This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kGqF8Dg83fGHDHwtsmaGEpC1RHI.roa File: kGqF8Dg83fGHDHwtsmaGEpC1RHI.roa (raw, json) Hash identifier: U/hiaDUqj6G7J098sxkZTsaVTcROJqQUicMxoCnE1Xo= Subject key identifier: 90:6A:85:F0:38:3C:DD:F1:87:0C:7C:2D:B2:66:86:12:90:B5:44:72 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6A2E17577B9839A6338F496679FD3 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kGqF8Dg83fGHDHwtsmaGEpC1RHI.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 46.8.184.0/23 maxlen: 24 46.8.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a2:e1:75:77:b9:83:9a:63:38:f4:96:67:9f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=906a85f0383cddf1870c7c2db266861290b54472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:f8:b1:b7:c0:bc:51:6d:aa:73:53:d8:33: 04:41:23:25:fa:35:9e:aa:f4:36:e6:07:20:f0:65: 2e:09:90:45:10:9d:e2:f8:bc:c7:69:1b:80:40:c2: 3d:b5:da:a9:78:a3:7d:33:b3:d4:81:64:ea:c5:c8: 34:9d:c0:d0:d6:8d:ce:eb:24:70:2f:43:ec:94:b3: 3f:28:a7:3c:a3:0b:95:54:8e:e0:b9:b3:d8:38:e5: a4:da:8b:6c:a3:ba:d8:f4:91:3e:9e:c2:0e:33:2e: ca:e0:7b:36:8c:f9:5f:e0:a7:5d:3e:c8:bc:02:49: 12:f3:e7:f0:75:fd:b0:a6:18:e5:89:96:e6:ea:ba: 1c:13:ee:9a:0d:9b:cc:52:c7:24:e8:c4:29:c2:f2: cb:3c:d8:fb:ea:a0:28:f7:95:68:c9:10:01:3b:11: 51:a0:c4:5e:84:ba:16:4e:37:03:bd:04:38:63:88: b9:03:46:4e:52:f9:82:5b:71:b5:b7:e6:98:43:8c: 53:c9:45:8c:c5:a8:8f:ba:7f:e3:64:56:55:81:cb: 07:ec:16:de:79:82:47:15:07:c0:2f:0b:82:91:2c: 2f:14:f7:f2:2c:6b:9d:40:7c:17:56:9a:dc:b6:52: 5c:6d:e1:59:77:41:2f:3b:44:a8:7d:fe:a9:0d:05: 98:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6A:85:F0:38:3C:DD:F1:87:0C:7C:2D:B2:66:86:12:90:B5:44:72 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kGqF8Dg83fGHDHwtsmaGEpC1RHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.184.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:ab:ce:fd:6b:9c:3a:54:1d:29:f5:ba:6a:89:52:cb:3d:c5: 49:e2:fe:ea:fc:7c:5e:fa:4f:5b:ab:56:10:ab:94:4b:fa:e6: f1:1e:20:6f:43:7f:c3:7c:30:58:ad:10:32:2d:3b:ea:cd:62: 97:31:e7:fa:c0:14:c0:d8:cc:4b:06:e0:62:f7:f8:3d:b0:6d: f0:e4:91:0d:a3:be:89:c8:88:1b:da:a7:02:f7:32:24:c6:4e: 7f:dd:a0:59:5b:27:67:09:3f:ef:94:a4:2f:11:7e:71:f8:cc: ac:37:49:4b:31:b7:8e:c5:fa:32:d0:bb:5f:93:42:72:13:02: 3f:14:6d:f5:00:88:4d:a9:d3:e1:6a:d6:74:c7:78:0b:b1:22: b2:d9:a4:42:72:71:15:aa:41:7b:06:6a:10:ae:c4:7d:07:45: ce:ce:32:b4:f3:57:54:6d:3f:54:93:16:09:53:93:dd:77:c0: 2a:e1:9a:9b:e8:04:38:43:57:dd:b3:34:ee:1a:92:8b:22:ce: 50:63:54:b6:63:3c:9d:78:37:de:36:6f:73:eb:3e:d9:3a:6c: 91:34:d1:65:ee:6a:5a:32:f5:3f:14:67:72:59:0d:91:b1:e5: 71:92:ae:ad:81:4c:f4:18:d2:07:5e:db:0f:43:ad:a1:89:1f: f2:8b:d1:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqLhdXe5g5pjOPSWZ5/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDZhODVmMDM4M2NkZGYxODcwYzdjMmRiMjY2ODYxMjkwYjU0NDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXD4sbfAvFFtqnNT2DMEQSMl+jWe qvQ25gcg8GUuCZBFEJ3i+LzHaRuAQMI9tdqpeKN9M7PUgWTqxcg0ncDQ1o3O6yRw L0PslLM/KKc8owuVVI7gubPYOOWk2otso7rY9JE+nsIOMy7K4Hs2jPlf4KddPsi8 AkkS8+fwdf2wphjliZbm6rocE+6aDZvMUsck6MQpwvLLPNj76qAo95VoyRABOxFR oMRehLoWTjcDvQQ4Y4i5A0ZOUvmCW3G1t+aYQ4xTyUWMxaiPun/jZFZVgcsH7Bbe eYJHFQfALwuCkSwvFPfyLGudQHwXVprctlJcbeFZd0EvO0Soff6pDQWY8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJBqhfA4PN3xhwx8LbJmhhKQtURyMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEva0dxRjhEZzgzZkdIREh3dHNtYUdFcEMxUkhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLgi4MA0G CSqGSIb3DQEBCwUAA4IBAQAKq879a5w6VB0p9bpqiVLLPcVJ4v7q/Hxe+k9bq1YQ q5RL+ubxHiBvQ3/DfDBYrRAyLTvqzWKXMef6wBTA2MxLBuBi9/g9sG3w5JENo76J yIgb2qcC9zIkxk5/3aBZWydnCT/vlKQvEX5x+MysN0lLMbeOxfoy0Ltfk0JyEwI/ FG31AIhNqdPhatZ0x3gLsSKy2aRCcnEVqkF7BmoQrsR9B0XOzjK081dUbT9UkxYJ U5Pdd8Aq4Zqb6AQ4Q1fdszTuGpKLIs5QY1S2YzydeDfeNm9z6z7ZOmyRNNFl7mpa MvU/FGdyWQ2RseVxkq6tgUz0GNIHXtsPQ62hiR/yi9Gp -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:47 2026 by rpki-client