This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/Q7opPXEWfOIWXtGcMaVf2gDlyIw.roa File: Q7opPXEWfOIWXtGcMaVf2gDlyIw.roa (raw, json) Hash identifier: CTgenKosJdcAbaZ5ZvRKAeILm3aXtuh6bQlnuyIpyNc= Subject key identifier: 43:BA:29:3D:71:16:7C:E2:16:5E:D1:9C:31:A5:5F:DA:00:E5:C8:8C Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf Certificate serial: 019B7AC9160E1CB2F7902312759893C3B41D Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/Q7opPXEWfOIWXtGcMaVf2gDlyIw.roa Signing time: Thu 01 Jan 2026 18:19:17 +0000 ROA not before: Thu 01 Jan 2026 18:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216263 IP address blocks: 185.86.211.0/24 maxlen: 24 2a13:c5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:16:0e:1c:b2:f7:90:23:12:75:98:93:c3:b4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf Validity Not Before: Jan 1 18:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43ba293d71167ce2165ed19c31a55fda00e5c88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b8:7a:9c:9c:c7:f1:1c:1c:3c:f2:7c:22:2d: c5:13:f2:d3:54:24:ad:ef:1b:4c:e6:86:d6:62:6f: 34:12:e2:df:20:a9:7c:96:97:5d:d8:92:be:f9:10: eb:ba:c1:d0:fb:b9:ca:23:2b:15:69:93:6f:be:f2: 05:1c:9b:2c:04:e6:d7:5b:5f:86:20:aa:79:e9:29: b8:de:b2:50:54:8a:ad:40:ab:e6:80:78:8a:19:3f: 30:98:0f:f8:15:59:c0:cd:98:1b:54:64:77:d4:93: 11:71:c6:18:f5:c6:19:44:69:38:24:85:88:b4:15: 98:75:1a:0a:84:ea:1a:ff:5c:ab:12:7e:db:a4:fe: b4:8e:d4:fb:7b:35:d7:63:78:d3:3d:d7:12:c0:94: 43:44:7c:8a:49:64:b9:29:f2:08:ff:c7:e0:14:fe: cf:e3:2d:4e:6a:a4:82:cc:35:4e:bb:92:80:32:62: 2c:85:b9:4a:e7:0a:d2:28:f7:7b:bc:c7:90:34:12: 32:73:29:24:7e:2d:ca:96:f7:f5:8b:b9:a6:e8:c5: 6c:e4:b4:51:be:d2:0d:a6:9b:1a:51:a1:2f:34:eb: b9:ab:51:72:da:1e:f6:6f:74:71:fc:ee:ca:4b:42: e4:29:38:4d:56:4a:bc:24:bb:21:ec:45:47:b3:be: bc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BA:29:3D:71:16:7C:E2:16:5E:D1:9C:31:A5:5F:DA:00:E5:C8:8C X509v3 Authority Key Identifier: keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/Q7opPXEWfOIWXtGcMaVf2gDlyIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.211.0/24 IPv6: 2a13:c5c0::/32 Signature Algorithm: sha256WithRSAEncryption 80:dd:57:30:e1:2c:eb:c1:dd:14:ec:0c:0f:08:46:05:2f:1a: 98:ec:93:91:de:d0:4d:b7:b8:32:b4:91:30:46:14:3a:e6:67: 34:4e:df:d2:ba:2b:72:e0:b3:77:87:1a:70:68:4d:6a:13:51: ca:7b:c8:e9:66:72:cf:91:eb:1c:c9:3a:53:82:d5:c4:88:0d: 9f:50:91:dc:a0:0c:d7:32:98:aa:c0:9b:28:d6:6c:8b:bb:f0: 44:53:f2:cc:ab:77:98:8b:d3:8a:97:dc:dd:82:49:e7:61:23: f0:ba:56:df:d4:0d:6c:79:bd:d7:ef:7e:14:78:95:01:6f:8a: 74:ec:e6:e2:c0:1b:02:f4:dc:5f:9b:cd:35:5e:84:91:ed:25: 4e:74:a7:41:35:14:05:72:88:61:df:ae:47:4c:2f:b0:10:5e: 7c:0d:82:35:59:c0:6e:1e:ed:ae:fc:a5:a8:12:a6:e9:18:77: 3a:3a:23:ee:13:bb:c8:06:73:4d:47:45:d0:9f:a8:a5:c0:1d: 92:12:7b:b3:53:92:83:0e:6b:0e:0c:82:26:64:f4:7c:36:d7: 42:4a:86:68:da:e8:c7:0d:71:5a:4a:65:a2:cd:dd:ba:b6:d4: 1d:34:37:fb:ee:8e:52:0d:0e:76:49:ff:01:31:ef:fe:d7:76: a7:74:9a:05 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yRYOHLL3kCMSdZiTw7QdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWEyMDYwOGFjZTExZTc1MTFjODY2OTU2MDYzNjczMGE5 ZTJhYmYwHhcNMjYwMTAxMTgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2JhMjkzZDcxMTY3Y2UyMTY1ZWQxOWMzMWE1NWZkYTAwZTVjODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bh6nJzH8RwcPPJ8Ii3FE/LTVCSt 7xtM5obWYm80EuLfIKl8lpdd2JK++RDrusHQ+7nKIysVaZNvvvIFHJssBObXW1+G IKp56Sm43rJQVIqtQKvmgHiKGT8wmA/4FVnAzZgbVGR31JMRccYY9cYZRGk4JIWI tBWYdRoKhOoa/1yrEn7bpP60jtT7ezXXY3jTPdcSwJRDRHyKSWS5KfII/8fgFP7P 4y1OaqSCzDVOu5KAMmIshblK5wrSKPd7vMeQNBIycykkfi3Klvf1i7mm6MVs5LRR vtINppsaUaEvNOu5q1Fy2h72b3Rx/O7KS0LkKThNVkq8JLsh7EVHs768tQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEO6KT1xFnziFl7RnDGlX9oA5ciMMB8GA1UdIwQY MBaAFBdaIGCKzhHnURyGaVYGNnMKniq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEt YTYwNWNhZDU1MDg2LzEvUTdvcFBYRVdmT0lXWHRHY01hVmYyZ0RseUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEtYTYwNWNhZDU1MDg2 LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuVbTMA0E AgACMAcDBQAqE8XAMA0GCSqGSIb3DQEBCwUAA4IBAQCA3Vcw4Szrwd0U7AwPCEYF LxqY7JOR3tBNt7gytJEwRhQ65mc0Tt/Suity4LN3hxpwaE1qE1HKe8jpZnLPkesc yTpTgtXEiA2fUJHcoAzXMpiqwJso1myLu/BEU/LMq3eYi9OKl9zdgknnYSPwulbf 1A1seb3X734UeJUBb4p07ObiwBsC9Nxfm801XoSR7SVOdKdBNRQFcohh365HTC+w EF58DYI1WcBuHu2u/KWoEqbpGHc6OiPuE7vIBnNNR0XQn6ilwB2SEnuzU5KDDmsO DIImZPR8NtdCSoZo2ujHDXFaSmWizd26ttQdNDf77o5SDQ52Sf8BMe/+13andJoF -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:54 2026 by rpki-client