This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/qoBDdmnINwqUcx-VmQSYdLjSutc.roa File: qoBDdmnINwqUcx-VmQSYdLjSutc.roa (raw, json) Hash identifier: dGzZF5Z6PKeCna7aXMJiJ8cbxuXwL2FNfyawPOwtpyQ= Subject key identifier: AA:80:43:76:69:C8:37:0A:94:73:1F:95:99:04:98:74:B8:D2:BA:D7 Certificate issuer: /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77 Certificate serial: 019B7E379F7DA0890BC4D65A1FD6DB4C0CA3 Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/qoBDdmnINwqUcx-VmQSYdLjSutc.roa Signing time: Fri 02 Jan 2026 10:18:53 +0000 ROA not before: Fri 02 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208617 IP address blocks: 185.160.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9f:7d:a0:89:0b:c4:d6:5a:1f:d6:db:4c:0c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77 Validity Not Before: Jan 2 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa80437669c8370a94731f9599049874b8d2bad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ac:c2:3c:fe:37:d0:30:a9:d2:f8:81:27:1f: 49:8a:dc:e8:7f:7c:48:00:eb:2b:64:1f:fb:7a:a2: ca:8c:47:fd:de:8f:f1:e2:a2:ce:6b:2b:53:60:9b: 5f:3c:f1:bf:51:2f:89:f4:49:1e:24:f7:26:b5:23: a5:db:89:28:5b:10:60:d5:4c:02:b6:1f:c9:f8:75: ad:f1:2d:e2:7d:fc:b3:f6:3b:9e:16:bb:e6:68:c5: 95:be:f5:e4:7d:cc:ef:98:69:21:38:8f:70:45:be: e7:6c:78:ef:93:49:6d:8c:d1:bf:62:c2:3b:71:8f: 61:7e:fb:ea:b2:fd:10:70:ea:94:d2:65:24:d6:33: 70:d1:00:64:90:27:ea:a8:d6:9d:29:7c:e1:8e:d0: 53:dc:85:7a:97:2f:05:1b:2a:ed:43:f6:b1:9b:c4: da:d6:cc:95:a6:80:36:12:35:fc:9f:b4:c0:f5:4d: 50:b6:9c:3c:e9:89:7f:3a:81:e8:ec:80:9e:e5:b8: 8c:44:bd:89:66:f9:1a:ac:8c:7c:a7:50:16:63:e8: 5f:30:27:c2:ac:23:e6:2f:d0:61:9e:cb:87:76:13: a5:1b:83:2f:0b:07:96:6f:d5:20:2b:29:b3:c0:03: b1:e5:ce:02:2d:79:ea:e7:8f:6a:d5:45:3a:bb:5a: b7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:80:43:76:69:C8:37:0A:94:73:1F:95:99:04:98:74:B8:D2:BA:D7 X509v3 Authority Key Identifier: keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/qoBDdmnINwqUcx-VmQSYdLjSutc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.204.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:26:b2:5a:be:a5:fa:24:27:1d:50:a6:ca:63:8d:cb:22:eb: b0:9e:06:74:8a:ca:c6:ca:da:39:ae:95:b6:42:69:e0:80:24: f2:f6:f4:cc:9b:0b:ec:c2:b2:78:14:3e:b7:89:cd:ac:d1:d9: be:d6:9d:98:da:0e:f1:7c:63:71:da:9d:59:7f:d3:a3:25:cd: 73:4e:44:88:40:4a:a5:8a:1a:77:e4:a6:9e:6b:ca:82:01:10: 32:6e:cc:87:6f:f4:5a:e3:bc:54:76:2c:ca:e7:fa:9c:f0:3f: 8e:96:05:a7:90:99:db:5a:bf:16:5a:30:b2:bd:8f:f7:e9:f8: 71:e1:39:38:5b:2e:54:d9:dd:be:90:bb:63:4d:39:c9:20:3b: d1:79:ce:f4:f9:9c:5e:41:79:74:7b:a2:17:8f:f6:4a:5d:64: 7e:0f:d1:a5:03:47:64:75:fd:35:17:70:18:f5:56:a1:d4:c0: d4:a5:97:60:83:8b:52:09:d1:0e:7f:15:e3:bd:d3:35:05:e0: 1e:87:a6:1f:dd:24:78:81:58:e6:5b:56:68:b0:36:4b:86:ba: 58:10:b9:91:8c:e7:6e:f6:84:fa:b6:2e:4f:46:08:a2:cd:05: 09:4d:50:ce:5d:83:6e:f0:85:b8:ec:88:08:bb:e5:72:68:9e: 8d:d6:c8:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N599oIkLxNZaH9bbTAyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNTIzM2FmNGJhNTkxMTlkNmZmMTk0ZDdjZDg2NjUwODRh NmVlNzcwHhcNMjYwMTAyMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTgwNDM3NjY5YzgzNzBhOTQ3MzFmOTU5OTA0OTg3NGI4ZDJiYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6zCPP430DCp0viBJx9Jitzof3xI AOsrZB/7eqLKjEf93o/x4qLOaytTYJtfPPG/US+J9EkeJPcmtSOl24koWxBg1UwC th/J+HWt8S3iffyz9jueFrvmaMWVvvXkfczvmGkhOI9wRb7nbHjvk0ltjNG/YsI7 cY9hfvvqsv0QcOqU0mUk1jNw0QBkkCfqqNadKXzhjtBT3IV6ly8FGyrtQ/axm8Ta 1syVpoA2EjX8n7TA9U1Qtpw86Yl/OoHo7ICe5biMRL2JZvkarIx8p1AWY+hfMCfC rCPmL9BhnsuHdhOlG4MvCweWb9UgKymzwAOx5c4CLXnq549q1UU6u1q3iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKqAQ3ZpyDcKlHMflZkEmHS40rrXMB8GA1UdIwQY MBaAFMFSM69LpZEZ1v8ZTXzYZlCEpu53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjZmZjgtZTJhYi00ODNjLWEzNzMt NGI3ZjM3NWVjZDA2LzEvcW9CRGRtbklOd3FVY3gtVm1RU1lkTGpTdXRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9iNjZmZjgtZTJhYi00ODNjLWEzNzMtNGI3ZjM3NWVjZDA2 LzEvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaDMMA0G CSqGSIb3DQEBCwUAA4IBAQBPJrJavqX6JCcdUKbKY43LIuuwngZ0isrGyto5rpW2 QmnggCTy9vTMmwvswrJ4FD63ic2s0dm+1p2Y2g7xfGNx2p1Zf9OjJc1zTkSIQEql ihp35Kaea8qCARAybsyHb/Ra47xUdizK5/qc8D+OlgWnkJnbWr8WWjCyvY/36fhx 4Tk4Wy5U2d2+kLtjTTnJIDvRec70+ZxeQXl0e6IXj/ZKXWR+D9GlA0dkdf01F3AY 9Vah1MDUpZdgg4tSCdEOfxXjvdM1BeAeh6Yf3SR4gVjmW1ZosDZLhrpYELmRjOdu 9oT6ti5PRgiizQUJTVDOXYNu8IW47IgIu+VyaJ6N1sjj -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:26 2026 by rpki-client