This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qRbEVuilLu_tJeWCx54vu56eI-0.roa File: qRbEVuilLu_tJeWCx54vu56eI-0.roa (raw, json) Hash identifier: kKFPtTkbsZLFNboSXCcz16t5loKFAoCkGMZaGV5WIjg= Subject key identifier: A9:16:C4:56:E8:A5:2E:EF:ED:25:E5:82:C7:9E:2F:BB:9E:9E:23:ED Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ABA429B00886D627347D0552628B9 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qRbEVuilLu_tJeWCx54vu56eI-0.roa Signing time: Thu 01 Jan 2026 16:18:44 +0000 ROA not before: Thu 01 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202704 IP address blocks: 82.153.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ba:42:9b:00:88:6d:62:73:47:d0:55:26:28:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a916c456e8a52eefed25e582c79e2fbb9e9e23ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:5a:6c:f2:e8:75:9b:9e:71:7e:4c:8c:6f: c7:92:6a:46:c9:a9:dd:19:77:09:a8:62:af:ff:73: c7:c2:5b:b5:87:0d:13:28:39:95:91:59:43:d9:91: d2:77:7b:04:b9:54:42:e0:ea:1f:f3:31:75:62:0c: 24:15:75:3f:bb:14:49:38:88:39:3a:38:d2:fd:06: 5e:76:fd:21:1c:b4:53:4a:e6:7c:a4:72:34:90:6c: 56:62:05:00:94:40:53:23:db:a3:3e:b5:4f:54:41: 6a:53:e1:57:96:7c:3e:af:ab:01:86:ea:92:79:87: 24:fa:fc:89:b3:55:28:a9:65:bd:c7:08:67:e5:bd: 32:c2:ac:5d:9e:cc:74:e2:40:10:2d:17:db:55:bc: 09:fd:37:ff:13:82:d3:ca:60:f4:6b:9a:b0:14:d2: 3f:b6:ae:80:bf:db:eb:b7:b1:6d:74:97:d2:fa:80: 44:4f:82:25:88:a3:fb:25:55:98:1f:74:bf:20:ba: 41:be:59:ba:bc:89:2b:c7:d3:e2:d2:38:d7:ca:a3: 45:42:dc:d3:68:77:f7:7b:0c:1c:ba:19:3b:af:14: 07:32:9b:3b:8f:ee:ba:99:b9:5f:62:8c:14:3f:bd: 4f:51:41:20:f4:65:5c:4f:00:2e:2e:68:7d:ff:d8: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:16:C4:56:E8:A5:2E:EF:ED:25:E5:82:C7:9E:2F:BB:9E:9E:23:ED X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qRbEVuilLu_tJeWCx54vu56eI-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.136.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:0c:4e:90:f9:1b:94:28:96:97:c7:a6:3a:f8:9b:ae:ef:32: 2e:ee:c0:8c:ed:d9:15:5e:a3:92:c3:19:27:58:5f:dc:e8:e1: 7e:f2:73:37:62:e8:9b:d8:54:69:39:9f:84:3c:83:34:cd:80: be:e7:d4:d3:f2:59:cb:0a:2f:83:63:37:6e:e0:2f:f6:84:02: e9:a9:11:6e:7e:95:b3:92:85:43:5c:8b:c7:c8:18:7c:c2:bf: 92:e7:89:4c:d9:e8:f8:f6:3f:d0:6b:42:cc:e3:9c:a6:e2:b4: e8:db:5d:bb:c4:6a:a4:70:75:5b:68:c7:01:a4:92:52:de:b4: 7f:d6:4c:76:02:7b:ea:d4:ad:58:19:d9:40:5a:47:05:79:52: 1b:7c:2d:55:cb:50:be:b3:23:71:3c:8d:94:8c:91:10:fc:6c: 08:49:27:74:fe:6d:20:09:06:c3:11:1d:5e:95:95:fa:83:b6: 3e:7b:90:78:99:d2:68:bc:1c:11:bd:7a:07:2d:a4:81:de:bf: c1:3a:a3:13:c1:fb:54:10:1e:01:24:6d:cd:cc:b7:11:65:34: 3f:d9:5e:54:a7:08:2a:f4:cc:e1:a0:14:f0:34:5b:2e:f4:4b: 5b:fd:db:a1:a3:f6:65:59:7c:b2:aa:43:b9:1f:e3:4b:95:4b: f7:e8:72:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrpCmwCIbWJzR9BVJii5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTE2YzQ1NmU4YTUyZWVmZWQyNWU1ODJjNzllMmZiYjllOWUyM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCBabPLodZuecX5MjG/HkmpGyand GXcJqGKv/3PHwlu1hw0TKDmVkVlD2ZHSd3sEuVRC4Oof8zF1YgwkFXU/uxRJOIg5 OjjS/QZedv0hHLRTSuZ8pHI0kGxWYgUAlEBTI9ujPrVPVEFqU+FXlnw+r6sBhuqS eYck+vyJs1UoqWW9xwhn5b0ywqxdnsx04kAQLRfbVbwJ/Tf/E4LTymD0a5qwFNI/ tq6Av9vrt7FtdJfS+oBET4IliKP7JVWYH3S/ILpBvlm6vIkrx9Pi0jjXyqNFQtzT aHf3ewwcuhk7rxQHMps7j+66mblfYowUP71PUUEg9GVcTwAuLmh9/9hmxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKkWxFbopS7v7SXlgseeL7ueniPtMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvcVJiRVZ1aWxMdV90SmVXQ3g1NHZ1NTZlSS0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpmIMA0G CSqGSIb3DQEBCwUAA4IBAQBvDE6Q+RuUKJaXx6Y6+Juu7zIu7sCM7dkVXqOSwxkn WF/c6OF+8nM3Yuib2FRpOZ+EPIM0zYC+59TT8lnLCi+DYzdu4C/2hALpqRFufpWz koVDXIvHyBh8wr+S54lM2ej49j/Qa0LM45ym4rTo2127xGqkcHVbaMcBpJJS3rR/ 1kx2Anvq1K1YGdlAWkcFeVIbfC1Vy1C+syNxPI2UjJEQ/GwISSd0/m0gCQbDER1e lZX6g7Y+e5B4mdJovBwRvXoHLaSB3r/BOqMTwftUEB4BJG3NzLcRZTQ/2V5Upwgq 9MzhoBTwNFsu9Etb/duho/ZlWXyyqkO5H+NLlUv36HLa -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:35 2026 by rpki-client