This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/1-kqdqpkHCMC39Yldn7QuEgM7f2M.roa File: 1-kqdqpkHCMC39Yldn7QuEgM7f2M.roa (raw, json) Hash identifier: RmOeQz5iP92jk2+uM0gqapXbFPZ2fhk1wSsSgos3HDQ= Subject key identifier: FA:4A:9D:AA:99:07:08:C0:B7:F5:89:5D:9F:B4:2E:12:03:3B:7F:63 Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35 Certificate serial: 019B79ED35EE29EFEBFDF8A7A95B414E6E49 Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/1-kqdqpkHCMC39Yldn7QuEgM7f2M.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136258 IP address blocks: 86.54.82.0/24 maxlen: 24 86.54.83.0/24 maxlen: 24 168.222.245.0/24 maxlen: 24 185.186.76.0/24 maxlen: 24 185.186.77.0/24 maxlen: 24 185.186.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:ee:29:ef:eb:fd:f8:a7:a9:5b:41:4e:6e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa4a9daa990708c0b7f5895d9fb42e12033b7f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ce:55:a9:ef:4f:0d:25:71:ac:60:99:04:fb: 32:dd:99:76:14:50:0f:50:79:c9:c8:7b:55:4f:48: a3:4e:39:d8:22:2f:a5:de:3c:5a:d4:58:22:68:f0: 63:05:f3:9d:75:90:ba:84:95:46:74:f5:14:33:0c: c6:0a:7f:91:7b:22:c3:1b:00:a0:d2:a8:03:d0:7e: c1:ea:e7:ce:67:fb:db:d2:97:96:61:81:95:dd:e4: f9:55:45:1d:4f:6f:9b:a8:b5:c1:91:9e:4e:8e:c2: 91:8a:ad:e8:d1:78:74:77:00:a4:ce:25:64:75:07: 99:91:c6:ae:4c:8a:17:0f:6f:fe:a1:19:47:5a:9f: 74:77:11:a2:2b:4f:29:fa:75:e3:a3:51:06:24:32: 20:1f:39:48:b3:75:9e:ef:7e:9a:f6:78:00:1e:d5: fb:ec:c9:26:10:da:e2:6d:c9:0a:84:b0:90:87:f7: 7f:af:f3:66:c9:5c:14:12:70:bb:2c:39:6c:e5:86: 85:98:c4:18:11:5a:4d:39:77:34:17:c4:22:b7:a3: 51:b9:1e:19:ee:a3:33:a2:6e:1e:79:6f:6e:2b:0d: 1c:c0:8b:37:4d:7b:54:21:fc:4e:b0:c0:60:ce:a9: dd:50:28:ef:97:4a:c3:dc:07:c3:75:1f:dc:be:2d: 88:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4A:9D:AA:99:07:08:C0:B7:F5:89:5D:9F:B4:2E:12:03:3B:7F:63 X509v3 Authority Key Identifier: keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/1-kqdqpkHCMC39Yldn7QuEgM7f2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.82.0/23 168.222.245.0/24 185.186.76.0-185.186.78.255 Signature Algorithm: sha256WithRSAEncryption 4d:62:b9:a0:42:e5:3f:a7:3b:8f:da:b5:4a:67:47:ba:cf:94: 36:f0:fc:06:56:02:b9:d3:5c:8b:b1:50:0c:06:86:e8:49:ac: 49:bd:71:35:41:fb:a7:dd:50:68:e2:36:cb:5f:f0:c2:8d:f7: c0:d7:04:66:9c:bc:f3:e3:40:a1:cd:23:86:b8:99:0d:40:35: b7:07:a0:21:2e:50:b6:17:0b:cf:e2:50:e6:ce:04:54:34:5d: 22:e3:0d:a2:70:e7:e8:cc:48:86:d9:ad:17:d9:b5:62:1b:df: c5:4d:31:cd:00:0c:c6:da:51:e5:68:c3:d5:ba:ca:16:61:7d: 6f:25:cd:be:84:d5:7d:ad:1e:57:bb:db:83:91:f5:04:d9:e5: 3e:b9:75:b5:7e:97:20:9f:3c:0d:a2:3b:f4:b2:b9:4c:f1:93: 03:90:f7:6a:ee:e1:b2:f1:26:a0:e3:86:de:83:37:23:c7:ce: 47:15:54:8e:10:df:7a:d7:be:96:d8:df:a3:a6:d5:52:2f:ed: 20:84:2d:ba:f3:5e:38:65:8c:8f:1b:cb:3f:10:a4:21:4e:80: 48:2f:61:e5:31:ca:bd:e6:9a:76:25:68:e9:20:82:19:04:db: 18:07:d2:1c:3f:a0:db:9c:c3:aa:05:db:8f:50:08:01:05:1f: 75:40:34:25 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57TXuKe/r/finqVtBTm5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzQwMmVhZTAyN2FiY2Q5MjYwOTBjYzBkZGVmZjgwYWFi OTJjMzUwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTRhOWRhYTk5MDcwOGMwYjdmNTg5NWQ5ZmI0MmUxMjAzM2I3ZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs5Vqe9PDSVxrGCZBPsy3Zl2FFAP UHnJyHtVT0ijTjnYIi+l3jxa1FgiaPBjBfOddZC6hJVGdPUUMwzGCn+ReyLDGwCg 0qgD0H7B6ufOZ/vb0peWYYGV3eT5VUUdT2+bqLXBkZ5OjsKRiq3o0Xh0dwCkziVk dQeZkcauTIoXD2/+oRlHWp90dxGiK08p+nXjo1EGJDIgHzlIs3We736a9ngAHtX7 7MkmENribckKhLCQh/d/r/NmyVwUEnC7LDls5YaFmMQYEVpNOXc0F8Qit6NRuR4Z 7qMzom4eeW9uKw0cwIs3TXtUIfxOsMBgzqndUCjvl0rD3AfDdR/cvi2IBwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPpKnaqZBwjAt/WJXZ+0LhIDO39jMB8GA1UdIwQY MBaAFI00AurgJ6vNkmCQzA3e/4CquSw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NTgzNDgtNDkxMi00YmMxLThlNTgt ZjkyZDdkYzM3ZDJlLzEvMS1rcWRxcGtIQ01DMzlZbGRuN1F1RWdNN2YyTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDUvNTU4MzQ4LTQ5MTItNGJjMS04ZTU4LWY5MmQ3ZGMzN2Qy ZS8xL2pUUUM2dUFucTgyU1lKRE1EZDdfZ0txNUxEVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAVY2UgME AKje9TAMAwQCubpMAwQAubpOMA0GCSqGSIb3DQEBCwUAA4IBAQBNYrmgQuU/pzuP 2rVKZ0e6z5Q28PwGVgK501yLsVAMBoboSaxJvXE1Qfun3VBo4jbLX/DCjffA1wRm nLzz40ChzSOGuJkNQDW3B6AhLlC2FwvP4lDmzgRUNF0i4w2icOfozEiG2a0X2bVi G9/FTTHNAAzG2lHlaMPVusoWYX1vJc2+hNV9rR5Xu9uDkfUE2eU+uXW1fpcgnzwN ojv0srlM8ZMDkPdq7uGy8Sag44begzcjx85HFVSOEN96176W2N+jptVSL+0ghC26 8144ZYyPG8s/EKQhToBIL2HlMcq95pp2JWjpIIIZBNsYB9IcP6DbnMOqBduPUAgB BR91QDQl -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:29 2026 by rpki-client