This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/qBCwaPOh1kM_Brblbd-aN4oLWvE.roa File: qBCwaPOh1kM_Brblbd-aN4oLWvE.roa (raw, json) Hash identifier: UhhYSexpgw2WJktE7OGu7b0Flql+JwXaUYjyUOXWJqg= Subject key identifier: A8:10:B0:68:F3:A1:D6:43:3F:06:B6:E5:6D:DF:9A:37:8A:0B:5A:F1 Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1 Certificate serial: 019B7D5CA1022E7CA5DF3364CC4BC413AF65 Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/qBCwaPOh1kM_Brblbd-aN4oLWvE.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 93.95.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a1:02:2e:7c:a5:df:33:64:cc:4b:c4:13:af:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1 Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a810b068f3a1d6433f06b6e56ddf9a378a0b5af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:e9:d1:04:13:cb:c0:68:01:19:ce:1c:35: 80:95:c4:be:8d:04:27:58:e5:1d:70:28:c2:95:52: 63:a3:fd:2e:7a:1a:6b:59:c4:c2:3b:30:6a:f7:d0: 60:61:e3:8a:e6:f4:ee:37:a3:e5:93:c4:95:4b:e7: 0d:17:b1:c1:b6:b6:d9:5e:3d:1e:23:8b:c4:56:13: ec:5c:52:7d:31:7f:bb:82:cc:b1:d6:66:e5:c6:a5: 97:8a:7b:ad:40:da:4d:6d:3e:95:0d:12:72:be:8f: 86:0f:a8:e3:e7:46:4e:01:81:35:dd:7f:b6:7c:76: b4:2f:98:68:34:a0:06:09:b4:f1:e6:d1:00:39:9a: f2:12:5d:ef:81:da:2e:5d:d6:d5:8a:ee:d9:78:b3: 2b:9f:98:03:0b:dc:dc:84:17:80:02:8d:f0:b4:f1: 8f:77:7d:97:b4:1d:fc:f7:40:62:e6:eb:90:34:11: f0:50:b5:56:fd:4e:d5:11:8d:bc:a7:3c:56:92:e2: f2:f8:c3:f7:fd:43:c3:5e:22:27:eb:e7:e7:14:e8: 59:88:4a:cb:d1:b2:27:98:d6:5a:81:e3:b8:fc:7c: a5:72:26:5d:cb:61:49:77:c7:6a:e0:e2:1a:88:54: 39:f9:dc:95:94:77:6b:a2:e2:21:02:47:1f:30:fc: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:10:B0:68:F3:A1:D6:43:3F:06:B6:E5:6D:DF:9A:37:8A:0B:5A:F1 X509v3 Authority Key Identifier: keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/qBCwaPOh1kM_Brblbd-aN4oLWvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.48.0/21 Signature Algorithm: sha256WithRSAEncryption c1:4e:44:95:ba:49:78:4b:f4:92:cf:dd:ee:71:51:05:b8:9a: e9:a2:a8:4c:29:19:14:aa:b9:6c:c4:31:ce:5e:da:9b:90:f2: 15:7f:55:49:15:e3:ee:c7:f5:e8:d4:96:df:e0:2c:78:1c:e9: 2f:e4:b3:93:67:5b:7b:3b:e5:59:de:79:a3:db:75:8b:08:d0: b2:86:a4:8c:bb:89:7e:53:a2:2c:25:41:42:77:c6:7a:bb:13: 40:b3:e8:68:5c:a3:df:0b:01:12:db:91:75:b5:1c:c0:38:d2: 37:76:2f:a9:07:bf:ef:3a:7f:33:a5:ce:76:35:e9:0e:c3:64: 83:bd:66:34:66:02:1a:10:c8:b0:36:56:c4:18:69:0c:6f:bf: bc:43:77:06:33:25:86:4c:66:b9:0b:e2:88:fc:e6:61:7c:66: 12:99:95:ef:9f:e3:d0:f7:8b:4e:87:cc:47:b2:19:d1:84:02: 49:f7:ed:a6:73:3c:ed:c3:91:44:9f:e1:12:4a:57:8e:4b:63: 11:89:aa:39:66:03:01:76:ea:4c:50:51:67:02:70:5b:15:c6: 9a:db:f7:50:48:47:e6:0f:00:1b:e9:e5:b9:2b:2b:3a:aa:6b: 2d:12:f8:5d:32:17:d6:95:ac:4a:37:c4:e9:c7:3c:d1:89:cb: 87:32:53:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKECLnyl3zNkzEvEE69lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTMxYWUyY2U1N2M5NWY1YTM5ODkzMGVhNDU1MDM1NDI4 MDFiYTEwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODEwYjA2OGYzYTFkNjQzM2YwNmI2ZTU2ZGRmOWEzNzhhMGI1YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ivp0QQTy8BoARnOHDWAlcS+jQQn WOUdcCjClVJjo/0uehprWcTCOzBq99BgYeOK5vTuN6Plk8SVS+cNF7HBtrbZXj0e I4vEVhPsXFJ9MX+7gsyx1mblxqWXinutQNpNbT6VDRJyvo+GD6jj50ZOAYE13X+2 fHa0L5hoNKAGCbTx5tEAOZryEl3vgdouXdbViu7ZeLMrn5gDC9zchBeAAo3wtPGP d32XtB3890Bi5uuQNBHwULVW/U7VEY28pzxWkuLy+MP3/UPDXiIn6+fnFOhZiErL 0bInmNZageO4/HylciZdy2FJd8dq4OIaiFQ5+dyVlHdrouIhAkcfMPwo5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKgQsGjzodZDPwa25W3fmjeKC1rxMB8GA1UdIwQY MBaAFMhTGuLOV8lfWjmJMOpFUDVCgBuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjkt NDVkNTQyZDVmNTVmLzEvcUJDd2FQT2gxa01fQnJibGJkLWFONG9MV3ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjktNDVkNTQyZDVmNTVm LzEveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXV8wMA0G CSqGSIb3DQEBCwUAA4IBAQDBTkSVukl4S/SSz93ucVEFuJrpoqhMKRkUqrlsxDHO XtqbkPIVf1VJFePux/Xo1Jbf4Cx4HOkv5LOTZ1t7O+VZ3nmj23WLCNCyhqSMu4l+ U6IsJUFCd8Z6uxNAs+hoXKPfCwES25F1tRzAONI3di+pB7/vOn8zpc52NekOw2SD vWY0ZgIaEMiwNlbEGGkMb7+8Q3cGMyWGTGa5C+KI/OZhfGYSmZXvn+PQ94tOh8xH shnRhAJJ9+2mczztw5FEn+ESSleOS2MRiao5ZgMBdupMUFFnAnBbFcaa2/dQSEfm DwAb6eW5Kys6qmstEvhdMhfWlaxKN8TpxzzRicuHMlNw -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:10 2026 by rpki-client