This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/qUQtHHzlZlnAdpcBQCFJU2QvkX0.roa File: qUQtHHzlZlnAdpcBQCFJU2QvkX0.roa (raw, json) Hash identifier: qu1JzAxBAaT1Zxg22q0d5br8OX9u/IStZcSKhmMoN5I= Subject key identifier: A9:44:2D:1C:7C:E5:66:59:C0:76:97:01:40:21:49:53:64:2F:91:7D Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702 Certificate serial: 019B7F1552CF2EB8854170F3A829A8FEF640 Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/qUQtHHzlZlnAdpcBQCFJU2QvkX0.roa Signing time: Fri 02 Jan 2026 14:21:02 +0000 ROA not before: Fri 02 Jan 2026 14:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25143 IP address blocks: 91.239.48.0/24 maxlen: 24 91.239.49.0/24 maxlen: 24 91.239.50.0/24 maxlen: 24 91.239.51.0/24 maxlen: 24 193.19.228.0/24 maxlen: 24 193.19.229.0/24 maxlen: 24 193.19.230.0/24 maxlen: 24 193.19.231.0/24 maxlen: 24 193.238.20.0/24 maxlen: 24 193.238.21.0/24 maxlen: 24 193.238.22.0/24 maxlen: 24 193.238.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:52:cf:2e:b8:85:41:70:f3:a8:29:a8:fe:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702 Validity Not Before: Jan 2 14:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9442d1c7ce56659c076970140214953642f917d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:2c:06:39:c2:2a:87:7b:a1:6d:96:96:ac: 56:80:42:69:df:9d:4e:15:05:16:33:44:84:6d:66: 7b:42:57:6c:de:d4:f3:a5:db:33:0a:37:2d:1d:13: f3:0d:43:ae:6f:4b:4d:45:7f:1b:79:49:78:69:da: be:86:75:bb:4c:83:c7:28:df:1e:99:49:a8:1f:a6: ca:0b:ad:fb:a8:10:a9:d7:7d:53:31:11:5b:53:71: 8b:1b:71:29:31:83:6c:f0:48:ed:e3:4d:0d:a9:6c: 09:69:5e:45:c2:23:eb:b4:1b:21:11:a9:4e:05:87: f9:44:db:8e:3e:e5:36:d7:9a:49:6b:22:82:f3:cd: 2b:9b:70:7b:d6:c0:af:7a:1a:2f:ae:4e:a0:e9:9b: 1a:23:2d:c0:60:a8:d5:ae:21:dd:85:8b:62:f1:c7: 12:a2:79:02:35:65:1b:17:8f:ea:00:03:a4:26:68: 20:b9:19:32:72:2a:b8:43:f8:c2:f4:01:a9:b0:8a: 7d:3b:c5:a7:7a:ef:0e:89:50:fe:c3:5f:72:50:90: d8:dd:31:76:9b:5c:1a:94:59:52:be:97:81:b9:6f: 7d:24:fd:f4:ef:8d:52:8f:7b:55:03:93:c0:b3:9a: 4d:65:b3:ee:6b:fd:88:c2:d3:b4:29:5a:16:a6:ae: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:44:2D:1C:7C:E5:66:59:C0:76:97:01:40:21:49:53:64:2F:91:7D X509v3 Authority Key Identifier: keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/qUQtHHzlZlnAdpcBQCFJU2QvkX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.48.0/22 193.19.228.0/22 193.238.20.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:86:67:10:d2:b1:f0:4e:ec:c0:84:d5:fd:98:96:7d:ae:c7: ac:9a:a5:58:5b:01:41:ce:24:cd:a0:35:c3:df:38:bf:5f:21: 2c:c2:34:fc:d2:de:e6:2b:cb:31:7f:b9:9d:94:ca:44:1c:3e: 69:8a:1b:db:5a:18:d8:42:d9:fb:6a:14:08:1d:c2:29:b6:b3: 9c:05:71:96:48:c3:46:cb:3e:a6:2f:7c:fa:10:55:fe:52:ca: 98:90:b8:26:18:ef:de:b4:03:36:5c:60:8e:a5:8c:0d:73:b3: 8c:57:cf:e9:67:29:31:23:e9:f6:e9:10:6c:f5:5f:5b:62:26: f6:8e:a4:7a:5c:60:c2:7c:67:f7:79:6d:38:0e:6a:b9:0e:c6: 12:4a:49:84:3b:5e:e4:3d:2a:ad:66:09:2f:f5:18:30:9d:90: 9c:b0:5e:5a:ff:04:52:4f:79:a4:42:ec:19:f9:ef:68:47:42: c4:ea:85:e6:13:d9:48:17:c3:a6:f5:0b:2d:80:73:69:f5:ed: 4e:5f:83:d9:52:7e:44:b2:a3:ad:3b:33:90:97:e5:fd:65:6c: f4:67:28:61:79:60:0c:3d:9a:e8:a5:26:c3:04:20:df:21:f8: 2a:c0:db:96:d1:47:b2:ec:3d:f3:2c:43:9f:ff:3d:d1:4b:b6: 7e:cf:79:14 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FVLPLriFQXDzqCmo/vZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYmNkODhhYzNlMDJjZmZhZDNjMDBkZTQ2YjVkYTMzNmJk NjQ3MDIwHhcNMjYwMTAyMTQyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTQ0MmQxYzdjZTU2NjU5YzA3Njk3MDE0MDIxNDk1MzY0MmY5MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfIsBjnCKod7oW2WlqxWgEJp351O FQUWM0SEbWZ7Qlds3tTzpdszCjctHRPzDUOub0tNRX8beUl4adq+hnW7TIPHKN8e mUmoH6bKC637qBCp131TMRFbU3GLG3EpMYNs8Ejt400NqWwJaV5FwiPrtBshEalO BYf5RNuOPuU215pJayKC880rm3B71sCvehovrk6g6ZsaIy3AYKjVriHdhYti8ccS onkCNWUbF4/qAAOkJmgguRkyciq4Q/jC9AGpsIp9O8Wneu8OiVD+w19yUJDY3TF2 m1walFlSvpeBuW99JP30741Sj3tVA5PAs5pNZbPua/2IwtO0KVoWpq5oJQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKlELRx85WZZwHaXAUAhSVNkL5F9MB8GA1UdIwQY MBaAFKK82IrD4Cz/rTwA3ka12jNr1kcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUt YWFiODYyODYxYTA5LzEvcVVRdEhIemxabG5BZHBjQlFDRkpVMlF2a1gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUtYWFiODYyODYxYTA5 LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW+8wAwQC wRPkAwQCwe4UMA0GCSqGSIb3DQEBCwUAA4IBAQBvhmcQ0rHwTuzAhNX9mJZ9rses mqVYWwFBziTNoDXD3zi/XyEswjT80t7mK8sxf7mdlMpEHD5pihvbWhjYQtn7ahQI HcIptrOcBXGWSMNGyz6mL3z6EFX+UsqYkLgmGO/etAM2XGCOpYwNc7OMV8/pZykx I+n26RBs9V9bYib2jqR6XGDCfGf3eW04Dmq5DsYSSkmEO17kPSqtZgkv9RgwnZCc sF5a/wRST3mkQuwZ+e9oR0LE6oXmE9lIF8Om9QstgHNp9e1OX4PZUn5EsqOtOzOQ l+X9ZWz0ZyhheWAMPZropSbDBCDfIfgqwNuW0Uey7D3zLEOf/z3RS7Z+z3kU -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:21 2026 by rpki-client