This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/qVGqFblblQ0Tx0yMPLkAhoph6Og.roa File: qVGqFblblQ0Tx0yMPLkAhoph6Og.roa (raw, json) Hash identifier: qcH9kB+D0tpYWI3bM+Fdfy2bR8qWJ9USHYKyRByfQM0= Subject key identifier: A9:51:AA:15:B9:5B:95:0D:13:C7:4C:8C:3C:B9:00:86:8A:61:E8:E8 Certificate issuer: /CN=6e9a558ad546dcc9abc0b8a131067af02e407007 Certificate serial: 019B7BA395EDB08FF3CA837F24602EDDF415 Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/qVGqFblblQ0Tx0yMPLkAhoph6Og.roa Signing time: Thu 01 Jan 2026 22:17:56 +0000 ROA not before: Thu 01 Jan 2026 22:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201849 IP address blocks: 185.62.63.0/24 maxlen: 24 2a06:d700:4444::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.mft rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:95:ed:b0:8f:f3:ca:83:7f:24:60:2e:dd:f4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007 Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a951aa15b95b950d13c74c8c3cb900868a61e8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9e:ba:1f:30:58:cb:f5:dd:43:84:c3:fe:65: b2:40:52:6d:d1:a3:23:0e:f1:e8:9d:be:81:9e:32: 40:50:f2:ac:55:06:de:0d:e7:24:cb:f0:7f:5c:86: 47:1f:48:dd:d0:2d:4b:3d:e8:f8:fb:b4:4a:aa:38: d2:99:20:ea:86:60:a0:87:87:33:18:ef:cc:ea:09: 6e:9a:b3:29:3b:81:4f:6f:3f:4d:89:3f:12:17:a0: 80:bd:05:12:24:f7:3e:0a:69:79:b1:0c:63:fd:2b: 31:52:44:30:34:3c:9a:a9:66:ff:ed:37:60:b0:17: 04:c5:98:22:0c:f4:9b:63:52:47:65:e5:91:c8:ad: e0:1d:ed:51:56:88:29:b3:57:ae:91:cf:e6:21:a0: 20:72:ef:55:2c:5f:2d:ae:65:9d:26:bd:84:fc:e4: a8:58:63:45:4b:d0:4e:92:cd:30:a9:54:2a:c2:fb: af:9d:e1:d8:fb:52:a2:05:d4:bd:66:69:c1:a5:0d: c5:65:26:f9:82:19:93:4a:79:97:ee:75:a4:11:84: 3a:12:95:ed:92:71:b9:35:9c:8a:c6:78:70:8d:33: ca:04:fe:4b:5a:8c:26:49:65:4b:91:7c:a7:be:de: 3b:3e:1d:85:c5:52:2e:b5:5c:0d:2a:99:cd:30:d4: 34:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:51:AA:15:B9:5B:95:0D:13:C7:4C:8C:3C:B9:00:86:8A:61:E8:E8 X509v3 Authority Key Identifier: keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/qVGqFblblQ0Tx0yMPLkAhoph6Og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.63.0/24 IPv6: 2a06:d700:4444::/48 Signature Algorithm: sha256WithRSAEncryption 6a:9d:ea:92:7e:e7:cb:d3:88:40:33:93:eb:c3:a0:bf:71:1d: eb:65:ac:43:12:e8:55:30:ee:a1:e1:4e:ab:d9:ac:e9:47:4f: 1c:8d:8d:1a:26:7e:b6:4b:d0:53:21:61:f4:e6:20:93:ee:6c: 11:7d:99:76:03:68:30:e0:00:98:a4:9c:47:9c:02:87:65:06: a2:69:de:a9:61:64:c1:80:64:33:c1:73:e5:cb:96:0f:46:a7: b8:20:9a:4c:99:03:2d:aa:b1:ad:b3:79:73:e8:28:0b:89:3c: f0:bb:12:36:9e:a8:10:9e:55:ea:69:81:73:99:a9:e7:7a:75: d0:7d:6c:b4:b8:79:7a:63:4d:d7:aa:ca:97:24:b1:3e:04:e4: ab:87:56:38:a0:1b:ee:ae:fe:60:0f:a8:55:fd:4b:29:28:a0: 4d:b2:87:1c:cb:80:9d:a0:59:b7:50:34:29:0b:84:fa:d5:ca: 4d:4c:eb:c8:72:2d:80:e3:89:ef:e8:63:a8:e7:2c:e5:ce:15: 54:8d:c5:a3:24:f5:8e:bd:1a:99:e7:8f:59:2c:be:27:4c:3a: ed:93:df:c6:6c:7e:3a:57:bd:dc:d4:7b:e7:c3:2e:9a:11:4d: 48:d5:08:35:41:48:c2:55:ed:e2:5c:2e:ce:ba:cd:08:aa:02: 0b:db:d0:1a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7o5XtsI/zyoN/JGAu3fQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOWE1NThhZDU0NmRjYzlhYmMwYjhhMTMxMDY3YWYwMmU0 MDcwMDcwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTUxYWExNWI5NWI5NTBkMTNjNzRjOGMzY2I5MDA4NjhhNjFlOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6p66HzBYy/XdQ4TD/mWyQFJt0aMj DvHonb6BnjJAUPKsVQbeDecky/B/XIZHH0jd0C1LPej4+7RKqjjSmSDqhmCgh4cz GO/M6glumrMpO4FPbz9NiT8SF6CAvQUSJPc+Cml5sQxj/SsxUkQwNDyaqWb/7Tdg sBcExZgiDPSbY1JHZeWRyK3gHe1RVogps1eukc/mIaAgcu9VLF8trmWdJr2E/OSo WGNFS9BOks0wqVQqwvuvneHY+1KiBdS9ZmnBpQ3FZSb5ghmTSnmX7nWkEYQ6EpXt knG5NZyKxnhwjTPKBP5LWowmSWVLkXynvt47Ph2FxVIutVwNKpnNMNQ0FQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKlRqhW5W5UNE8dMjDy5AIaKYejoMB8GA1UdIwQY MBaAFG6aVYrVRtzJq8C4oTEGevAuQHAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnBwVml0VkczTW1yd0xpaE1RWjY4QzVBY0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xNTI5YzYtODA4Mi00ZjNhLWJjOTIt NDIzZmNhMjI0MDQxLzEvcVZHcUZibGJsUTBUeDB5TVBMa0Fob3BoNk9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8xNTI5YzYtODA4Mi00ZjNhLWJjOTItNDIzZmNhMjI0MDQx LzEvYnBwVml0VkczTW1yd0xpaE1RWjY4QzVBY0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuT4/MA8E AgACMAkDBwAqBtcAREQwDQYJKoZIhvcNAQELBQADggEBAGqd6pJ+58vTiEAzk+vD oL9xHetlrEMS6FUw7qHhTqvZrOlHTxyNjRomfrZL0FMhYfTmIJPubBF9mXYDaDDg AJiknEecAodlBqJp3qlhZMGAZDPBc+XLlg9Gp7ggmkyZAy2qsa2zeXPoKAuJPPC7 EjaeqBCeVeppgXOZqed6ddB9bLS4eXpjTdeqypcksT4E5KuHVjigG+6u/mAPqFX9 SykooE2yhxzLgJ2gWbdQNCkLhPrVyk1M68hyLYDjie/oY6jnLOXOFVSNxaMk9Y69 Gpnnj1ksvidMOu2T38ZsfjpXvdzUe+fDLpoRTUjVCDVBSMJV7eJcLs66zQiqAgvb 0Bo= -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:17 2026 by rpki-client