This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/8QavD1xGOGIsFORO8QpTl9ze2qk.roa File: 8QavD1xGOGIsFORO8QpTl9ze2qk.roa (raw, json) Hash identifier: CP8EcYyC8MJCP4Qe6fiDSKdEQwvcsEiCEc0QZK7hpC4= Subject key identifier: F1:06:AF:0F:5C:46:38:62:2C:14:E4:4E:F1:0A:53:97:DC:DE:DA:A9 Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Certificate serial: 019B77C7169445D1E25C13A8516092B995AB Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/8QavD1xGOGIsFORO8QpTl9ze2qk.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215601 IP address blocks: 185.15.208.0/24 maxlen: 24 2a03:afc0:4::/48 maxlen: 48 2a03:afc0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:16:94:45:d1:e2:5c:13:a8:51:60:92:b9:95:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f106af0f5c4638622c14e44ef10a5397dcdedaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:15:dd:a9:d7:89:21:54:ee:92:24:26:69: 7a:44:ae:d4:73:38:3b:19:f5:5d:ec:44:32:04:0f: ff:3e:be:ab:a6:aa:76:85:0a:e5:05:d3:bd:ef:12: 68:ed:83:49:db:67:8d:5d:b9:a8:e8:9a:25:c2:c6: 6c:26:b2:8f:ef:98:3f:62:db:ae:70:08:44:7d:d3: 15:0f:c6:70:b6:90:ee:ec:5f:99:41:04:fe:c5:62: f5:4c:77:51:d6:a2:eb:19:df:62:d0:74:f8:e5:d0: 22:29:14:d0:33:5d:66:bb:bc:7b:08:45:a3:fc:77: 8e:f8:fe:c8:90:e1:1b:4d:19:71:4b:d5:b2:ea:56: bb:e3:90:4c:72:b1:cd:7f:fe:a7:36:74:30:ca:68: a3:41:79:9f:5b:68:d7:57:50:7e:df:22:ee:92:dc: 73:b9:7b:f3:dd:b5:77:65:17:63:9c:47:98:9f:3f: 8b:47:6e:b9:ba:39:4f:48:ac:bc:58:b0:64:c4:34: 4d:17:6f:24:b7:75:64:f4:6a:21:d4:d7:d9:ee:9f: 22:25:67:e9:71:88:82:61:24:bb:34:e8:de:a9:fd: 8c:e8:5b:5e:01:6d:7e:26:72:a3:87:30:67:87:2c: 52:26:9e:d1:57:e0:c9:48:ca:3e:e3:43:e3:d7:20: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:06:AF:0F:5C:46:38:62:2C:14:E4:4E:F1:0A:53:97:DC:DE:DA:A9 X509v3 Authority Key Identifier: keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/8QavD1xGOGIsFORO8QpTl9ze2qk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.208.0/24 IPv6: 2a03:afc0:4::/48 2a03:afc0:7::/48 Signature Algorithm: sha256WithRSAEncryption c0:2b:b3:f8:78:66:e0:9b:a3:ab:f0:a0:8e:81:01:c2:ee:dd: 90:c3:34:0a:fe:69:0e:33:79:ef:65:be:58:f2:4f:78:af:b5: 6b:68:29:ee:a3:11:2c:a6:d4:18:5c:fc:ac:d6:a3:79:07:e9: 64:0b:98:90:56:c1:eb:a8:e1:7b:c4:2c:b7:42:a6:e3:8e:6a: 65:ac:c7:64:7b:8f:0b:5b:e0:32:a9:19:d5:8d:cc:c4:20:a2: 65:64:9d:9b:21:f7:c5:7b:19:8b:cc:06:a6:a0:87:2e:7b:96: 8e:a2:cd:28:cf:23:c2:70:02:59:c4:57:7e:6a:ae:13:e4:2c: b4:08:74:71:8f:0c:a0:3e:89:96:73:bd:21:7e:06:a2:4e:af: 65:3f:18:5e:10:2b:94:64:a4:67:3e:3c:42:6d:54:2f:fd:b8: 07:db:c1:74:d9:47:b3:c2:ad:ad:73:47:2c:31:d5:d2:c6:98: 29:7d:3a:0c:8f:a2:d4:74:9d:3d:5d:8b:60:cf:ec:da:19:81: 9f:c2:27:89:b7:eb:b7:25:2c:3a:25:6e:74:70:10:e9:7e:cc: 0a:22:5d:08:2c:a9:51:10:cd:b8:91:25:1e:39:35:64:43:62: bc:e9:4f:f3:ce:9b:af:1e:19:64:9d:53:aa:19:08:41:6a:cd: da:5e:24:5e -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3xxaURdHiXBOoUWCSuZWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk MGVlNGEwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTA2YWYwZjVjNDYzODYyMmMxNGU0NGVmMTBhNTM5N2RjZGVkYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCUV3anXiSFU7pIkJml6RK7Uczg7 GfVd7EQyBA//Pr6rpqp2hQrlBdO97xJo7YNJ22eNXbmo6JolwsZsJrKP75g/Ytuu cAhEfdMVD8ZwtpDu7F+ZQQT+xWL1THdR1qLrGd9i0HT45dAiKRTQM11mu7x7CEWj /HeO+P7IkOEbTRlxS9Wy6la745BMcrHNf/6nNnQwymijQXmfW2jXV1B+3yLuktxz uXvz3bV3ZRdjnEeYnz+LR265ujlPSKy8WLBkxDRNF28kt3Vk9Goh1NfZ7p8iJWfp cYiCYSS7NOjeqf2M6FteAW1+JnKjhzBnhyxSJp7RV+DJSMo+40Pj1yC2ewIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFPEGrw9cRjhiLBTkTvEKU5fc3tqpMB8GA1UdIwQY MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt Y2RjMzFkNWZiOGE0LzEvOFFhdkQxeEdPR0lzRk9STzhRcFRsOXplMnFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0 LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuQ/QMBgE AgACMBIDBwAqA6/AAAQDBwAqA6/AAAcwDQYJKoZIhvcNAQELBQADggEBAMArs/h4 ZuCbo6vwoI6BAcLu3ZDDNAr+aQ4zee9lvljyT3ivtWtoKe6jESym1Bhc/KzWo3kH 6WQLmJBWweuo4XvELLdCpuOOamWsx2R7jwtb4DKpGdWNzMQgomVknZsh98V7GYvM Bqaghy57lo6izSjPI8JwAlnEV35qrhPkLLQIdHGPDKA+iZZzvSF+BqJOr2U/GF4Q K5RkpGc+PEJtVC/9uAfbwXTZR7PCra1zRywx1dLGmCl9OgyPotR0nT1di2DP7NoZ gZ/CJ4m367clLDolbnRwEOl+zAoiXQgsqVEQzbiRJR45NWRDYrzpT/POm68eGWSd U6oZCEFqzdpeJF4= -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:30 2026 by rpki-client