This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/kQAqQkYprXGntUoiW7qN1WFeM6c.roa File: kQAqQkYprXGntUoiW7qN1WFeM6c.roa (raw, json) Hash identifier: FS+U3EYjUSEwiuzNKrPworcyNLMeX4zA9XKfDuWL9sw= Subject key identifier: 91:00:2A:42:46:29:AD:71:A7:B5:4A:22:5B:BA:8D:D5:61:5E:33:A7 Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73 Certificate serial: 019B7D5B59780C126BC03E26B5F00CEC7DA3 Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/kQAqQkYprXGntUoiW7qN1WFeM6c.roa Signing time: Fri 02 Jan 2026 06:18:17 +0000 ROA not before: Fri 02 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62417 IP address blocks: 185.32.78.0/24 maxlen: 24 185.32.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:59:78:0c:12:6b:c0:3e:26:b5:f0:0c:ec:7d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73 Validity Not Before: Jan 2 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91002a424629ad71a7b54a225bba8dd5615e33a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:71:f1:04:37:a1:14:9a:a1:69:f6:04:4f: 95:65:92:30:27:3e:ad:6b:db:bf:f3:6f:07:8b:1e: 8c:2c:63:84:ac:e2:28:c2:77:9e:27:77:c2:67:da: 3c:4d:f6:28:9e:9d:37:c7:a6:e1:e8:b6:04:0a:fa: dd:6b:f5:21:22:65:20:41:99:d7:f2:8c:3c:c6:56: d2:b9:30:93:8c:9e:dc:cd:94:a2:65:67:52:cf:ad: bc:2a:3e:ae:b5:95:3c:7d:50:8e:dd:6e:f2:2c:41: d3:8d:5d:c8:2b:02:99:17:54:47:2b:89:89:d2:67: 7b:33:97:6d:7d:f7:5e:e3:f9:db:7d:a8:c4:79:12: 5f:cc:59:50:94:86:95:a4:bb:f9:8a:47:b4:15:76: 8c:fc:83:89:bf:85:83:0c:d7:5c:dd:87:d5:b9:9b: 35:22:ee:8f:5c:c3:a3:71:f7:a1:dc:b1:d4:2b:94: 3f:d4:94:08:89:82:5a:24:b5:ef:3c:11:be:79:76: c3:f3:1a:2a:77:fd:ee:7a:da:b6:00:a0:aa:79:70: 10:30:51:20:67:c3:41:78:dc:db:ed:20:d9:f7:d4: ea:c2:e5:3e:ef:d1:1a:17:c7:bb:85:13:52:74:f7: 87:10:08:2c:39:66:bf:e9:1b:0b:f8:0b:68:6b:56: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:00:2A:42:46:29:AD:71:A7:B5:4A:22:5B:BA:8D:D5:61:5E:33:A7 X509v3 Authority Key Identifier: keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/kQAqQkYprXGntUoiW7qN1WFeM6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.78.0/23 Signature Algorithm: sha256WithRSAEncryption a1:22:bf:f4:0c:04:e5:9a:c1:3a:d4:9f:83:5d:c9:8d:ff:bf: b0:85:22:d3:48:2d:0a:cb:05:e8:2c:99:09:d8:ef:57:dc:17: 3f:3d:5b:56:10:8d:b6:d8:42:89:23:66:31:c3:5c:91:bb:3a: 1b:98:01:ad:c6:f3:66:98:3b:49:9d:f2:86:35:fe:c1:8c:20: 51:3f:91:dc:5b:2e:3f:18:36:09:54:8b:32:16:db:3a:ca:bd: 3d:f3:be:1b:85:04:10:b3:41:59:63:51:83:3e:8a:2e:29:15: 39:5a:b4:60:0b:ca:e9:46:97:a0:6d:ca:0a:ac:46:32:d1:41: 57:3f:a2:a2:b5:88:f8:2a:4a:d6:bc:d9:72:24:02:a8:f7:a9: 9c:25:c4:15:b9:68:4d:61:ad:fd:a8:2a:c5:e7:70:44:f2:1f: 1f:3a:00:19:53:be:1f:2a:04:37:9e:d9:0c:5d:e8:c8:bb:87: 43:73:d0:ef:af:f6:d9:78:40:cc:4f:5a:4b:96:90:ec:50:51: 7e:02:42:59:b5:27:89:27:68:60:ae:e4:b3:1d:74:5b:94:53: ef:f0:e8:a8:9e:52:d0:78:34:87:6b:8d:98:00:94:fe:8c:40: 04:4d:44:22:bc:9e:52:a6:a1:a2:95:fa:32:6c:ab:31:9d:e0: 53:bf:a4:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W1l4DBJrwD4mtfAM7H2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODQ2YzhjMGRiNjVkYzc0NmVmNjRjZmQ4MmJiOWMxOTRl MjdmNzMwHhcNMjYwMTAyMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTAwMmE0MjQ2MjlhZDcxYTdiNTRhMjI1YmJhOGRkNTYxNWUzM2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2Fx8QQ3oRSaoWn2BE+VZZIwJz6t a9u/828Hix6MLGOErOIowneeJ3fCZ9o8TfYonp03x6bh6LYECvrda/UhImUgQZnX 8ow8xlbSuTCTjJ7czZSiZWdSz628Kj6utZU8fVCO3W7yLEHTjV3IKwKZF1RHK4mJ 0md7M5dtffde4/nbfajEeRJfzFlQlIaVpLv5ike0FXaM/IOJv4WDDNdc3YfVuZs1 Iu6PXMOjcfeh3LHUK5Q/1JQIiYJaJLXvPBG+eXbD8xoqd/3uetq2AKCqeXAQMFEg Z8NBeNzb7SDZ99TqwuU+79EaF8e7hRNSdPeHEAgsOWa/6RsL+Atoa1ausQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJEAKkJGKa1xp7VKIlu6jdVhXjOnMB8GA1UdIwQY MBaAFG+EbIwNtl3HRu9kz9grucGU4n9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMt NDhiYTkyOGZiMWJlLzEva1FBcVFrWXByWEdudFVvaVc3cU4xV0ZlTTZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMtNDhiYTkyOGZiMWJl LzEvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSBOMA0G CSqGSIb3DQEBCwUAA4IBAQChIr/0DATlmsE61J+DXcmN/7+whSLTSC0KywXoLJkJ 2O9X3Bc/PVtWEI222EKJI2Yxw1yRuzobmAGtxvNmmDtJnfKGNf7BjCBRP5HcWy4/ GDYJVIsyFts6yr09874bhQQQs0FZY1GDPoouKRU5WrRgC8rpRpegbcoKrEYy0UFX P6KitYj4KkrWvNlyJAKo96mcJcQVuWhNYa39qCrF53BE8h8fOgAZU74fKgQ3ntkM XejIu4dDc9Dvr/bZeEDMT1pLlpDsUFF+AkJZtSeJJ2hgruSzHXRblFPv8OionlLQ eDSHa42YAJT+jEAETUQivJ5SpqGilfoybKsxneBTv6Q/ -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:36 2026 by rpki-client