This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/0qcRgVORJ6l9UlTI2CKPLzjbfog.roa File: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (raw, json) Hash identifier: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98= Subject key identifier: D2:A7:11:81:53:91:27:A9:7D:52:54:C8:D8:22:8F:2F:38:DB:7E:88 Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019B7E3827458ADD7F98355D3A24AE575191 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/0qcRgVORJ6l9UlTI2CKPLzjbfog.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210542 IP address blocks: 185.126.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:27:45:8a:dd:7f:98:35:5d:3a:24:ae:57:51:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2a71181539127a97d5254c8d8228f2f38db7e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:73:a0:e8:af:fa:e4:f4:bd:d2:bc:c0:35: 89:96:39:fa:a9:33:8c:e7:f9:ed:26:6a:44:39:c7: 14:a8:02:00:05:90:4e:5a:57:ad:d3:9c:37:18:e5: 8b:0c:de:73:4c:51:04:57:45:21:aa:61:c7:da:5d: 6d:7c:e1:16:e6:b8:52:58:15:d2:c3:12:cc:28:bc: c7:a7:b9:5a:6e:c9:68:0f:56:13:28:48:8b:72:74: 9c:8e:1c:03:8d:de:81:f2:39:27:f1:15:50:3a:a1: 28:c2:05:a8:3a:2a:ac:ed:e5:d6:bb:3a:69:30:f7: 3a:06:bb:9b:ce:56:bc:a2:07:7d:60:6e:79:f8:d7: c6:68:d1:7b:4b:69:f4:c3:01:76:c5:1d:5c:64:db: 4c:4c:c3:31:59:67:08:0a:22:d0:67:a6:18:c5:5c: 56:5e:8f:27:95:b9:2c:25:6b:63:84:83:3d:5d:43: 93:1f:93:e8:b8:58:4e:ff:11:07:47:9b:60:5b:f1: bf:f1:2e:98:f0:9e:bd:82:73:be:24:06:d9:6c:23: 78:89:42:57:5a:70:af:71:87:ce:db:fa:48:33:10: 4a:5c:8d:62:b8:21:5a:dc:09:f9:ea:e3:7f:c8:e6: 6b:87:d5:90:32:b4:7d:d8:74:31:a5:3d:65:5a:7c: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A7:11:81:53:91:27:A9:7D:52:54:C8:D8:22:8F:2F:38:DB:7E:88 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/0qcRgVORJ6l9UlTI2CKPLzjbfog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.134.0/23 Signature Algorithm: sha256WithRSAEncryption 75:48:58:45:ab:30:7c:ca:be:7f:7a:9b:26:28:9a:8a:83:3b: 78:ff:bc:41:5e:ad:87:96:d8:77:c2:de:23:2f:79:5f:d8:d6: 89:83:e2:88:8b:b8:6f:dd:77:56:30:56:a3:7a:1b:07:6d:cb: 74:a9:0f:c2:b9:48:7f:48:c3:f7:a4:b7:c3:2e:60:8d:48:0f: ca:69:7b:6d:40:33:38:e2:7f:e0:10:cd:55:0f:a1:2b:46:67: 50:cf:a1:c9:e6:92:3b:3d:7c:ac:92:10:02:53:4a:87:a1:c0: e7:0b:df:3e:a2:5c:61:18:48:5a:0b:5a:cf:7d:65:a4:13:5a: 15:81:53:67:18:aa:20:6d:c8:96:21:b1:c5:a8:0f:44:70:e6: e2:5d:af:b8:07:76:99:f8:f0:05:c2:f5:5d:09:1c:9c:ff:04: 84:2c:13:a1:1d:15:1b:e3:78:70:ab:5c:ee:b1:a0:e3:21:60: ad:1d:fc:f1:7b:e5:9b:26:7b:b6:bf:73:b9:91:f5:b9:4f:36: 74:ad:2e:b0:0c:fe:41:50:4e:46:61:20:0f:0c:f5:fb:dd:43: a0:e6:6a:0b:e0:bb:e9:71:9d:01:17:41:92:f8:79:a6:36:1d: fe:9d:81:5e:50:24:70:9c:b1:ab:79:cc:fa:f1:43:45:22:a5: 4e:69:81:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCdFit1/mDVdOiSuV1GRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmE3MTE4MTUzOTEyN2E5N2Q1MjU0YzhkODIyOGYyZjM4ZGI3ZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxBzoOiv+uT0vdK8wDWJljn6qTOM 5/ntJmpEOccUqAIABZBOWlet05w3GOWLDN5zTFEEV0UhqmHH2l1tfOEW5rhSWBXS wxLMKLzHp7labsloD1YTKEiLcnScjhwDjd6B8jkn8RVQOqEowgWoOiqs7eXWuzpp MPc6Brubzla8ogd9YG55+NfGaNF7S2n0wwF2xR1cZNtMTMMxWWcICiLQZ6YYxVxW Xo8nlbksJWtjhIM9XUOTH5PouFhO/xEHR5tgW/G/8S6Y8J69gnO+JAbZbCN4iUJX WnCvcYfO2/pIMxBKXI1iuCFa3An56uN/yOZrh9WQMrR92HQxpT1lWny5tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNKnEYFTkSepfVJUyNgijy84236IMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvMHFjUmdWT1JKNmw5VWxUSTJDS1BMempiZm9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6GMA0G CSqGSIb3DQEBCwUAA4IBAQB1SFhFqzB8yr5/epsmKJqKgzt4/7xBXq2Hlth3wt4j L3lf2NaJg+KIi7hv3XdWMFajehsHbct0qQ/CuUh/SMP3pLfDLmCNSA/KaXttQDM4 4n/gEM1VD6ErRmdQz6HJ5pI7PXyskhACU0qHocDnC98+olxhGEhaC1rPfWWkE1oV gVNnGKogbciWIbHFqA9EcObiXa+4B3aZ+PAFwvVdCRyc/wSELBOhHRUb43hwq1zu saDjIWCtHfzxe+WbJnu2v3O5kfW5TzZ0rS6wDP5BUE5GYSAPDPX73UOg5moL4Lvp cZ0BF0GS+HmmNh3+nYFeUCRwnLGrecz68UNFIqVOaYG0 -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:01 2026 by rpki-client