This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/qBcLlywaD6m7lZXiWermZkxeWVc.roa File: qBcLlywaD6m7lZXiWermZkxeWVc.roa (raw, json) Hash identifier: auQTPfDUcRzWJ8RTz3z6nOVCI/Q9IjlAOX2YpbeFNMA= Subject key identifier: A8:17:0B:97:2C:1A:0F:A9:BB:95:95:E2:59:EA:E6:66:4C:5E:59:57 Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b Certificate serial: 019C32E0B4B7C545153165C22ED0384944F2 Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/qBcLlywaD6m7lZXiWermZkxeWVc.roa Signing time: Fri 06 Feb 2026 12:15:12 +0000 ROA not before: Fri 06 Feb 2026 12:15:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7473 IP address blocks: 185.84.218.0/24 maxlen: 24 193.103.148.0/24 maxlen: 24 2a05:a884:de10::/48 maxlen: 48 2a05:a884:de20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:e0:b4:b7:c5:45:15:31:65:c2:2e:d0:38:49:44:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b Validity Not Before: Feb 6 12:15:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8170b972c1a0fa9bb9595e259eae6664c5e5957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:9c:3f:45:c9:76:f2:f7:38:85:86:d9:e9: 96:e7:fd:b5:20:62:f2:5c:a2:10:4b:7d:ba:a4:2d: 2a:c1:7e:1c:1c:a8:9c:0f:63:61:2f:be:71:89:45: 1d:78:bd:5a:82:45:54:bc:81:e8:06:82:85:fa:23: 15:38:4e:55:c4:2d:80:70:3f:b7:81:4a:3d:48:e5: 79:d7:16:a6:36:cb:f7:9f:b9:29:3c:35:d8:0d:8f: 24:4a:84:a0:15:2f:c9:19:c0:23:cd:8b:69:c8:b4: 20:d5:4e:7f:b8:2c:be:a2:4b:2a:f3:b5:5e:f2:cd: 94:35:24:0e:73:0a:ce:9a:09:f6:5b:8a:0f:31:19: 56:ee:96:a9:57:e2:f7:1f:23:1d:3a:03:8e:f5:58: a3:69:87:67:bf:e3:47:64:ec:c0:16:32:65:9f:d5: 0a:40:c8:c5:27:8e:de:bf:b6:45:15:e0:cf:84:d8: aa:4d:29:e7:67:89:9c:7f:91:40:bd:f4:54:18:0e: 90:f8:b2:38:a1:9b:ba:e2:94:fc:d9:4e:69:e4:f1: 51:e4:a5:77:b5:d2:08:dd:2c:e4:fd:1e:31:39:4b: f0:e9:83:51:23:06:71:31:3d:c0:44:14:3b:29:58: fb:6d:ab:e2:07:b8:fb:70:5f:b3:13:f4:ee:53:a1: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:17:0B:97:2C:1A:0F:A9:BB:95:95:E2:59:EA:E6:66:4C:5E:59:57 X509v3 Authority Key Identifier: keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/qBcLlywaD6m7lZXiWermZkxeWVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.218.0/24 193.103.148.0/24 IPv6: 2a05:a884:de10::/48 2a05:a884:de20::/48 Signature Algorithm: sha256WithRSAEncryption a5:9d:e6:6a:a0:ae:ca:d1:60:b9:0d:62:a3:e2:7a:9a:b9:89: 14:9c:2e:02:33:2a:17:32:33:d3:34:ac:9a:c2:16:19:8d:db: 4b:45:70:8c:e1:97:52:d3:3f:f7:6a:4f:01:1b:27:f9:53:76: a9:5b:ba:96:00:71:68:83:3c:e8:71:ea:32:a9:bb:1d:12:47: 0b:d5:f7:5b:94:15:0d:9b:3c:1d:ce:44:6e:c4:7d:fa:53:57: 32:56:e6:76:13:81:4a:58:fa:bb:a1:5d:02:14:1d:2e:f4:a3: f4:b7:f9:44:1f:d0:df:77:89:e2:76:1a:84:9a:29:f3:f0:22: 2f:8d:55:ec:dc:40:61:ea:f5:bd:f2:6b:af:e4:15:47:c2:40: 0b:7f:2f:18:b9:28:f9:2b:92:74:cb:44:45:f6:c9:31:fd:e2: 3f:12:b1:9f:4a:8d:ca:80:24:ff:90:ed:c9:df:6b:33:65:0e: d2:89:b1:2e:17:54:a6:15:56:f6:df:76:aa:41:ce:10:d8:cb: 25:59:bd:9f:4d:df:b1:5a:04:cc:0c:c6:80:a6:36:8b:ec:20: 0b:f0:5f:4c:c1:d1:1f:35:50:19:ca:ce:41:67:4b:79:93:d7: 6a:bc:99:92:74:0f:95:60:b2:e9:80:a9:b8:7e:29:0a:6c:64: dc:80:42:45 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZwy4LS3xUUVMWXCLtA4SUTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj MmE5NmIwHhcNMjYwMjA2MTIxNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODE3MGI5NzJjMWEwZmE5YmI5NTk1ZTI1OWVhZTY2NjRjNWU1OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscWcP0XJdvL3OIWG2emW5/21IGLy XKIQS326pC0qwX4cHKicD2NhL75xiUUdeL1agkVUvIHoBoKF+iMVOE5VxC2AcD+3 gUo9SOV51xamNsv3n7kpPDXYDY8kSoSgFS/JGcAjzYtpyLQg1U5/uCy+oksq87Ve 8s2UNSQOcwrOmgn2W4oPMRlW7papV+L3HyMdOgOO9VijaYdnv+NHZOzAFjJln9UK QMjFJ47ev7ZFFeDPhNiqTSnnZ4mcf5FAvfRUGA6Q+LI4oZu64pT82U5p5PFR5KV3 tdII3Szk/R4xOUvw6YNRIwZxMT3ARBQ7KVj7baviB7j7cF+zE/TuU6EVjwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKgXC5csGg+pu5WV4lnq5mZMXllXMB8GA1UdIwQY MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt NjA4NGNmYzZlNGM0LzEvcUJjTGx5d2FENm03bFpYaVdlcm1aa3hlV1ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0 LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAuVTaAwQA wWeUMBgEAgACMBIDBwAqBaiE3hADBwAqBaiE3iAwDQYJKoZIhvcNAQELBQADggEB AKWd5mqgrsrRYLkNYqPiepq5iRScLgIzKhcyM9M0rJrCFhmN20tFcIzhl1LTP/dq TwEbJ/lTdqlbupYAcWiDPOhx6jKpux0SRwvV91uUFQ2bPB3ORG7EffpTVzJW5nYT gUpY+ruhXQIUHS70o/S3+UQf0N93ieJ2GoSaKfPwIi+NVezcQGHq9b3ya6/kFUfC QAt/Lxi5KPkrknTLREX2yTH94j8SsZ9KjcqAJP+Q7cnfazNlDtKJsS4XVKYVVvbf dqpBzhDYyyVZvZ9N37FaBMwMxoCmNovsIAvwX0zB0R81UBnKzkFnS3mT12q8mZJ0 D5VgsumAqbh+KQpsZNyAQkU= -----END CERTIFICATE-----Generated at Sun Feb 8 00:32:34 2026 by rpki-client