This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa File: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (raw, json) Hash identifier: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak= Subject key identifier: AB:77:09:18:97:14:16:68:59:43:17:D5:51:85:BB:C3:99:67:90:8B Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Certificate serial: 019B7F831852EB003D8AFFDEDD1B2943FB1A Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa Signing time: Fri 02 Jan 2026 16:20:56 +0000 ROA not before: Fri 02 Jan 2026 16:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49198 IP address blocks: 185.47.208.0/23 maxlen: 23 185.47.208.0/24 maxlen: 24 185.47.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:18:52:eb:00:3d:8a:ff:de:dd:1b:29:43:fb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Validity Not Before: Jan 2 16:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab77091897141668594317d55185bbc39967908b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:b0:24:01:35:36:2c:d1:7e:fc:3d:a5:70: 5a:71:e3:34:39:fd:08:98:92:ed:d8:67:a6:35:48: 01:a9:77:95:fd:65:f1:d7:61:76:c7:c6:35:11:cc: 67:cd:11:6d:64:58:20:68:88:a0:bc:a6:c5:e2:05: 15:d7:40:c2:a0:94:67:9b:07:3e:d8:ec:a3:60:5b: 9a:73:25:38:0f:fa:72:e2:f0:5d:cc:b1:d1:ff:8b: 05:8f:0e:a5:e4:d2:58:61:66:cd:94:3c:72:f6:d4: 6e:67:c6:9a:d2:fc:18:53:cb:9a:2a:7d:b1:99:89: df:c4:66:13:92:56:eb:01:c7:26:41:68:bd:2a:d8: 99:5e:ec:5c:a5:d3:e6:a8:e8:c5:33:30:cf:eb:c5: 2c:b1:a4:6a:8f:27:1d:1a:e2:50:47:13:e4:f6:0e: e5:9b:a1:c1:7c:7a:1d:b0:a8:d0:95:4d:2f:90:2d: f5:73:6f:02:e3:33:7b:84:17:73:10:91:9d:17:c0: fe:7c:3b:34:76:0f:26:77:9b:62:90:05:18:a7:99: 21:10:e0:68:cc:8e:c6:f6:b2:ff:68:88:23:46:80: 76:c6:a5:68:41:81:a1:0f:10:f0:06:6a:b2:b5:05: 8e:b7:71:d9:ba:6a:e4:60:42:f3:aa:35:6f:12:be: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:77:09:18:97:14:16:68:59:43:17:D5:51:85:BB:C3:99:67:90:8B X509v3 Authority Key Identifier: keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.47.208.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:83:68:f0:26:56:44:f8:92:17:3c:9e:01:98:57:e5:2f:74: 8e:70:53:ac:e0:b8:0b:e8:67:b8:f2:fd:af:60:ad:5f:94:f8: 7d:bb:1f:22:3f:fa:92:3f:d1:2d:d5:3a:37:9c:07:2d:1c:f2: 60:42:7e:85:ef:87:2d:77:23:75:9e:b2:9a:e0:07:00:10:0b: 12:fc:d2:18:cf:e4:93:00:83:85:ff:40:3f:5a:69:e7:21:ea: 27:f7:0f:68:3e:92:1e:9f:5a:57:67:68:5b:18:94:cc:14:80: de:51:8f:a1:7d:d7:fc:5a:02:d1:e8:56:f7:6a:f6:cb:54:02: 3b:07:90:12:d6:1c:24:e8:e0:e9:52:b4:3b:0d:7c:32:d6:02: cf:08:be:d3:d7:4f:e1:9f:5e:47:a9:f4:b5:db:48:3f:13:7d: 4e:15:5a:d5:40:79:f1:b9:4e:46:2a:40:3b:9f:bd:04:f3:87: cc:7a:b1:b4:2d:a4:bf:e7:70:41:a8:93:a5:22:87:24:aa:9d: 99:4a:23:79:dc:bd:8d:b4:dc:71:55:41:be:03:82:f8:d2:7b: 96:11:15:40:f8:3c:7d:9c:ed:f5:eb:13:b7:56:d7:20:7d:95: 3d:07:c5:0c:e0:0e:fa:98:63:8f:8f:36:3f:44:73:44:4d:f0: 78:0e:f3:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gxhS6wA9iv/e3RspQ/saMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi NmJkZjcwHhcNMjYwMTAyMTYyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjc3MDkxODk3MTQxNjY4NTk0MzE3ZDU1MTg1YmJjMzk5Njc5MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRiwJAE1NizRfvw9pXBaceM0Of0I mJLt2GemNUgBqXeV/WXx12F2x8Y1EcxnzRFtZFggaIigvKbF4gUV10DCoJRnmwc+ 2OyjYFuacyU4D/py4vBdzLHR/4sFjw6l5NJYYWbNlDxy9tRuZ8aa0vwYU8uaKn2x mYnfxGYTklbrAccmQWi9KtiZXuxcpdPmqOjFMzDP68UssaRqjycdGuJQRxPk9g7l m6HBfHodsKjQlU0vkC31c28C4zN7hBdzEJGdF8D+fDs0dg8md5tikAUYp5khEOBo zI7G9rL/aIgjRoB2xqVoQYGhDxDwBmqytQWOt3HZumrkYELzqjVvEr67OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKt3CRiXFBZoWUMX1VGFu8OZZ5CLMB8GA1UdIwQY MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt ZDNlMjgwMGJkNjQwLzEvcTNjSkdKY1VGbWhaUXhmVlVZVzd3NWxua0lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuS/QMA0G CSqGSIb3DQEBCwUAA4IBAQCPg2jwJlZE+JIXPJ4BmFflL3SOcFOs4LgL6Ge48v2v YK1flPh9ux8iP/qSP9Et1To3nActHPJgQn6F74ctdyN1nrKa4AcAEAsS/NIYz+ST AIOF/0A/WmnnIeon9w9oPpIen1pXZ2hbGJTMFIDeUY+hfdf8WgLR6Fb3avbLVAI7 B5AS1hwk6ODpUrQ7DXwy1gLPCL7T10/hn15HqfS120g/E31OFVrVQHnxuU5GKkA7 n70E84fMerG0LaS/53BBqJOlIockqp2ZSiN53L2NtNxxVUG+A4L40nuWERVA+Dx9 nO316xO3VtcgfZU9B8UM4A76mGOPjzY/RHNETfB4DvPF -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:24 2026 by rpki-client