This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/bQ8c-7koeiWAMWWzaWJffyBBvZc.roa File: bQ8c-7koeiWAMWWzaWJffyBBvZc.roa (raw, json) Hash identifier: hLJwj4Ja3tdG52rHBUCVD/JD4mLF045qQKob1dFnaXo= Subject key identifier: 6D:0F:1C:FB:B9:28:7A:25:80:31:65:B3:69:62:5F:7F:20:41:BD:97 Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Certificate serial: 019B7CECDFA994FCD15C273D88C8F26A5F6F Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/bQ8c-7koeiWAMWWzaWJffyBBvZc.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49434 IP address blocks: 185.177.45.0/24 maxlen: 24 185.177.46.0/24 maxlen: 24 185.177.47.0/24 maxlen: 24 2a0a:2f82::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:df:a9:94:fc:d1:5c:27:3d:88:c8:f2:6a:5f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d0f1cfbb9287a25803165b369625f7f2041bd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:af:b2:b1:9a:28:37:2b:56:c9:0d:39:4f: de:51:d4:b9:58:50:2c:fa:2c:9d:33:9d:80:3e:df: d4:61:87:c0:55:15:47:b8:e0:60:a1:9a:aa:90:9b: 14:e3:ab:1e:7f:9f:6d:63:5a:e8:83:b1:dd:5f:86: ae:37:d4:ac:be:29:33:8b:5c:a7:d4:f9:0d:4b:f6: a1:fc:5e:8c:3e:9d:64:de:1f:fd:08:3f:6b:a3:3c: bc:38:4a:22:29:c2:3e:db:c0:53:74:9d:9f:0e:26: f7:95:09:d7:1a:98:5a:f4:92:66:cd:50:0d:01:23: 03:4a:e8:ed:96:f3:30:5f:3b:d9:21:3a:e0:92:75: c5:a7:9a:87:8f:89:4f:d3:6e:20:3e:3f:ef:ae:24: f4:47:df:19:80:eb:65:f1:6c:10:d5:30:9f:29:f9: df:b5:3e:cd:eb:29:be:00:e4:c8:84:64:08:25:2b: 20:0b:e1:e5:0a:c2:d7:a8:b3:e5:cf:ae:ce:7c:3c: f7:6a:32:30:33:1b:8f:84:d9:ae:72:42:d5:13:34: 4c:65:69:cf:96:76:b1:87:7c:f5:f2:b5:67:28:e3: 6a:e2:11:f4:8c:7a:59:59:ec:5e:89:b7:d5:19:be: a1:8b:92:c2:5d:10:87:ce:f6:95:56:b1:28:9e:f2: 01:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0F:1C:FB:B9:28:7A:25:80:31:65:B3:69:62:5F:7F:20:41:BD:97 X509v3 Authority Key Identifier: keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/bQ8c-7koeiWAMWWzaWJffyBBvZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.45.0-185.177.47.255 IPv6: 2a0a:2f82::/32 Signature Algorithm: sha256WithRSAEncryption 13:9b:60:35:2b:85:98:ca:f1:01:84:78:2e:b8:42:71:58:8a: 77:c6:33:ca:d4:79:ce:14:c0:aa:51:d1:95:4f:73:24:46:c7: 72:0f:3e:0c:16:ef:16:9f:1e:72:7c:97:87:49:4c:36:6a:52: 05:0b:f5:87:61:90:c4:40:18:e7:c4:62:e5:53:1f:eb:bb:72: 38:3f:84:66:8f:56:7e:57:f0:29:4a:dc:7b:b7:d7:45:d4:b2: 5d:58:5d:37:5e:63:e6:12:dc:39:8c:db:76:c1:19:84:3e:55: 9e:49:16:c0:6e:7c:f8:6e:2c:9a:6e:96:06:92:e4:d3:ec:90: ae:c3:5c:ec:12:4d:33:31:ac:d7:f9:45:b7:f4:a0:fa:50:0f: 42:ba:4c:21:1c:a6:b5:16:1c:42:c4:8e:bc:b4:23:be:9f:86: f2:57:e5:45:92:26:d2:a4:f4:94:ee:0c:e3:5a:d2:3c:1b:92: 61:58:7b:3c:60:f7:fe:a4:97:f9:ea:7b:5c:95:b8:60:42:33: ee:5a:68:b6:33:c5:02:c2:78:0d:a9:24:7f:16:2b:93:47:40: 1c:05:3b:c8:62:bf:fd:e2:45:35:54:0a:b2:99:a1:b9:21:75: ef:f0:85:ff:c8:df:a5:57:26:c5:a1:66:dc:f7:2e:3f:18:1c: 80:71:75:f9 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87N+plPzRXCc9iMjyal9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj YzMxOWQwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDBmMWNmYmI5Mjg3YTI1ODAzMTY1YjM2OTYyNWY3ZjIwNDFiZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5KvsrGaKDcrVskNOU/eUdS5WFAs +iydM52APt/UYYfAVRVHuOBgoZqqkJsU46sef59tY1rog7HdX4auN9Ssvikzi1yn 1PkNS/ah/F6MPp1k3h/9CD9rozy8OEoiKcI+28BTdJ2fDib3lQnXGpha9JJmzVAN ASMDSujtlvMwXzvZITrgknXFp5qHj4lP024gPj/vriT0R98ZgOtl8WwQ1TCfKfnf tT7N6ym+AOTIhGQIJSsgC+HlCsLXqLPlz67OfDz3ajIwMxuPhNmuckLVEzRMZWnP lnaxh3z18rVnKONq4hH0jHpZWexeibfVGb6hi5LCXRCHzvaVVrEonvIBiQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFG0PHPu5KHolgDFls2liX38gQb2XMB8GA1UdIwQY MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt ZmI0MGQ2ZGEyNDY4LzEvYlE4Yy03a29laVdBTVdXemFXSmZmeUJCdlpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4 LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAC5sS0D BAS5sSAwDQQCAAIwBwMFACoKL4IwDQYJKoZIhvcNAQELBQADggEBABObYDUrhZjK 8QGEeC64QnFYinfGM8rUec4UwKpR0ZVPcyRGx3IPPgwW7xafHnJ8l4dJTDZqUgUL 9YdhkMRAGOfEYuVTH+u7cjg/hGaPVn5X8ClK3Hu310XUsl1YXTdeY+YS3DmM23bB GYQ+VZ5JFsBufPhuLJpulgaS5NPskK7DXOwSTTMxrNf5Rbf0oPpQD0K6TCEcprUW HELEjry0I76fhvJX5UWSJtKk9JTuDONa0jwbkmFYezxg9/6kl/nqe1yVuGBCM+5a aLYzxQLCeA2pJH8WK5NHQBwFO8hiv/3iRTVUCrKZobkhde/whf/I36VXJsWhZtz3 Lj8YHIBxdfk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:01 2026 by rpki-client