This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/gqOpS-28u42YNGKEB_JVnGai9oM.roa File: gqOpS-28u42YNGKEB_JVnGai9oM.roa (raw, json) Hash identifier: IToAx5jrtAZ+cIDNcVkiQZZOuWe9Knt1GiJD5XkMVss= Subject key identifier: 82:A3:A9:4B:ED:BC:BB:8D:98:34:62:84:07:F2:55:9C:66:A2:F6:83 Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Certificate serial: 019B7E37FCDD89E4710A747A20DD16EE51D7 Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/gqOpS-28u42YNGKEB_JVnGai9oM.roa Signing time: Fri 02 Jan 2026 10:19:16 +0000 ROA not before: Fri 02 Jan 2026 10:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35434 IP address blocks: 93.95.88.0/21 maxlen: 21 185.69.20.0/22 maxlen: 22 188.123.192.0/19 maxlen: 19 193.47.247.0/24 maxlen: 24 217.73.176.0/20 maxlen: 20 2a02:2780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fc:dd:89:e4:71:0a:74:7a:20:dd:16:ee:51:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Validity Not Before: Jan 2 10:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82a3a94bedbcbb8d9834628407f2559c66a2f683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:6c:62:40:8a:a5:56:09:51:41:ef:c4:eb: eb:d0:17:5f:9e:64:da:a8:3a:49:52:f1:7c:09:5f: 0b:2e:ff:c1:2b:b7:e2:91:23:3a:25:d5:ca:55:b4: f6:54:2a:92:fe:45:9c:27:74:15:ed:86:17:e0:95: c1:56:82:ff:33:a6:b7:dc:f2:04:b0:7d:2e:5b:a5: 09:78:92:86:f5:d8:84:8b:3c:f7:24:78:b1:1b:aa: c3:1f:0e:6c:0d:de:54:c5:05:27:31:4b:e9:fa:4a: 4f:c9:ad:83:b2:82:82:cf:77:c5:e5:dc:5f:11:01: 9f:44:3f:f5:a5:55:d8:16:90:7d:d9:61:d5:8d:6b: 85:bf:f7:cf:07:c4:87:9f:13:f7:dd:5e:98:4b:d8: 10:08:a7:ee:ae:46:b0:82:79:c8:76:af:51:60:9f: e5:a7:80:de:fd:ae:60:e9:9e:00:8e:e1:83:ff:f7: 11:f5:75:c9:0c:f4:32:fc:a2:0a:89:53:e0:3d:85: 69:52:10:13:25:e2:5b:65:b4:51:69:d6:fa:de:e6: 6b:03:eb:ea:dc:ac:98:54:54:16:53:0f:2e:72:3f: a1:60:e4:1c:dd:19:2b:76:4b:b9:e8:6e:1d:63:6f: b5:e9:95:ae:d3:87:65:1f:a3:85:99:53:d9:d3:5d: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A3:A9:4B:ED:BC:BB:8D:98:34:62:84:07:F2:55:9C:66:A2:F6:83 X509v3 Authority Key Identifier: keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/gqOpS-28u42YNGKEB_JVnGai9oM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.88.0/21 185.69.20.0/22 188.123.192.0/19 193.47.247.0/24 217.73.176.0/20 IPv6: 2a02:2780::/32 Signature Algorithm: sha256WithRSAEncryption 7b:60:4c:f2:73:cb:3c:7e:48:a6:7c:98:ed:1e:27:c4:99:5e: 76:e5:ab:12:80:c0:b6:97:e9:ad:33:ec:da:d2:e0:eb:20:45: fd:93:b7:37:61:54:59:d2:f6:78:cc:c9:ed:06:d8:5c:a3:bd: 08:df:66:9d:de:9a:1f:8a:a1:5e:7d:1a:b9:df:17:ca:b4:a0: 5c:0c:a6:c3:60:d1:e7:2a:a2:8a:d9:63:a8:2f:99:97:64:b7: 69:1f:e2:37:d2:b6:f8:7c:ab:f3:6d:e8:4e:83:32:dc:e3:dd: dd:2d:4c:5e:c9:1d:c7:64:0c:b0:2f:c2:16:4c:06:d8:9a:ab: cb:f3:df:61:cf:79:49:7e:d1:87:36:45:32:a6:ad:09:50:0e: 11:14:40:60:10:25:ea:79:f2:17:2f:45:95:3b:20:31:fd:ec: 54:7f:c4:24:63:8e:6e:49:ee:01:81:f8:f7:73:c6:e3:97:23: 2d:02:53:9d:7d:72:09:a3:18:1f:8f:ea:a6:79:6d:08:cb:c0: b7:f6:f7:46:23:05:c4:bb:6d:02:a1:58:3b:93:78:9d:52:f5: 77:18:93:ca:da:56:62:78:a0:b2:21:da:99:79:14:39:4c:de: 44:b0:30:b5:81:05:03:ca:1e:5a:f6:b6:e9:e5:db:d7:48:e3: eb:1c:c8:12 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt+N/zdieRxCnR6IN0W7lHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj ZjUwNmYwHhcNMjYwMTAyMTAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmEzYTk0YmVkYmNiYjhkOTgzNDYyODQwN2YyNTU5YzY2YTJmNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM1sYkCKpVYJUUHvxOvr0BdfnmTa qDpJUvF8CV8LLv/BK7fikSM6JdXKVbT2VCqS/kWcJ3QV7YYX4JXBVoL/M6a33PIE sH0uW6UJeJKG9diEizz3JHixG6rDHw5sDd5UxQUnMUvp+kpPya2DsoKCz3fF5dxf EQGfRD/1pVXYFpB92WHVjWuFv/fPB8SHnxP33V6YS9gQCKfurkawgnnIdq9RYJ/l p4De/a5g6Z4AjuGD//cR9XXJDPQy/KIKiVPgPYVpUhATJeJbZbRRadb63uZrA+vq 3KyYVFQWUw8ucj+hYOQc3Rkrdku56G4dY2+16ZWu04dlH6OFmVPZ012i9wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIKjqUvtvLuNmDRihAfyVZxmovaDMB8GA1UdIwQY MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut OGNmN2Q0NDkzMzU4LzEvZ3FPcFMtMjh1NDJZTkdLRUJfSlZuR2FpOW9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4 LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDXV9YAwQC uUUUAwQFvHvAAwQAwS/3AwQE2UmwMA0EAgACMAcDBQAqAieAMA0GCSqGSIb3DQEB CwUAA4IBAQB7YEzyc8s8fkimfJjtHifEmV525asSgMC2l+mtM+za0uDrIEX9k7c3 YVRZ0vZ4zMntBthco70I32ad3pofiqFefRq53xfKtKBcDKbDYNHnKqKK2WOoL5mX ZLdpH+I30rb4fKvzbehOgzLc493dLUxeyR3HZAywL8IWTAbYmqvL899hz3lJftGH NkUypq0JUA4RFEBgECXqefIXL0WVOyAx/exUf8QkY45uSe4Bgfj3c8bjlyMtAlOd fXIJoxgfj+qmeW0Iy8C39vdGIwXEu20CoVg7k3idUvV3GJPK2lZieKCyIdqZeRQ5 TN5EsDC1gQUDyh5a9rbp5dvXSOPrHMgS -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:57 2026 by rpki-client