This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/Qa6RJH6f6AObfXnYHZk2ZbGY_Jw.roa File: Qa6RJH6f6AObfXnYHZk2ZbGY_Jw.roa (raw, json) Hash identifier: 12noZ/f5LNR3FAN+7NihJMDkGNqm7rdo2dgUz2FcRAA= Subject key identifier: 41:AE:91:24:7E:9F:E8:03:9B:7D:79:D8:1D:99:36:65:B1:98:FC:9C Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Certificate serial: 019B7E386ADB48165CEFA4FEB195AECD4C78 Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/Qa6RJH6f6AObfXnYHZk2ZbGY_Jw.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205588 IP address blocks: 185.213.8.0/24 maxlen: 24 185.213.9.0/24 maxlen: 24 185.213.10.0/24 maxlen: 24 185.213.11.0/24 maxlen: 24 2a0d:d580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6a:db:48:16:5c:ef:a4:fe:b1:95:ae:cd:4c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41ae91247e9fe8039b7d79d81d993665b198fc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:84:96:c0:2f:6c:2e:d1:9f:d3:a1:81:13: b9:8a:ca:c8:84:78:fa:9b:ca:21:a0:b4:83:92:75: 76:75:28:33:07:93:d2:6b:6b:dc:1e:23:6c:91:c0: 41:98:ed:d9:5a:61:e8:7e:92:04:a9:4b:96:d7:d4: a6:75:fd:6e:dc:ab:04:f0:d6:b0:a7:2b:69:1d:9c: 21:99:a6:6b:50:3e:69:9c:17:22:30:d4:c8:5d:c7: 18:c1:84:85:68:6a:94:49:3f:b0:d4:7f:9e:ed:70: 46:24:38:bc:42:44:27:7f:04:3e:36:76:28:da:c8: c7:bb:01:b5:97:f4:a9:90:20:b6:7c:af:e9:fc:60: a7:a7:c4:30:f8:47:e5:17:c9:b9:12:0a:2b:96:41: 15:74:a3:03:ec:3f:f3:8f:21:24:85:5b:41:f4:4b: 88:a2:f1:5a:61:b4:67:a4:79:cf:61:cc:d5:0b:47: 4b:bc:22:bb:d2:55:e1:47:23:12:23:95:fb:db:70: 4b:c1:2e:2b:1a:e5:d7:ec:60:b9:20:81:d7:85:58: d2:5e:33:5a:61:c5:6f:54:69:56:30:40:d1:c2:0c: 79:e7:8e:a9:76:0c:6b:e6:2a:59:21:bf:1d:33:0e: 22:a5:65:f0:ec:0c:3d:11:29:f2:f9:2d:35:f6:09: b7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AE:91:24:7E:9F:E8:03:9B:7D:79:D8:1D:99:36:65:B1:98:FC:9C X509v3 Authority Key Identifier: keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/Qa6RJH6f6AObfXnYHZk2ZbGY_Jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.8.0/22 IPv6: 2a0d:d580::/32 Signature Algorithm: sha256WithRSAEncryption 74:6b:33:f2:44:08:af:90:e9:33:17:df:f1:6f:44:ef:ab:74: 4f:b7:21:1d:64:d8:ac:c5:78:a6:bd:57:ad:7c:14:66:e8:99: 53:a8:27:6d:61:ea:96:b3:b7:e1:19:35:ea:01:fd:b5:f6:0a: 89:60:53:54:dc:b8:22:5a:bc:e3:88:6a:43:cd:35:f9:3c:15: 75:37:bc:ef:34:73:4a:9c:de:fb:fb:3d:ef:3d:12:fa:83:ec: 60:0e:3e:22:d3:ab:f4:4d:a8:46:ab:ab:f8:3c:aa:de:e2:a8: 9e:01:1a:f9:16:23:de:ea:d4:0f:a0:fd:f5:9e:42:19:88:d8: 53:7e:13:ef:1c:46:b2:76:b1:db:da:23:69:ff:7f:37:96:7b: 84:1f:02:2d:6e:ab:36:7e:ab:a1:74:e6:5b:7c:12:ca:ea:5e: 22:c2:29:98:ee:d1:7b:de:42:35:38:3c:6f:20:b3:dd:90:67: bc:fa:04:74:cd:5b:b7:9a:12:6a:48:ff:58:40:5b:4e:3e:ff: e9:48:96:c0:2f:ba:b9:50:49:f9:0f:46:0d:1d:7f:68:78:10: c5:8f:ed:cf:bc:59:65:0c:72:3f:ab:1d:f4:c7:ee:f5:41:5f: e4:4f:4a:db:8a:95:ad:9c:0e:3e:61:35:5c:91:d7:00:03:c6: 88:b7:b5:4e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OGrbSBZc76T+sZWuzUx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGQxYmI3Mjc5MWM4Nzg1NTBkMWI5ZDhmZWY1NjRhYzM5 MTkzNjgwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWFlOTEyNDdlOWZlODAzOWI3ZDc5ZDgxZDk5MzY2NWIxOThmYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKuElsAvbC7Rn9OhgRO5isrIhHj6 m8ohoLSDknV2dSgzB5PSa2vcHiNskcBBmO3ZWmHofpIEqUuW19Smdf1u3KsE8Naw pytpHZwhmaZrUD5pnBciMNTIXccYwYSFaGqUST+w1H+e7XBGJDi8QkQnfwQ+NnYo 2sjHuwG1l/SpkCC2fK/p/GCnp8Qw+EflF8m5EgorlkEVdKMD7D/zjyEkhVtB9EuI ovFaYbRnpHnPYczVC0dLvCK70lXhRyMSI5X723BLwS4rGuXX7GC5IIHXhVjSXjNa YcVvVGlWMEDRwgx5546pdgxr5ipZIb8dMw4ipWXw7Aw9ESny+S019gm3qQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEGukSR+n+gDm3152B2ZNmWxmPycMB8GA1UdIwQY MBaAFAuNG7cnkch4VQ0bnY/vVkrDkZNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMt MDI3OGM1ZGMxNDkxLzEvUWE2UkpINmY2QU9iZlhuWUhaazJaYkdZX0p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMtMDI3OGM1ZGMxNDkx LzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudUIMA0E AgACMAcDBQAqDdWAMA0GCSqGSIb3DQEBCwUAA4IBAQB0azPyRAivkOkzF9/xb0Tv q3RPtyEdZNisxXimvVetfBRm6JlTqCdtYeqWs7fhGTXqAf219gqJYFNU3LgiWrzj iGpDzTX5PBV1N7zvNHNKnN77+z3vPRL6g+xgDj4i06v0TahGq6v4PKre4qieARr5 FiPe6tQPoP31nkIZiNhTfhPvHEaydrHb2iNp/383lnuEHwItbqs2fquhdOZbfBLK 6l4iwimY7tF73kI1ODxvILPdkGe8+gR0zVu3mhJqSP9YQFtOPv/pSJbAL7q5UEn5 D0YNHX9oeBDFj+3PvFllDHI/qx30x+71QV/kT0rbipWtnA4+YTVckdcAA8aIt7VO -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:23 2026 by rpki-client