This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/qE31zdIVp9J-FLCps24kK9kxUgA.roa File: qE31zdIVp9J-FLCps24kK9kxUgA.roa (raw, json) Hash identifier: bX05ZFL2m4xW//38qWlKYq02mubPli53Ec+q/sr4FNo= Subject key identifier: A8:4D:F5:CD:D2:15:A7:D2:7E:14:B0:A9:B3:6E:24:2B:D9:31:52:00 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB4512AF8793E175CC23E0BD2BED25 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/qE31zdIVp9J-FLCps24kK9kxUgA.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199152 IP address blocks: 185.120.56.0/24 maxlen: 24 185.120.57.0/24 maxlen: 24 185.120.58.0/24 maxlen: 24 212.22.75.0/24 maxlen: 24 212.22.77.0/24 maxlen: 24 2a06:c3c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:45:12:af:87:93:e1:75:cc:23:e0:bd:2b:ed:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a84df5cdd215a7d27e14b0a9b36e242bd9315200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:81:b9:87:f5:0b:f7:fc:c1:15:e0:9d:5c: ea:c0:bf:60:72:4f:9b:ed:6d:91:f5:ff:eb:8c:38: 44:8a:fb:ff:19:a1:ab:81:50:a5:ae:b8:9b:2e:ea: 03:87:55:3d:a0:0f:3b:4f:91:24:6d:30:6d:b5:3b: c3:df:56:3d:68:c2:cb:d0:21:17:70:d3:3d:2e:f3: 2d:f6:66:49:84:25:ee:44:3f:4a:d3:7c:74:10:4d: 5c:1d:b9:b7:03:49:c7:9c:d2:aa:7b:de:37:e7:9c: 16:48:ec:38:3f:08:33:ab:35:88:44:12:48:d2:94: e8:17:ae:9b:b5:a7:8f:85:25:0e:7c:9f:1e:fd:d8: ea:a7:bc:53:f3:e5:ec:15:c7:f1:fe:b4:81:02:71: d6:e1:10:f8:0e:57:5d:17:84:ec:d7:c2:69:40:61: 3e:f8:8c:0d:fa:9f:9f:3b:8f:5c:4c:af:90:2b:db: 66:9f:f3:a2:83:78:dd:9c:de:3b:f6:8b:20:43:64: b4:4a:b4:b9:16:05:01:49:87:ea:aa:2a:03:9c:65: 00:b1:d1:98:ad:3d:6b:a1:bd:bf:dd:c1:42:85:a1: 24:a3:18:62:bc:12:05:ab:c2:f8:ce:de:7d:fa:e6: 8c:0e:16:bc:75:69:00:dd:a8:47:63:e2:0f:c4:20: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4D:F5:CD:D2:15:A7:D2:7E:14:B0:A9:B3:6E:24:2B:D9:31:52:00 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/qE31zdIVp9J-FLCps24kK9kxUgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.56.0-185.120.58.255 212.22.75.0/24 212.22.77.0/24 IPv6: 2a06:c3c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 00:03:85:51:06:75:7d:d4:bf:75:42:dd:d5:77:b5:0e:94:95: 37:3e:44:35:d1:31:27:87:97:ab:fe:81:90:b3:6f:47:6c:b9: dc:9e:11:ba:e4:8e:96:5a:42:2b:46:07:f7:30:b7:2a:42:a3: 82:09:a9:f5:cb:3e:1f:15:1c:2f:f2:f1:5c:40:8e:de:83:26: f3:55:e8:c5:49:bc:7a:f0:71:4b:4e:ff:e8:ee:15:ef:4c:2f: 45:27:57:30:e5:07:05:08:55:26:18:a9:18:54:e6:d2:64:bd: 90:b2:5d:e5:be:24:db:c0:b2:6e:3c:d7:15:f2:d3:b0:1a:1e: 95:50:bf:60:27:a6:ee:d4:ce:48:a9:e6:1e:f5:45:1a:f3:5e: c2:8e:00:fd:e8:fd:d5:d4:1f:24:66:6d:e8:3e:c9:fd:30:d4: 53:e1:79:84:b8:e9:4c:6d:a7:99:c2:f2:32:f2:58:20:76:cb: 1a:12:27:ba:a0:e9:ae:14:9b:42:9b:92:3c:07:81:fb:b5:12: 34:d9:44:9c:70:bb:80:be:e5:29:a9:ca:9a:61:13:eb:4e:8d: ed:95:73:53:04:c8:7a:44:63:c9:0f:68:67:e0:be:eb:dc:4f: f0:c6:77:d4:59:54:91:bb:bd:45:27:dd:41:03:4f:89:d5:5e: cf:96:e5:0e -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt9y0USr4eT4XXMI+C9K+0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODRkZjVjZGQyMTVhN2QyN2UxNGIwYTliMzZlMjQyYmQ5MzE1MjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvyBuYf1C/f8wRXgnVzqwL9gck+b 7W2R9f/rjDhEivv/GaGrgVClrribLuoDh1U9oA87T5EkbTBttTvD31Y9aMLL0CEX cNM9LvMt9mZJhCXuRD9K03x0EE1cHbm3A0nHnNKqe94355wWSOw4PwgzqzWIRBJI 0pToF66btaePhSUOfJ8e/djqp7xT8+XsFcfx/rSBAnHW4RD4DlddF4Ts18JpQGE+ +IwN+p+fO49cTK+QK9tmn/Oig3jdnN479osgQ2S0SrS5FgUBSYfqqioDnGUAsdGY rT1rob2/3cFChaEkoxhivBIFq8L4zt59+uaMDha8dWkA3ahHY+IPxCAy5wIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFKhN9c3SFafSfhSwqbNuJCvZMVIAMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvcUUzMXpkSVZwOUotRkxDcHMyNGtLOWt4VWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaMAwDBAO5eDgD BAC5eDoDBADUFksDBADUFk0wDwQCAAIwCQMHACoGw8AAATANBgkqhkiG9w0BAQsF AAOCAQEAAAOFUQZ1fdS/dULd1Xe1DpSVNz5ENdExJ4eXq/6BkLNvR2y53J4RuuSO llpCK0YH9zC3KkKjggmp9cs+HxUcL/LxXECO3oMm81XoxUm8evBxS07/6O4V70wv RSdXMOUHBQhVJhipGFTm0mS9kLJd5b4k28CybjzXFfLTsBoelVC/YCem7tTOSKnm HvVFGvNewo4A/ej91dQfJGZt6D7J/TDUU+F5hLjpTG2nmcLyMvJYIHbLGhInuqDp rhSbQpuSPAeB+7USNNlEnHC7gL7lKanKmmET606N7ZVzUwTIekRjyQ9oZ+C+69xP 8MZ31FlUkbu9RSfdQQNPidVez5blDg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:07 2026 by rpki-client