This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/Rqr6fCRxJV6enLCB-UduZfofMbM.roa File: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (raw, json) Hash identifier: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0= Subject key identifier: 46:AA:FA:7C:24:71:25:5E:9E:9C:B0:81:F9:47:6E:65:FA:1F:31:B3 Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89 Certificate serial: 019B7F15A24D6CAD5A6D364982A26CDA530E Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/Rqr6fCRxJV6enLCB-UduZfofMbM.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 91.239.209.0/24 maxlen: 24 159.255.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a2:4d:6c:ad:5a:6d:36:49:82:a2:6c:da:53:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89 Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46aafa7c2471255e9e9cb081f9476e65fa1f31b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:4a:ca:78:66:90:77:5a:6d:e5:48:50:d4: f3:97:c5:3e:3a:28:a3:df:95:98:0e:0e:e0:b2:39: c1:c5:ca:bf:d4:2d:d3:2c:63:98:86:35:6f:51:7c: 20:7b:6b:0a:36:6d:c8:c2:e9:95:a7:2a:64:78:e7: 8e:70:50:35:3d:e5:3a:88:bf:64:f3:2d:96:9d:ae: 76:dc:e7:ce:53:11:16:bf:7c:3a:73:bf:2a:b4:38: 30:55:bf:1a:15:0d:55:f1:70:4d:2f:3a:e3:b7:d5: 91:36:75:be:2b:17:e5:cc:ff:af:54:e4:22:72:45: 77:c7:36:fb:7e:28:a9:c8:d6:7b:4b:c5:06:9e:de: 41:fd:42:11:4f:04:05:98:9b:ba:ee:0e:81:51:12: 18:d7:44:f2:7f:77:1e:82:93:84:02:c1:3e:8c:67: 64:59:33:23:f9:fb:81:f6:a5:ff:67:93:41:25:ba: 43:88:58:61:20:5e:14:27:ff:86:24:38:a2:57:05: 8a:e6:74:24:f1:dc:ca:6c:80:6e:78:86:08:cb:fe: 90:49:15:1b:16:14:e3:4a:bf:5e:9d:ef:06:a9:b5: 59:3e:07:fc:9e:64:25:da:69:0f:fa:8a:5f:ab:dd: 13:e5:94:e5:1c:0a:a4:99:4a:23:38:6e:f8:1a:e8: aa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AA:FA:7C:24:71:25:5E:9E:9C:B0:81:F9:47:6E:65:FA:1F:31:B3 X509v3 Authority Key Identifier: keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/Rqr6fCRxJV6enLCB-UduZfofMbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.209.0/24 159.255.150.0/24 Signature Algorithm: sha256WithRSAEncryption 78:ba:ab:0c:c4:98:48:58:35:4b:97:d8:b7:18:ca:49:73:a3: d8:10:e6:84:66:b5:9e:34:26:d5:9c:9c:ca:c2:68:f7:45:59: 8a:98:83:f6:90:6d:4a:71:2a:f0:42:b5:9d:26:70:98:13:5a: 2d:9a:8e:a2:c6:12:f7:6e:62:25:c2:20:0e:49:3e:0b:f2:0b: 9c:7b:21:aa:4d:69:6b:4c:41:7d:48:1f:88:e2:7a:39:79:78: 2c:8a:a8:0b:e7:bb:20:3f:8f:7e:fc:f6:9b:48:dc:81:1c:1c: de:22:fd:8f:b5:34:a3:3e:cf:29:8c:bf:34:e1:c8:a7:42:a0: 27:b2:86:35:76:73:f3:e7:86:38:a8:ec:83:ca:1e:63:b8:2b: 72:4e:56:97:f8:4a:62:7b:79:fc:9a:9a:8e:c5:e0:b8:46:81: fd:21:7d:6e:f8:4d:ed:81:89:98:7f:a3:cf:eb:e9:4d:2c:61: 1c:b5:bf:d3:b8:04:52:fb:6c:88:b5:52:e9:21:75:0e:d7:a7: e6:c5:4e:f6:43:0c:ae:57:7a:56:cd:b9:21:e4:23:87:c4:1c: c8:8b:88:fd:75:f1:ab:7b:90:66:f3:14:1f:9d:fd:3e:11:f0: bc:43:5a:aa:52:a3:23:0b:22:86:a6:51:da:a8:6a:a9:d8:b7: 9c:1d:c4:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FaJNbK1abTZJgqJs2lMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYmRlZjNiZWI0MTE0Y2ZjYmZlYjlmYjRlZDhkYTk4ZmFm NGZhODkwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmFhZmE3YzI0NzEyNTVlOWU5Y2IwODFmOTQ3NmU2NWZhMWYzMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYtKynhmkHdabeVIUNTzl8U+Oiij 35WYDg7gsjnBxcq/1C3TLGOYhjVvUXwge2sKNm3IwumVpypkeOeOcFA1PeU6iL9k 8y2Wna523OfOUxEWv3w6c78qtDgwVb8aFQ1V8XBNLzrjt9WRNnW+KxflzP+vVOQi ckV3xzb7fiipyNZ7S8UGnt5B/UIRTwQFmJu67g6BURIY10Tyf3cegpOEAsE+jGdk WTMj+fuB9qX/Z5NBJbpDiFhhIF4UJ/+GJDiiVwWK5nQk8dzKbIBueIYIy/6QSRUb FhTjSr9ene8GqbVZPgf8nmQl2mkP+opfq90T5ZTlHAqkmUojOG74GuiqiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEaq+nwkcSVenpywgflHbmX6HzGzMB8GA1UdIwQY MBaAFCC97zvrQRTPy/65+07Y2pj69PqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTkt MWQ4MmFiMTVjNDE1LzEvUnFyNmZDUnhKVjZlbkxDQi1VZHVaZm9mTWJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTktMWQ4MmFiMTVjNDE1 LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+/RAwQA n/+WMA0GCSqGSIb3DQEBCwUAA4IBAQB4uqsMxJhIWDVLl9i3GMpJc6PYEOaEZrWe NCbVnJzKwmj3RVmKmIP2kG1KcSrwQrWdJnCYE1otmo6ixhL3bmIlwiAOST4L8guc eyGqTWlrTEF9SB+I4no5eXgsiqgL57sgP49+/PabSNyBHBzeIv2PtTSjPs8pjL80 4cinQqAnsoY1dnPz54Y4qOyDyh5juCtyTlaX+Epie3n8mpqOxeC4RoH9IX1u+E3t gYmYf6PP6+lNLGEctb/TuARS+2yItVLpIXUO16fmxU72QwyuV3pWzbkh5COHxBzI i4j9dfGre5Bm8xQfnf0+EfC8Q1qqUqMjCyKGplHaqGqp2LecHcQH -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:31 2026 by rpki-client