This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/QbgLeGG78a8Be8a2IR87CeXCQ18.roa File: QbgLeGG78a8Be8a2IR87CeXCQ18.roa (raw, json) Hash identifier: J2zZOGAQEN1TYi51h5KrcjJJ3Bj8e8AubhaMijclPOE= Subject key identifier: 41:B8:0B:78:61:BB:F1:AF:01:7B:C6:B6:21:1F:3B:09:E5:C2:43:5F Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E390042BCEAAB3215E7AA1EA1F6DF10 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/QbgLeGG78a8Be8a2IR87CeXCQ18.roa Signing time: Fri 02 Jan 2026 10:20:23 +0000 ROA not before: Fri 02 Jan 2026 10:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8409 IP address blocks: 83.149.250.0/24 maxlen: 24 188.93.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:00:42:bc:ea:ab:32:15:e7:aa:1e:a1:f6:df:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41b80b7861bbf1af017bc6b6211f3b09e5c2435f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:dc:d5:07:e2:95:a5:fd:3a:e9:b3:d2:1f: 1e:8c:21:65:1a:09:d8:17:46:d4:53:dc:bf:ab:56: ef:60:04:34:c4:93:27:57:ee:04:e6:01:b8:70:d0: a0:f6:4e:37:f8:79:98:1e:d9:06:24:3e:eb:48:8b: 4d:b8:50:bc:a8:28:af:2b:ca:36:ac:17:1e:c8:49: 00:43:df:a9:17:bc:7b:13:44:dd:90:fd:21:1f:b7: e6:e7:1c:66:17:19:bb:3c:d3:47:63:21:08:76:2c: 09:78:37:36:a1:4a:c5:31:e9:5e:f3:5b:ad:34:f8: 2b:2f:8b:eb:a0:83:4f:66:7a:ec:30:5d:ae:a7:fb: 3d:15:f3:ff:c1:8f:3a:7e:12:13:70:51:f1:85:18: 72:0a:2a:42:cb:19:ad:7c:b7:a3:00:98:0a:82:9b: fd:73:1f:53:8d:6b:3d:f9:56:b4:2d:bb:12:14:19: ed:3e:5e:71:3c:59:65:3e:74:ae:c8:10:c9:36:a5: a5:c3:e7:22:75:41:4e:2e:02:b0:33:d9:b0:08:4c: 01:5d:76:42:1a:d3:59:30:f7:a7:cf:bb:86:8a:ac: a6:77:23:01:88:3c:c8:56:ee:c0:aa:65:ae:c1:18: 04:02:38:6e:fb:a8:9f:ca:dc:f8:c8:47:9a:42:5d: 11:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B8:0B:78:61:BB:F1:AF:01:7B:C6:B6:21:1F:3B:09:E5:C2:43:5F X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/QbgLeGG78a8Be8a2IR87CeXCQ18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.149.250.0/24 188.93.104.0/23 Signature Algorithm: sha256WithRSAEncryption 66:5a:15:84:0f:cf:85:70:07:4d:36:28:8b:e7:2c:3a:61:57: fd:c7:5f:1d:da:3c:3c:89:dd:59:e9:31:63:a0:16:ba:89:3c: 2c:d2:d6:4b:68:69:f9:0c:04:ac:d6:d8:9a:a6:0e:d5:95:a2: c8:e5:44:25:22:4a:31:15:3c:f1:ec:e8:80:55:d0:d3:c3:41: 5b:0a:6b:fb:b7:75:5c:5a:13:ef:d9:14:ef:0e:2d:86:0c:66: c0:57:99:ce:3a:7a:01:03:3a:7e:cf:51:fc:d8:51:8f:de:4f: bb:d4:7c:2a:2d:bb:f1:26:3f:db:9e:57:27:98:52:0c:c1:ab: 3e:fb:e7:41:1b:ce:ce:a4:d8:0b:8e:de:8a:3d:be:37:5e:6e: 1e:af:e8:a1:8c:45:8c:45:7b:8b:33:74:b0:7f:49:61:e7:db: 81:f9:7e:05:2f:9f:a0:bc:c1:4c:1c:53:09:49:da:ac:c4:2c: 63:68:a3:25:6f:92:42:1e:86:2f:6b:dc:d8:82:fa:ae:63:25: de:6a:8f:da:a5:4f:05:b7:81:d8:59:9a:79:fa:e6:56:9e:b8: b4:b5:fe:73:6a:3b:d7:01:a3:85:a3:40:ee:60:ed:97:56:ba: d3:2a:10:c4:9d:4e:be:2c:b5:f6:fd:f9:0f:e3:28:0d:08:dd: fc:45:78:66 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OQBCvOqrMhXnqh6h9t8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWI4MGI3ODYxYmJmMWFmMDE3YmM2YjYyMTFmM2IwOWU1YzI0MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE/c1QfilaX9Oumz0h8ejCFlGgnY F0bUU9y/q1bvYAQ0xJMnV+4E5gG4cNCg9k43+HmYHtkGJD7rSItNuFC8qCivK8o2 rBceyEkAQ9+pF7x7E0TdkP0hH7fm5xxmFxm7PNNHYyEIdiwJeDc2oUrFMele81ut NPgrL4vroINPZnrsMF2up/s9FfP/wY86fhITcFHxhRhyCipCyxmtfLejAJgKgpv9 cx9TjWs9+Va0LbsSFBntPl5xPFllPnSuyBDJNqWlw+cidUFOLgKwM9mwCEwBXXZC GtNZMPenz7uGiqymdyMBiDzIVu7AqmWuwRgEAjhu+6ifytz4yEeaQl0R0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEG4C3hhu/GvAXvGtiEfOwnlwkNfMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvUWJnTGVHRzc4YThCZThhMklSODdDZVhDUTE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU5X6AwQB vF1oMA0GCSqGSIb3DQEBCwUAA4IBAQBmWhWED8+FcAdNNiiL5yw6YVf9x18d2jw8 id1Z6TFjoBa6iTws0tZLaGn5DASs1tiapg7VlaLI5UQlIkoxFTzx7OiAVdDTw0Fb Cmv7t3VcWhPv2RTvDi2GDGbAV5nOOnoBAzp+z1H82FGP3k+71HwqLbvxJj/bnlcn mFIMwas+++dBG87OpNgLjt6KPb43Xm4er+ihjEWMRXuLM3Swf0lh59uB+X4FL5+g vMFMHFMJSdqsxCxjaKMlb5JCHoYva9zYgvquYyXeao/apU8Ft4HYWZp5+uZWnri0 tf5zajvXAaOFo0DuYO2XVrrTKhDEnU6+LLX2/fkP4ygNCN38RXhm -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:20 2026 by rpki-client