This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa File: brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa (raw, json) Hash identifier: 6T4RihKvWONSDdVBKM1YXGOOdPCgYZcJRb5CsAL+U7Q= Subject key identifier: 6E:B4:16:B4:9F:F9:4D:3E:C7:0B:61:47:DB:89:80:E4:1C:3F:7D:9C Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966 Certificate serial: 019B77C69F9256FBCBD82D45C669BFFFBC51 Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31034 IP address blocks: 74.122.239.0/24 maxlen: 24 81.27.74.0/24 maxlen: 24 195.210.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9f:92:56:fb:cb:d8:2d:45:c6:69:bf:ff:bc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6eb416b49ff94d3ec70b6147db8980e41c3f7d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:25:31:b4:11:32:95:fd:f5:fb:53:2a:3e: 11:8d:29:36:f8:eb:c3:8d:6e:3c:13:e9:b9:91:79: 52:f4:18:c4:9f:db:9f:a2:5e:73:d4:2d:6f:73:4f: 90:e0:a0:b1:d9:30:d9:e9:a9:7f:2c:94:7e:75:08: 53:dc:c3:63:75:e6:ab:fb:6f:90:4b:0d:c7:85:dc: b8:30:60:ae:9d:86:b7:84:31:4f:15:b1:54:3f:ed: 1e:bd:e2:56:9d:77:cd:4f:59:42:ae:02:70:cb:ab: 91:89:a2:0d:96:35:e0:14:b6:cd:62:13:57:d0:26: ae:de:3d:9f:4b:63:1b:8d:40:3b:38:c0:ec:e8:96: 7d:3b:b2:6a:20:82:f9:f5:73:42:62:10:e6:5e:d2: b6:70:e4:96:d4:af:13:a0:93:3f:4a:d8:15:3e:e7: 86:6d:db:52:bd:ba:82:75:5b:6e:02:af:4f:30:bf: 7a:d8:1e:89:f0:0d:f5:96:12:7a:b9:4a:77:9c:34: 75:8e:34:12:71:8e:56:b1:37:22:f1:7d:b9:68:59: db:2f:ce:a5:5c:ca:56:80:bb:34:10:00:c2:0c:42: fe:02:5a:a6:b8:0f:8a:7e:31:23:ca:0a:a7:21:72: 3a:04:39:b8:df:52:f6:d2:9f:37:2b:82:a1:d9:4c: 05:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B4:16:B4:9F:F9:4D:3E:C7:0B:61:47:DB:89:80:E4:1C:3F:7D:9C X509v3 Authority Key Identifier: keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.122.239.0/24 81.27.74.0/24 195.210.33.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:f2:38:c0:52:ce:c8:d3:ce:e0:f7:c1:98:6a:c7:0f:a4:06: b0:1e:63:97:26:4d:27:85:5b:20:1c:c5:bb:7d:d4:91:36:78: 16:66:a5:53:07:b8:b7:f4:de:b4:1f:f1:5a:2e:7b:6f:6a:46: 90:38:a9:84:cd:6a:b2:90:84:42:53:5f:6b:c2:7e:69:db:50: 40:93:04:b0:d4:1e:17:6f:74:9a:85:38:79:32:93:df:11:7c: 26:e5:7c:0b:e8:00:f6:7e:06:9c:41:e0:32:8c:bc:80:2a:29: 7b:b5:84:6e:71:86:c9:2b:0e:75:dc:4f:02:0d:ec:af:5d:43: 7b:f9:50:7c:32:ef:c1:2a:6e:fe:7b:d8:da:4c:16:4c:50:8f: 3c:d2:40:a4:b7:2c:3e:31:46:44:f3:20:bd:ae:ec:a6:76:ff: bf:8e:10:4f:10:d4:b5:94:66:07:a2:24:10:02:e6:db:2e:a0: a2:b7:2d:26:24:7b:e5:e7:06:9e:a2:59:17:12:80:4f:67:32: ce:91:ed:d1:62:57:94:6b:8a:d3:37:b7:be:69:ad:ba:2f:6a: ad:44:fa:c7:52:53:03:be:de:da:e6:29:99:4e:12:77:2c:bd: 0b:fd:8b:c4:12:e3:4e:f4:da:70:42:ed:d0:30:9d:97:ba:ab: 81:f1:62:c3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xp+SVvvL2C1Fxmm//7xRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YjE1NGNlMTc5OGI5YWM1MzBmMjA3ZjJkYWIwNmEzYWQz YTI5NjYwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWI0MTZiNDlmZjk0ZDNlYzcwYjYxNDdkYjg5ODBlNDFjM2Y3ZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq8lMbQRMpX99ftTKj4RjSk2+OvD jW48E+m5kXlS9BjEn9ufol5z1C1vc0+Q4KCx2TDZ6al/LJR+dQhT3MNjdear+2+Q Sw3Hhdy4MGCunYa3hDFPFbFUP+0eveJWnXfNT1lCrgJwy6uRiaINljXgFLbNYhNX 0Cau3j2fS2MbjUA7OMDs6JZ9O7JqIIL59XNCYhDmXtK2cOSW1K8ToJM/StgVPueG bdtSvbqCdVtuAq9PML962B6J8A31lhJ6uUp3nDR1jjQScY5WsTci8X25aFnbL86l XMpWgLs0EADCDEL+AlqmuA+KfjEjygqnIXI6BDm431L20p83K4Kh2UwFDwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG60FrSf+U0+xwthR9uJgOQcP32cMB8GA1UdIwQY MBaAFIixVM4XmLmsUw8gfy2rBqOtOilmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUt YWI0M2MwMDg1NDdmLzEvYnJRV3RKXzVUVDdIQzJGSDI0bUE1QndfZlp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUtYWI0M2MwMDg1NDdm LzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQASnrvAwQA URtKAwQAw9IhMA0GCSqGSIb3DQEBCwUAA4IBAQBe8jjAUs7I087g98GYascPpAaw HmOXJk0nhVsgHMW7fdSRNngWZqVTB7i39N60H/FaLntvakaQOKmEzWqykIRCU19r wn5p21BAkwSw1B4Xb3SahTh5MpPfEXwm5XwL6AD2fgacQeAyjLyAKil7tYRucYbJ Kw513E8CDeyvXUN7+VB8Mu/BKm7+e9jaTBZMUI880kCktyw+MUZE8yC9ruymdv+/ jhBPENS1lGYHoiQQAubbLqCity0mJHvl5waeolkXEoBPZzLOke3RYleUa4rTN7e+ aa26L2qtRPrHUlMDvt7a5imZThJ3LL0L/YvEEuNO9NpwQu3QMJ2XuquB8WLD -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:32 2026 by rpki-client