This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/qJ3niIVK-kPpD_FGpR52CMp181s.roa File: qJ3niIVK-kPpD_FGpR52CMp181s.roa (raw, json) Hash identifier: Y2wZT3A9wJBPyVW0IAHlhorwA/qR0rpoglN3HNURHyM= Subject key identifier: A8:9D:E7:88:85:4A:FA:43:E9:0F:F1:46:A5:1E:76:08:CA:75:F3:5B Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B7F842EB155D02F425E07DBC8032B9475 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/qJ3niIVK-kPpD_FGpR52CMp181s.roa Signing time: Fri 02 Jan 2026 16:22:07 +0000 ROA not before: Fri 02 Jan 2026 16:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207957 IP address blocks: 146.19.128.0/24 maxlen: 24 178.250.186.0/24 maxlen: 24 193.163.203.0/24 maxlen: 24 217.119.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2e:b1:55:d0:2f:42:5e:07:db:c8:03:2b:94:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jan 2 16:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a89de788854afa43e90ff146a51e7608ca75f35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:d4:2d:d9:0e:1b:8f:14:52:05:01:3f:dc: 59:a8:50:b1:1a:7f:fc:31:9c:1b:0e:f7:1d:07:fb: f2:a9:cc:42:75:03:b9:70:ef:8c:ae:78:fd:46:10: 50:98:24:ed:dd:68:94:fc:bd:b0:52:b4:ad:d2:5b: 52:19:c2:ce:64:31:c7:fa:79:ea:4d:00:29:5f:02: 6c:bb:3f:30:42:4a:39:50:31:76:c4:53:8f:23:b7: 69:51:49:f1:d5:6b:55:72:b4:69:30:49:d0:83:a2: a1:a1:c3:e8:f2:b0:10:ae:16:a1:f2:fc:90:85:0f: 42:89:8f:a7:85:ef:6f:03:b6:84:9c:d7:03:81:64: fd:4e:58:18:2d:86:6c:1e:e7:ad:4e:bd:23:dd:54: f3:96:a9:d2:3b:9e:86:15:02:cd:1a:ea:eb:5b:44: 81:e5:77:84:62:7e:0f:9c:e5:1e:bb:5d:17:1c:a9: 9b:14:d2:d2:96:b2:9b:4a:f9:08:62:4c:7e:66:16: 0e:d7:e7:20:6e:33:5a:da:85:cf:93:b4:f4:de:d1: ca:03:09:64:f5:db:f8:b3:00:a4:37:1d:40:e8:0e: 86:12:20:4e:68:40:3f:20:0f:a7:f2:3f:e2:cc:b6: 5d:c6:31:a2:13:cd:67:f5:a9:e0:53:6d:5b:9d:13: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9D:E7:88:85:4A:FA:43:E9:0F:F1:46:A5:1E:76:08:CA:75:F3:5B X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/qJ3niIVK-kPpD_FGpR52CMp181s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.128.0/24 178.250.186.0/24 193.163.203.0/24 217.119.129.0/24 Signature Algorithm: sha256WithRSAEncryption 68:7e:80:70:2d:fa:af:d9:4e:6a:b6:6d:f0:96:9c:c1:ad:52: 5b:06:1b:57:56:9a:ad:3f:cd:6d:27:86:63:7c:52:ad:85:fb: 18:59:20:df:20:7d:c7:9e:dd:0f:47:1a:8e:b6:95:2f:a8:1f: 47:32:88:78:fd:a6:01:1d:47:0a:86:55:6e:d0:d9:d3:13:aa: 86:d1:6d:ed:66:62:c3:16:ae:cc:11:89:7a:6b:61:95:0c:7f: bd:ce:e1:26:3b:84:f6:17:06:cf:8a:8b:02:ad:9b:9a:db:4a: fd:2e:e1:11:30:db:e3:c1:56:e1:c0:7a:28:3b:34:8d:6f:1b: f2:40:9b:aa:98:4e:48:f8:2e:00:52:06:89:f8:d6:59:95:ea: 12:e5:33:a6:02:a9:6a:d4:c8:5b:26:3d:ad:91:fc:12:d1:5e: 9e:b3:a5:d5:ad:f5:9b:6e:33:c9:2c:f9:f4:bd:cb:cb:b5:4f: 2e:b7:24:8a:3c:6d:56:f4:7b:a7:cf:f6:19:dd:9e:bc:81:67: 9e:92:82:13:44:d9:82:52:c9:8b:e8:b4:65:7e:7a:13:1c:57: f5:38:c4:63:fd:6f:4d:ee:97:13:c7:a5:58:b3:71:19:0b:5e: 87:38:ba:dd:78:be:f2:65:ba:47:84:69:5f:75:fe:ea:10:ab: 86:da:8c:cc -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hC6xVdAvQl4H28gDK5R1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwMTAyMTYyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODlkZTc4ODg1NGFmYTQzZTkwZmYxNDZhNTFlNzYwOGNhNzVmMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7/ULdkOG48UUgUBP9xZqFCxGn/8 MZwbDvcdB/vyqcxCdQO5cO+Mrnj9RhBQmCTt3WiU/L2wUrSt0ltSGcLOZDHH+nnq TQApXwJsuz8wQko5UDF2xFOPI7dpUUnx1WtVcrRpMEnQg6KhocPo8rAQrhah8vyQ hQ9CiY+nhe9vA7aEnNcDgWT9TlgYLYZsHuetTr0j3VTzlqnSO56GFQLNGurrW0SB 5XeEYn4PnOUeu10XHKmbFNLSlrKbSvkIYkx+ZhYO1+cgbjNa2oXPk7T03tHKAwlk 9dv4swCkNx1A6A6GEiBOaEA/IA+n8j/izLZdxjGiE81n9angU21bnRO+7QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKid54iFSvpD6Q/xRqUedgjKdfNbMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvcUozbmlJVksta1BwRF9GR3BSNTJDTXAxODFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAkhOAAwQA svq6AwQAwaPLAwQA2XeBMA0GCSqGSIb3DQEBCwUAA4IBAQBofoBwLfqv2U5qtm3w lpzBrVJbBhtXVpqtP81tJ4ZjfFKthfsYWSDfIH3Hnt0PRxqOtpUvqB9HMoh4/aYB HUcKhlVu0NnTE6qG0W3tZmLDFq7MEYl6a2GVDH+9zuEmO4T2FwbPiosCrZua20r9 LuERMNvjwVbhwHooOzSNbxvyQJuqmE5I+C4AUgaJ+NZZleoS5TOmAqlq1MhbJj2t kfwS0V6es6XVrfWbbjPJLPn0vcvLtU8utySKPG1W9Hunz/YZ3Z68gWeekoITRNmC UsmL6LRlfnoTHFf1OMRj/W9N7pcTx6VYs3EZC16HOLrdeL7yZbpHhGlfdf7qEKuG 2ozM -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:54 2026 by rpki-client