwX1IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWItYTY3MTkxNWVlOTlh LzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue20MA0G CSqGSIb3DQEBCwUAA4IBAQBNjsFxFnOPkCow9O3UCZx8+EUTcaMzWGTEtVAZS9/4 IpDzNMr1wd4Hfa9/Txj1PmeQJKEMi9ptl8GQZKDiv58DnbZGdrqnttgjOnxzlEfO MTduW4VwDofClYnIepcHvTnmmm0ULgsxvpV+10MK6tquOjK4Gg7m7blKK1K0lkFI X5bnksMFxoJJzU3/n2e44r0G05bwCEC3MxIweEu3q/70dr1RLg3cdeTJTdWK54Fi 1uZdWqS6ZBH3DLtdaMtzTHDGoRNUkuJzof1ThVcn3UbTe1v4qE6k5np9S+17Nn3Y 3yngrYOsc4eUH53lL4b/zPi1bpNKV9tFEmDX4Oy3kNz9 -----END CERTIFICATE-----Generated at Sat Jan 3 04:13:11 2026 by rpki-client