This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/QI0m8yxwMxD5ywSxfRkbyb2qPcE.roa File: QI0m8yxwMxD5ywSxfRkbyb2qPcE.roa (raw, json) Hash identifier: 8djDX4kGY6Wd0AiK2DyOXGmoVTCo33Wju0Bfsfmfzlw= Subject key identifier: 40:8D:26:F3:2C:70:33:10:F9:CB:04:B1:7D:19:1B:C9:BD:AA:3D:C1 Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146 Certificate serial: 019B76EAF53817D434695761D2083026CE35 Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/QI0m8yxwMxD5ywSxfRkbyb2qPcE.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 83.151.192.0/24 maxlen: 24 83.151.193.0/24 maxlen: 24 83.151.194.0/24 maxlen: 24 83.151.195.0/24 maxlen: 24 88.202.208.0/23 maxlen: 23 88.202.208.0/24 maxlen: 24 88.202.209.0/24 maxlen: 24 88.202.210.0/24 maxlen: 24 88.202.211.0/24 maxlen: 24 88.212.156.0/24 maxlen: 24 88.212.157.0/24 maxlen: 24 88.212.158.0/24 maxlen: 24 88.212.159.0/24 maxlen: 24 185.8.132.0/24 maxlen: 24 185.8.133.0/24 maxlen: 24 185.8.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f5:38:17:d4:34:69:57:61:d2:08:30:26:ce:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=408d26f32c703310f9cb04b17d191bc9bdaa3dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:8a:c8:2f:5e:81:6b:46:17:ec:8c:eb:da: ba:5d:d3:34:aa:14:30:8d:72:08:95:a1:f3:c5:a0: eb:1b:66:88:7b:f7:ae:f5:79:bc:7b:42:4e:25:89: d1:1b:d2:42:2b:b7:08:2d:1e:fd:8f:8f:9b:3b:ef: d8:15:6e:62:e6:42:0e:a6:4f:32:90:d1:46:4d:2a: 0f:1d:95:18:9c:8c:2b:86:af:96:24:d3:12:3f:4e: 42:20:cb:26:15:0e:34:49:cb:9a:e7:ef:e6:fd:a0: b0:a6:fc:67:d4:36:63:88:1d:a9:0b:fa:97:02:3c: b7:4f:81:6f:93:8a:f3:da:6a:5c:eb:68:99:ac:ca: c0:3a:73:0f:2c:ab:c3:11:0a:14:e2:0e:a8:51:ff: 0a:78:e7:0f:cb:63:4b:ba:a9:83:3a:19:51:0a:73: d7:52:6e:44:37:4f:0f:6d:04:d6:0b:8f:03:61:b8: d9:ad:8e:0f:26:c7:05:39:c8:bf:f3:12:62:1f:e6: 46:cc:25:59:c1:dd:fd:c9:12:41:f0:b4:48:21:73: 2d:b8:db:ec:20:30:4c:34:f7:f1:aa:22:30:5b:44: 83:8a:aa:da:6c:ae:04:94:89:bc:ef:e1:71:e1:c9: 3c:f8:1b:8a:11:d4:fc:85:e4:b3:74:e7:a0:d4:c8: 34:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8D:26:F3:2C:70:33:10:F9:CB:04:B1:7D:19:1B:C9:BD:AA:3D:C1 X509v3 Authority Key Identifier: keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/QI0m8yxwMxD5ywSxfRkbyb2qPcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.151.192.0/22 88.202.208.0/22 88.212.156.0/22 185.8.132.0/23 185.8.135.0/24 Signature Algorithm: sha256WithRSAEncryption 64:15:87:6a:86:3b:6e:75:10:43:0b:c1:d3:53:a7:2a:a2:cb: 36:19:1f:34:e3:9e:13:c5:a8:24:43:b3:fa:61:d4:02:92:e3: 8d:80:32:22:53:21:bf:cb:51:ac:97:c5:af:4f:8d:27:71:5d: 4d:c8:04:82:b6:01:83:c3:fc:ac:10:1e:10:6f:6f:c6:90:ca: a4:8e:75:c4:92:7d:0b:3d:c5:e2:7f:65:62:f0:b8:6d:0f:1c: c6:1e:ad:5f:ed:28:90:97:78:5c:c0:19:25:49:20:b8:26:b1: 78:53:23:0f:ae:50:d9:66:4b:15:c0:14:1c:06:6b:ad:ff:0b: 14:0f:d6:b2:0a:b3:be:96:df:b9:cc:6e:a5:b9:4c:36:0c:9f: 9c:af:29:28:0f:1f:42:44:d1:0d:f7:89:6b:78:ef:42:e2:56: 0a:32:d9:44:15:34:f6:81:d0:e9:79:6d:0d:36:a7:37:b1:26: 2b:8a:59:fb:1c:a6:27:b7:ab:6e:a2:31:7e:87:97:2b:3b:a6: c3:86:d7:12:14:1a:a2:17:f4:2d:f1:af:23:c6:25:c0:43:a1: 4b:2a:67:94:89:7d:d2:ed:ba:f4:83:86:ea:e3:c5:b3:b8:f5: 97:b6:8b:02:ee:21:08:8b:d9:ed:28:00:b5:9a:0a:72:31:2f: f7:04:0e:fe -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt26vU4F9Q0aVdh0ggwJs41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj MzQxNDYwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDhkMjZmMzJjNzAzMzEwZjljYjA0YjE3ZDE5MWJjOWJkYWEzZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXqKyC9egWtGF+yM69q6XdM0qhQw jXIIlaHzxaDrG2aIe/eu9Xm8e0JOJYnRG9JCK7cILR79j4+bO+/YFW5i5kIOpk8y kNFGTSoPHZUYnIwrhq+WJNMSP05CIMsmFQ40Scua5+/m/aCwpvxn1DZjiB2pC/qX Ajy3T4Fvk4rz2mpc62iZrMrAOnMPLKvDEQoU4g6oUf8KeOcPy2NLuqmDOhlRCnPX Um5EN08PbQTWC48DYbjZrY4PJscFOci/8xJiH+ZGzCVZwd39yRJB8LRIIXMtuNvs IDBMNPfxqiIwW0SDiqrabK4ElIm87+Fx4ck8+BuKEdT8heSzdOeg1Mg0KwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFECNJvMscDMQ+csEsX0ZG8m9qj3BMB8GA1UdIwQY MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt NmNhMzQwZmE3NDkzLzEvUUkwbTh5eHdNeEQ1eXdTeGZSa2J5YjJxUGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCU5fAAwQC WMrQAwQCWNScAwQBuQiEAwQAuQiHMA0GCSqGSIb3DQEBCwUAA4IBAQBkFYdqhjtu dRBDC8HTU6cqoss2GR80454TxagkQ7P6YdQCkuONgDIiUyG/y1Gsl8WvT40ncV1N yASCtgGDw/ysEB4Qb2/GkMqkjnXEkn0LPcXif2Vi8LhtDxzGHq1f7SiQl3hcwBkl SSC4JrF4UyMPrlDZZksVwBQcBmut/wsUD9ayCrO+lt+5zG6luUw2DJ+crykoDx9C RNEN94lreO9C4lYKMtlEFTT2gdDpeW0NNqc3sSYriln7HKYnt6tuojF+h5crO6bD htcSFBqiF/Qt8a8jxiXAQ6FLKmeUiX3S7br0g4bq48WzuPWXtosC7iEIi9ntKAC1 mgpyMS/3BA7+ -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:28 2026 by rpki-client