This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/QhRLDpCA8okURdA4C54ftPnnfT8.roa File: QhRLDpCA8okURdA4C54ftPnnfT8.roa (raw, json) Hash identifier: +BEAp9sAudWy6A/smDJICmamsmKPRmKsTiVNouNzZXg= Subject key identifier: 42:14:4B:0E:90:80:F2:89:14:45:D0:38:0B:9E:1F:B4:F9:E7:7D:3F Certificate issuer: /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f Certificate serial: 019B79ECBCD333A36F2C7DCC630E1CC71C10 Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/QhRLDpCA8okURdA4C54ftPnnfT8.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204515 IP address blocks: 185.230.76.0/22 maxlen: 22 2a0c:700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bc:d3:33:a3:6f:2c:7d:cc:63:0e:1c:c7:1c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42144b0e9080f2891445d0380b9e1fb4f9e77d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e6:39:b0:e4:78:e1:1e:24:81:0e:67:53:a4: 0c:e0:08:8a:f5:b6:3b:e8:78:e4:c8:c6:04:16:ce: 60:78:49:32:1b:0d:8b:99:6e:4d:82:24:c4:59:5b: f7:02:c4:19:e4:b2:91:8f:ab:73:8e:c2:79:cc:e4: 47:f8:c1:45:80:bf:a4:d6:4d:6a:97:c0:b7:ad:1f: ed:09:53:8a:73:d8:0b:62:b2:19:d6:24:d2:13:67: 21:27:6d:b5:e1:8d:1f:27:20:02:d0:ef:51:b8:72: 1e:8a:98:9a:89:5b:62:46:b8:5e:ad:f5:17:03:76: 74:54:69:18:4c:9a:bc:1e:3c:9e:bc:37:9d:39:39: 2d:cb:ec:de:22:1c:ea:42:c5:5f:20:ee:51:c3:8d: 64:21:93:bc:82:ea:9e:fe:c0:6f:5a:52:4a:af:60: 86:0d:2d:12:c9:03:64:c8:4e:c4:23:57:7b:fc:7c: 2f:cf:c2:c6:19:6d:e4:b0:e8:d3:10:75:8e:1e:29: a2:bf:ab:55:5f:e5:fc:0b:ae:54:4f:d8:1e:51:58: 8c:37:20:e0:c5:55:cb:aa:91:25:f4:5e:90:de:cf: 9a:b5:9c:5c:b7:6c:8e:d0:f9:9b:04:74:4f:14:a1: d0:d3:5f:43:6f:98:0f:b3:c1:f9:32:28:fe:7e:6c: 99:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:14:4B:0E:90:80:F2:89:14:45:D0:38:0B:9E:1F:B4:F9:E7:7D:3F X509v3 Authority Key Identifier: keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/QhRLDpCA8okURdA4C54ftPnnfT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.76.0/22 IPv6: 2a0c:700::/32 Signature Algorithm: sha256WithRSAEncryption 40:02:da:09:19:99:6f:1d:de:25:5f:8e:fb:53:ae:84:ca:65: 18:c5:f0:be:7f:f1:33:24:95:d8:f4:0f:0a:e7:1a:01:ce:d9: 0e:a2:b1:d8:17:84:a3:77:2a:69:78:b4:54:29:ca:4a:52:1e: 29:c9:02:4e:ea:af:88:b7:9e:c6:8c:d4:fa:f4:23:aa:c3:00: 0c:45:49:ea:63:0e:1e:4c:40:85:e1:44:d1:10:d4:ff:a9:b6: f0:d4:da:58:89:bb:7d:da:19:cb:0b:bf:81:bc:c0:e1:49:4d: d2:2a:17:1a:79:f9:04:de:be:79:26:a6:8a:17:d4:9a:1d:ff: a9:35:ff:b5:e9:b4:2e:75:19:dd:15:6e:7a:a6:a9:e0:47:83: 8a:0c:fc:95:3a:d0:37:73:cf:fd:95:99:a6:b4:65:59:26:92: aa:d4:5c:ae:19:8a:55:ab:a1:2c:76:cf:51:d5:24:0c:fd:16: c2:25:43:45:32:3b:40:d1:9d:b0:87:16:2e:ee:15:99:0c:71: 74:c1:83:09:d0:74:94:76:c7:36:3c:ce:4e:dc:19:f7:2a:28: 4f:fc:04:a8:6c:d8:9c:12:97:42:cd:ff:25:f7:6e:ff:c1:71: 56:1a:8b:e1:8e:91:ad:87:01:28:56:ef:8f:56:eb:a6:88:5e: 1f:0d:54:85 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57LzTM6NvLH3MYw4cxxwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNGU1Zjc5NjEyMjVmYmZlMzQxZjZiZmQ2YmU4ZTFhMjFl ZjhjMGYwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjE0NGIwZTkwODBmMjg5MTQ0NWQwMzgwYjllMWZiNGY5ZTc3ZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Y5sOR44R4kgQ5nU6QM4AiK9bY7 6HjkyMYEFs5geEkyGw2LmW5NgiTEWVv3AsQZ5LKRj6tzjsJ5zORH+MFFgL+k1k1q l8C3rR/tCVOKc9gLYrIZ1iTSE2chJ2214Y0fJyAC0O9RuHIeipiaiVtiRrherfUX A3Z0VGkYTJq8HjyevDedOTkty+zeIhzqQsVfIO5Rw41kIZO8guqe/sBvWlJKr2CG DS0SyQNkyE7EI1d7/Hwvz8LGGW3ksOjTEHWOHimiv6tVX+X8C65UT9geUViMNyDg xVXLqpEl9F6Q3s+atZxct2yO0PmbBHRPFKHQ019Db5gPs8H5Mij+fmyZjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEIUSw6QgPKJFEXQOAueH7T5530/MB8GA1UdIwQY MBaAFFJOX3lhIl+/40H2v9a+jhoh74wPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85YzY1NDYtNTgxMS00MTk0LWJmZWIt MmFiOTA0NmViYzExLzEvUWhSTERwQ0E4b2tVUmRBNEM1NGZ0UG5uZlQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi85YzY1NDYtNTgxMS00MTk0LWJmZWItMmFiOTA0NmViYzEx LzEvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueZMMA0E AgACMAcDBQAqDAcAMA0GCSqGSIb3DQEBCwUAA4IBAQBAAtoJGZlvHd4lX477U66E ymUYxfC+f/EzJJXY9A8K5xoBztkOorHYF4SjdyppeLRUKcpKUh4pyQJO6q+It57G jNT69COqwwAMRUnqYw4eTECF4UTRENT/qbbw1NpYibt92hnLC7+BvMDhSU3SKhca efkE3r55JqaKF9SaHf+pNf+16bQudRndFW56pqngR4OKDPyVOtA3c8/9lZmmtGVZ JpKq1FyuGYpVq6Esds9R1SQM/RbCJUNFMjtA0Z2whxYu7hWZDHF0wYMJ0HSUdsc2 PM5O3Bn3KihP/ASobNicEpdCzf8l927/wXFWGovhjpGthwEoVu+PVuumiF4fDVSF -----END CERTIFICATE-----Generated at Sat Jan 10 21:11:08 2026 by rpki-client