This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/qSxlathEcN6ZfWcqIYKI4rq_zNk.roa File: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (raw, json) Hash identifier: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68= Subject key identifier: A9:2C:65:6A:D8:44:70:DE:99:7D:67:2A:21:82:88:E2:BA:BF:CC:D9 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019B783503AD1DF586EF16C9C5042B9A9B40 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/qSxlathEcN6ZfWcqIYKI4rq_zNk.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198456 IP address blocks: 185.17.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:03:ad:1d:f5:86:ef:16:c9:c5:04:2b:9a:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a92c656ad84470de997d672a218288e2babfccd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:5f:34:99:7b:c5:59:3b:7a:c5:f3:f7:70: 2b:61:84:a4:e2:df:b7:53:64:ee:62:19:88:1d:9e: 23:41:79:d9:1b:a1:35:f7:b2:a1:47:67:1f:99:68: 71:ad:2d:ba:34:f1:04:1b:25:12:5e:ad:0d:bc:a8: 9f:01:ce:dc:28:b3:82:a8:b1:00:ae:6f:be:51:2c: e6:99:fd:cc:a7:b9:bb:b3:55:63:ae:32:3d:ce:45: 76:34:9f:49:7a:00:d6:01:b3:17:29:61:59:b8:0f: 47:11:01:e1:85:2f:73:4c:0f:b4:ea:72:11:55:1a: d0:ce:02:cb:f7:ae:a7:25:23:c2:69:72:bd:cf:fe: 5d:a1:2f:95:5a:e5:43:70:c6:ef:17:1d:01:43:63: 76:f5:64:ce:14:2b:54:2f:ec:39:e9:d4:01:be:50: 15:fc:b6:5f:9d:5d:30:ca:59:3f:88:2c:fc:c5:f5: ea:87:19:a5:d8:2f:21:4e:75:78:2e:14:e8:c1:fc: ae:53:26:92:d6:f7:25:99:42:27:8f:4c:b5:ba:d6: d7:32:d6:c9:1b:e0:94:e5:7c:e9:ef:58:c1:1d:94: 10:63:59:18:4f:7b:ce:37:aa:d2:90:02:cd:a1:bf: 9f:3b:d7:5e:96:74:f7:4f:b7:68:05:3f:6f:71:3f: 6c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2C:65:6A:D8:44:70:DE:99:7D:67:2A:21:82:88:E2:BA:BF:CC:D9 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/qSxlathEcN6ZfWcqIYKI4rq_zNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.86.0/24 Signature Algorithm: sha256WithRSAEncryption 89:f5:ed:10:b8:07:93:06:89:18:9a:d9:c5:8a:7c:4c:1d:82: c2:57:ac:c2:cd:88:06:e6:f5:c4:5a:2a:a8:e7:2f:2f:3e:6e: 87:86:20:13:66:e0:33:7d:a1:32:55:90:f7:6b:b7:3c:ba:44: 3c:42:ca:64:57:84:98:98:42:46:b5:b2:35:52:ad:a7:83:4f: c1:2c:d1:31:ec:cf:ef:bf:d1:60:70:dc:b9:15:9a:39:ba:fc: d3:97:af:88:da:92:32:c0:ac:78:c5:db:d3:7e:cc:a5:8d:20: ff:fb:c4:2d:7b:cc:38:cb:df:89:c0:27:34:12:79:25:07:17: 7e:70:7c:6e:03:8a:ea:29:c8:55:9b:c2:1b:20:08:29:61:a0: de:5d:50:e1:33:0b:94:d7:02:fc:47:5e:fd:5d:2a:6f:b0:1d: 34:e6:9e:13:d5:9d:fd:aa:84:83:79:84:57:fe:4a:a5:49:cc: fa:f1:22:e6:0f:d9:a5:0d:8d:ce:7e:a7:1d:f9:9a:58:7e:52: 59:8f:26:8b:80:b4:93:a3:cb:85:fa:17:17:7e:24:ea:55:ce: d7:ea:16:6a:69:bf:1f:38:b6:f2:32:69:59:28:b3:ff:50:1d: b1:a2:7e:67:61:67:b9:94:b5:f8:c3:79:09:95:56:58:fc:2d: d5:d5:b9:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQOtHfWG7xbJxQQrmptAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTJjNjU2YWQ4NDQ3MGRlOTk3ZDY3MmEyMTgyODhlMmJhYmZjY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAZfNJl7xVk7esXz93ArYYSk4t+3 U2TuYhmIHZ4jQXnZG6E197KhR2cfmWhxrS26NPEEGyUSXq0NvKifAc7cKLOCqLEA rm++USzmmf3Mp7m7s1VjrjI9zkV2NJ9JegDWAbMXKWFZuA9HEQHhhS9zTA+06nIR VRrQzgLL966nJSPCaXK9z/5doS+VWuVDcMbvFx0BQ2N29WTOFCtUL+w56dQBvlAV /LZfnV0wylk/iCz8xfXqhxml2C8hTnV4LhTowfyuUyaS1vclmUInj0y1utbXMtbJ G+CU5Xzp71jBHZQQY1kYT3vON6rSkALNob+fO9delnT3T7doBT9vcT9srwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKksZWrYRHDemX1nKiGCiOK6v8zZMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvcVN4bGF0aEVjTjZaZldjcUlZS0k0cnFfek5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRFWMA0G CSqGSIb3DQEBCwUAA4IBAQCJ9e0QuAeTBokYmtnFinxMHYLCV6zCzYgG5vXEWiqo 5y8vPm6HhiATZuAzfaEyVZD3a7c8ukQ8QspkV4SYmEJGtbI1Uq2ng0/BLNEx7M/v v9FgcNy5FZo5uvzTl6+I2pIywKx4xdvTfsyljSD/+8Qte8w4y9+JwCc0EnklBxd+ cHxuA4rqKchVm8IbIAgpYaDeXVDhMwuU1wL8R179XSpvsB005p4T1Z39qoSDeYRX /kqlScz68SLmD9mlDY3Ofqcd+ZpYflJZjyaLgLSTo8uF+hcXfiTqVc7X6hZqab8f OLbyMmlZKLP/UB2xon5nYWe5lLX4w3kJlVZY/C3V1blR -----END CERTIFICATE-----Generated at Wed Jan 7 07:15:35 2026 by rpki-client