This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/QDqYZmLzV23YVoA-rNr3_dudehM.roa File: QDqYZmLzV23YVoA-rNr3_dudehM.roa (raw, json) Hash identifier: DU7wizlaOucg4WwRR/OJogCxUlPPjJyoBT/zCr/m24w= Subject key identifier: 40:3A:98:66:62:F3:57:6D:D8:56:80:3E:AC:DA:F7:FD:DB:9D:7A:13 Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413 Certificate serial: 019B76EB54B9022ABF03534C49962C91187C Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/QDqYZmLzV23YVoA-rNr3_dudehM.roa Signing time: Thu 01 Jan 2026 00:18:12 +0000 ROA not before: Thu 01 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205373 IP address blocks: 185.220.160.0/22 maxlen: 24 2a0b:f940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:54:b9:02:2a:bf:03:53:4c:49:96:2c:91:18:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=403a986662f3576dd856803eacdaf7fddb9d7a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:fb:4e:fb:9f:e0:bb:e8:29:6a:8f:07:83: 2d:ca:45:0f:a4:fb:bc:8c:55:c2:44:63:d6:02:8c: d5:a0:b2:f5:ba:a4:33:b7:ef:9e:80:25:65:5c:27: 7c:0a:d0:ed:da:81:e7:01:06:e8:4c:2c:15:49:b4: 8c:ae:f3:7a:54:4f:50:97:47:0b:df:93:c8:af:04: 83:cd:52:54:93:a1:de:7b:5a:1a:20:92:37:7c:07: 95:45:b8:f3:e4:56:b9:65:ae:4b:3e:72:1f:2f:53: ab:80:f9:83:78:13:7d:23:82:e8:a4:aa:d3:e9:bb: 95:d6:4c:d4:e4:66:d0:49:41:25:1a:5d:3c:bc:da: 47:b0:ff:6c:2c:05:23:0e:41:90:e5:44:73:70:bd: dc:42:06:13:6a:74:23:9d:74:77:c2:05:a7:7a:bf: 58:42:16:f7:67:8e:08:30:e2:c3:fd:8e:b2:6b:b8: 59:7f:c1:2f:8f:0a:ac:cc:a0:f8:a3:64:b0:1d:d3: e4:99:68:cc:ba:53:e3:97:63:68:c7:6b:b8:10:22: e3:6c:a4:64:cf:73:59:80:b5:c0:0d:c6:0f:13:dd: 36:d2:cb:e8:a8:c8:83:62:a6:dc:c2:85:8d:93:ab: 79:e6:84:a2:8d:6c:54:d1:ce:a4:57:82:c8:cb:8d: 8a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3A:98:66:62:F3:57:6D:D8:56:80:3E:AC:DA:F7:FD:DB:9D:7A:13 X509v3 Authority Key Identifier: keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/QDqYZmLzV23YVoA-rNr3_dudehM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.160.0/22 IPv6: 2a0b:f940::/32 Signature Algorithm: sha256WithRSAEncryption 80:36:ee:2d:5d:43:3d:1b:81:af:da:23:e1:ef:33:c4:0d:2f: 02:c4:dc:61:4a:7c:fb:c3:98:3f:c2:0e:83:be:09:25:90:b0: 02:07:e0:79:0d:d5:de:06:f1:eb:24:f9:74:82:e6:44:28:e6: 56:f5:a7:ef:ab:66:ed:8d:db:b6:ee:e4:f4:30:90:b4:d5:d9: f2:9c:ca:f6:26:16:1a:b2:35:82:11:73:31:56:2b:41:a7:2e: db:26:a2:0e:ab:fc:d3:8d:93:bc:fd:a9:92:99:45:0c:23:86: d8:62:4e:e7:7f:80:3f:73:9d:28:6e:fd:ce:3c:92:aa:d8:d9: ba:d4:39:1e:95:f4:2c:ed:4c:e2:11:78:f7:e9:f2:e9:32:77: 4d:38:2d:d3:6f:dd:d1:f3:43:65:08:a3:f3:f8:fb:da:12:19: 2f:0a:d3:08:79:a1:ae:db:d6:c6:d3:63:2a:0e:9f:8e:eb:56: cc:81:f7:69:d9:02:8f:ef:f3:b3:6e:ff:19:bd:18:aa:a3:24: 9f:35:52:ac:03:ac:42:67:75:72:76:7a:11:2f:ea:4b:2c:72: dd:36:82:35:cb:03:b2:b5:2d:bb:fe:9c:7e:9c:9e:6f:76:31: 40:be:f0:a0:c8:51:49:de:c3:2c:4f:6d:fe:36:fa:5c:fc:30: 23:5f:1a:37 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt261S5Aiq/A1NMSZYskRh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYTg4MmIxMGYxYmE5ZWE0YmExZmE3NzA2ZGI2NDc0N2U2 MmE0MTMwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDNhOTg2NjYyZjM1NzZkZDg1NjgwM2VhY2RhZjdmZGRiOWQ3YTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6D7Tvuf4LvoKWqPB4MtykUPpPu8 jFXCRGPWAozVoLL1uqQzt++egCVlXCd8CtDt2oHnAQboTCwVSbSMrvN6VE9Ql0cL 35PIrwSDzVJUk6Hee1oaIJI3fAeVRbjz5Fa5Za5LPnIfL1OrgPmDeBN9I4LopKrT 6buV1kzU5GbQSUElGl08vNpHsP9sLAUjDkGQ5URzcL3cQgYTanQjnXR3wgWner9Y Qhb3Z44IMOLD/Y6ya7hZf8EvjwqszKD4o2SwHdPkmWjMulPjl2Nox2u4ECLjbKRk z3NZgLXADcYPE9020svoqMiDYqbcwoWNk6t55oSijWxU0c6kV4LIy42KdwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEA6mGZi81dt2FaAPqza9/3bnXoTMB8GA1UdIwQY MBaAFMOogrEPG6nqS6H6dwbbZHR+YqQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTIt Yzc4NTdhMDMzOTYyLzEvUURxWVptTHpWMjNZVm9BLXJOcjNfZHVkZWhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTItYzc4NTdhMDMzOTYy LzEvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudygMA0E AgACMAcDBQAqC/lAMA0GCSqGSIb3DQEBCwUAA4IBAQCANu4tXUM9G4Gv2iPh7zPE DS8CxNxhSnz7w5g/wg6DvgklkLACB+B5DdXeBvHrJPl0guZEKOZW9afvq2btjdu2 7uT0MJC01dnynMr2JhYasjWCEXMxVitBpy7bJqIOq/zTjZO8/amSmUUMI4bYYk7n f4A/c50obv3OPJKq2Nm61DkelfQs7UziEXj36fLpMndNOC3Tb93R80NlCKPz+Pva EhkvCtMIeaGu29bG02MqDp+O61bMgfdp2QKP7/Ozbv8ZvRiqoySfNVKsA6xCZ3Vy dnoRL+pLLHLdNoI1ywOytS27/px+nJ5vdjFAvvCgyFFJ3sMsT23+Nvpc/DAjXxo3 -----END CERTIFICATE-----Generated at Thu Jan 1 10:50:04 2026 by rpki-client