This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/qBJbZnYV1KV7wH9ev9pGNSEQh6E.roa File: qBJbZnYV1KV7wH9ev9pGNSEQh6E.roa (raw, json) Hash identifier: VGKLyWCJAQaeOmHD9SkgJRFIt3cHdxbsxgp1SXLcvmY= Subject key identifier: A8:12:5B:66:76:15:D4:A5:7B:C0:7F:5E:BF:DA:46:35:21:10:87:A1 Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64 Certificate serial: 019B78A32C4D129A3EB0E8ADB335BF1DAC53 Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/qBJbZnYV1KV7wH9ev9pGNSEQh6E.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.242.137.0/24 maxlen: 24 185.242.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2c:4d:12:9a:3e:b0:e8:ad:b3:35:bf:1d:ac:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8125b667615d4a57bc07f5ebfda4635211087a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:70:ac:79:1a:95:70:dd:b0:1a:bf:1b:c5: 77:d1:e0:8c:28:94:5e:79:1b:c6:25:e8:ca:43:b2: 83:36:0d:07:d6:5b:bc:b7:39:65:f0:a7:ac:c0:37: 7b:0a:73:ea:4c:01:9e:7f:5a:6c:5e:1a:42:6b:f8: e7:07:3e:4d:ba:92:be:9c:d3:1b:ab:e0:9d:cc:68: d2:bd:47:e8:fd:02:74:15:4d:ac:cf:f8:33:07:02: ba:89:6f:85:20:9a:25:49:17:57:bf:8a:63:0b:00: 73:ab:3c:e1:38:be:8d:f4:c0:ea:18:f6:20:77:f6: 87:26:47:f7:b5:ad:04:76:08:08:9c:30:27:c6:8f: 64:52:26:3b:b3:5e:c1:c1:ff:7e:f5:e1:d1:e1:a4: 92:ff:3e:87:6c:a8:86:7b:af:6c:9d:7d:59:70:34: 8a:00:88:43:2b:8b:0f:69:7e:69:d7:9c:92:8d:dd: 9b:f2:fa:cf:aa:28:c2:97:2d:5d:73:ac:84:7d:00: 4e:cf:6b:10:a9:6c:73:d3:45:37:36:98:8f:0b:d2: a9:f0:74:e1:d0:64:ec:34:45:0a:8a:a4:b9:0f:56: 3c:f3:ba:12:8a:68:d9:f9:84:b7:c0:f0:b9:03:3d: 12:0c:4e:61:ea:2e:bf:38:d1:2a:55:c5:77:91:01: c8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:12:5B:66:76:15:D4:A5:7B:C0:7F:5E:BF:DA:46:35:21:10:87:A1 X509v3 Authority Key Identifier: keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/qBJbZnYV1KV7wH9ev9pGNSEQh6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.137.0/24 185.242.139.0/24 Signature Algorithm: sha256WithRSAEncryption 86:eb:18:6a:87:60:f2:e8:a2:1b:7d:19:6d:c0:37:60:db:b5: 22:aa:23:0a:6b:8a:b7:78:26:f0:28:6a:05:85:07:bd:64:1c: a8:4d:cc:04:fb:01:f5:b3:15:55:47:f3:0a:8a:da:02:4a:b0: ce:53:14:e7:9a:f3:d8:40:df:6a:17:83:71:fa:ab:91:aa:5f: 0a:fc:9d:c0:1c:f8:b8:bf:dd:c0:30:db:6b:15:21:5d:d2:25: 20:61:bf:a9:3a:e6:da:6a:5c:ad:dc:b7:7d:7b:c3:66:6f:e7: ad:e6:bf:fe:21:f7:e5:4e:18:c9:8f:5d:b8:0a:2d:a3:42:73: 52:fe:02:03:64:14:29:97:20:98:4b:7a:65:d0:ce:16:26:b4: 3b:12:9d:c0:b9:5f:0b:7d:59:89:7b:ea:27:e8:c3:47:3c:90: 6b:f9:44:93:15:8f:ba:02:f6:ba:5d:1d:0f:17:0a:36:86:16: 76:9c:ae:7d:02:ce:bb:74:2b:76:b1:a3:fa:45:bd:31:17:4b: e3:bd:c6:3c:19:c7:92:a4:48:8a:bb:51:45:ec:91:b0:0e:35: e2:68:40:10:24:96:f4:53:aa:10:32:0d:f6:10:4c:ed:1d:6f: c8:67:72:48:ff:2d:2a:01:45:f7:06:27:ec:03:07:97:34:ef: 7e:7e:c6:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oyxNEpo+sOitszW/HaxTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTlhYzk4OWM0NGIyZTFjZGFiYzI1OGU5NmNhOTNjYWFk NGJkNjQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODEyNWI2Njc2MTVkNGE1N2JjMDdmNWViZmRhNDYzNTIxMTA4N2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2xwrHkalXDdsBq/G8V30eCMKJRe eRvGJejKQ7KDNg0H1lu8tzll8KeswDd7CnPqTAGef1psXhpCa/jnBz5NupK+nNMb q+CdzGjSvUfo/QJ0FU2sz/gzBwK6iW+FIJolSRdXv4pjCwBzqzzhOL6N9MDqGPYg d/aHJkf3ta0EdggInDAnxo9kUiY7s17Bwf9+9eHR4aSS/z6HbKiGe69snX1ZcDSK AIhDK4sPaX5p15ySjd2b8vrPqijCly1dc6yEfQBOz2sQqWxz00U3NpiPC9Kp8HTh 0GTsNEUKiqS5D1Y887oSimjZ+YS3wPC5Az0SDE5h6i6/ONEqVcV3kQHI3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKgSW2Z2FdSle8B/Xr/aRjUhEIehMB8GA1UdIwQY MBaAFLeZrJicRLLhzavCWOlsqTyq1L1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMt OTE3NGRmNGRkYjlhLzEvcUJKYlpuWVYxS1Y3d0g5ZXY5cEdOU0VRaDZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMtOTE3NGRmNGRkYjlh LzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufKJAwQA ufKLMA0GCSqGSIb3DQEBCwUAA4IBAQCG6xhqh2Dy6KIbfRltwDdg27UiqiMKa4q3 eCbwKGoFhQe9ZByoTcwE+wH1sxVVR/MKitoCSrDOUxTnmvPYQN9qF4Nx+quRql8K /J3AHPi4v93AMNtrFSFd0iUgYb+pOubaalyt3Ld9e8Nmb+et5r/+IfflThjJj124 Ci2jQnNS/gIDZBQplyCYS3pl0M4WJrQ7Ep3AuV8LfVmJe+on6MNHPJBr+USTFY+6 Ava6XR0PFwo2hhZ2nK59As67dCt2saP6Rb0xF0vjvcY8GceSpEiKu1FF7JGwDjXi aEAQJJb0U6oQMg32EEztHW/IZ3JI/y0qAUX3BifsAweXNO9+fsa/ -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:44 2026 by rpki-client