This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cQBlhU5JqtDU2lH-EwYF1r4AAos.roa File: cQBlhU5JqtDU2lH-EwYF1r4AAos.roa (raw, json) Hash identifier: vsRMaxiaUUUpnyxSofNNykaVlOnEpqlHL9WiM285O3E= Subject key identifier: 71:00:65:85:4E:49:AA:D0:D4:DA:51:FE:13:06:05:D6:BE:00:02:8B Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B7911431B52D08B0751AE41C8D8E55515 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cQBlhU5JqtDU2lH-EwYF1r4AAos.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47508 IP address blocks: 104.249.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:43:1b:52:d0:8b:07:51:ae:41:c8:d8:e5:55:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=710065854e49aad0d4da51fe130605d6be00028b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:82:c1:02:84:19:4f:5a:19:d9:18:b3:5b:26: 37:cb:04:73:1a:97:0c:96:1c:60:49:66:16:82:7b: ee:ed:e6:19:e3:bd:f2:ed:b1:92:20:e9:d8:10:ae: d5:3f:d2:d2:1b:d0:c7:c9:0e:f7:cf:01:16:5c:bd: 4f:43:f3:fc:da:cf:c6:80:f8:5b:04:6f:c8:23:da: 32:ad:84:13:17:d9:aa:d7:7c:52:be:b5:bc:d4:a4: 6c:0a:7a:bb:7a:ec:c9:e1:33:d3:52:de:8e:79:cc: fd:f9:af:26:63:df:c2:e6:f5:ab:8c:0f:7b:fa:43: f4:5f:2d:23:0f:71:5a:3c:6b:95:5d:8a:dd:9a:66: 66:5d:0f:c6:ba:40:5f:77:41:71:b6:7e:e0:2c:9e: e0:97:b8:69:91:12:95:c0:c7:20:b3:7b:a8:50:c5: 25:4d:ca:27:9f:bc:ce:47:59:61:9a:8d:11:30:0c: 38:ad:aa:1c:4f:85:ad:7b:56:c5:9e:35:d7:12:25: 7f:c8:c5:7a:de:a6:ec:ee:e3:07:f5:75:c0:a5:46: b3:99:f5:f8:0b:20:a8:7e:cd:b8:ee:bf:94:47:4f: fa:6c:7e:2a:97:76:4f:1a:a6:4d:44:86:13:cc:f7: e3:71:0c:83:c4:9e:22:27:63:c1:81:58:1d:95:50: ee:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:00:65:85:4E:49:AA:D0:D4:DA:51:FE:13:06:05:D6:BE:00:02:8B X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cQBlhU5JqtDU2lH-EwYF1r4AAos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.249.18.0/24 Signature Algorithm: sha256WithRSAEncryption 34:8d:c8:7c:00:cc:20:d1:31:95:8e:2f:54:0e:12:74:b9:da: ba:35:c1:05:b0:b3:45:9c:2e:80:d8:0a:fa:d9:3f:00:cb:a3: 85:d2:ee:c6:56:b3:33:02:7d:81:d2:41:45:31:25:27:04:5e: 99:a5:ab:04:03:61:b0:d9:f3:04:94:54:71:0b:0b:41:ed:8a: 33:5c:45:c3:68:86:53:1d:8a:8b:bd:33:4f:bf:c0:4c:e1:95: 15:dd:21:15:9f:f9:4d:be:de:d2:d2:84:d2:e3:7d:e1:92:3c: bc:cd:95:44:cf:f9:f8:80:fc:ff:f0:8d:d8:52:04:ac:26:42: 79:bd:30:75:f5:45:2b:76:c9:f9:c3:54:9a:c4:d7:fc:e7:e0: d2:3b:d5:4e:27:ca:df:25:49:55:ea:d7:48:33:cb:26:aa:30: 6f:ed:b5:62:73:66:94:b3:91:c1:60:a1:2e:df:76:de:8e:62: 31:3a:0e:19:bc:a0:c6:cc:41:ed:04:da:38:19:35:32:12:68: d8:42:da:af:63:1b:bf:e6:99:77:16:e4:28:0f:82:00:25:5b: b5:95:02:11:33:b4:de:fe:a9:2d:f8:f7:96:6a:aa:63:d8:45: e6:fd:45:b3:7c:8d:3d:1e:b5:61:f8:11:b5:2f:54:7a:79:ea: 3a:59:1e:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUMbUtCLB1GuQcjY5VUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTAwNjU4NTRlNDlhYWQwZDRkYTUxZmUxMzA2MDVkNmJlMDAwMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYLBAoQZT1oZ2RizWyY3ywRzGpcM lhxgSWYWgnvu7eYZ473y7bGSIOnYEK7VP9LSG9DHyQ73zwEWXL1PQ/P82s/GgPhb BG/II9oyrYQTF9mq13xSvrW81KRsCnq7euzJ4TPTUt6Oecz9+a8mY9/C5vWrjA97 +kP0Xy0jD3FaPGuVXYrdmmZmXQ/GukBfd0Fxtn7gLJ7gl7hpkRKVwMcgs3uoUMUl Tconn7zOR1lhmo0RMAw4raocT4Wte1bFnjXXEiV/yMV63qbs7uMH9XXApUazmfX4 CyCofs247r+UR0/6bH4ql3ZPGqZNRIYTzPfjcQyDxJ4iJ2PBgVgdlVDuzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEAZYVOSarQ1NpR/hMGBda+AAKLMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvY1FCbGhVNUpxdERVMmxILUV3WUYxcjRBQW9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPkSMA0G CSqGSIb3DQEBCwUAA4IBAQA0jch8AMwg0TGVji9UDhJ0udq6NcEFsLNFnC6A2Ar6 2T8Ay6OF0u7GVrMzAn2B0kFFMSUnBF6ZpasEA2Gw2fMElFRxCwtB7YozXEXDaIZT HYqLvTNPv8BM4ZUV3SEVn/lNvt7S0oTS433hkjy8zZVEz/n4gPz/8I3YUgSsJkJ5 vTB19UUrdsn5w1SaxNf85+DSO9VOJ8rfJUlV6tdIM8smqjBv7bVic2aUs5HBYKEu 33bejmIxOg4ZvKDGzEHtBNo4GTUyEmjYQtqvYxu/5pl3FuQoD4IAJVu1lQIRM7Te /qkt+PeWaqpj2EXm/UWzfI09HrVh+BG1L1R6eeo6WR5s -----END CERTIFICATE-----Generated at Fri Jan 2 02:42:13 2026 by rpki-client