This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/9qaqud_c4V53thjjkEblp5yEtNw.roa File: 9qaqud_c4V53thjjkEblp5yEtNw.roa (raw, json) Hash identifier: 2A6FNxJL63HaW3rs8IFtns/rrq4grW3RAI1BGSdMLWM= Subject key identifier: F6:A6:AA:B9:DF:DC:E1:5E:77:B6:18:E3:90:46:E5:A7:9C:84:B4:DC Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee Certificate serial: 019B7E38672702BBDB8D6258464BB7F7F962 Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/9qaqud_c4V53thjjkEblp5yEtNw.roa Signing time: Fri 02 Jan 2026 10:19:44 +0000 ROA not before: Fri 02 Jan 2026 10:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6908 IP address blocks: 185.215.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:67:27:02:bb:db:8d:62:58:46:4b:b7:f7:f9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6a6aab9dfdce15e77b618e39046e5a79c84b4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:87:f6:3c:f5:64:d1:70:51:4f:b2:d1:08: e2:85:78:e6:6f:3b:c7:dc:85:e9:91:f2:53:e3:58: 42:8c:82:17:2c:10:31:be:ca:7f:8e:f3:8a:ee:52: 78:17:1d:3c:9d:c9:e0:58:46:3e:1f:87:d4:95:69: 24:49:75:dc:94:1b:8c:c3:cb:10:c3:14:82:c8:0e: 04:d6:13:3f:10:a1:bc:bf:db:b7:8c:36:ac:d2:fd: a3:4e:00:c0:38:5f:6e:74:5a:71:ec:a9:27:eb:ee: 63:c0:ac:07:49:9f:94:63:06:d1:b9:25:ce:85:e7: d2:e7:92:5c:d4:a7:d4:95:ac:22:c6:58:05:b1:49: 3c:58:b6:5f:ca:c3:31:24:1e:9e:ab:02:f7:31:2e: 67:6b:29:ad:c4:31:f5:18:28:7a:25:d7:54:c3:7d: 90:b2:04:50:1a:d7:23:f1:fc:1a:99:4c:85:60:dc: b9:bd:19:b6:0c:2b:24:53:ed:28:2b:df:e4:be:f5: 47:25:7a:72:b0:77:a5:89:9c:3f:29:8e:ea:49:59: 99:ab:fe:e4:8b:3c:50:f1:f9:16:ae:14:0a:b6:f4: ba:fd:85:7d:39:35:04:fa:a0:af:32:e0:3e:5f:36: fb:d0:da:72:cb:78:b2:d8:f6:62:13:be:4e:92:74: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A6:AA:B9:DF:DC:E1:5E:77:B6:18:E3:90:46:E5:A7:9C:84:B4:DC X509v3 Authority Key Identifier: keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/9qaqud_c4V53thjjkEblp5yEtNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.36.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:f4:9f:2a:81:47:54:58:1c:9f:72:b4:e8:d7:18:b3:b3:28: c6:63:a8:79:35:3e:61:3e:af:e3:68:35:98:36:a2:e3:a6:c4: 8a:70:bf:01:5d:d1:7a:8f:0d:5a:36:8b:a4:32:eb:dc:d5:bb: 6f:0c:73:5c:bb:0e:c4:16:86:13:8e:00:8d:7f:5e:dd:30:26: 49:1d:b2:d2:28:41:cd:1c:cf:34:1c:40:75:9c:93:1f:3a:9a: 79:f5:2d:62:28:4d:7c:e5:73:28:87:75:1b:e4:78:cf:a0:dc: 2e:6b:85:a9:1c:86:d5:03:f0:38:78:30:90:15:c1:e7:d1:4c: ae:13:ee:db:cf:0a:ae:4f:2a:b8:f2:99:76:da:fa:f0:18:67: 68:3f:1e:16:58:da:74:c2:a8:e1:94:11:9b:97:d5:76:6e:53: c5:90:5b:64:a3:03:0a:ad:d0:d0:58:42:dd:d7:ce:b7:47:7e: cc:f5:85:85:94:ce:cd:0c:57:80:78:72:f8:b5:28:51:a6:1b: bc:da:c1:08:b0:03:8a:d8:c2:9e:83:d1:c6:6f:81:f8:12:5c: f3:62:95:e3:33:bb:6a:98:be:46:ff:ae:7d:10:ee:b9:99:94: db:84:15:73:57:6b:ad:94:e6:59:56:be:33:66:81:09:92:22: 99:e5:0b:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGcnArvbjWJYRku39/liMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh NDY0ZWUwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmE2YWFiOWRmZGNlMTVlNzdiNjE4ZTM5MDQ2ZTVhNzljODRiNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTmH9jz1ZNFwUU+y0QjihXjmbzvH 3IXpkfJT41hCjIIXLBAxvsp/jvOK7lJ4Fx08ncngWEY+H4fUlWkkSXXclBuMw8sQ wxSCyA4E1hM/EKG8v9u3jDas0v2jTgDAOF9udFpx7Kkn6+5jwKwHSZ+UYwbRuSXO hefS55Jc1KfUlawixlgFsUk8WLZfysMxJB6eqwL3MS5naymtxDH1GCh6JddUw32Q sgRQGtcj8fwamUyFYNy5vRm2DCskU+0oK9/kvvVHJXpysHeliZw/KY7qSVmZq/7k izxQ8fkWrhQKtvS6/YV9OTUE+qCvMuA+Xzb70Npyy3iy2PZiE75OknRNfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPamqrnf3OFed7YY45BG5aechLTcMB8GA1UdIwQY MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt MzgyMGY3ZWUyY2I4LzEvOXFhcXVkX2M0VjUzdGhqamtFYmxwNXlFdE53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4 LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudckMA0G CSqGSIb3DQEBCwUAA4IBAQAe9J8qgUdUWByfcrTo1xizsyjGY6h5NT5hPq/jaDWY NqLjpsSKcL8BXdF6jw1aNoukMuvc1btvDHNcuw7EFoYTjgCNf17dMCZJHbLSKEHN HM80HEB1nJMfOpp59S1iKE185XMoh3Ub5HjPoNwua4WpHIbVA/A4eDCQFcHn0Uyu E+7bzwquTyq48pl22vrwGGdoPx4WWNp0wqjhlBGbl9V2blPFkFtkowMKrdDQWELd 1863R37M9YWFlM7NDFeAeHL4tShRphu82sEIsAOK2MKeg9HGb4H4ElzzYpXjM7tq mL5G/659EO65mZTbhBVzV2utlOZZVr4zZoEJkiKZ5QtV -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:38 2026 by rpki-client