This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/vQys_ba_SRbDMdjvkJJ4d_e1bnU.roa File: vQys_ba_SRbDMdjvkJJ4d_e1bnU.roa (raw, json) Hash identifier: OV/ynpbxba/2j5Cpj7v9gb2kcDvJcgfm005X97a5zrY= Subject key identifier: BD:0C:AC:FD:B6:BF:49:16:C3:31:D8:EF:90:92:78:77:F7:B5:6E:75 Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4 Certificate serial: 019B791125C842B7FD5A9387CA15B7A75633 Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/vQys_ba_SRbDMdjvkJJ4d_e1bnU.roa Signing time: Thu 01 Jan 2026 10:18:45 +0000 ROA not before: Thu 01 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51405 IP address blocks: 46.29.176.0/21 maxlen: 24 2a02:2290::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:25:c8:42:b7:fd:5a:93:87:ca:15:b7:a7:56:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4 Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd0cacfdb6bf4916c331d8ef90927877f7b56e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:e8:3d:9a:2b:6c:2e:87:5a:6e:4d:88:5a: 32:bd:ff:b6:5f:ec:d4:08:61:f0:dd:fd:1a:b3:ce: 9b:c4:1e:2a:0e:e7:6f:97:79:8d:93:20:14:c6:c2: a0:50:94:08:f9:4b:3d:7b:6a:0b:0d:c2:bb:0d:f9: e1:32:6f:77:b0:c1:66:a0:de:57:87:92:ea:3d:a8: 6d:44:71:77:5b:a1:06:a1:0b:66:79:ee:ed:fa:fe: a5:38:72:b4:2d:50:ad:16:f9:99:0d:43:67:3a:3c: 8e:79:94:19:46:6c:69:11:e9:6a:43:47:3f:37:1e: 9e:68:0a:a4:9f:7b:25:ab:0b:d1:79:cc:08:86:70: aa:72:87:59:76:fe:6d:be:18:c5:d4:64:95:12:90: 14:6b:98:3e:79:08:cc:63:8f:f5:5a:8d:65:3c:0f: 71:be:c4:a7:3d:d3:cc:f6:a9:6f:4e:05:ee:a1:11: 96:34:8e:5b:37:99:5f:db:c8:0d:66:7e:bb:82:c5: 37:d6:ab:7b:10:30:ea:0f:6c:67:f3:bf:3e:08:92: da:1b:39:f5:78:df:a5:d8:56:75:64:5f:e9:53:54: f0:00:a6:a3:2d:11:ce:54:3b:75:b7:d2:91:a7:9d: de:4b:50:37:54:03:1d:ae:0f:4b:3d:0f:a7:5c:d4: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0C:AC:FD:B6:BF:49:16:C3:31:D8:EF:90:92:78:77:F7:B5:6E:75 X509v3 Authority Key Identifier: keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/vQys_ba_SRbDMdjvkJJ4d_e1bnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.176.0/21 IPv6: 2a02:2290::/29 Signature Algorithm: sha256WithRSAEncryption a2:b7:38:d0:78:1f:30:d7:bd:bc:70:e2:68:d5:bc:5a:f4:7a: bd:31:aa:cb:b1:a2:ee:ce:37:1e:5e:d9:eb:45:4a:93:31:da: e2:ef:a9:f8:c0:8f:8d:6e:2b:30:ca:98:9f:0f:60:68:fc:0a: cc:25:d2:45:99:eb:d1:6b:6d:e3:75:ec:80:fb:ae:cc:15:8d: ce:fd:d6:f6:af:c8:c8:39:e3:f8:14:3e:e5:84:fc:a6:7c:63: 10:29:18:63:11:d1:99:45:99:b9:ec:b8:d2:91:db:ad:e2:71: 00:a1:6f:55:18:42:f6:b9:43:94:64:76:e1:ff:fc:58:58:d8: af:c9:bb:77:fd:05:f7:30:98:59:b0:2c:4b:24:62:ac:9d:95: cb:3b:c5:bb:a8:62:14:4c:83:e2:7f:3b:2c:f6:24:75:ad:17: 7c:f0:5f:e4:66:bc:9b:61:3b:49:75:34:e3:2d:4a:cf:e8:4b: 5c:33:dc:de:44:a9:92:4b:d4:59:50:80:28:20:ed:86:d3:21: 09:9c:a5:bb:61:8e:f3:f8:88:a8:8e:6f:d3:71:5e:61:68:cf: ec:f3:79:27:42:c3:b1:86:79:54:13:c9:7b:8b:42:db:bb:64: 7d:c8:2a:ee:c1:ff:c1:9e:bc:25:8e:13:70:d8:ff:29:61:f6: 3d:65:28:89 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ESXIQrf9WpOHyhW3p1YzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTRlMWI4ZGE4MGNhYzJhZDFhMmYzZjA5YmY5ZGI1YTEy NDg2YTQwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDBjYWNmZGI2YmY0OTE2YzMzMWQ4ZWY5MDkyNzg3N2Y3YjU2ZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/DoPZorbC6HWm5NiFoyvf+2X+zU CGHw3f0as86bxB4qDudvl3mNkyAUxsKgUJQI+Us9e2oLDcK7DfnhMm93sMFmoN5X h5LqPahtRHF3W6EGoQtmee7t+v6lOHK0LVCtFvmZDUNnOjyOeZQZRmxpEelqQ0c/ Nx6eaAqkn3slqwvRecwIhnCqcodZdv5tvhjF1GSVEpAUa5g+eQjMY4/1Wo1lPA9x vsSnPdPM9qlvTgXuoRGWNI5bN5lf28gNZn67gsU31qt7EDDqD2xn878+CJLaGzn1 eN+l2FZ1ZF/pU1TwAKajLRHOVDt1t9KRp53eS1A3VAMdrg9LPQ+nXNRDHwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL0MrP22v0kWwzHY75CSeHf3tW51MB8GA1UdIwQY MBaAFGiU4bjagMrCrRovPwm/nbWhJIakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODIt NzAzY2FiNGQwNTk4LzEvdlF5c19iYV9TUmJETWRqdmtKSjRkX2UxYm5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODItNzAzY2FiNGQwNTk4 LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLh2wMA0E AgACMAcDBQMqAiKQMA0GCSqGSIb3DQEBCwUAA4IBAQCitzjQeB8w1728cOJo1bxa 9Hq9MarLsaLuzjceXtnrRUqTMdri76n4wI+NbiswypifD2Bo/ArMJdJFmevRa23j deyA+67MFY3O/db2r8jIOeP4FD7lhPymfGMQKRhjEdGZRZm57LjSkdut4nEAoW9V GEL2uUOUZHbh//xYWNivybt3/QX3MJhZsCxLJGKsnZXLO8W7qGIUTIPifzss9iR1 rRd88F/kZrybYTtJdTTjLUrP6EtcM9zeRKmSS9RZUIAoIO2G0yEJnKW7YY7z+Iio jm/TcV5haM/s83knQsOxhnlUE8l7i0Lbu2R9yCruwf/BnrwljhNw2P8pYfY9ZSiJ -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:51 2026 by rpki-client