This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/Qopn3fwNwnS0ih4dejbW_OpTwxQ.roa File: Qopn3fwNwnS0ih4dejbW_OpTwxQ.roa (raw, json) Hash identifier: JdPihEsZ6tT2+sczntCGGr/PDdYGd+kbINCzgVJa7xI= Subject key identifier: 42:8A:67:DD:FC:0D:C2:74:B4:8A:1E:1D:7A:36:D6:FC:EA:53:C3:14 Certificate issuer: /CN=e84bef96616b652dc36418470555fe8d59221888 Certificate serial: 019B78A24E876908DB51FCF307B773611AD7 Authority key identifier: E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/Qopn3fwNwnS0ih4dejbW_OpTwxQ.roa Signing time: Thu 01 Jan 2026 08:17:41 +0000 ROA not before: Thu 01 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 185.63.148.0/24 maxlen: 24 2a02:ce40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4e:87:69:08:db:51:fc:f3:07:b7:73:61:1a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84bef96616b652dc36418470555fe8d59221888 Validity Not Before: Jan 1 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=428a67ddfc0dc274b48a1e1d7a36d6fcea53c314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:55:27:4f:49:45:52:e3:68:72:7c:8b:c7: 7a:c5:02:58:92:8c:04:aa:a7:ec:ef:32:5a:89:57: d8:f4:1a:58:1e:7c:c2:b9:47:d6:b7:7e:36:26:93: c9:5a:9e:4e:d6:15:55:da:7f:d9:84:0e:c5:d6:59: a5:3c:3a:8f:26:cd:82:3d:86:c4:29:36:98:39:7a: 4f:ed:fa:0d:c4:b7:bb:92:01:6a:a7:0f:e1:a0:bc: 1b:7e:2c:c7:53:f0:6a:ab:ff:62:f1:ba:6e:0b:4f: 01:f1:3e:78:56:5d:fd:ec:57:f3:ae:34:db:e4:54: 2e:b9:a0:d3:14:4a:86:03:04:2d:43:a6:e5:fc:86: 04:a1:15:ad:41:83:5b:51:02:77:9a:39:e6:f7:d2: ae:e2:30:61:a4:cf:c1:bc:cb:cf:e2:6e:24:15:93: 89:31:52:33:a6:f9:d1:73:41:21:1a:05:c4:04:75: 6f:ca:b1:ae:5d:23:36:f7:0e:9d:34:47:bb:87:ff: 03:cf:f5:b9:18:c6:8f:32:76:67:5b:c6:77:c4:4a: d8:27:43:37:02:34:5c:25:d3:29:78:8c:61:92:e1: 1e:26:75:1d:32:60:58:0e:8e:f4:c9:16:e8:7d:b5: 89:db:51:9b:24:29:81:1f:de:a4:fc:31:89:73:26: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8A:67:DD:FC:0D:C2:74:B4:8A:1E:1D:7A:36:D6:FC:EA:53:C3:14 X509v3 Authority Key Identifier: keyid:E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/Qopn3fwNwnS0ih4dejbW_OpTwxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.148.0/24 IPv6: 2a02:ce40::/32 Signature Algorithm: sha256WithRSAEncryption 70:a3:3d:81:e0:3e:74:9c:f6:b9:1c:cc:e8:39:c5:e1:08:a1: 4a:54:67:e9:01:99:33:f5:14:57:7e:da:83:0f:73:26:21:ac: 8c:87:96:50:99:83:0b:aa:3c:6b:94:11:7a:ef:56:64:54:15: f9:50:f0:a4:2d:b5:ba:5c:91:93:3f:19:56:ee:a3:cd:e3:d2: 0a:15:e1:26:82:a6:e2:e4:f0:76:2c:db:9c:0b:36:61:4c:cf: 0d:23:67:4b:79:86:11:ee:08:bd:90:09:54:9d:12:de:08:a2: 05:b0:43:48:24:9e:ec:1b:51:90:27:91:d2:a1:71:bd:fa:9b: ec:35:d8:51:f3:5c:87:4c:49:c1:c1:3e:cf:93:46:19:8a:d4: 66:6c:68:1c:fe:9d:79:78:0f:2f:d4:84:2b:33:37:d0:25:10: ab:ba:aa:00:81:e4:c3:93:8e:f4:56:6f:15:f2:35:30:15:9f: 27:80:f4:38:d6:7e:7c:5d:36:02:07:62:4d:87:0c:a8:0d:f0: ad:1c:e1:bb:ea:f0:c2:52:44:68:9a:09:92:49:82:59:c5:7f: 3c:d3:eb:66:c2:bc:e0:d6:51:dc:23:9f:5d:d9:c7:77:ba:f3: 9a:23:f6:85:12:3b:9c:2e:15:0a:46:10:11:49:78:16:99:01: 45:be:a6:f9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ok6HaQjbUfzzB7dzYRrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGJlZjk2NjE2YjY1MmRjMzY0MTg0NzA1NTVmZThkNTky MjE4ODgwHhcNMjYwMTAxMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjhhNjdkZGZjMGRjMjc0YjQ4YTFlMWQ3YTM2ZDZmY2VhNTNjMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIFVJ09JRVLjaHJ8i8d6xQJYkowE qqfs7zJaiVfY9BpYHnzCuUfWt342JpPJWp5O1hVV2n/ZhA7F1lmlPDqPJs2CPYbE KTaYOXpP7foNxLe7kgFqpw/hoLwbfizHU/Bqq/9i8bpuC08B8T54Vl397FfzrjTb 5FQuuaDTFEqGAwQtQ6bl/IYEoRWtQYNbUQJ3mjnm99Ku4jBhpM/BvMvP4m4kFZOJ MVIzpvnRc0EhGgXEBHVvyrGuXSM29w6dNEe7h/8Dz/W5GMaPMnZnW8Z3xErYJ0M3 AjRcJdMpeIxhkuEeJnUdMmBYDo70yRbofbWJ21GbJCmBH96k/DGJcyahzwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEKKZ938DcJ0tIoeHXo21vzqU8MUMB8GA1UdIwQY MBaAFOhL75Zha2Utw2QYRwVV/o1ZIhiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkV2dmxtRnJaUzNEWkJoSEJWWC1qVmtpR0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYzRkMDYtY2IxYy00M2UxLWFiNjgt MDQ2ZjY4ZDcyMzI5LzEvUW9wbjNmd053blMwaWg0ZGVqYldfT3BUd3hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jYzRkMDYtY2IxYy00M2UxLWFiNjgtMDQ2ZjY4ZDcyMzI5 LzEvNkV2dmxtRnJaUzNEWkJoSEJWWC1qVmtpR0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuT+UMA0E AgACMAcDBQAqAs5AMA0GCSqGSIb3DQEBCwUAA4IBAQBwoz2B4D50nPa5HMzoOcXh CKFKVGfpAZkz9RRXftqDD3MmIayMh5ZQmYMLqjxrlBF671ZkVBX5UPCkLbW6XJGT PxlW7qPN49IKFeEmgqbi5PB2LNucCzZhTM8NI2dLeYYR7gi9kAlUnRLeCKIFsENI JJ7sG1GQJ5HSoXG9+pvsNdhR81yHTEnBwT7Pk0YZitRmbGgc/p15eA8v1IQrMzfQ JRCruqoAgeTDk470Vm8V8jUwFZ8ngPQ41n58XTYCB2JNhwyoDfCtHOG76vDCUkRo mgmSSYJZxX880+tmwrzg1lHcI59d2cd3uvOaI/aFEjucLhUKRhARSXgWmQFFvqb5 -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:21 2026 by rpki-client