This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/Q_aD8H2Bg8D8Fk8p2Skkp_ucG04.roa File: Q_aD8H2Bg8D8Fk8p2Skkp_ucG04.roa (raw, json) Hash identifier: szSEbM4DLAElR41izkoZqU673B1zp52SKgEtUZLpn2E= Subject key identifier: 43:F6:83:F0:7D:81:83:C0:FC:16:4F:29:D9:29:24:A7:FB:9C:1B:4E Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e Certificate serial: 019B7E37C33423618AC64EA43971C0A32BAC Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/Q_aD8H2Bg8D8Fk8p2Skkp_ucG04.roa Signing time: Fri 02 Jan 2026 10:19:02 +0000 ROA not before: Fri 02 Jan 2026 10:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39826 IP address blocks: 109.175.236.0/24 maxlen: 24 109.175.237.0/24 maxlen: 24 109.175.238.0/24 maxlen: 24 109.175.239.0/24 maxlen: 24 185.84.144.0/22 maxlen: 22 185.84.144.0/24 maxlen: 24 185.84.145.0/24 maxlen: 24 185.84.146.0/24 maxlen: 24 185.84.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c3:34:23:61:8a:c6:4e:a4:39:71:c0:a3:2b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e Validity Not Before: Jan 2 10:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43f683f07d8183c0fc164f29d92924a7fb9c1b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:f4:57:75:62:85:7b:2a:7c:40:b0:d0:40: 49:db:23:f6:2d:1a:42:18:4f:51:a5:53:87:7a:3e: 4b:e0:5f:f8:34:55:34:d6:80:8c:b2:74:02:b6:46: 13:d6:ab:7a:27:61:02:7e:a6:f6:c4:8c:a6:de:17: 68:f4:08:22:47:9c:64:8b:a1:7d:47:b0:58:b7:b0: 5b:f1:22:1f:d5:52:db:63:b3:b4:5a:b7:04:e2:ef: 5e:74:f7:a3:2e:a5:9d:59:4b:f5:ad:d9:39:bc:7c: f0:15:67:d9:79:9d:51:d3:e5:42:17:6d:4b:78:22: d1:b5:78:a0:34:e6:5f:6b:33:79:6c:6f:98:d2:ea: 05:1d:e6:41:08:83:88:8c:f7:e6:71:99:d6:f9:db: a8:28:c3:ed:cb:6f:2f:03:79:b7:c5:55:b4:b8:83: 76:c2:86:56:5c:ae:57:1d:82:61:eb:ac:05:98:dd: 88:a8:b7:85:0e:41:1e:79:1e:4c:5a:52:92:43:5c: 2d:1e:14:00:90:52:4c:a1:51:7a:51:28:17:5b:bd: c0:b3:78:84:94:5b:2e:18:3f:dc:33:f0:7a:d6:09: f5:a7:4c:ad:66:21:07:9f:51:c6:71:c8:f5:5f:19: f5:0d:22:13:a8:e6:41:f5:47:33:78:a3:23:c9:8d: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F6:83:F0:7D:81:83:C0:FC:16:4F:29:D9:29:24:A7:FB:9C:1B:4E X509v3 Authority Key Identifier: keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/Q_aD8H2Bg8D8Fk8p2Skkp_ucG04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.175.236.0/22 185.84.144.0/22 Signature Algorithm: sha256WithRSAEncryption 91:b8:17:12:01:53:88:9d:27:fc:e2:56:2e:c7:f7:2e:c4:cb: 37:41:4e:f6:4c:4c:02:5e:35:ce:9e:0f:4c:42:35:54:9d:6d: 28:ff:6a:24:e8:b1:b2:46:8e:9f:88:04:45:c6:70:1b:68:fa: 24:da:53:03:29:dd:b2:18:bb:9f:a9:28:e1:1c:d9:46:bf:b6: a5:60:b4:aa:66:e9:95:8d:24:6b:9f:df:6b:8e:68:06:75:02: f1:ff:7c:f7:a2:5e:a0:ff:52:bd:6a:17:90:8a:fd:0b:b2:c0: f0:23:ab:d5:6b:98:e5:67:e2:b2:52:4f:ca:5e:24:80:a9:b7: c7:f3:63:ae:f0:e6:ba:df:1f:e8:c0:cd:a8:cf:ca:48:d1:4f: 87:23:74:9c:8a:11:d5:84:21:08:ae:f7:22:78:2c:a9:57:db: c1:54:09:fc:94:62:e9:0b:4f:09:e2:21:66:20:85:59:c3:2d: 2e:cc:0f:d1:59:af:16:37:a2:1b:34:56:59:76:90:ce:56:15: fd:bc:1f:44:08:5c:db:e3:6c:13:93:3f:90:c1:52:1d:f3:6e: 24:f6:62:32:d3:22:62:d7:7a:63:00:10:f2:2d:e7:8e:6f:dd: b7:3e:74:86:07:05:d4:90:51:5c:bc:e3:b6:e2:d3:73:28:79: 2a:41:9f:88 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N8M0I2GKxk6kOXHAoyusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOWE0MDJlYzkwYjViNDc1ZWNjOWJmNGIxYzY2YjIzODIx MzIxNGUwHhcNMjYwMTAyMTAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2Y2ODNmMDdkODE4M2MwZmMxNjRmMjlkOTI5MjRhN2ZiOWMxYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w30V3VihXsqfECw0EBJ2yP2LRpC GE9RpVOHej5L4F/4NFU01oCMsnQCtkYT1qt6J2ECfqb2xIym3hdo9AgiR5xki6F9 R7BYt7Bb8SIf1VLbY7O0WrcE4u9edPejLqWdWUv1rdk5vHzwFWfZeZ1R0+VCF21L eCLRtXigNOZfazN5bG+Y0uoFHeZBCIOIjPfmcZnW+duoKMPty28vA3m3xVW0uIN2 woZWXK5XHYJh66wFmN2IqLeFDkEeeR5MWlKSQ1wtHhQAkFJMoVF6USgXW73As3iE lFsuGD/cM/B61gn1p0ytZiEHn1HGccj1Xxn1DSITqOZB9UczeKMjyY0bAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEP2g/B9gYPA/BZPKdkpJKf7nBtOMB8GA1UdIwQY MBaAFAyaQC7JC1tHXsyb9LHGayOCEyFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2Qt Nzc4NjlhNmJmZTU0LzEvUV9hRDhIMkJnOEQ4Rms4cDJTa2twX3VjRzA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2QtNzc4NjlhNmJmZTU0 LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCba/sAwQC uVSQMA0GCSqGSIb3DQEBCwUAA4IBAQCRuBcSAVOInSf84lYux/cuxMs3QU72TEwC XjXOng9MQjVUnW0o/2ok6LGyRo6fiARFxnAbaPok2lMDKd2yGLufqSjhHNlGv7al YLSqZumVjSRrn99rjmgGdQLx/3z3ol6g/1K9aheQiv0LssDwI6vVa5jlZ+KyUk/K XiSAqbfH82Ou8Oa63x/owM2oz8pI0U+HI3ScihHVhCEIrvcieCypV9vBVAn8lGLp C08J4iFmIIVZwy0uzA/RWa8WN6IbNFZZdpDOVhX9vB9ECFzb42wTkz+QwVId824k 9mIy0yJi13pjABDyLeeOb923PnSGBwXUkFFcvOO24tNzKHkqQZ+I -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:34 2026 by rpki-client