This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qrCy2iMXweGpjxDRHMDTuHkR9Vs.roa File: qrCy2iMXweGpjxDRHMDTuHkR9Vs.roa (raw, json) Hash identifier: q55z1A3kXxvfp9C+1x9JyqSnAAbaMqWmIlBQ2WQ+MbM= Subject key identifier: AA:B0:B2:DA:23:17:C1:E1:A9:8F:10:D1:1C:C0:D3:B8:79:11:F5:5B Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C039B8C79BB2225AFA22DF526AFC3E648 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qrCy2iMXweGpjxDRHMDTuHkR9Vs.roa Signing time: Wed 28 Jan 2026 07:57:31 +0000 ROA not before: Wed 28 Jan 2026 07:57:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201899 IP address blocks: 91.92.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:9b:8c:79:bb:22:25:af:a2:2d:f5:26:af:c3:e6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 28 07:57:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aab0b2da2317c1e1a98f10d11cc0d3b87911f55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:c1:2a:ef:03:3e:cc:9d:76:3d:9e:a0:a9: eb:7f:6f:59:b5:89:59:e4:ce:f8:66:2f:c9:a4:88: 77:6d:0d:33:39:03:27:05:f7:d0:b3:73:ab:3a:fa: e8:2a:cf:75:92:a3:c5:95:c2:d4:e5:ba:ae:19:a6: 06:a6:c7:76:3b:0b:fd:78:5b:73:51:6d:ee:df:e9: c6:50:63:99:c5:2b:b8:73:ab:e4:5d:3d:d2:4e:8e: 2b:8c:74:6c:64:2c:22:35:4b:08:5f:82:99:ea:d9: c6:54:6b:ef:c2:53:02:19:c1:79:98:a9:9e:a5:2d: cd:f7:07:f1:96:d6:02:8c:25:1e:18:d1:cd:d8:a5: 50:9b:28:ef:92:dd:50:62:8e:38:f2:6b:cb:92:1d: 45:a6:f4:95:5f:02:b4:ee:39:16:71:03:e6:04:6d: 65:5c:96:e0:e6:28:e9:0c:1b:6f:b5:28:5d:cf:c3: e7:d8:4d:8e:4a:56:ef:4c:64:3e:6e:11:27:36:47: 93:00:03:87:d9:6c:ed:f7:82:07:6e:27:a4:21:22: d2:51:cf:08:cd:b6:3b:1e:c0:74:72:a1:08:29:a8: b7:38:3a:d8:f8:2a:9a:60:1f:ec:18:fb:95:7f:67: ff:e0:46:76:cb:cd:53:5b:93:49:00:8d:12:7d:3f: db:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B0:B2:DA:23:17:C1:E1:A9:8F:10:D1:1C:C0:D3:B8:79:11:F5:5B X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qrCy2iMXweGpjxDRHMDTuHkR9Vs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.251.0/24 Signature Algorithm: sha256WithRSAEncryption 60:a2:89:35:e2:7c:97:e3:98:f4:5a:b3:f3:f5:af:f4:3a:b7: cf:1c:45:2c:45:6c:50:ee:b7:c5:41:b7:f4:ad:fe:33:33:35: 6c:f9:87:e4:37:71:1d:28:69:34:29:96:2b:89:f4:8b:65:85: e1:17:92:69:f0:1a:a3:dd:81:38:38:a7:e2:e9:4c:00:f8:18: 30:1c:40:58:02:f2:d8:56:0d:0f:17:b9:a1:5e:32:15:d4:cb: e9:72:d1:9f:dd:d7:7e:e8:d8:0b:19:ef:6e:6a:c9:8c:74:a7: b2:3a:00:9b:75:e9:3d:77:00:76:91:ff:6b:17:02:6d:ff:d5: f1:5b:56:34:ad:c2:9c:dd:c9:73:be:55:19:22:59:2b:b1:f5: 29:65:e3:75:dd:04:47:7b:c4:ab:75:55:10:73:e1:77:22:0f: c5:5f:40:75:86:df:04:18:4f:49:0f:3f:01:73:fa:77:1e:98: 20:dd:91:ab:c1:0d:7e:cc:69:70:1b:c6:33:d9:93:fc:5a:2a: e3:3a:5b:15:6e:75:7b:74:9c:e3:f1:0e:3a:cb:66:02:0e:22: 34:5f:c2:25:4d:45:ae:33:16:c5:f5:73:fc:df:3f:13:fc:88: 10:36:f8:75:4e:98:74:db:93:a3:22:46:f3:73:cd:98:fd:5e: f5:97:f2:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwDm4x5uyIlr6It9Savw+ZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTI4MDc1NzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWIwYjJkYTIzMTdjMWUxYTk4ZjEwZDExY2MwZDNiODc5MTFmNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP/BKu8DPsyddj2eoKnrf29ZtYlZ 5M74Zi/JpIh3bQ0zOQMnBffQs3OrOvroKs91kqPFlcLU5bquGaYGpsd2Owv9eFtz UW3u3+nGUGOZxSu4c6vkXT3STo4rjHRsZCwiNUsIX4KZ6tnGVGvvwlMCGcF5mKme pS3N9wfxltYCjCUeGNHN2KVQmyjvkt1QYo448mvLkh1FpvSVXwK07jkWcQPmBG1l XJbg5ijpDBtvtShdz8Pn2E2OSlbvTGQ+bhEnNkeTAAOH2Wzt94IHbiekISLSUc8I zbY7HsB0cqEIKai3ODrY+CqaYB/sGPuVf2f/4EZ2y81TW5NJAI0SfT/bkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKqwstojF8HhqY8Q0RzA07h5EfVbMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcXJDeTJpTVh3ZUdwanhEUkhNRFR1SGtSOVZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1z7MA0G CSqGSIb3DQEBCwUAA4IBAQBgook14nyX45j0WrPz9a/0OrfPHEUsRWxQ7rfFQbf0 rf4zMzVs+YfkN3EdKGk0KZYrifSLZYXhF5Jp8Bqj3YE4OKfi6UwA+BgwHEBYAvLY Vg0PF7mhXjIV1MvpctGf3dd+6NgLGe9uasmMdKeyOgCbdek9dwB2kf9rFwJt/9Xx W1Y0rcKc3clzvlUZIlkrsfUpZeN13QRHe8SrdVUQc+F3Ig/FX0B1ht8EGE9JDz8B c/p3Hpgg3ZGrwQ1+zGlwG8Yz2ZP8WirjOlsVbnV7dJzj8Q46y2YCDiI0X8IlTUWu MxbF9XP83z8T/IgQNvh1Tph025OjIkbzc82Y/V71l/Jd -----END CERTIFICATE-----Generated at Thu Jan 29 14:48:49 2026 by rpki-client