This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qF291HNpMzL6GFvHTlBYQghtPNc.roa File: qF291HNpMzL6GFvHTlBYQghtPNc.roa (raw, json) Hash identifier: SiHISWQRVbRInfCWM5JDUBQicp9gdNUvmVNkLoSM/tI= Subject key identifier: A8:5D:BD:D4:73:69:33:32:FA:18:5B:C7:4E:50:58:42:08:6D:3C:D7 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A31C741BA4FC8628465CD9C9A774AF Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qF291HNpMzL6GFvHTlBYQghtPNc.roa Signing time: Thu 01 Jan 2026 08:18:34 +0000 ROA not before: Thu 01 Jan 2026 08:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197715 IP address blocks: 81.161.236.0/24 maxlen: 24 92.119.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1c:74:1b:a4:fc:86:28:46:5c:d9:c9:a7:74:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a85dbdd473693332fa185bc74e505842086d3cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:1e:e6:5f:ca:c2:ef:ef:ba:03:7f:41:a3: 36:a8:c3:ad:5c:fe:22:d6:25:20:2d:c8:f3:1b:73: cf:0e:c2:7e:f6:6b:ea:c0:2b:e9:7f:ed:70:b3:be: 49:43:b7:fe:be:98:9e:74:2e:79:cc:b3:1a:88:1a: d7:8a:81:03:74:ff:f8:43:99:65:d6:45:0b:a9:b5: 36:08:88:20:64:07:47:bb:90:d9:07:1c:16:82:b8: 99:34:79:21:62:fe:f0:00:43:cd:19:9e:87:0c:1b: ce:40:73:86:79:b8:c0:7f:35:09:6c:66:d3:17:51: ff:cd:27:79:63:19:c3:28:d9:33:17:42:77:a2:98: ba:53:cc:fa:cd:81:d3:49:03:9a:a6:71:d2:34:ef: 47:96:d9:d0:d3:56:06:a4:23:ef:75:37:71:8f:20: 05:be:d1:41:49:36:2d:d6:4f:a1:38:db:1e:43:36: 49:b2:57:55:09:a5:c7:d5:52:f9:76:1d:f0:23:ab: a2:e2:04:5f:5b:a0:d6:a1:48:dd:a0:31:5f:13:19: 9c:5c:ed:bf:4e:16:70:0e:70:a2:e5:71:e6:26:38: 50:ce:5b:ca:76:ed:dd:88:32:55:db:aa:73:cb:1f: 41:02:a6:33:bc:b5:17:8d:7c:ea:3f:49:6f:29:33: a7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5D:BD:D4:73:69:33:32:FA:18:5B:C7:4E:50:58:42:08:6D:3C:D7 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qF291HNpMzL6GFvHTlBYQghtPNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.236.0/24 92.119.199.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:e9:3d:db:b1:28:e5:13:f0:2c:77:37:ec:00:fc:5e:f4:66: ad:95:3a:f9:f3:46:e8:95:34:1d:f9:69:9c:6a:d9:79:1c:f9: 3a:3d:1c:a8:3a:67:82:16:8f:a3:5c:11:0e:57:c1:54:03:a1: ab:50:a7:00:5f:3d:49:71:a5:df:0b:dd:6e:4f:4b:d6:7e:74: 95:a2:5e:17:33:f1:ee:7c:ad:4d:4d:14:24:26:1c:4e:ef:7d: e4:33:8d:7b:d4:c0:b2:d2:11:ec:fc:fb:cd:7f:4f:01:6a:6b: a8:7d:24:94:e1:df:d7:0b:79:13:ef:c1:fc:1a:90:f2:64:b8: 49:c8:ad:f7:80:2c:36:6a:f8:c8:ef:1e:db:3a:88:e0:4e:98: bd:d6:63:aa:b8:0c:99:c8:2f:05:1c:38:c9:1e:be:58:2d:c4: 72:3b:94:c7:3a:3e:4b:44:5c:10:c3:5b:4a:0c:4e:0a:4a:68: b1:18:9a:bf:2b:b5:d6:9a:fc:35:8a:49:37:46:50:09:23:5f: 05:f8:40:6a:3c:52:9a:19:56:24:a0:54:6d:0d:a9:b6:87:20: f7:06:4b:f7:db:46:15:79:4f:6d:06:a7:19:48:81:99:94:de: e2:e0:83:0a:94:3c:bd:66:3a:67:c2:57:c7:11:44:f6:ce:46: 4a:c5:71:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxx0G6T8hihGXNnJp3SvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODVkYmRkNDczNjkzMzMyZmExODViYzc0ZTUwNTg0MjA4NmQzY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4ge5l/Kwu/vugN/QaM2qMOtXP4i 1iUgLcjzG3PPDsJ+9mvqwCvpf+1ws75JQ7f+vpiedC55zLMaiBrXioEDdP/4Q5ll 1kULqbU2CIggZAdHu5DZBxwWgriZNHkhYv7wAEPNGZ6HDBvOQHOGebjAfzUJbGbT F1H/zSd5YxnDKNkzF0J3opi6U8z6zYHTSQOapnHSNO9HltnQ01YGpCPvdTdxjyAF vtFBSTYt1k+hONseQzZJsldVCaXH1VL5dh3wI6ui4gRfW6DWoUjdoDFfExmcXO2/ ThZwDnCi5XHmJjhQzlvKdu3diDJV26pzyx9BAqYzvLUXjXzqP0lvKTOnzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKhdvdRzaTMy+hhbx05QWEIIbTzXMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcUYyOTFITnBNekw2R0Z2SFRsQllRZ2h0UE5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUaHsAwQA XHfHMA0GCSqGSIb3DQEBCwUAA4IBAQA/6T3bsSjlE/AsdzfsAPxe9GatlTr580bo lTQd+Wmcatl5HPk6PRyoOmeCFo+jXBEOV8FUA6GrUKcAXz1JcaXfC91uT0vWfnSV ol4XM/HufK1NTRQkJhxO733kM4171MCy0hHs/PvNf08BamuofSSU4d/XC3kT78H8 GpDyZLhJyK33gCw2avjI7x7bOojgTpi91mOquAyZyC8FHDjJHr5YLcRyO5THOj5L RFwQw1tKDE4KSmixGJq/K7XWmvw1ikk3RlAJI18F+EBqPFKaGVYkoFRtDam2hyD3 Bkv320YVeU9tBqcZSIGZlN7i4IMKlDy9ZjpnwlfHEUT2zkZKxXF+ -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:50 2026 by rpki-client