This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa File: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (raw, json) Hash identifier: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew= Subject key identifier: A8:FA:3B:60:A9:7D:A7:7B:42:14:A9:31:38:F5:4C:90:AE:C7:DB:F1 Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019B791087E67D344FBAACC2C9C93C427B0C Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa Signing time: Thu 01 Jan 2026 10:18:05 +0000 ROA not before: Thu 01 Jan 2026 10:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197899 IP address blocks: 109.68.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:87:e6:7d:34:4f:ba:ac:c2:c9:c9:3c:42:7b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Jan 1 10:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8fa3b60a97da77b4214a93138f54c90aec7dbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:0d:27:8e:a9:e6:1b:e2:91:2a:61:8a:7e: e1:d1:dd:a2:7c:e5:a6:4e:bb:4c:60:08:90:cd:da: 79:00:9b:9a:4a:55:3e:d6:7c:11:66:6a:7c:c7:48: d1:9b:45:28:19:20:d2:0f:f4:ee:e7:16:7f:94:13: b4:e7:0f:5d:cf:d3:19:d3:2f:61:e3:aa:2a:6a:5e: 94:3a:07:8a:06:00:0e:42:06:bd:69:58:7d:c0:18: dc:fb:11:47:15:c5:33:de:b0:43:bf:ee:fc:2c:64: a0:7c:a5:54:ec:f4:b7:5e:59:d0:45:ca:e0:39:75: af:cb:d9:1b:d2:86:09:be:b5:f3:0b:f8:ba:a2:af: 63:62:1c:5b:b4:c8:46:1a:0e:80:ea:5a:01:78:47: b1:02:c5:19:0a:cc:b7:9c:13:24:a7:6b:61:b8:d6: 1c:25:0b:e7:e0:5c:3f:73:10:f3:a4:82:18:bf:da: 84:87:2e:ea:f5:1f:52:d4:d9:f1:34:51:d6:01:81: 67:ee:73:7e:eb:be:8c:a5:53:2d:28:29:83:07:32: c6:7b:71:ab:87:c4:7c:f6:26:3f:b7:48:49:82:c8: 31:df:26:4b:c0:61:8a:b3:6a:dd:be:37:55:28:e5: f4:da:39:5d:04:bc:1a:d4:b8:b6:e2:18:b5:cc:bd: 32:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FA:3B:60:A9:7D:A7:7B:42:14:A9:31:38:F5:4C:90:AE:C7:DB:F1 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.68.146.0/24 Signature Algorithm: sha256WithRSAEncryption 86:1d:bb:de:87:f5:8c:ec:52:5a:61:25:5f:89:47:2c:ed:a1: 88:4c:6e:5b:ad:4f:95:af:ea:55:68:e6:e3:91:21:8e:65:27: a5:0a:21:fc:d0:b7:e1:4f:ad:e0:4d:d2:d5:d2:0c:a3:74:81: 21:e2:18:db:af:2d:73:84:83:2b:9a:56:16:35:1b:e9:79:40: ea:fc:0d:00:40:32:b5:ea:f7:e7:04:5b:49:65:e6:d9:92:18: a8:be:3c:ec:f0:46:bb:65:6e:60:28:92:cb:d3:67:2f:45:bd: e5:22:7e:5b:b8:15:2b:2d:e6:bb:9b:2d:61:5a:da:1b:2f:4c: 61:2d:d6:24:ff:14:0b:3e:a6:09:40:1e:7c:53:69:ba:09:83: 58:4f:d1:14:30:cb:df:35:42:76:20:d8:04:f8:87:43:67:95: d1:28:03:84:60:22:46:a2:57:77:61:be:01:18:53:76:90:f5: 9e:e9:6f:ec:56:42:34:0b:ba:ce:35:31:e6:e3:95:dc:21:47: a5:3b:be:2c:d7:3b:0a:1c:a0:07:43:c4:7f:23:fa:40:a5:39: a1:08:57:da:9a:f8:69:5b:a1:76:44:53:c9:ba:e2:95:24:22: 5d:d2:b5:86:4d:a4:45:60:0f:de:5f:e0:60:ad:37:c2:a6:e8: c5:4f:21:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIfmfTRPuqzCyck8QnsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGZhM2I2MGE5N2RhNzdiNDIxNGE5MzEzOGY1NGM5MGFlYzdkYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyoNJ46p5hvikSphin7h0d2ifOWm TrtMYAiQzdp5AJuaSlU+1nwRZmp8x0jRm0UoGSDSD/Tu5xZ/lBO05w9dz9MZ0y9h 46oqal6UOgeKBgAOQga9aVh9wBjc+xFHFcUz3rBDv+78LGSgfKVU7PS3XlnQRcrg OXWvy9kb0oYJvrXzC/i6oq9jYhxbtMhGGg6A6loBeEexAsUZCsy3nBMkp2thuNYc JQvn4Fw/cxDzpIIYv9qEhy7q9R9S1NnxNFHWAYFn7nN+676MpVMtKCmDBzLGe3Gr h8R89iY/t0hJgsgx3yZLwGGKs2rdvjdVKOX02jldBLwa1Li24hi1zL0yjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKj6O2Cpfad7QhSpMTj1TJCux9vxMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvcVBvN1lLbDlwM3RDRktreE9QVk1rSzdIMl9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUSSMA0G CSqGSIb3DQEBCwUAA4IBAQCGHbveh/WM7FJaYSVfiUcs7aGITG5brU+Vr+pVaObj kSGOZSelCiH80LfhT63gTdLV0gyjdIEh4hjbry1zhIMrmlYWNRvpeUDq/A0AQDK1 6vfnBFtJZebZkhiovjzs8Ea7ZW5gKJLL02cvRb3lIn5buBUrLea7my1hWtobL0xh LdYk/xQLPqYJQB58U2m6CYNYT9EUMMvfNUJ2INgE+IdDZ5XRKAOEYCJGold3Yb4B GFN2kPWe6W/sVkI0C7rONTHm45XcIUelO74s1zsKHKAHQ8R/I/pApTmhCFfamvhp W6F2RFPJuuKVJCJd0rWGTaRFYA/eX+BgrTfCpujFTyE+ -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:49 2026 by rpki-client