This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa File: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (raw, json) Hash identifier: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU= Subject key identifier: 43:2F:24:BA:B0:E4:EC:CA:E7:54:25:EF:B9:64:42:2C:48:80:19:D5 Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Certificate serial: 019B7B3685D6E0C8B681D8C34664644057B1 Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa Signing time: Thu 01 Jan 2026 20:18:49 +0000 ROA not before: Thu 01 Jan 2026 20:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206894 IP address blocks: 45.8.80.0/22 maxlen: 22 185.102.44.0/22 maxlen: 22 185.191.100.0/22 maxlen: 22 185.212.232.0/22 maxlen: 22 185.234.155.0/24 maxlen: 24 2a00:d220::/32 maxlen: 32 2a0a:17c0::/29 maxlen: 29 2a0b:7e40::/32 maxlen: 32 2a0e:1a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:85:d6:e0:c8:b6:81:d8:c3:46:64:64:40:57:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=432f24bab0e4eccae75425efb964422c488019d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:d2:eb:ad:1b:2a:d2:97:51:9b:c3:3c:6f: a8:2a:c7:29:8d:a6:8e:db:e1:c4:cc:c1:c0:3d:27: 94:a7:0f:2b:f2:c0:55:22:63:1f:73:e4:d7:92:c2: 1f:f3:19:4c:90:27:5c:26:fe:f0:7c:fd:65:37:2f: e5:ca:2d:01:51:2c:cc:de:01:fe:da:59:67:63:c8: 01:d9:11:25:c1:ec:a3:23:39:e4:9e:e4:23:7f:01: 92:eb:77:dd:58:0e:5a:4f:c5:0b:aa:1f:65:b6:8d: 6f:9b:b3:3c:82:d6:60:52:02:af:f8:9a:32:76:b7: ae:69:8b:a7:fd:2b:65:46:bc:ae:cd:0a:83:26:b5: 4b:64:64:e2:cf:23:d8:5e:1a:d9:f6:9a:9a:3d:45: c6:0a:6a:bd:82:93:4e:39:45:90:2e:8e:23:46:f4: 63:2a:69:ea:9c:e9:9d:7b:f8:92:f5:7b:8d:5a:c0: f2:dd:1a:95:9e:bd:1c:dd:01:d7:c9:3c:b3:d7:ed: 48:21:e3:42:97:59:b8:71:1b:17:39:e0:cf:ab:6d: 42:43:29:3c:f2:de:f4:f5:4f:7e:24:4f:6f:87:ae: d4:e0:02:3c:56:5d:83:97:3f:1d:c5:26:05:b3:72: 3e:7d:4c:25:73:71:6a:7e:33:a0:b0:13:a0:a8:a5: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2F:24:BA:B0:E4:EC:CA:E7:54:25:EF:B9:64:42:2C:48:80:19:D5 X509v3 Authority Key Identifier: keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.80.0/22 185.102.44.0/22 185.191.100.0/22 185.212.232.0/22 185.234.155.0/24 IPv6: 2a00:d220::/32 2a0a:17c0::/29 2a0b:7e40::/32 2a0e:1a00::/29 Signature Algorithm: sha256WithRSAEncryption 36:35:ca:ca:d8:78:a4:6b:61:a2:2e:66:bc:ed:d5:35:03:c0: 4b:21:e6:56:15:a5:a7:2d:35:ed:e3:5a:0f:51:7d:6b:51:bf: f6:02:20:12:6a:b3:59:eb:ba:ed:1c:85:04:72:3d:4c:42:de: ab:ac:27:66:f3:9a:4c:7c:b7:b9:2d:f2:81:32:77:30:1c:15: 4a:36:3f:df:2e:31:71:59:2e:37:c2:1a:7b:29:4b:ea:1d:35: 5b:5e:8d:59:24:16:1f:52:03:3a:c8:c4:99:d7:9e:24:23:37: 37:5d:3d:c7:0f:7e:fe:d9:60:35:3b:1c:51:ce:59:2e:38:86: 77:29:b0:ea:bb:f2:37:e6:cd:b2:47:bd:59:22:60:81:fb:f2: b9:b3:d0:5f:a9:78:ff:53:c0:3d:6a:38:fc:c2:0e:6e:46:67: 4b:55:4c:38:55:cf:4c:ea:69:ae:91:9f:ce:dd:dd:46:e2:29: ec:23:7b:07:9d:a2:27:ce:32:b3:e3:ae:1e:23:a1:bb:3d:8f: 6f:d5:75:9b:40:50:b8:f5:7f:2f:93:81:3a:53:99:1b:c2:de: 51:17:1a:1b:88:bd:bb:12:d5:9e:ad:9a:0d:64:96:fa:1a:60: 61:fb:03:56:92:9e:c1:46:10:ac:db:58:ed:18:a7:ad:70:00: 97:92:94:49 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt7NoXW4Mi2gdjDRmRkQFexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2NhYjc0NzlhNGUwZDhhNDE3NzM1MGEwMGE2OWJkODgz YjA0OGQwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzJmMjRiYWIwZTRlY2NhZTc1NDI1ZWZiOTY0NDIyYzQ4ODAxOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2HS660bKtKXUZvDPG+oKscpjaaO 2+HEzMHAPSeUpw8r8sBVImMfc+TXksIf8xlMkCdcJv7wfP1lNy/lyi0BUSzM3gH+ 2llnY8gB2RElweyjIznknuQjfwGS63fdWA5aT8ULqh9lto1vm7M8gtZgUgKv+Joy dreuaYun/StlRryuzQqDJrVLZGTizyPYXhrZ9pqaPUXGCmq9gpNOOUWQLo4jRvRj KmnqnOmde/iS9XuNWsDy3RqVnr0c3QHXyTyz1+1IIeNCl1m4cRsXOeDPq21CQyk8 8t709U9+JE9vh67U4AI8Vl2Dlz8dxSYFs3I+fUwlc3FqfjOgsBOgqKUsCQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFEMvJLqw5OzK51Ql77lkQixIgBnVMB8GA1UdIwQY MBaAFEbMq3R5pODYpBdzUKAKab2IOwSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgt MmYzMDI1MmViNDQyLzEvUXk4a3VyRGs3TXJuVkNYdnVXUkNMRWlBR2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgtMmYzMDI1MmViNDQy LzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAkBAIAATAeAwQCLQhQAwQC uWYsAwQCub9kAwQCudToAwQAueqbMCIEAgACMBwDBQAqANIgAwUDKgoXwAMFACoL fkADBQMqDhoAMA0GCSqGSIb3DQEBCwUAA4IBAQA2NcrK2Hika2GiLma87dU1A8BL IeZWFaWnLTXt41oPUX1rUb/2AiASarNZ67rtHIUEcj1MQt6rrCdm85pMfLe5LfKB MncwHBVKNj/fLjFxWS43whp7KUvqHTVbXo1ZJBYfUgM6yMSZ154kIzc3XT3HD37+ 2WA1OxxRzlkuOIZ3KbDqu/I35s2yR71ZImCB+/K5s9BfqXj/U8A9ajj8wg5uRmdL VUw4Vc9M6mmukZ/O3d1G4insI3sHnaInzjKz464eI6G7PY9v1XWbQFC49X8vk4E6 U5kbwt5RFxobiL27EtWerZoNZJb6GmBh+wNWkp7BRhCs21jtGKetcACXkpRJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:42 2026 by rpki-client