This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/qPxd8qMxhd6Yq15uwp5rXHAxZ2E.roa File: qPxd8qMxhd6Yq15uwp5rXHAxZ2E.roa (raw, json) Hash identifier: 7ZX3c0L8iUXI21GiIPtHoJrfkVa81NDxH/D4ulRW6l0= Subject key identifier: A8:FC:5D:F2:A3:31:85:DE:98:AB:5E:6E:C2:9E:6B:5C:70:31:67:61 Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9 Certificate serial: 019B78A2C21C1062941257D72B995C6CE70A Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/qPxd8qMxhd6Yq15uwp5rXHAxZ2E.roa Signing time: Thu 01 Jan 2026 08:18:11 +0000 ROA not before: Thu 01 Jan 2026 08:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56694 IP address blocks: 185.217.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c2:1c:10:62:94:12:57:d7:2b:99:5c:6c:e7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9 Validity Not Before: Jan 1 08:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8fc5df2a33185de98ab5e6ec29e6b5c70316761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:ae:6f:f1:46:20:f8:57:ff:65:da:f7:f2: 87:fd:50:26:b8:83:9d:e8:f6:c3:90:20:94:c2:9d: 23:38:0f:a3:4d:53:b6:f8:5e:bb:c0:20:25:5c:94: 38:09:01:96:ad:9b:f3:90:6a:fc:70:6e:80:0f:c2: bf:e5:11:7f:a6:41:a3:68:18:78:c3:4f:26:ce:c5: be:ba:22:3a:1a:0d:fa:ca:ce:e2:ca:50:6e:14:4a: 62:36:dc:49:c0:61:70:4c:c6:be:13:0e:4e:42:00: 53:ab:02:71:be:2d:4a:d0:9f:34:80:07:5a:9e:5e: 9a:2f:21:4c:ab:ed:91:66:8e:c0:ac:0e:5f:eb:61: 3b:07:ff:7e:fa:6d:4f:bd:30:76:d5:ec:51:9a:f1: 7b:16:9a:b6:12:f9:2f:8d:29:5c:8d:2d:4c:cd:24: f0:9c:91:d3:7d:57:41:ed:ff:5e:f9:a9:af:44:31: 41:79:fb:9f:8a:bc:9e:7d:0a:a4:bd:2e:61:3d:55: c9:07:b9:7b:ce:70:6b:0a:c8:84:ad:73:52:3a:5a: 00:31:84:f2:90:7b:3e:3e:3f:74:16:39:fe:3a:81: 95:2f:79:58:d2:c3:11:6b:d7:34:39:8b:03:12:b5: 97:9b:89:57:76:34:b3:fb:b3:c6:85:93:50:44:a2: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FC:5D:F2:A3:31:85:DE:98:AB:5E:6E:C2:9E:6B:5C:70:31:67:61 X509v3 Authority Key Identifier: keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/qPxd8qMxhd6Yq15uwp5rXHAxZ2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.128.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:28:35:0b:13:ac:65:68:a6:e4:01:ee:ed:3f:2f:1b:fa:cf: a7:af:71:52:70:8d:e7:84:c2:03:f4:c3:9a:95:90:1f:dd:3a: 87:8a:07:34:bf:4a:84:fa:b5:56:99:6c:34:dd:cc:13:38:fe: 4a:50:a6:1d:e6:e7:82:b0:c1:bc:f3:ac:10:01:6a:ea:4e:6c: 36:2f:4a:5f:e5:3d:58:7c:ce:94:75:8b:34:2d:20:93:26:7f: 19:31:4b:e8:a8:a0:1d:a3:2f:65:bc:6b:25:72:d6:bc:21:64: fa:24:d7:08:68:12:00:30:c7:6e:62:30:bb:45:fe:fc:cd:41: c3:b3:3d:02:da:0c:58:be:30:2a:8f:ca:54:20:b4:40:b4:37: e4:55:c7:81:a2:3c:f9:72:74:82:a5:e2:49:36:09:d5:c0:22: ab:9c:9a:0c:44:e7:95:ec:ce:f4:3b:0b:ae:6f:58:26:ca:23: ff:be:69:46:a0:74:5b:bc:7a:09:38:06:97:6a:cd:51:21:d5: f3:a8:46:55:1a:f5:c6:71:14:9f:44:eb:6d:9c:f6:73:ca:2f: 9f:3a:38:ac:c3:8d:75:0a:7f:c5:c6:68:da:b0:be:13:61:3a: 7b:be:2e:d7:d9:ce:00:60:35:1a:4b:b6:9c:ab:8f:ae:e7:bb: f6:c1:14:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osIcEGKUElfXK5lcbOcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTc1NzQ0MmU0N2Y4MjYwOGJlZjQyM2RhYzM0NGMyNTM1 OGRiZjkwHhcNMjYwMTAxMDgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGZjNWRmMmEzMzE4NWRlOThhYjVlNmVjMjllNmI1YzcwMzE2NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxWub/FGIPhX/2Xa9/KH/VAmuIOd 6PbDkCCUwp0jOA+jTVO2+F67wCAlXJQ4CQGWrZvzkGr8cG6AD8K/5RF/pkGjaBh4 w08mzsW+uiI6Gg36ys7iylBuFEpiNtxJwGFwTMa+Ew5OQgBTqwJxvi1K0J80gAda nl6aLyFMq+2RZo7ArA5f62E7B/9++m1PvTB21exRmvF7Fpq2EvkvjSlcjS1MzSTw nJHTfVdB7f9e+amvRDFBefufiryefQqkvS5hPVXJB7l7znBrCsiErXNSOloAMYTy kHs+Pj90Fjn+OoGVL3lY0sMRa9c0OYsDErWXm4lXdjSz+7PGhZNQRKLTawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKj8XfKjMYXemKtebsKea1xwMWdhMB8GA1UdIwQY MBaAFAanV0QuR/gmCL70I9rDRMJTWNv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYt YjI1YTY3YjJlYjRhLzEvcVB4ZDhxTXhoZDZZcTE1dXdwNXJYSEF4WjJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYtYjI1YTY3YjJlYjRh LzEvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudmAMA0G CSqGSIb3DQEBCwUAA4IBAQA7KDULE6xlaKbkAe7tPy8b+s+nr3FScI3nhMID9MOa lZAf3TqHigc0v0qE+rVWmWw03cwTOP5KUKYd5ueCsMG886wQAWrqTmw2L0pf5T1Y fM6UdYs0LSCTJn8ZMUvoqKAdoy9lvGslcta8IWT6JNcIaBIAMMduYjC7Rf78zUHD sz0C2gxYvjAqj8pUILRAtDfkVceBojz5cnSCpeJJNgnVwCKrnJoMROeV7M70Owuu b1gmyiP/vmlGoHRbvHoJOAaXas1RIdXzqEZVGvXGcRSfROttnPZzyi+fOjisw411 Cn/FxmjasL4TYTp7vi7X2c4AYDUaS7acq4+u57v2wRS1 -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:57 2026 by rpki-client