This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/qBQX2ieUcjSJMeOnz5x90DMBmzw.roa File: qBQX2ieUcjSJMeOnz5x90DMBmzw.roa (raw, json) Hash identifier: SiBuSJws9wcCmsXHnZeb1owvcMrdO2awe1ttr/zG8B8= Subject key identifier: A8:14:17:DA:27:94:72:34:89:31:E3:A7:CF:9C:7D:D0:33:01:9B:3C Certificate issuer: /CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661 Certificate serial: 019B797EFA358FB23FD96E30BE1B7F64D962 Authority key identifier: C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/qBQX2ieUcjSJMeOnz5x90DMBmzw.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25285 IP address blocks: 81.89.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fa:35:8f:b2:3f:d9:6e:30:be:1b:7f:64:d9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a81417da279472348931e3a7cf9c7dd033019b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:96:ef:ca:0f:38:23:18:3f:89:d0:f8:2c: e8:78:a3:31:96:5d:fa:18:53:5c:2a:d3:77:c8:29: cf:5b:7a:03:7e:98:03:b3:cf:27:66:bf:fc:07:08: a8:eb:65:1f:db:82:ad:ba:c1:df:6b:8d:87:0b:fb: 3f:15:5b:fc:b7:e5:0c:ea:16:55:4f:a7:69:b6:83: 35:8a:69:a6:ed:1a:29:e0:4b:52:ce:bd:74:82:3a: 54:de:6b:bb:64:90:a5:57:5d:df:bc:02:2c:a1:38: 6c:c6:b1:4c:21:4f:a3:94:80:21:78:07:06:83:4e: 51:eb:d6:39:02:cc:35:62:20:37:40:36:45:0b:67: 8a:1e:87:87:8d:66:07:0d:63:08:ec:a9:cf:de:32: 2b:c1:fa:a5:6a:29:f5:77:48:3a:62:13:bb:31:e7: 38:ef:32:8e:86:0e:4f:fb:cb:27:d8:90:9b:1a:1f: c6:0b:f2:5d:1e:4b:92:3c:71:6d:c4:9a:78:23:52: ef:5f:69:c0:c1:ac:4e:0a:64:d0:0a:5e:ba:d8:d5: 52:61:1d:49:be:ad:03:e7:ac:d0:67:38:3e:0a:53: 63:d6:57:39:2d:fb:84:2a:54:27:2c:f9:3f:de:59: 9a:6b:45:2a:82:ab:4c:04:8d:ad:30:20:c8:2a:95: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:14:17:DA:27:94:72:34:89:31:E3:A7:CF:9C:7D:D0:33:01:9B:3C X509v3 Authority Key Identifier: keyid:C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/qBQX2ieUcjSJMeOnz5x90DMBmzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.89.32.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:aa:19:bf:70:98:ef:c2:90:e1:00:07:3c:28:06:34:20:5a: 2c:97:0f:a2:83:ad:ce:1f:c1:4a:42:2d:09:5e:dc:07:3c:bd: 67:38:c9:5f:e6:fd:75:81:b3:36:0a:ea:83:a5:3d:63:b3:26: fc:75:76:ab:8f:ac:50:58:a6:78:a6:2a:a2:57:17:f6:dd:af: 70:0c:fb:2b:32:ca:67:fc:62:00:85:8d:3a:cb:c2:87:dc:c0: 7a:6e:e7:59:f1:36:3e:bd:55:c5:e8:d7:93:21:ef:a2:8e:83: 05:02:b1:5d:32:71:b9:ee:d6:e2:08:ff:3d:c4:3c:35:18:b4: 46:f4:82:cf:77:36:07:71:08:28:4a:71:05:7b:8f:01:b0:55: ea:9a:01:36:6f:e9:f4:be:03:a4:97:15:76:e1:b2:68:9e:21: a6:cc:26:9e:61:5b:44:0a:5a:de:3b:2d:98:ad:83:62:e9:a4: 7c:3c:fe:77:b2:66:c0:2e:7b:2c:be:ae:73:91:39:94:35:87: 12:1b:1d:e4:d0:a4:bf:97:1e:06:22:4e:ff:86:cf:39:50:54: c4:79:b2:ca:bb:98:a0:3f:ac:e6:03:95:32:df:9a:bb:60:ac: 77:f6:eb:d3:f9:89:5d:77:81:4d:18:36:5f:38:a1:2a:53:c9: 6f:a8:81:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvo1j7I/2W4wvht/ZNliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjY5ZDJmNDc0NDc0ZGJiNTdmNmJlYzhjMmQ2NWQ1ZTBj Mjk2NjEwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODE0MTdkYTI3OTQ3MjM0ODkzMWUzYTdjZjljN2RkMDMzMDE5YjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqniW78oPOCMYP4nQ+CzoeKMxll36 GFNcKtN3yCnPW3oDfpgDs88nZr/8Bwio62Uf24KtusHfa42HC/s/FVv8t+UM6hZV T6dptoM1immm7Rop4EtSzr10gjpU3mu7ZJClV13fvAIsoThsxrFMIU+jlIAheAcG g05R69Y5Asw1YiA3QDZFC2eKHoeHjWYHDWMI7KnP3jIrwfqlain1d0g6YhO7Mec4 7zKOhg5P+8sn2JCbGh/GC/JdHkuSPHFtxJp4I1LvX2nAwaxOCmTQCl662NVSYR1J vq0D56zQZzg+ClNj1lc5LfuEKlQnLPk/3lmaa0UqgqtMBI2tMCDIKpU3ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKgUF9onlHI0iTHjp8+cfdAzAZs8MB8GA1UdIwQY MBaAFMD2nS9HRHTbtX9r7IwtZdXgwpZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUt MjU5MDRiYTlhMzU1LzEvcUJRWDJpZVVjalNKTWVPbno1eDkwRE1CbXp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUtMjU5MDRiYTlhMzU1 LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUVkgMA0G CSqGSIb3DQEBCwUAA4IBAQA8qhm/cJjvwpDhAAc8KAY0IFoslw+ig63OH8FKQi0J XtwHPL1nOMlf5v11gbM2CuqDpT1jsyb8dXarj6xQWKZ4piqiVxf23a9wDPsrMspn /GIAhY06y8KH3MB6budZ8TY+vVXF6NeTIe+ijoMFArFdMnG57tbiCP89xDw1GLRG 9ILPdzYHcQgoSnEFe48BsFXqmgE2b+n0vgOklxV24bJoniGmzCaeYVtEClreOy2Y rYNi6aR8PP53smbALnssvq5zkTmUNYcSGx3k0KS/lx4GIk7/hs85UFTEebLKu5ig P6zmA5Uy35q7YKx39uvT+Yldd4FNGDZfOKEqU8lvqIGr -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:38 2026 by rpki-client