This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/QA0ubwdidDzrruSIToFUYSfiZYo.roa File: QA0ubwdidDzrruSIToFUYSfiZYo.roa (raw, json) Hash identifier: NrSnMWe4sUOhMZeOF/xEWEpuLyJZclwyc3AXrBy0Yvs= Subject key identifier: 40:0D:2E:6F:07:62:74:3C:EB:AE:E4:88:4E:81:54:61:27:E2:65:8A Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378 Certificate serial: 019B7F84B8ECEC071A7A48B1F7E5578E8A4A Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/QA0ubwdidDzrruSIToFUYSfiZYo.roa Signing time: Fri 02 Jan 2026 16:22:43 +0000 ROA not before: Fri 02 Jan 2026 16:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56795 IP address blocks: 85.204.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b8:ec:ec:07:1a:7a:48:b1:f7:e5:57:8e:8a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378 Validity Not Before: Jan 2 16:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=400d2e6f0762743cebaee4884e81546127e2658a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5a:cc:be:a9:31:c0:1a:0f:70:77:24:e2:79: ad:3b:2c:9c:71:b9:f5:3d:41:c2:2d:d9:36:9a:56: 35:0a:68:db:aa:d4:33:1b:48:46:b9:fc:77:33:35: 04:fd:7a:f3:db:1c:7a:ef:4c:77:4f:fc:54:46:75: 91:53:f6:86:4a:e6:90:53:1f:7d:0a:b7:81:b6:c2: 43:23:06:9a:cb:fb:0e:f0:00:26:ad:5b:76:c6:4a: fe:92:04:4e:bb:17:1a:12:6d:ac:42:b4:f9:13:25: 12:3e:62:a8:96:40:81:f9:d6:0f:66:80:84:21:e9: 34:40:81:a8:19:67:40:f5:ce:88:39:8b:1c:3f:43: 73:ef:18:16:1f:0b:2e:73:a9:13:a5:4d:1d:6d:4d: 8f:8c:93:95:5f:3d:b8:c9:1a:62:b3:65:eb:cc:f5: a8:fc:06:fb:8f:31:6b:95:c5:69:cd:8a:22:dd:60: 1d:85:cd:94:6e:cf:39:1e:52:ac:04:c3:f3:55:b1: 65:b8:fb:64:b4:cb:59:2c:14:c0:55:03:29:79:f0: 5a:b3:38:0c:8d:b5:19:d1:c5:5f:52:0e:31:58:89: e2:12:63:aa:cb:ef:40:bc:4f:1d:a0:19:56:99:33: cb:8b:a8:36:dc:93:43:2e:c9:86:42:a1:9d:3a:07: f8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0D:2E:6F:07:62:74:3C:EB:AE:E4:88:4E:81:54:61:27:E2:65:8A X509v3 Authority Key Identifier: keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/QA0ubwdidDzrruSIToFUYSfiZYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.46.0/24 Signature Algorithm: sha256WithRSAEncryption 56:83:4c:3d:90:03:8c:db:4d:4d:f4:64:d9:0f:d6:91:ad:61: c3:9a:1a:8f:c4:53:52:cc:be:ff:9c:23:6b:a2:ca:61:e4:94: b9:e3:bb:53:6f:88:c5:81:3a:9b:14:57:11:15:eb:27:ef:d1: 68:d7:ed:25:b3:45:4a:a1:1d:99:a0:5d:46:95:bd:51:89:d6: e2:95:2d:f9:d8:d9:70:44:b3:22:5a:cc:2d:d9:24:49:2e:f5: 15:40:7c:c7:32:af:a0:fb:de:f2:1c:6e:b7:cd:53:97:e4:e4: da:43:ca:b7:45:39:16:81:16:78:fa:9d:ca:6a:88:7e:32:56: ad:68:e2:a3:b4:68:f3:50:24:ad:56:eb:d8:5a:26:f4:3d:9d: 1f:13:75:60:fa:3e:03:60:fa:85:04:c1:1d:bd:6e:8e:48:f6: 4c:ff:c1:b9:a1:98:06:47:1c:11:ce:61:7c:9a:35:c9:08:4b: 71:2b:9a:f6:51:86:eb:1c:c2:ae:e5:81:80:43:7f:a6:c2:ce: 6a:f4:8c:55:f0:ec:f6:fe:1f:bb:c9:48:c2:24:a2:91:94:b7: d1:44:85:25:9a:30:3d:c1:3e:ae:07:fb:c0:23:73:fb:86:63: 3e:16:15:16:e7:8b:c9:3f:c1:32:7a:a2:dc:89:e7:73:ac:71: 59:16:7f:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLjs7Acaekix9+VXjopKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZWYwNjllN2UzZWQ1YmY3MGY2ODJjZTQwYzU4MTBmZjNl NWUzNzgwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDBkMmU2ZjA3NjI3NDNjZWJhZWU0ODg0ZTgxNTQ2MTI3ZTI2NThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VrMvqkxwBoPcHck4nmtOyyccbn1 PUHCLdk2mlY1CmjbqtQzG0hGufx3MzUE/Xrz2xx670x3T/xURnWRU/aGSuaQUx99 CreBtsJDIwaay/sO8AAmrVt2xkr+kgROuxcaEm2sQrT5EyUSPmKolkCB+dYPZoCE Iek0QIGoGWdA9c6IOYscP0Nz7xgWHwsuc6kTpU0dbU2PjJOVXz24yRpis2XrzPWo /Ab7jzFrlcVpzYoi3WAdhc2Ubs85HlKsBMPzVbFluPtktMtZLBTAVQMpefBaszgM jbUZ0cVfUg4xWIniEmOqy+9AvE8doBlWmTPLi6g23JNDLsmGQqGdOgf4xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEANLm8HYnQ8667kiE6BVGEn4mWKMB8GA1UdIwQY MBaAFHrvBp5+PtW/cPaCzkDFgQ/z5eN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmIt OTAwMDM0ZjAwZDllLzEvUUEwdWJ3ZGlkRHpycnVTSVRvRlVZU2ZpWllvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmItOTAwMDM0ZjAwZDll LzEvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcwuMA0G CSqGSIb3DQEBCwUAA4IBAQBWg0w9kAOM201N9GTZD9aRrWHDmhqPxFNSzL7/nCNr osph5JS547tTb4jFgTqbFFcRFesn79Fo1+0ls0VKoR2ZoF1Glb1RidbilS352Nlw RLMiWswt2SRJLvUVQHzHMq+g+97yHG63zVOX5OTaQ8q3RTkWgRZ4+p3Kaoh+Mlat aOKjtGjzUCStVuvYWib0PZ0fE3Vg+j4DYPqFBMEdvW6OSPZM/8G5oZgGRxwRzmF8 mjXJCEtxK5r2UYbrHMKu5YGAQ3+mws5q9IxV8Oz2/h+7yUjCJKKRlLfRRIUlmjA9 wT6uB/vAI3P7hmM+FhUW54vJP8EyeqLciedzrHFZFn/i -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:03 2026 by rpki-client