This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa File: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (raw, json) Hash identifier: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI= Subject key identifier: AB:AB:CE:CC:DD:43:3C:17:F5:BF:1D:6C:B3:9C:E0:83:B7:43:5C:85 Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Certificate serial: 019B7CED65F52D4D74C4DE768DE07A978653 Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa Signing time: Fri 02 Jan 2026 04:18:11 +0000 ROA not before: Fri 02 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8648 IP address blocks: 185.65.220.0/22 maxlen: 24 195.181.248.0/22 maxlen: 24 212.57.32.0/21 maxlen: 24 2a00:1e40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:65:f5:2d:4d:74:c4:de:76:8d:e0:7a:97:86:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Validity Not Before: Jan 2 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ababceccdd433c17f5bf1d6cb39ce083b7435c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0b:55:a9:73:f6:2a:47:d5:59:d3:b6:f8:4a: d0:08:3e:a8:24:0b:d8:dd:7e:ec:7d:04:2b:10:fa: 46:ca:11:9b:62:02:85:e3:ed:7c:aa:99:b3:a8:3e: 57:65:02:ba:a9:ca:6c:10:45:27:5a:d8:4f:bb:b9: fa:aa:3e:6b:85:82:50:85:54:b4:96:06:ee:c9:05: c9:ec:53:06:d4:98:ff:0f:32:54:64:3f:93:7e:b9: 41:ff:09:71:d9:46:60:9a:af:ea:80:0c:31:2c:82: 09:af:db:c9:81:4a:26:94:2e:f1:0d:fc:72:d1:4f: 28:b3:a5:ee:58:1a:c9:83:9f:35:ca:21:62:67:41: b2:b3:a1:e5:1c:e5:9c:69:a5:41:18:c1:44:aa:a2: 8a:fd:2c:f1:33:cb:25:45:e9:2e:72:9f:31:02:0f: 79:05:52:a1:a8:6c:79:05:92:71:48:98:0a:73:14: c5:19:f6:b4:c7:e4:01:84:6f:9d:81:d1:08:6d:f0: 8d:62:3b:8c:60:d0:3a:1a:2a:d9:36:bc:94:ed:b6: 21:81:6f:ee:ca:4e:97:0a:e4:00:b0:23:1b:41:d7: 0b:6e:5a:09:73:4d:fb:db:b5:16:30:b0:26:07:12: 29:d8:a2:0b:e0:51:f3:68:3b:7e:22:5d:60:48:eb: c7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AB:CE:CC:DD:43:3C:17:F5:BF:1D:6C:B3:9C:E0:83:B7:43:5C:85 X509v3 Authority Key Identifier: keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.220.0/22 195.181.248.0/22 212.57.32.0/21 IPv6: 2a00:1e40::/32 Signature Algorithm: sha256WithRSAEncryption 67:1d:f6:7a:8a:ae:06:99:25:d7:73:10:49:0e:b2:19:01:67: df:1c:9f:d1:ff:6a:c4:ce:5d:a8:f5:08:c0:2d:69:52:23:80: 22:b3:31:e5:9f:0d:a7:cc:a9:09:74:8a:e0:e6:aa:4e:7f:5e: c5:75:44:4c:91:ac:96:31:eb:0f:e7:f5:90:4b:4e:df:97:1a: fd:16:72:eb:e8:1d:64:56:be:95:43:58:a4:7c:12:58:52:78: 4e:e0:bc:c0:10:96:e0:af:04:dd:31:28:3f:d7:36:77:f8:2f: d6:7e:fa:79:26:32:f2:65:93:a3:25:90:fd:85:19:6d:d0:b0: 62:7f:fa:b8:b0:23:d2:b4:39:90:0e:4e:2a:fb:91:e7:81:5c: b8:e9:b2:fe:8a:aa:54:96:a0:2f:6f:a9:3a:7d:7d:3c:ea:b0: 5c:63:a3:10:cc:f1:60:e1:19:9f:a6:20:fd:e1:6a:1f:ea:2a: b1:e9:fa:1f:27:03:98:f7:19:a6:37:36:75:71:56:58:84:3d: dd:30:d3:8b:85:42:75:a6:23:6f:29:c6:d8:f3:3e:77:63:ee: 69:dc:10:87:7c:fe:3d:8e:29:c1:3d:b5:75:61:6c:b6:90:1c: 9e:94:e4:58:f7:31:04:27:e0:f7:fc:63:b1:cd:79:b5:b2:44: 4c:e5:b2:93 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87WX1LU10xN52jeB6l4ZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl NGU0NjEwHhcNMjYwMTAyMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmFiY2VjY2RkNDMzYzE3ZjViZjFkNmNiMzljZTA4M2I3NDM1Yzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwtVqXP2KkfVWdO2+ErQCD6oJAvY 3X7sfQQrEPpGyhGbYgKF4+18qpmzqD5XZQK6qcpsEEUnWthPu7n6qj5rhYJQhVS0 lgbuyQXJ7FMG1Jj/DzJUZD+TfrlB/wlx2UZgmq/qgAwxLIIJr9vJgUomlC7xDfxy 0U8os6XuWBrJg581yiFiZ0Gys6HlHOWcaaVBGMFEqqKK/SzxM8slRekucp8xAg95 BVKhqGx5BZJxSJgKcxTFGfa0x+QBhG+dgdEIbfCNYjuMYNA6GirZNryU7bYhgW/u yk6XCuQAsCMbQdcLbloJc03727UWMLAmBxIp2KIL4FHzaDt+Il1gSOvHcwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKurzszdQzwX9b8dbLOc4IO3Q1yFMB8GA1UdIwQY MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt YmM5MWMwNjcwZDAzLzEvcTZ2T3pOMURQQmYxdngxc3M1emdnN2REWElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuUHcAwQC w7X4AwQD1DkgMA0EAgACMAcDBQAqAB5AMA0GCSqGSIb3DQEBCwUAA4IBAQBnHfZ6 iq4GmSXXcxBJDrIZAWffHJ/R/2rEzl2o9QjALWlSI4AiszHlnw2nzKkJdIrg5qpO f17FdURMkayWMesP5/WQS07flxr9FnLr6B1kVr6VQ1ikfBJYUnhO4LzAEJbgrwTd MSg/1zZ3+C/Wfvp5JjLyZZOjJZD9hRlt0LBif/q4sCPStDmQDk4q+5HngVy46bL+ iqpUlqAvb6k6fX086rBcY6MQzPFg4RmfpiD94Wof6iqx6fofJwOY9xmmNzZ1cVZY hD3dMNOLhUJ1piNvKcbY8z53Y+5p3BCHfP49jinBPbV1YWy2kByelORY9zEEJ+D3 /GOxzXm1skRM5bKT -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:18 2026 by rpki-client