This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/qI3as0zKAc7W39Wxbww7lx8HfYM.roa File: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (raw, json) Hash identifier: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I= Subject key identifier: A8:8D:DA:B3:4C:CA:01:CE:D6:DF:D5:B1:6F:0C:3B:97:1F:07:7D:83 Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6 Certificate serial: 019B78A358CCC9FE4D7854176351970D494F Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/qI3as0zKAc7W39Wxbww7lx8HfYM.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5485 IP address blocks: 185.124.76.0/22 maxlen: 22 2a06:b0c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:58:cc:c9:fe:4d:78:54:17:63:51:97:0d:49:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6 Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a88ddab34cca01ced6dfd5b16f0c3b971f077d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4b:fc:7a:50:10:2d:82:eb:66:43:e2:b7:3d: ab:78:7e:70:1a:35:f9:61:8d:af:0e:49:46:72:91: 52:8f:31:37:bf:09:5a:d2:75:1b:8f:45:65:56:70: c1:39:28:18:8c:ad:6e:2a:cd:35:2d:8a:f8:cc:09: 5d:93:a8:99:d6:08:40:4e:7a:65:80:05:66:3d:57: fe:d1:67:bc:a7:a9:60:22:6e:6d:c2:38:b5:cd:02: 16:7d:85:70:2d:93:da:a5:f9:7e:24:99:3e:f4:bf: 72:d1:1c:05:ab:30:71:57:f6:69:68:50:45:fb:b8: 93:c4:e3:7f:72:1e:12:a0:01:44:66:3c:a6:28:ff: 93:65:01:79:8c:4c:80:7a:07:e6:a6:05:a8:ec:02: dd:0a:8b:a8:da:90:8c:f7:16:01:85:5a:82:0b:c0: 2b:4d:06:6d:54:64:8c:40:8e:75:ec:74:8a:7c:bf: 3a:17:ef:21:0d:17:04:02:47:21:c3:2c:e0:c4:af: 33:e0:04:75:5d:25:d1:eb:76:d5:34:20:d3:92:9b: 47:a2:3b:69:17:37:19:8c:14:4a:3e:cd:ea:34:57: 16:3b:bd:38:47:67:4e:14:90:43:0b:12:c1:53:26: c1:d2:40:4c:17:3f:83:82:70:1b:34:b8:13:5b:02: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8D:DA:B3:4C:CA:01:CE:D6:DF:D5:B1:6F:0C:3B:97:1F:07:7D:83 X509v3 Authority Key Identifier: keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/qI3as0zKAc7W39Wxbww7lx8HfYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.76.0/22 IPv6: 2a06:b0c0::/29 Signature Algorithm: sha256WithRSAEncryption 85:e8:3d:12:e4:db:d6:8f:1a:32:75:8d:15:46:db:44:2a:91: fd:a4:94:7b:d7:30:f5:c0:2a:56:da:fb:1f:7e:97:73:88:2a: 27:03:90:7d:75:5c:b5:2f:b2:76:01:7a:f3:80:72:76:d6:f1: 7a:68:29:53:60:db:50:6c:97:2f:b7:10:d3:ef:6a:dc:b0:f6: 66:54:49:af:71:eb:95:78:22:95:64:de:d0:f5:86:9d:5e:45: 96:d4:c1:22:69:d1:10:8d:24:df:fd:36:48:15:7c:ed:ed:8b: d2:b2:46:ec:02:04:d4:52:87:08:87:ee:cb:53:52:31:d7:f1: 73:f3:15:a5:b5:88:e0:d7:08:42:ce:84:e5:2d:1a:44:b4:8e: 7b:36:29:72:2d:f6:cf:dc:fd:c0:3c:05:f0:59:16:e4:73:86: 41:9c:ce:95:52:9f:ed:63:2c:60:72:87:95:66:d9:2d:e8:9a: f0:c9:df:7b:52:4f:82:3a:92:b0:9a:fa:d7:7c:40:b1:94:14: 7e:84:f9:06:77:4c:56:5b:e0:7f:7d:33:59:ec:11:eb:4e:ea: dd:43:fd:14:1f:a2:93:99:cf:a0:67:5e:ea:a5:21:6a:13:2c: 52:e3:65:25:35:59:67:a6:b7:9f:50:2d:87:fe:91:11:ca:89: a7:b0:b3:0e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o1jMyf5NeFQXY1GXDUlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDE3OWNlNDllNTc3NmI5MmM4NmMyNmMyMGIwYjQzZmQw YTZjYjYwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODhkZGFiMzRjY2EwMWNlZDZkZmQ1YjE2ZjBjM2I5NzFmMDc3ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ev8elAQLYLrZkPitz2reH5wGjX5 YY2vDklGcpFSjzE3vwla0nUbj0VlVnDBOSgYjK1uKs01LYr4zAldk6iZ1ghATnpl gAVmPVf+0We8p6lgIm5twji1zQIWfYVwLZPapfl+JJk+9L9y0RwFqzBxV/ZpaFBF +7iTxON/ch4SoAFEZjymKP+TZQF5jEyAegfmpgWo7ALdCouo2pCM9xYBhVqCC8Ar TQZtVGSMQI517HSKfL86F+8hDRcEAkchwyzgxK8z4AR1XSXR63bVNCDTkptHojtp FzcZjBRKPs3qNFcWO704R2dOFJBDCxLBUybB0kBMFz+DgnAbNLgTWwLQ/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKiN2rNMygHO1t/VsW8MO5cfB32DMB8GA1UdIwQY MBaAFNTRec5J5XdrkshsJsILC0P9Cmy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUt NDAzMmUxOTBlZGMzLzEvcUkzYXMwektBYzdXMzlXeGJ3dzdseDhIZllNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUtNDAzMmUxOTBlZGMz LzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXxMMA0E AgACMAcDBQMqBrDAMA0GCSqGSIb3DQEBCwUAA4IBAQCF6D0S5NvWjxoydY0VRttE KpH9pJR71zD1wCpW2vsffpdziConA5B9dVy1L7J2AXrzgHJ21vF6aClTYNtQbJcv txDT72rcsPZmVEmvceuVeCKVZN7Q9YadXkWW1MEiadEQjSTf/TZIFXzt7YvSskbs AgTUUocIh+7LU1Ix1/Fz8xWltYjg1whCzoTlLRpEtI57NilyLfbP3P3APAXwWRbk c4ZBnM6VUp/tYyxgcoeVZtkt6Jrwyd97Uk+COpKwmvrXfECxlBR+hPkGd0xWW+B/ fTNZ7BHrTurdQ/0UH6KTmc+gZ17qpSFqEyxS42UlNVlnprefUC2H/pERyomnsLMO -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:32 2026 by rpki-client