This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/0Q84qOO4ry7FkxPcizoEKZ6DKC8.roa File: 0Q84qOO4ry7FkxPcizoEKZ6DKC8.roa (raw, json) Hash identifier: tXRjTxM4LPMCnq48NDLgFh3fKsng+M+yxheQCDwbdAY= Subject key identifier: D1:0F:38:A8:E3:B8:AF:2E:C5:93:13:DC:8B:3A:04:29:9E:83:28:2F Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f Certificate serial: 019B7C80635BDA1F3927D8DABFD2D92305BC Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/0Q84qOO4ry7FkxPcizoEKZ6DKC8.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25098 IP address blocks: 46.248.100.0/24 maxlen: 24 82.136.7.0/24 maxlen: 24 82.136.12.0/22 maxlen: 22 82.136.16.0/22 maxlen: 22 85.116.8.0/24 maxlen: 24 85.116.10.0/24 maxlen: 24 85.116.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:63:5b:da:1f:39:27:d8:da:bf:d2:d9:23:05:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d10f38a8e3b8af2ec59313dc8b3a04299e83282f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:ac:79:92:19:8d:92:17:fd:f4:d0:5b:45: 23:84:15:1a:1a:31:8a:fd:d8:cc:66:28:1e:3d:7c: f7:c5:b5:3d:46:00:61:b9:ee:05:99:53:d9:9d:5b: ca:a9:ce:3f:5d:e4:25:28:58:5a:b3:c9:d8:ee:fe: 0a:d9:d8:ac:5a:1b:04:1f:8d:57:6c:ac:6f:bb:02: 75:1a:fa:1c:c0:8e:62:7b:d2:1b:84:96:13:50:00: 89:86:6e:24:a4:8a:49:21:f8:c4:e5:f0:0a:9d:bb: 05:cc:b6:e3:c8:57:d7:f8:fd:e8:68:27:de:ba:fc: 34:82:ca:0b:dc:62:32:f5:37:59:30:9c:4e:f6:dc: 21:76:bb:52:4e:2f:82:d4:89:f1:a9:77:9c:c3:38: 1f:6c:be:b9:d5:b0:54:19:cb:29:95:3c:f4:9e:38: bb:16:ee:01:c5:ee:f2:be:47:64:01:69:2b:ad:cd: 1f:67:40:6e:fb:e5:1f:5a:a5:d9:70:9c:8b:4c:3b: 25:94:16:ef:33:5b:55:70:b2:29:8a:11:5f:f2:da: 79:41:ec:59:eb:1e:9a:25:60:43:76:93:29:7f:69: ea:eb:77:79:24:1b:ba:48:35:85:d6:2f:32:a2:e8: 75:79:bf:bb:3f:0a:c6:d9:6e:5e:c1:02:2d:2e:23: 44:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0F:38:A8:E3:B8:AF:2E:C5:93:13:DC:8B:3A:04:29:9E:83:28:2F X509v3 Authority Key Identifier: keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/0Q84qOO4ry7FkxPcizoEKZ6DKC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.248.100.0/24 82.136.7.0/24 82.136.12.0-82.136.19.255 85.116.8.0/24 85.116.10.0/24 85.116.12.0/23 Signature Algorithm: sha256WithRSAEncryption 63:25:94:58:91:c5:93:80:6e:69:b0:4d:7d:8b:a5:fc:29:67: 9f:42:63:a2:6f:2f:e9:67:f6:93:0d:48:42:3c:d1:2b:ee:36: e4:aa:1a:69:63:c0:c9:34:9f:92:17:f4:f7:6e:64:f6:b0:ad: a6:68:b6:79:d0:ad:67:6b:1f:29:e9:68:10:bb:6a:de:58:1b: 5b:81:b0:91:ff:d5:ca:71:05:25:c7:e5:25:35:5d:50:4c:89: 62:c4:38:6d:8f:70:aa:d8:a4:ea:a9:de:31:d9:e7:28:c7:7b: 8d:77:b5:97:09:de:c2:70:3f:7e:5c:61:f1:d1:c2:6c:8d:12: 0b:09:9f:c1:c4:f3:83:f2:08:33:56:06:48:99:85:a4:64:d5: 8e:6e:f7:7c:14:b7:be:f8:57:1b:46:75:c8:93:33:03:11:1c: 17:a5:ca:54:e4:ed:c7:1c:19:7e:c0:3e:0f:0a:72:ba:3f:62: e9:6d:3b:51:13:bf:4f:05:49:a4:47:41:60:8b:2d:49:39:02: e2:d4:4c:e0:a7:48:d9:1e:ff:3d:d9:5f:a2:ae:40:0c:a2:29: 48:c4:3a:83:fb:68:8f:d8:1f:f0:28:eb:dc:cb:35:9d:b9:eb: 7e:e3:93:cd:c9:01:d5:d3:d6:38:d3:69:c8:06:5b:1d:a5:28: 4c:99:a2:07 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt8gGNb2h85J9jav9LZIwW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4 NjEyM2YwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTBmMzhhOGUzYjhhZjJlYzU5MzEzZGM4YjNhMDQyOTllODMyODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXmseZIZjZIX/fTQW0UjhBUaGjGK /djMZigePXz3xbU9RgBhue4FmVPZnVvKqc4/XeQlKFhas8nY7v4K2disWhsEH41X bKxvuwJ1GvocwI5ie9IbhJYTUACJhm4kpIpJIfjE5fAKnbsFzLbjyFfX+P3oaCfe uvw0gsoL3GIy9TdZMJxO9twhdrtSTi+C1InxqXecwzgfbL651bBUGcsplTz0nji7 Fu4Bxe7yvkdkAWkrrc0fZ0Bu++UfWqXZcJyLTDsllBbvM1tVcLIpihFf8tp5QexZ 6x6aJWBDdpMpf2nq63d5JBu6SDWF1i8youh1eb+7PwrG2W5ewQItLiNEJwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFNEPOKjjuK8uxZMT3Is6BCmegygvMB8GA1UdIwQY MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt NGIxZjYxNjUzZjNkLzEvMFE4NHFPTzRyeTdGa3hQY2l6b0VLWjZES0M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQALvhkAwQA UogHMAwDBAJSiAwDBAJSiBADBABVdAgDBABVdAoDBAFVdAwwDQYJKoZIhvcNAQEL BQADggEBAGMllFiRxZOAbmmwTX2LpfwpZ59CY6JvL+ln9pMNSEI80SvuNuSqGmlj wMk0n5IX9PduZPawraZotnnQrWdrHynpaBC7at5YG1uBsJH/1cpxBSXH5SU1XVBM iWLEOG2PcKrYpOqp3jHZ5yjHe413tZcJ3sJwP35cYfHRwmyNEgsJn8HE84PyCDNW BkiZhaRk1Y5u93wUt774VxtGdciTMwMRHBelylTk7cccGX7APg8Kcro/YultO1ET v08FSaRHQWCLLUk5AuLUTOCnSNke/z3ZX6KuQAyiKUjEOoP7aI/YH/Ao69zLNZ25 637jk83JAdXT1jjTacgGWx2lKEyZogc= -----END CERTIFICATE-----Generated at Thu Jan 8 09:14:12 2026 by rpki-client