This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/q8bxI4KwUJabKAhcIRxGXIBY40U.roa File: q8bxI4KwUJabKAhcIRxGXIBY40U.roa (raw, json) Hash identifier: ptYSizJNQ3Kc8/zLMIQuVYyw+eoexSAPxfZlEWXvP/k= Subject key identifier: AB:C6:F1:23:82:B0:50:96:9B:28:08:5C:21:1C:46:5C:80:58:E3:45 Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa Certificate serial: 019B7EA69A80176DC7B67AEA968D9F3F5027 Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/q8bxI4KwUJabKAhcIRxGXIBY40U.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43479 IP address blocks: 185.248.92.0/24 maxlen: 24 185.248.93.0/24 maxlen: 24 185.248.94.0/24 maxlen: 24 185.248.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9a:80:17:6d:c7:b6:7a:ea:96:8d:9f:3f:50:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abc6f12382b050969b28085c211c465c8058e345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:09:08:9c:df:0c:af:f2:ce:fc:f3:dd:63: 2a:a3:cf:3a:70:ea:54:0b:6d:6b:df:13:be:3a:18: 97:8f:ce:97:73:5e:38:08:a2:79:6a:b5:85:fd:cb: 4b:83:92:88:91:1b:7d:dd:70:82:61:a5:fa:5b:bd: 97:e5:20:30:70:2d:fd:84:ca:c3:67:0e:06:56:6f: d4:f2:6c:e8:c6:4f:86:55:e5:78:d7:e6:b9:fd:e5: 51:09:46:6a:e5:88:45:3a:f6:77:1b:7c:4d:da:40: d0:d5:23:28:dd:b6:b9:11:07:a3:24:1c:a3:1f:ff: a8:39:c5:99:79:05:ca:0f:45:bf:eb:bc:1d:c4:b2: 89:5f:39:23:58:36:cb:b7:49:08:26:69:17:99:25: 83:74:98:62:44:2e:c0:23:7c:68:21:39:3c:fb:c8: 74:b1:e6:45:d9:53:24:c0:bd:d7:9a:3e:a8:c9:1f: 17:2f:6c:c7:8d:06:5e:7b:47:d9:cd:a6:e4:b9:fb: 74:77:c8:8d:d0:6b:9a:87:bf:85:35:cd:e8:c3:01: 68:ff:c0:ee:d4:0f:12:2d:86:47:80:9d:07:64:19: 66:82:03:51:06:05:cf:7f:6d:a3:78:ae:a0:16:d7: ef:87:56:48:af:c5:99:0c:30:fd:4c:70:ad:64:c0: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C6:F1:23:82:B0:50:96:9B:28:08:5C:21:1C:46:5C:80:58:E3:45 X509v3 Authority Key Identifier: keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/q8bxI4KwUJabKAhcIRxGXIBY40U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.92.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:aa:d4:d7:2a:4f:82:d5:de:66:9d:ef:3c:cc:c8:23:7e:c1: ef:c5:c8:ac:5f:23:b4:f6:fe:fa:05:2a:8c:0e:5e:03:46:2f: 94:3b:51:f0:5e:fe:28:86:2d:fd:2a:86:58:2e:4a:c2:99:08: 55:e7:91:dd:e6:9b:78:7a:13:80:d6:2c:74:24:6c:a3:71:f7: 1d:53:12:68:ea:79:53:76:0d:2f:70:e9:c0:db:67:41:24:02: 7a:17:47:4f:59:61:b1:d7:82:bc:64:bd:3b:15:56:ba:fa:80: 69:ca:b4:8a:60:ea:4a:21:9d:62:e3:ac:33:54:fb:0d:78:25: 94:e5:4e:a5:7e:00:cd:b6:38:65:97:96:b7:00:6f:f3:0c:f3: 0d:89:f3:28:ea:a5:9a:ee:74:c0:be:3e:59:91:3e:25:39:99: 8b:70:0a:32:3c:a0:9f:9f:4d:6e:fb:26:be:f3:f8:c9:cc:5f: 5a:b2:00:fd:5e:63:ee:fa:05:46:ad:86:66:fc:51:77:85:55: a7:89:fc:75:c4:e9:df:55:2c:04:73:23:db:0e:73:a9:71:ea: 27:08:de:63:ce:46:ce:85:31:50:f6:61:96:36:73:ed:03:f5: 19:91:38:da:78:00:60:22:1f:9a:38:b1:dd:f3:f4:34:4e:e5: 14:9c:6c:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppqAF23Htnrqlo2fP1AnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNTI5NDVkMjMxZjVmOGE5NzRiZTcxMmU4NzE4YWI1MGYw NGNmZmEwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmM2ZjEyMzgyYjA1MDk2OWIyODA4NWMyMTFjNDY1YzgwNThlMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtQJCJzfDK/yzvzz3WMqo886cOpU C21r3xO+OhiXj86Xc144CKJ5arWF/ctLg5KIkRt93XCCYaX6W72X5SAwcC39hMrD Zw4GVm/U8mzoxk+GVeV41+a5/eVRCUZq5YhFOvZ3G3xN2kDQ1SMo3ba5EQejJByj H/+oOcWZeQXKD0W/67wdxLKJXzkjWDbLt0kIJmkXmSWDdJhiRC7AI3xoITk8+8h0 seZF2VMkwL3Xmj6oyR8XL2zHjQZee0fZzabkuft0d8iN0Guah7+FNc3owwFo/8Du 1A8SLYZHgJ0HZBlmggNRBgXPf22jeK6gFtfvh1ZIr8WZDDD9THCtZMB6uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKvG8SOCsFCWmygIXCEcRlyAWONFMB8GA1UdIwQY MBaAFFpSlF0jH1+Kl0vnEuhxirUPBM/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEt MmU0MWZmM2UwYTZmLzEvcThieEk0S3dVSmFiS0FoY0lSeEdYSUJZNDBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEtMmU0MWZmM2UwYTZm LzEvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufhcMA0G CSqGSIb3DQEBCwUAA4IBAQCLqtTXKk+C1d5mne88zMgjfsHvxcisXyO09v76BSqM Dl4DRi+UO1HwXv4ohi39KoZYLkrCmQhV55Hd5pt4ehOA1ix0JGyjcfcdUxJo6nlT dg0vcOnA22dBJAJ6F0dPWWGx14K8ZL07FVa6+oBpyrSKYOpKIZ1i46wzVPsNeCWU 5U6lfgDNtjhll5a3AG/zDPMNifMo6qWa7nTAvj5ZkT4lOZmLcAoyPKCfn01u+ya+ 8/jJzF9asgD9XmPu+gVGrYZm/FF3hVWnifx1xOnfVSwEcyPbDnOpceonCN5jzkbO hTFQ9mGWNnPtA/UZkTjaeABgIh+aOLHd8/Q0TuUUnGyz -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:17 2026 by rpki-client