This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/cQu8PWE2ED6TGgN91J-oSiBaGLU.roa File: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (raw, json) Hash identifier: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI= Subject key identifier: 71:0B:BC:3D:61:36:10:3E:93:1A:03:7D:D4:9F:A8:4A:20:5A:18:B5 Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843 Certificate serial: 019B78A2198748128E098D7C3F4E054FBFD3 Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/cQu8PWE2ED6TGgN91J-oSiBaGLU.roa Signing time: Thu 01 Jan 2026 08:17:27 +0000 ROA not before: Thu 01 Jan 2026 08:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24713 IP address blocks: 80.248.160.0/20 maxlen: 20 81.22.160.0/20 maxlen: 20 185.134.88.0/22 maxlen: 22 2a03:d640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:19:87:48:12:8e:09:8d:7c:3f:4e:05:4f:bf:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843 Validity Not Before: Jan 1 08:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=710bbc3d6136103e931a037dd49fa84a205a18b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:ae:cb:f6:fe:c4:30:d8:19:65:38:15:30: ad:9b:a0:02:57:e4:bf:36:a5:0e:0b:1b:cb:e4:b1: cb:ab:e9:94:75:ec:91:c6:f3:24:05:52:27:95:b1: 88:fb:ee:8b:de:59:0d:cf:ac:8d:72:cb:e6:32:bb: e5:ae:8b:e0:3c:bc:01:f9:67:24:58:b7:c5:bb:d6: 72:5c:37:f4:56:a5:ae:a5:d2:e3:f6:69:94:73:e7: 8a:1e:11:ff:de:51:3c:11:9c:b7:1a:da:76:d1:f1: 23:21:26:2f:b7:05:67:30:8a:68:7f:cf:13:e5:53: 44:5d:0b:ac:ba:99:b1:0d:ff:d1:23:07:e5:0c:c4: 29:bb:d3:54:eb:a3:66:c3:d7:49:08:cc:0d:4d:f1: a8:28:ed:95:d5:7e:5c:76:05:0c:99:da:fb:62:0f: cc:76:d4:87:f9:37:73:9d:50:a2:00:40:89:7e:e0: 6f:62:d1:42:2f:db:e1:46:73:a3:26:b7:f4:6f:76: 13:17:51:ed:cd:de:0d:62:1e:cc:51:5d:da:af:03: f8:e2:45:f0:44:86:ce:e5:e5:44:15:aa:ed:01:ec: 72:1a:72:e5:ec:f0:f5:4f:9d:a1:f3:eb:70:2e:43: ab:ec:57:4e:d3:3d:ac:92:8d:7b:0b:6e:d0:64:f5: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0B:BC:3D:61:36:10:3E:93:1A:03:7D:D4:9F:A8:4A:20:5A:18:B5 X509v3 Authority Key Identifier: keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/cQu8PWE2ED6TGgN91J-oSiBaGLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.248.160.0/20 81.22.160.0/20 185.134.88.0/22 IPv6: 2a03:d640::/32 Signature Algorithm: sha256WithRSAEncryption 50:f6:90:06:12:79:44:61:1a:c2:e9:58:24:d6:7a:7a:d3:9e: 0e:44:c7:06:a8:4e:f9:44:54:b5:56:d2:1a:2b:f4:20:d7:8d: e6:d9:34:96:35:68:ea:07:45:5e:91:1a:cb:ae:a0:65:f9:9c: 9f:db:89:e0:fc:dc:30:92:61:ea:e5:99:ce:b0:04:65:54:99: 68:f9:4a:29:4c:b7:35:93:78:89:3b:c5:64:f0:bb:a6:22:2c: bb:16:94:92:f4:55:b5:d3:ee:b2:da:eb:48:e1:fd:49:5b:34: dc:09:ba:9b:e8:c6:4d:a1:a7:6d:8a:e5:90:77:de:0c:82:60: 9d:30:f0:85:23:ad:4c:2b:98:58:6b:c5:45:d3:dd:e3:fa:29: 83:fc:23:47:93:5f:9b:28:5c:8f:ce:2a:33:1e:10:ed:da:57: 60:e4:c9:95:84:21:97:32:bd:f1:84:7c:c4:f3:58:ed:92:8f: 7b:e0:f8:56:8d:2b:08:d2:f5:17:9f:47:3b:f6:f3:59:ea:50: 57:88:d5:0d:b9:c4:9e:f7:a0:5b:18:cb:be:3c:19:33:98:d4: 21:d0:44:b4:7a:19:2f:44:37:9f:f0:db:b5:64:63:ca:76:e9: 98:e2:14:82:cd:26:45:91:72:5b:07:ae:49:18:c1:80:c2:7a: cc:28:da:02 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4ohmHSBKOCY18P04FT7/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYjA0NmI2ZTMwOWU5YTg2NjUyMmMyYTQwYzY2ZmZjNDJm YmI4NDMwHhcNMjYwMTAxMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTBiYmMzZDYxMzYxMDNlOTMxYTAzN2RkNDlmYTg0YTIwNWExOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniGuy/b+xDDYGWU4FTCtm6ACV+S/ NqUOCxvL5LHLq+mUdeyRxvMkBVInlbGI++6L3lkNz6yNcsvmMrvlrovgPLwB+Wck WLfFu9ZyXDf0VqWupdLj9mmUc+eKHhH/3lE8EZy3Gtp20fEjISYvtwVnMIpof88T 5VNEXQusupmxDf/RIwflDMQpu9NU66Nmw9dJCMwNTfGoKO2V1X5cdgUMmdr7Yg/M dtSH+TdznVCiAECJfuBvYtFCL9vhRnOjJrf0b3YTF1Htzd4NYh7MUV3arwP44kXw RIbO5eVEFartAexyGnLl7PD1T52h8+twLkOr7FdO0z2sko17C27QZPXF+QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHELvD1hNhA+kxoDfdSfqEogWhi1MB8GA1UdIwQY MBaAFN6wRrbjCemoZlIsKkDGb/xC+7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDkt MWM5NDkyMjQ1Y2FiLzEvY1F1OFBXRTJFRDZUR2dOOTFKLW9TaUJhR0xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDktMWM5NDkyMjQ1Y2Fi LzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUPigAwQE URagAwQCuYZYMA0EAgACMAcDBQAqA9ZAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ9pAG EnlEYRrC6Vgk1np6054ORMcGqE75RFS1VtIaK/Qg143m2TSWNWjqB0VekRrLrqBl +Zyf24ng/NwwkmHq5ZnOsARlVJlo+UopTLc1k3iJO8Vk8LumIiy7FpSS9FW10+6y 2utI4f1JWzTcCbqb6MZNoadtiuWQd94MgmCdMPCFI61MK5hYa8VF093j+imD/CNH k1+bKFyPziozHhDt2ldg5MmVhCGXMr3xhHzE81jtko974PhWjSsI0vUXn0c79vNZ 6lBXiNUNucSe96BbGMu+PBkzmNQh0ES0ehkvRDef8Nu1ZGPKdumY4hSCzSZFkXJb B65JGMGAwnrMKNoC -----END CERTIFICATE-----Generated at Sat Jan 3 04:13:20 2026 by rpki-client