This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/B0Q_Xv2CCSGwBRd2N5EnGbOwSfQ.roa File: B0Q_Xv2CCSGwBRd2N5EnGbOwSfQ.roa (raw, json) Hash identifier: 3cuIsi9z8hL9CpLEDy3zaGuNLR9bt9rQc5C+l+npObs= Subject key identifier: 07:44:3F:5E:FD:82:09:21:B0:05:17:76:37:91:27:19:B3:B0:49:F4 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783445E00F9ED5E2C4F6178E78F103CF Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/B0Q_Xv2CCSGwBRd2N5EnGbOwSfQ.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.136.184.0/22 maxlen: 24 62.106.75.0/24 maxlen: 24 62.133.34.0/24 maxlen: 24 77.75.225.0/24 maxlen: 24 185.255.54.0/24 maxlen: 24 2a0b:4080::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:45:e0:0f:9e:d5:e2:c4:f6:17:8e:78:f1:03:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07443f5efd820921b005177637912719b3b049f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:09:b3:9b:ec:a6:3b:8f:15:56:c7:23:f7: cf:9c:9a:8b:87:39:01:2d:0d:78:03:40:3b:95:90: 85:07:4f:13:8f:a3:a0:43:1e:2b:45:ac:61:d5:d3: a1:18:9f:3a:4b:15:18:ab:8b:60:58:79:ab:26:e1: 91:22:8c:57:ba:e4:0a:fe:0b:75:c7:9d:3b:80:6c: 08:21:08:97:05:a4:e3:c4:4b:91:de:16:0f:e1:63: 4c:8c:9b:88:c5:6e:f0:96:d7:4f:28:90:e1:74:0a: fe:89:48:12:c8:c1:7c:68:8b:f9:c3:8b:58:aa:7f: d4:36:73:21:9e:f2:4d:64:ef:37:0e:cb:4b:ff:07: af:20:e6:a8:32:7a:9b:94:5e:2a:2e:7e:c0:ca:bf: c0:78:86:f7:34:bf:46:b8:e2:c5:7d:d0:8e:a9:6a: ab:6b:2f:d4:ed:a6:c1:b0:e6:3a:8c:66:1d:08:9e: c6:a5:25:47:7e:9f:37:78:0a:7a:2a:0d:9f:7a:5a: c9:11:0a:87:01:39:a4:c0:60:15:72:28:ab:e1:00: 3d:af:a1:92:49:7f:fe:f1:15:e4:62:c6:a3:5d:af: 00:87:d1:cb:94:34:78:a8:ce:05:db:8e:32:ca:ad: 6a:b7:39:2a:c2:b1:04:2f:73:6c:38:ea:b5:7e:c9: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:44:3F:5E:FD:82:09:21:B0:05:17:76:37:91:27:19:B3:B0:49:F4 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/B0Q_Xv2CCSGwBRd2N5EnGbOwSfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.184.0/22 62.106.75.0/24 62.133.34.0/24 77.75.225.0/24 185.255.54.0/24 IPv6: 2a0b:4080::/32 Signature Algorithm: sha256WithRSAEncryption 07:8c:da:a1:10:72:84:02:55:fe:ec:96:52:ae:a5:b2:d7:6b: a8:98:32:66:93:a9:17:10:d6:0a:19:f0:c7:55:6c:03:51:c7: 6b:d7:bb:c7:b1:b7:85:11:0d:24:72:f7:27:94:dc:57:30:18: 98:4d:eb:82:62:bc:d8:37:70:90:01:f4:fd:11:96:ee:08:6b: 7a:c3:66:26:b1:3e:91:db:ff:80:ca:66:da:ad:a8:d5:fe:fb: 81:1b:a0:37:4e:b5:bd:ef:95:b9:c9:f7:ea:6e:36:f4:e3:5e: a5:17:ef:63:9d:8b:25:fb:73:4d:11:7e:4c:7b:2b:0b:ce:a1: 2e:30:93:42:3d:f6:bf:f5:c6:52:c5:c7:5d:97:73:33:43:58: 48:c6:12:5d:43:77:48:21:33:5c:a1:f4:1f:82:93:a9:61:81: 48:80:ec:ea:63:61:3c:c0:4f:eb:e0:a9:7b:32:05:32:15:07: e1:35:9f:b0:60:9c:66:71:d2:eb:29:79:71:a7:25:21:cb:e1: 40:2a:ed:a7:59:b4:e2:9d:2a:13:be:46:ba:19:0c:2d:67:55: f7:4f:81:1d:1f:0b:86:46:7a:a7:cc:ae:3c:73:21:34:c3:1c: ba:ae:0b:3c:77:44:2f:f9:14:1f:72:e6:46:54:d3:71:5c:88: 46:03:98:bd -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4NEXgD57V4sT2F4548QPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzQ0M2Y1ZWZkODIwOTIxYjAwNTE3NzYzNzkxMjcxOWIzYjA0OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqYJs5vspjuPFVbHI/fPnJqLhzkB LQ14A0A7lZCFB08Tj6OgQx4rRaxh1dOhGJ86SxUYq4tgWHmrJuGRIoxXuuQK/gt1 x507gGwIIQiXBaTjxEuR3hYP4WNMjJuIxW7wltdPKJDhdAr+iUgSyMF8aIv5w4tY qn/UNnMhnvJNZO83DstL/wevIOaoMnqblF4qLn7Ayr/AeIb3NL9GuOLFfdCOqWqr ay/U7abBsOY6jGYdCJ7GpSVHfp83eAp6Kg2felrJEQqHATmkwGAVciir4QA9r6GS SX/+8RXkYsajXa8Ah9HLlDR4qM4F244yyq1qtzkqwrEEL3NsOOq1fslEKQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFAdEP179ggkhsAUXdjeRJxmzsEn0MB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvQjBRX1h2MkNDU0d3QlJkMk41RW5HYk93U2ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLYi4AwQA PmpLAwQAPoUiAwQATUvhAwQAuf82MA0EAgACMAcDBQAqC0CAMA0GCSqGSIb3DQEB CwUAA4IBAQAHjNqhEHKEAlX+7JZSrqWy12uomDJmk6kXENYKGfDHVWwDUcdr17vH sbeFEQ0kcvcnlNxXMBiYTeuCYrzYN3CQAfT9EZbuCGt6w2YmsT6R2/+AymbarajV /vuBG6A3TrW975W5yffqbjb0416lF+9jnYsl+3NNEX5MeysLzqEuMJNCPfa/9cZS xcddl3MzQ1hIxhJdQ3dIITNcofQfgpOpYYFIgOzqY2E8wE/r4Kl7MgUyFQfhNZ+w YJxmcdLrKXlxpyUhy+FAKu2nWbTinSoTvka6GQwtZ1X3T4EdHwuGRnqnzK48cyE0 wxy6rgs8d0Qv+RQfcuZGVNNxXIhGA5i9 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:33 2026 by rpki-client