This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/qfbS_MhHwZ5T9Pkm-e5XKyepAeI.roa File: qfbS_MhHwZ5T9Pkm-e5XKyepAeI.roa (raw, json) Hash identifier: O0H1y3N2wNZcfjYWRzPfGG78Vh6yNgbXWFsd+yyCqLU= Subject key identifier: A9:F6:D2:FC:C8:47:C1:9E:53:F4:F9:26:F9:EE:57:2B:27:A9:01:E2 Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b Certificate serial: 019B7E38CC1890BAD001E872904AD4B20DD4 Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/qfbS_MhHwZ5T9Pkm-e5XKyepAeI.roa Signing time: Fri 02 Jan 2026 10:20:09 +0000 ROA not before: Fri 02 Jan 2026 10:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31294 IP address blocks: 83.220.160.0/22 maxlen: 22 2a01:b8a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:cc:18:90:ba:d0:01:e8:72:90:4a:d4:b2:0d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b Validity Not Before: Jan 2 10:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9f6d2fcc847c19e53f4f926f9ee572b27a901e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:74:ec:4f:e9:31:2a:4e:d0:e6:3a:87:40:e4: 7b:7d:7b:6e:1e:76:e9:34:69:a4:31:1d:a2:3e:9c: 3d:9d:ad:b1:49:4d:a7:ea:14:7a:08:6c:33:bb:af: 1b:66:16:51:5f:f2:6f:ef:27:0f:81:9e:a0:b9:6a: 33:84:f5:39:64:55:df:7c:a3:0a:70:9d:0b:c3:15: 46:57:ac:27:cf:8c:5e:fc:45:0e:67:7c:7d:67:ba: 88:bd:45:e9:00:1b:0e:20:d2:d5:b5:7c:7f:7c:41: 74:75:90:2d:0f:c8:e7:f1:40:50:66:fe:b6:6d:b6: b2:b4:26:4c:c5:39:a8:bd:fa:6e:e8:3b:70:18:7f: 8f:bd:28:ac:08:ad:7d:f4:71:96:e6:2f:31:99:d5: d6:27:0f:72:3e:88:77:96:17:cf:ce:a7:e0:51:6e: bc:69:a9:93:af:d0:2f:34:92:12:1d:7b:06:84:d7: 7f:10:0d:d7:a6:05:ad:5b:59:33:f9:13:44:ec:8a: 8d:2c:c7:c8:90:c8:d5:7c:3b:b4:b4:13:f3:3f:f9: 5e:0e:40:c8:9a:f4:ae:46:ae:29:24:af:69:2e:ee: 28:57:aa:b4:80:85:df:f0:8b:ae:c6:11:0b:36:37: b6:87:66:79:5e:f9:83:7b:bd:e2:d7:50:4b:0e:5a: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F6:D2:FC:C8:47:C1:9E:53:F4:F9:26:F9:EE:57:2B:27:A9:01:E2 X509v3 Authority Key Identifier: keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/qfbS_MhHwZ5T9Pkm-e5XKyepAeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.220.160.0/22 IPv6: 2a01:b8a0::/32 Signature Algorithm: sha256WithRSAEncryption a7:38:a7:a2:c7:a0:9b:54:96:31:89:f8:16:2a:7c:d1:57:c5: 6a:5c:d4:bb:6c:ab:0d:6e:9c:dc:d9:db:ba:80:48:4b:f7:37: 98:23:92:45:bc:db:49:e9:93:5f:5f:eb:99:a6:db:72:75:9c: 74:72:2c:b3:df:c6:47:3c:c2:ad:f0:21:44:3c:50:f0:ca:82: ec:c6:95:e3:d2:0d:95:9a:b8:4e:67:a6:46:38:9b:8c:f6:ba: 5c:9c:4c:49:09:f7:ff:fd:3f:08:6f:41:b8:41:0b:c1:fe:30: 86:66:5a:f0:ef:bf:bb:c3:fb:fe:5c:68:3b:38:93:a1:8d:e1: 08:8c:9b:0d:c5:1d:5c:26:2b:7a:7b:d3:49:96:bb:5b:62:f0: 37:cc:c5:a5:9c:57:04:9f:4a:2a:2e:d5:9e:64:20:2e:c5:86: cd:e3:f9:c0:7b:92:73:d7:dc:0c:c7:45:36:73:0c:47:47:76: 99:82:2b:4f:04:36:ae:dd:8f:68:72:11:b4:57:c2:c5:3a:bc: 23:2c:2e:b2:ae:5a:77:ca:04:82:d6:e2:c5:55:41:5b:b3:d8: 2e:26:40:a8:75:8c:6f:38:f2:16:b7:dd:0c:52:da:dd:73:48: d5:26:8a:00:65:dd:3a:07:c0:8b:92:45:5a:a6:06:43:67:a7: a0:6b:08:4e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OMwYkLrQAehykErUsg3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNzU0OGMzN2FiZWJjNThiOTI4ZWQyODU0MzNkNjllOTVk ZjljM2IwHhcNMjYwMTAyMTAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWY2ZDJmY2M4NDdjMTllNTNmNGY5MjZmOWVlNTcyYjI3YTkwMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HTsT+kxKk7Q5jqHQOR7fXtuHnbp NGmkMR2iPpw9na2xSU2n6hR6CGwzu68bZhZRX/Jv7ycPgZ6guWozhPU5ZFXffKMK cJ0LwxVGV6wnz4xe/EUOZ3x9Z7qIvUXpABsOINLVtXx/fEF0dZAtD8jn8UBQZv62 bbaytCZMxTmovfpu6DtwGH+PvSisCK199HGW5i8xmdXWJw9yPoh3lhfPzqfgUW68 aamTr9AvNJISHXsGhNd/EA3XpgWtW1kz+RNE7IqNLMfIkMjVfDu0tBPzP/leDkDI mvSuRq4pJK9pLu4oV6q0gIXf8IuuxhELNje2h2Z5XvmDe73i11BLDlr0JQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKn20vzIR8GeU/T5JvnuVysnqQHiMB8GA1UdIwQY MBaAFGB1SMN6vrxYuSjtKFQz1p6V35w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMt MGM5OGM1NzBhNmUwLzEvcWZiU19NaEh3WjVUOVBrbS1lNVhLeWVwQWVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMtMGM5OGM1NzBhNmUw LzEvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCU9ygMA0E AgACMAcDBQAqAbigMA0GCSqGSIb3DQEBCwUAA4IBAQCnOKeix6CbVJYxifgWKnzR V8VqXNS7bKsNbpzc2du6gEhL9zeYI5JFvNtJ6ZNfX+uZpttydZx0ciyz38ZHPMKt 8CFEPFDwyoLsxpXj0g2VmrhOZ6ZGOJuM9rpcnExJCff//T8Ib0G4QQvB/jCGZlrw 77+7w/v+XGg7OJOhjeEIjJsNxR1cJit6e9NJlrtbYvA3zMWlnFcEn0oqLtWeZCAu xYbN4/nAe5Jz19wMx0U2cwxHR3aZgitPBDau3Y9ochG0V8LFOrwjLC6yrlp3ygSC 1uLFVUFbs9guJkCodYxvOPIWt90MUtrdc0jVJooAZd06B8CLkkVapgZDZ6egawhO -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:45 2026 by rpki-client