This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/qOyavHaQUzWIgFJKhwDzN8qp-NU.roa File: qOyavHaQUzWIgFJKhwDzN8qp-NU.roa (raw, json) Hash identifier: 6+GcU7ai/o4JeNdvfA796blKNzslNJ8s8dxyOTcoPxA= Subject key identifier: A8:EC:9A:BC:76:90:53:35:88:80:52:4A:87:00:F3:37:CA:A9:F8:D5 Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0 Certificate serial: 019B7C132827568C5BC153C4DA21E6F89CF0 Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/qOyavHaQUzWIgFJKhwDzN8qp-NU.roa Signing time: Fri 02 Jan 2026 00:19:48 +0000 ROA not before: Fri 02 Jan 2026 00:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394094 IP address blocks: 31.25.199.0/24 maxlen: 24 185.106.241.0/24 maxlen: 24 185.106.243.0/24 maxlen: 24 2a06:4101::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:28:27:56:8c:5b:c1:53:c4:da:21:e6:f8:9c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0 Validity Not Before: Jan 2 00:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8ec9abc769053358880524a8700f337caa9f8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:98:60:07:ae:6f:39:c5:86:10:a5:55:f1: 1a:c2:fa:04:f0:6b:12:82:3a:fc:dc:03:c1:e4:e2: 9d:53:0e:70:29:2e:78:fe:0b:74:d5:c3:bf:9b:ab: 21:c6:f0:12:9a:27:f8:9d:86:04:2d:d0:b6:b9:75: 67:20:68:26:b9:72:ec:a5:0f:40:c5:fe:f0:b4:6f: 42:65:f6:87:84:e0:d2:da:d8:5b:bd:3d:f5:94:62: b0:78:bb:47:ab:ea:e7:e0:3b:e2:b2:82:ab:5f:a7: cb:16:2d:07:63:38:19:f7:fa:d5:54:be:99:b7:42: 47:7f:61:1a:9b:21:8d:ce:a0:d9:d5:fd:29:fc:cd: f8:f7:1b:9f:d7:02:be:a2:46:40:01:a8:4d:d5:55: 31:ee:6f:f5:7f:f0:87:57:9d:c1:c1:bc:85:41:d3: 7a:82:45:e3:0d:78:4a:8b:2d:93:61:f4:32:aa:44: 67:d1:0e:5a:84:50:46:8d:83:ee:f8:91:a5:86:70: 00:b5:6d:1c:5b:cb:bb:d3:b2:d6:6c:9f:e2:ab:76: a6:3a:80:76:84:82:b9:7b:1a:37:7d:80:e9:11:1f: df:e7:a9:0b:85:73:d1:e8:ef:9a:48:f0:03:71:c4: 1d:48:35:43:f3:50:41:d5:77:e6:d4:24:cd:5f:dd: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EC:9A:BC:76:90:53:35:88:80:52:4A:87:00:F3:37:CA:A9:F8:D5 X509v3 Authority Key Identifier: keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/qOyavHaQUzWIgFJKhwDzN8qp-NU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.199.0/24 185.106.241.0/24 185.106.243.0/24 IPv6: 2a06:4101::/32 Signature Algorithm: sha256WithRSAEncryption 6d:9f:ff:a4:5f:3e:ea:8d:27:75:72:b7:87:cb:14:1a:96:16: 64:46:70:b5:37:e5:9b:aa:a5:cb:5d:52:3c:5a:7d:fc:29:36: 8f:06:8b:f1:10:76:d5:2c:4d:49:1b:0e:1e:15:3b:87:a2:82: d7:9e:36:8c:05:4b:63:4a:7b:5e:7d:1c:32:93:8c:ff:d6:4d: ac:cb:27:05:c7:c2:41:a7:01:fa:72:d9:7c:09:29:9b:35:b5: 5a:52:d6:a2:07:53:52:1b:e9:b7:f0:0a:59:9f:de:c8:9d:0f: b3:bc:af:8f:47:db:bd:29:dd:f6:7f:25:dc:3a:e3:b8:b0:98: 26:57:5f:1f:ab:39:4f:c7:f6:66:35:21:55:29:8d:0d:87:73: 94:e1:22:26:ad:0e:22:8c:bd:48:91:6f:54:f3:bc:22:bf:ca: c4:08:42:13:89:67:66:29:6a:1c:65:be:aa:de:19:5e:cf:cc: 9d:e9:a7:e1:cc:57:9c:9e:40:e6:22:8b:1c:c2:dd:73:ef:e9: b6:42:41:ca:e8:50:eb:df:5f:a1:73:95:23:47:7b:74:40:63: 2f:63:ca:14:96:20:f7:9d:7d:71:f4:e6:2e:37:50:06:7e:a0: 86:b3:36:37:f0:3c:72:78:bf:43:4f:2c:9b:ea:4b:d1:29:54: 70:c1:81:85 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8EygnVoxbwVPE2iHm+JzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwN2NlNzhmNGFjM2JhOTAyYTBjMzhkYzAxYTBjNWYyMTI2 NTE5YjAwHhcNMjYwMTAyMDAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGVjOWFiYzc2OTA1MzM1ODg4MDUyNGE4NzAwZjMzN2NhYTlmOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TaYYAeubznFhhClVfEawvoE8GsS gjr83APB5OKdUw5wKS54/gt01cO/m6shxvASmif4nYYELdC2uXVnIGgmuXLspQ9A xf7wtG9CZfaHhODS2thbvT31lGKweLtHq+rn4DvisoKrX6fLFi0HYzgZ9/rVVL6Z t0JHf2EamyGNzqDZ1f0p/M349xuf1wK+okZAAahN1VUx7m/1f/CHV53BwbyFQdN6 gkXjDXhKiy2TYfQyqkRn0Q5ahFBGjYPu+JGlhnAAtW0cW8u707LWbJ/iq3amOoB2 hIK5exo3fYDpER/f56kLhXPR6O+aSPADccQdSDVD81BB1Xfm1CTNX91psQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKjsmrx2kFM1iIBSSocA8zfKqfjVMB8GA1UdIwQY MBaAFEB8549Kw7qQKgw43AGgxfISZRmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hODdlYTgtYzNiNi00NzJkLWE5NmMt YTk3MWEzMzRmYWE0LzEvcU95YXZIYVFVeldJZ0ZKS2h3RHpOOHFwLU5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hODdlYTgtYzNiNi00NzJkLWE5NmMtYTk3MWEzMzRmYWE0 LzEvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAHxnHAwQA uWrxAwQAuWrzMA0EAgACMAcDBQAqBkEBMA0GCSqGSIb3DQEBCwUAA4IBAQBtn/+k Xz7qjSd1creHyxQalhZkRnC1N+WbqqXLXVI8Wn38KTaPBovxEHbVLE1JGw4eFTuH ooLXnjaMBUtjSntefRwyk4z/1k2syycFx8JBpwH6ctl8CSmbNbVaUtaiB1NSG+m3 8ApZn97InQ+zvK+PR9u9Kd32fyXcOuO4sJgmV18fqzlPx/ZmNSFVKY0Nh3OU4SIm rQ4ijL1IkW9U87wiv8rECEITiWdmKWocZb6q3hlez8yd6afhzFecnkDmIoscwt1z 7+m2QkHK6FDr31+hc5UjR3t0QGMvY8oUliD3nX1x9OYuN1AGfqCGszY38DxyeL9D Tyyb6kvRKVRwwYGF -----END CERTIFICATE-----Generated at Fri Jan 9 13:56:49 2026 by rpki-client