This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/qKVtlv3W7vjWS1xd7JwxDC1EnCE.roa File: qKVtlv3W7vjWS1xd7JwxDC1EnCE.roa (raw, json) Hash identifier: pQJ4/lFMndf01cjoPvkJY3R02om+5915006Zk5RIRaU= Subject key identifier: A8:A5:6D:96:FD:D6:EE:F8:D6:4B:5C:5D:EC:9C:31:0C:2D:44:9C:21 Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92 Certificate serial: 019B7F15CE1B7B4E78F9959AA593AD9EEDAE Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/qKVtlv3W7vjWS1xd7JwxDC1EnCE.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44858 IP address blocks: 91.245.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ce:1b:7b:4e:78:f9:95:9a:a5:93:ad:9e:ed:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8a56d96fdd6eef8d64b5c5dec9c310c2d449c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:79:14:1a:6e:40:82:5d:e0:ae:a9:2f:f3:98: c1:c5:ef:2c:68:74:c8:54:c1:a1:d2:2a:9c:08:16: 14:4b:33:c9:b6:3f:9f:6e:b2:bf:cc:3c:ac:07:05: 2a:6c:23:ab:36:62:91:d9:dc:3a:6e:29:5a:9f:52: 0f:d8:6a:1d:2b:d6:6d:eb:d3:23:7b:af:96:9b:fa: e6:e5:6f:83:29:96:26:db:7d:bf:75:54:2a:3f:b1: fe:ad:07:56:a1:92:11:b2:7c:69:ca:47:0b:ad:3c: ef:20:52:fe:a9:59:50:ee:b1:89:c1:f9:7b:80:5f: 36:53:0a:aa:89:c0:c5:b8:dc:37:6d:f3:ec:41:8a: 35:b4:47:c9:74:67:fc:46:4d:e5:6b:74:64:9c:e3: 73:fc:9b:5d:76:e7:a5:99:11:18:6f:f4:46:9c:0d: 72:44:77:3b:4e:7f:6e:01:fc:d9:7e:fb:a9:f6:50: 79:b3:e3:ef:88:5d:34:72:09:7d:de:ef:58:0d:ef: b1:fc:b7:08:15:c7:ad:d9:20:2c:61:d2:6a:22:6c: 27:8e:27:8d:b8:0f:5b:09:c4:14:ca:87:ff:e6:8f: 58:ec:ad:24:d3:b4:ea:eb:7e:6b:ca:b2:ff:e0:d4: fc:ff:7e:2f:3c:32:ea:fc:e3:da:85:75:a0:35:5a: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A5:6D:96:FD:D6:EE:F8:D6:4B:5C:5D:EC:9C:31:0C:2D:44:9C:21 X509v3 Authority Key Identifier: keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/qKVtlv3W7vjWS1xd7JwxDC1EnCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.240.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:63:2f:46:9d:9a:ef:5c:e1:45:b3:22:96:e0:0e:04:d3:53: 4d:0f:64:32:6d:71:ae:93:84:7d:43:cb:80:55:7c:d7:c4:6f: e7:6b:46:44:a0:25:92:e4:ed:14:0a:eb:1b:ba:bd:59:0e:5f: a5:7e:ae:d9:05:1b:1f:46:9a:2c:57:44:01:4f:d3:7d:95:e7: 40:71:7d:dd:a8:e1:9a:f9:a2:a1:5e:d7:a9:5c:86:ee:bb:36: 43:a6:1d:00:33:22:57:aa:3c:88:cb:d9:e9:21:cf:cd:8c:c8: 4e:53:bf:99:1f:21:27:82:2c:5e:4a:15:a3:02:63:ad:a5:70: 1b:d5:0d:79:67:f4:b8:c7:24:f3:2a:d7:14:27:23:87:8c:ef: d2:3b:20:6e:a5:4b:a3:d4:cc:b0:39:80:2a:de:2d:5c:97:b1: eb:79:06:85:48:24:27:1c:a4:02:b9:f0:88:75:5c:ba:c0:90: fb:8c:93:c1:83:1a:f6:b2:d8:8a:f6:4f:50:27:4a:e4:6c:46: 04:8d:59:59:9b:1a:5e:90:00:95:17:cf:8f:f0:7b:5a:9a:09: 6c:53:10:da:04:79:a0:5c:4f:9e:48:b6:2b:4d:e6:6a:b8:f1: 5e:45:33:85:c0:c4:03:3e:27:77:18:44:bc:7e:03:23:d6:82: b1:57:6d:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fc4be054+ZWapZOtnu2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzc4ZDgyMjZjYjVhYWZmMTVjNjc1MjVhZjJiOGFiY2I3 YjVmOTIwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGE1NmQ5NmZkZDZlZWY4ZDY0YjVjNWRlYzljMzEwYzJkNDQ5YzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnkUGm5Agl3grqkv85jBxe8saHTI VMGh0iqcCBYUSzPJtj+fbrK/zDysBwUqbCOrNmKR2dw6bilan1IP2GodK9Zt69Mj e6+Wm/rm5W+DKZYm232/dVQqP7H+rQdWoZIRsnxpykcLrTzvIFL+qVlQ7rGJwfl7 gF82UwqqicDFuNw3bfPsQYo1tEfJdGf8Rk3la3RknONz/JtdduelmREYb/RGnA1y RHc7Tn9uAfzZfvup9lB5s+PviF00cgl93u9YDe+x/LcIFcet2SAsYdJqImwnjieN uA9bCcQUyof/5o9Y7K0k07Tq635ryrL/4NT8/34vPDLq/OPahXWgNVr3sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKilbZb91u741ktcXeycMQwtRJwhMB8GA1UdIwQY MBaAFD7HjYImy1qv8VxnUlryuKvLe1+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYjM3NDEtNDM0ZC00YjVhLTg5MGIt MjA1OGM3MDM2N2FhLzEvcUtWdGx2M1c3dmpXUzF4ZDdKd3hEQzFFbkNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYjM3NDEtNDM0ZC00YjVhLTg5MGItMjA1OGM3MDM2N2Fh LzEvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/XwMA0G CSqGSIb3DQEBCwUAA4IBAQAuYy9GnZrvXOFFsyKW4A4E01NND2QybXGuk4R9Q8uA VXzXxG/na0ZEoCWS5O0UCusbur1ZDl+lfq7ZBRsfRposV0QBT9N9ledAcX3dqOGa +aKhXtepXIbuuzZDph0AMyJXqjyIy9npIc/NjMhOU7+ZHyEngixeShWjAmOtpXAb 1Q15Z/S4xyTzKtcUJyOHjO/SOyBupUuj1MywOYAq3i1cl7HreQaFSCQnHKQCufCI dVy6wJD7jJPBgxr2stiK9k9QJ0rkbEYEjVlZmxpekACVF8+P8HtamglsUxDaBHmg XE+eSLYrTeZquPFeRTOFwMQDPid3GES8fgMj1oKxV22l -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:33 2026 by rpki-client