This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/bqjOHwdOuvBhLR08aRs57g88Fq0.roa File: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (raw, json) Hash identifier: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4= Subject key identifier: 6E:A8:CE:1F:07:4E:BA:F0:61:2D:1D:3C:69:1B:39:EE:0F:3C:16:AD Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B7A5B0BEC41023DE9474817562DE0A70A Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/bqjOHwdOuvBhLR08aRs57g88Fq0.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198441 IP address blocks: 185.86.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0b:ec:41:02:3d:e9:47:48:17:56:2d:e0:a7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ea8ce1f074ebaf0612d1d3c691b39ee0f3c16ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:1e:ca:d1:63:1f:ae:9b:e9:cc:31:99:c8: 1a:43:69:14:70:8d:0f:94:a8:52:1a:60:68:68:b3: 1a:9e:9b:a3:b9:37:8c:62:29:55:bc:84:c4:a5:ca: a4:54:44:ee:50:dc:e6:d9:9f:aa:7f:10:58:cf:8c: 47:c2:ae:4c:aa:d1:66:c9:7b:61:78:0d:04:db:f5: f5:5f:d6:18:8d:a8:0e:ad:4f:1b:27:0e:bd:16:6c: 6f:d4:9d:5a:37:56:9a:c5:0c:ac:9c:8e:88:db:5b: e2:e1:dd:3b:da:c4:72:70:10:2e:d0:4f:8e:bf:1e: 5e:5a:76:e2:59:66:18:0a:7b:14:3f:8c:36:e3:51: ac:7d:0a:fd:94:4c:da:0f:27:ab:10:f7:0d:d8:b9: 8f:ba:50:b8:5f:e3:90:a5:b0:60:08:83:20:b2:e9: 04:03:aa:3d:fb:d2:5f:b1:10:4d:e2:2e:f1:61:e6: 06:28:4b:84:12:a6:a0:25:36:4d:39:97:ad:ed:2f: 64:ce:59:71:61:99:00:09:58:15:5f:24:71:d1:95: 6d:0b:da:96:62:8b:db:95:9b:e4:64:81:7f:37:09: f7:16:93:50:b1:75:45:8e:2d:3e:fe:fb:51:53:7b: 69:6e:34:1e:c7:37:43:13:82:3f:c9:01:75:cd:04: 92:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A8:CE:1F:07:4E:BA:F0:61:2D:1D:3C:69:1B:39:EE:0F:3C:16:AD X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/bqjOHwdOuvBhLR08aRs57g88Fq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.193.0/24 Signature Algorithm: sha256WithRSAEncryption c0:c7:e0:02:6f:a6:ee:af:15:96:ee:71:53:f6:6c:bd:7d:d0: 2b:44:e7:55:49:a3:82:ae:d2:7c:54:2b:1e:3f:87:43:fb:d2: ed:a4:e7:43:90:fc:0a:b2:39:18:9c:20:5d:3a:3f:ce:66:b4: c0:b9:9c:46:ec:d2:60:d4:9d:77:dd:f7:17:7d:d0:06:9f:e7: f5:71:a5:69:14:73:d3:c1:25:94:48:33:c5:4b:06:40:eb:60: cf:e9:c2:8c:ff:3c:5d:e0:9b:36:e2:fa:56:ad:8f:68:20:87: bd:96:71:7e:f5:cb:03:a5:4b:be:56:78:4a:a8:1a:5e:75:4c: ae:75:bf:f7:eb:fa:bf:ec:d0:dc:22:93:43:16:a1:c4:3d:b5: aa:34:ec:61:48:96:4a:59:9d:fc:35:af:bb:ed:22:44:2d:f7: 54:49:33:a4:25:e6:8b:85:0d:34:e2:d8:a6:37:99:54:a8:63: 8e:ac:3b:e9:ce:56:59:cb:37:50:d9:74:8f:87:59:1b:b1:40: e9:a5:5f:01:bd:61:78:b5:1f:ed:59:de:fa:56:84:88:cd:58: 6d:0f:8d:1d:6c:2c:e7:51:dd:22:18:07:b3:9e:4e:c5:d1:b8: 31:2c:72:49:31:e9:e9:5a:e2:35:46:7f:ea:fa:69:bf:f8:3e: b9:10:70:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WwvsQQI96UdIF1Yt4KcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWE4Y2UxZjA3NGViYWYwNjEyZDFkM2M2OTFiMzllZTBmM2MxNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNYeytFjH66b6cwxmcgaQ2kUcI0P lKhSGmBoaLManpujuTeMYilVvITEpcqkVETuUNzm2Z+qfxBYz4xHwq5MqtFmyXth eA0E2/X1X9YYjagOrU8bJw69Fmxv1J1aN1aaxQysnI6I21vi4d072sRycBAu0E+O vx5eWnbiWWYYCnsUP4w241GsfQr9lEzaDyerEPcN2LmPulC4X+OQpbBgCIMgsukE A6o9+9JfsRBN4i7xYeYGKEuEEqagJTZNOZet7S9kzllxYZkACVgVXyRx0ZVtC9qW YovblZvkZIF/Nwn3FpNQsXVFji0+/vtRU3tpbjQexzdDE4I/yQF1zQSSBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG6ozh8HTrrwYS0dPGkbOe4PPBatMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvYnFqT0h3ZE91dkJoTFIwOGFSczU3Zzg4RnEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVbBMA0G CSqGSIb3DQEBCwUAA4IBAQDAx+ACb6burxWW7nFT9my9fdArROdVSaOCrtJ8VCse P4dD+9LtpOdDkPwKsjkYnCBdOj/OZrTAuZxG7NJg1J133fcXfdAGn+f1caVpFHPT wSWUSDPFSwZA62DP6cKM/zxd4Js24vpWrY9oIIe9lnF+9csDpUu+VnhKqBpedUyu db/36/q/7NDcIpNDFqHEPbWqNOxhSJZKWZ38Na+77SJELfdUSTOkJeaLhQ004tim N5lUqGOOrDvpzlZZyzdQ2XSPh1kbsUDppV8BvWF4tR/tWd76VoSIzVhtD40dbCzn Ud0iGAeznk7F0bgxLHJJMenpWuI1Rn/q+mm/+D65EHA/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:43 2026 by rpki-client