This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QmBc8zW_debMb9HG_5lDH1XOPNc.roa File: QmBc8zW_debMb9HG_5lDH1XOPNc.roa (raw, json) Hash identifier: W/XLFqWV+XxdaL2NiXquwGK/o5yNV0lmt5N5gq+Wbmc= Subject key identifier: 42:60:5C:F3:35:BF:75:E6:CC:6F:D1:C6:FF:99:43:1F:55:CE:3C:D7 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EB03B7B55547E2961B2908BF834DAE Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QmBc8zW_debMb9HG_5lDH1XOPNc.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 328867 IP address blocks: 82.115.1.0/24 maxlen: 24 82.115.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:03:b7:b5:55:47:e2:96:1b:29:08:bf:83:4d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42605cf335bf75e6cc6fd1c6ff99431f55ce3cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:3d:fc:62:38:db:9b:ae:77:68:62:67:41: a3:4d:ad:b3:5b:b6:5c:63:06:dc:37:b8:49:3a:d9: a7:96:85:1b:24:b8:cd:af:8d:ab:f1:69:f0:e7:27: 68:70:cd:67:b2:66:5e:e9:3c:de:59:61:d8:1c:e1: 1d:ce:5e:9a:99:3f:ea:60:5b:39:b8:20:2f:d5:82: 34:c1:91:78:ee:f0:40:5e:de:ee:d1:e0:23:c9:b6: 1a:05:01:3a:03:72:dd:8a:e4:c0:4d:0e:78:f2:f2: a3:a3:73:a4:66:9b:49:e4:a9:32:d1:8a:37:65:25: 6c:18:91:25:24:d6:0a:66:e2:65:8c:cb:20:ab:d8: 8d:3a:94:04:97:90:47:25:c0:02:eb:bc:0f:09:47: a4:8e:a8:6e:56:71:e4:c7:e2:b9:36:fb:d3:5f:db: 7e:48:ab:51:cf:ad:3a:e3:8f:8f:25:31:60:08:1d: 29:be:3c:2b:3a:9c:0e:00:dd:57:e6:2f:12:e2:4f: c4:0c:c4:aa:33:0b:41:fb:ac:de:89:9c:08:7a:b5: 44:11:4b:2d:a7:ab:a5:24:84:0e:0f:92:e0:c7:0e: 2c:45:48:99:c6:50:98:52:07:95:c8:80:26:18:34: 89:70:9e:cf:aa:cb:9f:d1:a3:c7:f5:60:aa:5e:a6: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:60:5C:F3:35:BF:75:E6:CC:6F:D1:C6:FF:99:43:1F:55:CE:3C:D7 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QmBc8zW_debMb9HG_5lDH1XOPNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.1.0/24 82.115.12.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:df:4c:5e:7f:49:a3:db:45:50:0f:a3:3e:af:cb:8d:df:3d: 56:de:4b:06:a2:a4:b0:36:13:87:bf:3a:76:27:2b:36:cd:72: 7a:00:ab:75:bb:dd:60:f7:63:f8:e1:ec:28:59:46:83:88:c1: 90:e7:9f:24:41:89:32:09:7b:c1:69:77:ac:51:22:7b:23:d1: 32:a0:52:cc:82:53:a6:33:05:01:e6:f8:60:b5:38:d1:70:ba: 91:6b:01:29:70:69:03:c0:28:38:d1:0f:cf:05:81:e7:f1:49: f9:0e:3f:f5:25:79:06:57:0e:ec:93:91:00:d1:d0:9c:72:1f: 8f:1c:44:c3:d1:ef:73:06:1d:a8:c7:89:d7:a8:1f:84:ac:81: 5e:2a:3f:90:67:7f:76:f1:2d:4c:1e:ec:65:f7:5d:e1:dc:05: b9:b5:ba:2e:53:ad:35:85:fd:09:2e:f1:b9:72:a1:df:fe:5b: ea:3e:72:34:7b:d5:8d:72:3d:bb:5b:cf:ac:b3:3b:48:c5:0b: 4d:28:ca:eb:4c:f6:9e:9c:f4:28:f5:e7:20:a9:74:03:b2:10: 71:6b:2c:35:db:0b:6c:d8:df:e6:8d:09:9b:6e:0b:85:5c:33: b6:be:8e:f9:57:d6:34:4e:8e:fe:f8:09:a1:69:bf:36:a5:f3: 79:c5:bf:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26wO3tVVH4pYbKQi/g02uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjYwNWNmMzM1YmY3NWU2Y2M2ZmQxYzZmZjk5NDMxZjU1Y2UzY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKY9/GI425uud2hiZ0GjTa2zW7Zc YwbcN7hJOtmnloUbJLjNr42r8Wnw5ydocM1nsmZe6TzeWWHYHOEdzl6amT/qYFs5 uCAv1YI0wZF47vBAXt7u0eAjybYaBQE6A3LdiuTATQ548vKjo3OkZptJ5Kky0Yo3 ZSVsGJElJNYKZuJljMsgq9iNOpQEl5BHJcAC67wPCUekjqhuVnHkx+K5NvvTX9t+ SKtRz60644+PJTFgCB0pvjwrOpwOAN1X5i8S4k/EDMSqMwtB+6zeiZwIerVEEUst p6ulJIQOD5Lgxw4sRUiZxlCYUgeVyIAmGDSJcJ7Pqsuf0aPH9WCqXqYfXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEJgXPM1v3XmzG/Rxv+ZQx9VzjzXMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvUW1CYzh6V19kZWJNYjlIR181bERIMVhPUE5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUnMBAwQA UnMMMA0GCSqGSIb3DQEBCwUAA4IBAQBN30xef0mj20VQD6M+r8uN3z1W3ksGoqSw NhOHvzp2Jys2zXJ6AKt1u91g92P44ewoWUaDiMGQ558kQYkyCXvBaXesUSJ7I9Ey oFLMglOmMwUB5vhgtTjRcLqRawEpcGkDwCg40Q/PBYHn8Un5Dj/1JXkGVw7sk5EA 0dCcch+PHETD0e9zBh2ox4nXqB+ErIFeKj+QZ3928S1MHuxl913h3AW5tbouU601 hf0JLvG5cqHf/lvqPnI0e9WNcj27W8+ssztIxQtNKMrrTPaenPQo9ecgqXQDshBx ayw12wts2N/mjQmbbguFXDO2vo75V9Y0To7++Amhab82pfN5xb9D -----END CERTIFICATE-----Generated at Sun Jan 25 11:59:41 2026 by rpki-client