This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/Q0DDocvIKXHiQubA2ngrZtN9sss.roa File: Q0DDocvIKXHiQubA2ngrZtN9sss.roa (raw, json) Hash identifier: 0a8d7PBCfHewby32uiXu3Z8pOtDp0RIdoWEgJJZMaoA= Subject key identifier: 43:40:C3:A1:CB:C8:29:71:E2:42:E6:C0:DA:78:2B:66:D3:7D:B2:CB Certificate issuer: /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Certificate serial: 019B797F39FA391F89B25B9FC613B5FE4360 Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/Q0DDocvIKXHiQubA2ngrZtN9sss.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36924 IP address blocks: 146.0.64.0/21 maxlen: 24 185.56.48.0/22 maxlen: 24 185.183.228.0/22 maxlen: 24 2a0b:2080::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:39:fa:39:1f:89:b2:5b:9f:c6:13:b5:fe:43:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4340c3a1cbc82971e242e6c0da782b66d37db2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:93:8b:b4:ec:0f:9d:be:00:03:e2:95:a0: 75:94:14:04:bd:53:9d:eb:53:61:6d:cb:3c:7c:e4: 85:f6:25:b2:48:58:29:96:3e:77:6a:2c:11:4d:0e: 0d:a8:c3:8c:4a:fb:2c:53:c3:b5:47:f3:7e:ba:3e: 71:65:76:95:c0:5e:8c:cf:8f:1b:04:5f:39:b4:85: b0:0f:b6:30:7b:44:fe:1c:50:ab:2c:af:0e:ae:5f: 8b:5e:73:31:96:ce:ba:fe:37:04:d9:7b:e1:2a:63: 60:87:27:68:9b:af:f0:cc:04:33:0b:e2:38:cb:a3: 34:5f:3e:ff:91:ca:1b:4e:05:17:e4:03:d2:8d:dc: 81:37:2c:3b:37:2b:4a:70:70:4b:37:a4:98:0b:4f: bc:bf:36:cc:30:1d:c4:d5:0c:5d:28:2f:89:cc:f8: 4b:b0:09:07:65:2a:cb:10:48:04:58:9a:e0:b2:54: 21:0e:19:4b:b0:df:d7:bb:48:b1:77:18:e1:cf:36: ed:3f:f1:2d:64:69:4a:56:55:44:96:d5:64:92:76: 86:80:dc:6b:54:54:40:46:19:8b:68:7e:72:8b:e6: 18:8c:78:16:19:2c:ab:8b:89:f0:47:e1:b6:ae:fe: d3:a6:42:1e:c3:94:f0:f7:f1:17:9f:bd:b1:c6:ab: 27:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:40:C3:A1:CB:C8:29:71:E2:42:E6:C0:DA:78:2B:66:D3:7D:B2:CB X509v3 Authority Key Identifier: keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/Q0DDocvIKXHiQubA2ngrZtN9sss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.0.64.0/21 185.56.48.0/22 185.183.228.0/22 IPv6: 2a0b:2080::/29 Signature Algorithm: sha256WithRSAEncryption 89:70:28:78:de:8a:53:b1:d3:51:b7:43:14:7a:cf:b1:42:ea: ff:2e:a1:dd:ae:e4:b9:26:51:57:de:3f:2e:ce:85:0d:21:d8: bf:33:93:00:cb:52:51:56:92:eb:03:a6:9f:cc:66:43:21:d5: a0:c9:d7:fd:40:19:60:90:e4:21:d1:e0:b3:ce:90:28:9c:21: e5:14:58:ea:94:e3:e9:6a:6f:52:30:5e:08:e3:f0:b8:91:db: 6b:0a:07:9a:7e:83:39:b0:a5:98:8b:55:d0:98:18:cd:54:d1: c3:3c:9f:b2:8c:85:ff:a4:cb:99:51:d9:09:ba:05:1f:43:47: 5a:5c:ee:cf:1d:de:ee:b9:af:10:ab:0d:b2:cb:89:b1:0a:aa: 15:fb:cc:4f:5e:1a:5a:44:7e:cf:fb:49:55:5d:dc:d4:e1:2d: c9:04:5a:f5:c7:c1:5d:b5:de:a1:f0:29:ba:39:84:b7:44:0f: 01:12:fc:86:81:eb:ca:f2:33:ac:2d:b3:6b:eb:94:09:9e:88: 88:d1:09:0c:e5:40:9f:fd:11:d4:22:59:9d:11:50:91:38:00: 57:0d:75:89:f8:ac:88:69:49:93:cd:b4:41:90:82:f4:da:89: 0c:5a:89:9a:05:91:19:75:e3:f7:e4:95:09:f7:6d:3c:83:65: ab:82:23:0e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fzn6OR+JslufxhO1/kNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZWJkMTlkYTk4YzI3ZmFiYWI3YjJmMjk0YmNmOWVjNmFm NDQ5MDUwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzQwYzNhMWNiYzgyOTcxZTI0MmU2YzBkYTc4MmI2NmQzN2RiMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscGTi7TsD52+AAPilaB1lBQEvVOd 61Nhbcs8fOSF9iWySFgplj53aiwRTQ4NqMOMSvssU8O1R/N+uj5xZXaVwF6Mz48b BF85tIWwD7Ywe0T+HFCrLK8Orl+LXnMxls66/jcE2XvhKmNghydom6/wzAQzC+I4 y6M0Xz7/kcobTgUX5APSjdyBNyw7NytKcHBLN6SYC0+8vzbMMB3E1QxdKC+JzPhL sAkHZSrLEEgEWJrgslQhDhlLsN/Xu0ixdxjhzzbtP/EtZGlKVlVEltVkknaGgNxr VFRARhmLaH5yi+YYjHgWGSyri4nwR+G2rv7TpkIew5Tw9/EXn72xxqsnxwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFENAw6HLyClx4kLmwNp4K2bTfbLLMB8GA1UdIwQY MBaAFG3r0Z2pjCf6urey8pS8+exq9EkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xYWQzNDktZWRmZS00MTUwLTlkMzct MjY0YWI5MzM3ZmEwLzEvUTBERG9jdklLWEhpUXViQTJuZ3JadE45c3NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xYWQzNDktZWRmZS00MTUwLTlkMzctMjY0YWI5MzM3ZmEw LzEvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDkgBAAwQC uTgwAwQCubfkMA0EAgACMAcDBQMqCyCAMA0GCSqGSIb3DQEBCwUAA4IBAQCJcCh4 3opTsdNRt0MUes+xQur/LqHdruS5JlFX3j8uzoUNIdi/M5MAy1JRVpLrA6afzGZD IdWgydf9QBlgkOQh0eCzzpAonCHlFFjqlOPpam9SMF4I4/C4kdtrCgeafoM5sKWY i1XQmBjNVNHDPJ+yjIX/pMuZUdkJugUfQ0daXO7PHd7uua8Qqw2yy4mxCqoV+8xP XhpaRH7P+0lVXdzU4S3JBFr1x8Fdtd6h8Cm6OYS3RA8BEvyGgevK8jOsLbNr65QJ noiI0QkM5UCf/RHUIlmdEVCROABXDXWJ+KyIaUmTzbRBkIL02okMWomaBZEZdeP3 5JUJ9208g2WrgiMO -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:11 2026 by rpki-client