This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/qaQdus1BOleDA5YBatWLdmpF4V8.roa File: qaQdus1BOleDA5YBatWLdmpF4V8.roa (raw, json) Hash identifier: qoEh+iI2D1MSwoWJBnblgqwJNtj9VkryalvSfDPlSuw= Subject key identifier: A9:A4:1D:BA:CD:41:3A:57:83:03:96:01:6A:D5:8B:76:6A:45:E1:5F Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Certificate serial: 019B7C7F33E00D262EE69B803998854CBF88 Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/qaQdus1BOleDA5YBatWLdmpF4V8.roa Signing time: Fri 02 Jan 2026 02:17:49 +0000 ROA not before: Fri 02 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205796 IP address blocks: 185.206.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:33:e0:0d:26:2e:e6:9b:80:39:98:85:4c:bf:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Validity Not Before: Jan 2 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9a41dbacd413a57830396016ad58b766a45e15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:e3:4b:ed:6c:ba:c5:fc:39:60:98:91:d0: 40:d7:b5:de:82:b5:2a:b9:cf:a1:3b:4a:90:40:93: 71:cb:08:1e:c9:f7:d1:5f:fa:d1:9b:cc:4b:8d:a3: 36:9d:38:2f:61:d1:af:9f:fe:cc:32:4a:44:69:db: b8:4b:b3:c8:42:58:bf:69:c5:bf:e2:f3:4a:f2:69: 4b:6e:b7:69:72:c1:71:78:59:6b:ad:c9:aa:21:b6: 10:4a:28:dd:1f:ab:88:14:1f:8e:a5:ea:36:85:f5: 2e:66:bb:af:bf:06:9e:85:a5:d7:4b:78:46:0d:61: cc:08:c2:e0:6d:5e:b1:52:fd:7f:8d:c5:ac:46:ed: 72:44:18:8f:90:13:70:ad:bf:f6:b4:5b:4c:16:60: c7:f1:a7:c1:e3:f3:d0:8a:5b:14:42:f3:3b:d3:14: 85:fc:e5:78:4c:1c:ac:01:5d:24:72:e3:08:f6:15: 06:de:1f:80:23:c6:ce:44:f5:82:94:2e:2d:cb:8e: 4a:bc:e7:4e:14:2f:9e:f2:65:85:8d:df:71:55:f6: 03:43:3c:b1:de:bc:bd:3c:df:59:b3:24:a3:96:33: a7:8d:f5:34:ef:e3:08:a9:c1:8e:7a:89:7e:36:36: 3e:c0:e8:e6:34:21:8a:98:88:47:f6:63:af:bd:41: 02:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A4:1D:BA:CD:41:3A:57:83:03:96:01:6A:D5:8B:76:6A:45:E1:5F X509v3 Authority Key Identifier: keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/qaQdus1BOleDA5YBatWLdmpF4V8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.60.0/24 Signature Algorithm: sha256WithRSAEncryption 57:28:0f:ea:28:16:75:14:13:63:db:12:c4:ea:38:35:e9:c0: 39:83:b3:19:0a:4a:9e:3b:c4:a5:5d:91:01:53:cd:63:c1:4f: fd:b2:6e:bd:80:70:51:a2:2b:b7:c9:27:68:20:d3:2b:81:b5: fa:02:f9:26:e4:37:c4:6b:7a:32:b2:65:f7:bc:eb:e2:ca:14: 1b:b6:15:7c:57:2a:6f:a6:0f:93:84:6c:45:ce:ae:8f:68:7a: 61:68:54:d4:9c:85:ad:b6:e1:99:e2:c2:11:ef:e5:bb:12:12: 29:57:22:c3:20:2a:b9:31:72:d0:30:88:50:f6:d7:06:99:f9: 30:fd:de:f4:82:a7:02:7e:d9:57:b9:08:db:78:c8:8c:b6:61: 9d:71:b8:31:9c:af:81:a4:f3:a0:7c:1f:80:e3:18:ad:f2:63: 2a:02:dc:bb:3e:a3:e3:26:a7:70:79:70:5e:36:46:6d:41:62: 5d:40:d8:0f:be:8d:97:3c:8d:98:d1:a0:b4:a6:1b:d2:25:c8: 74:c5:e5:d5:04:a0:19:0f:b8:b4:4e:0b:f0:39:f8:85:7f:81: a3:61:05:32:f8:1a:f0:d4:8f:6b:18:a6:90:be:60:fd:b6:5f: 88:dd:a2:58:51:48:44:3a:41:4e:75:01:a7:28:2b:d7:c8:a5: dd:5d:54:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fzPgDSYu5puAOZiFTL+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGMzYjkzZmYyYTM0ZmJmYTVhZTgyNTU2ZjY3MDM0MGNi NWQ1YzkwHhcNMjYwMTAyMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWE0MWRiYWNkNDEzYTU3ODMwMzk2MDE2YWQ1OGI3NjZhNDVlMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdDjS+1susX8OWCYkdBA17XegrUq uc+hO0qQQJNxywgeyffRX/rRm8xLjaM2nTgvYdGvn/7MMkpEadu4S7PIQli/acW/ 4vNK8mlLbrdpcsFxeFlrrcmqIbYQSijdH6uIFB+Opeo2hfUuZruvvwaehaXXS3hG DWHMCMLgbV6xUv1/jcWsRu1yRBiPkBNwrb/2tFtMFmDH8afB4/PQilsUQvM70xSF /OV4TBysAV0kcuMI9hUG3h+AI8bORPWClC4ty45KvOdOFC+e8mWFjd9xVfYDQzyx 3ry9PN9ZsySjljOnjfU07+MIqcGOeol+NjY+wOjmNCGKmIhH9mOvvUECewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKmkHbrNQTpXgwOWAWrVi3ZqReFfMB8GA1UdIwQY MBaAFEgMO5P/KjT7+lroJVb2cDQMtdXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYt NDljNmZkYmJhZmI3LzEvcWFRZHVzMUJPbGVEQTVZQmF0V0xkbXBGNFY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYtNDljNmZkYmJhZmI3 LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc48MA0G CSqGSIb3DQEBCwUAA4IBAQBXKA/qKBZ1FBNj2xLE6jg16cA5g7MZCkqeO8SlXZEB U81jwU/9sm69gHBRoiu3ySdoINMrgbX6Avkm5DfEa3oysmX3vOviyhQbthV8Vypv pg+ThGxFzq6PaHphaFTUnIWttuGZ4sIR7+W7EhIpVyLDICq5MXLQMIhQ9tcGmfkw /d70gqcCftlXuQjbeMiMtmGdcbgxnK+BpPOgfB+A4xit8mMqAty7PqPjJqdweXBe NkZtQWJdQNgPvo2XPI2Y0aC0phvSJch0xeXVBKAZD7i0TgvwOfiFf4GjYQUy+Brw 1I9rGKaQvmD9tl+I3aJYUUhEOkFOdQGnKCvXyKXdXVR0 -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:03 2026 by rpki-client