This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/qM0Ao1npKGHo4sRaXkAZ4PKUkao.roa File: qM0Ao1npKGHo4sRaXkAZ4PKUkao.roa (raw, json) Hash identifier: xm3mTURCaqDC11Ly2xfoF8pGLGSgKdJlsYcgaLK7YyQ= Subject key identifier: A8:CD:00:A3:59:E9:28:61:E8:E2:C4:5A:5E:40:19:E0:F2:94:91:AA Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15 Certificate serial: 019B790FF9FE05926B907E4FDCB415A39678 Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/qM0Ao1npKGHo4sRaXkAZ4PKUkao.roa Signing time: Thu 01 Jan 2026 10:17:28 +0000 ROA not before: Thu 01 Jan 2026 10:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211073 IP address blocks: 91.207.176.0/23 maxlen: 23 91.207.176.0/24 maxlen: 24 91.207.177.0/24 maxlen: 24 2001:67c:414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f9:fe:05:92:6b:90:7e:4f:dc:b4:15:a3:96:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15 Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8cd00a359e92861e8e2c45a5e4019e0f29491aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:6d:9a:51:2c:6e:f5:56:e4:9d:94:b9:47: ac:de:19:59:cc:7a:43:22:04:ed:0b:f7:98:07:e7: 4c:fa:b7:91:3c:fe:c9:de:e9:26:fd:85:a6:2d:f5: d2:dd:f9:c0:24:51:ca:db:7e:e6:2b:af:3a:45:fd: 59:e1:57:0b:c3:8a:b6:3a:e6:ef:3d:80:c9:bf:2f: ca:70:4b:01:18:70:61:87:5f:da:dd:b1:31:a9:1e: a5:6f:e2:62:6b:ab:37:04:52:aa:74:44:89:03:f2: b7:bf:be:b6:46:61:19:17:98:6c:d3:71:8d:87:bd: e4:41:8d:2d:59:67:16:18:d2:9c:4f:8d:ea:6b:37: 4b:aa:87:f6:6e:47:eb:5a:30:86:2e:68:da:ea:fe: 72:e4:8e:25:02:63:c7:c0:a8:ad:08:b4:ae:b1:9c: d5:fb:e3:1e:b4:a1:b9:9b:43:24:7e:c5:6a:39:5e: 75:ec:93:63:65:aa:b6:28:46:75:bd:11:25:78:7d: e8:81:ff:ad:36:0e:93:88:7d:d4:2f:ff:dd:55:5a: 0f:02:80:dd:95:5d:5b:37:39:e7:58:da:7f:df:62: de:8f:46:c8:ec:4a:9f:df:7c:68:29:49:04:d2:50: 3a:57:33:ed:ef:17:71:94:f9:58:94:ea:1d:fa:33: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CD:00:A3:59:E9:28:61:E8:E2:C4:5A:5E:40:19:E0:F2:94:91:AA X509v3 Authority Key Identifier: keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/qM0Ao1npKGHo4sRaXkAZ4PKUkao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.176.0/23 IPv6: 2001:67c:414::/48 Signature Algorithm: sha256WithRSAEncryption 02:29:4b:01:7f:23:7b:7c:33:74:da:67:d6:a5:73:b7:36:6d: 1f:ff:14:00:49:f9:8d:9f:95:3c:8b:ce:42:c7:27:f7:e4:5b: dc:28:82:d7:f1:ad:46:61:18:b4:ae:70:7f:ef:c3:f8:c4:ad: de:9d:6a:7c:1a:05:a1:96:94:2a:85:53:fe:4c:90:de:30:59: 3a:12:43:d2:67:d6:f5:89:08:20:d6:f1:2a:ce:97:30:07:90: d6:a7:4c:8a:da:96:83:a9:2c:47:23:f9:49:16:47:6f:8c:ca: c3:2c:0d:53:95:a4:9e:df:db:4d:08:b4:b0:b3:aa:3a:80:5c: ee:bb:e4:d5:3f:af:90:b7:74:5a:6b:ba:3e:b6:10:86:6f:a7: 80:c2:54:94:1d:1e:49:29:1b:74:25:5d:e8:4f:56:b3:06:27: d5:1a:aa:45:62:fe:a7:29:1f:e3:19:81:43:a6:e5:b5:71:7e: 5b:66:bc:e1:54:26:eb:d3:31:ea:1d:d0:cf:a6:37:6d:74:7f: 3f:a4:76:4a:ad:7d:3e:aa:68:d6:a8:13:39:40:db:2d:cb:42: 8c:b6:d6:1d:62:b6:0c:31:e6:09:c2:21:f7:1b:b1:e5:2f:7e: 05:15:94:1c:e2:4b:33:5b:f0:73:0a:2d:af:da:84:fb:f8:ae: 03:de:82:f9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5D/n+BZJrkH5P3LQVo5Z4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNTI4YzEyNmFlZDBkN2Y1YTA2OTUwZWIyYzIwMzM0ODY4 NTZhMTUwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGNkMDBhMzU5ZTkyODYxZThlMmM0NWE1ZTQwMTllMGYyOTQ5MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKJtmlEsbvVW5J2UuUes3hlZzHpD IgTtC/eYB+dM+reRPP7J3ukm/YWmLfXS3fnAJFHK237mK686Rf1Z4VcLw4q2Oubv PYDJvy/KcEsBGHBhh1/a3bExqR6lb+Jia6s3BFKqdESJA/K3v762RmEZF5hs03GN h73kQY0tWWcWGNKcT43qazdLqof2bkfrWjCGLmja6v5y5I4lAmPHwKitCLSusZzV ++MetKG5m0MkfsVqOV517JNjZaq2KEZ1vREleH3ogf+tNg6TiH3UL//dVVoPAoDd lV1bNznnWNp/32Lej0bI7Eqf33xoKUkE0lA6VzPt7xdxlPlYlOod+jNFZQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKjNAKNZ6Shh6OLEWl5AGeDylJGqMB8GA1UdIwQY MBaAFLtSjBJq7Q1/WgaVDrLCAzSGhWoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2It MjE1OWVmZWU2YTA3LzEvcU0wQW8xbnBLR0hvNHNSYVhrQVo0UEtVa2FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2ItMjE1OWVmZWU2YTA3 LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW8+wMA8E AgACMAkDBwAgAQZ8BBQwDQYJKoZIhvcNAQELBQADggEBAAIpSwF/I3t8M3TaZ9al c7c2bR//FABJ+Y2flTyLzkLHJ/fkW9wogtfxrUZhGLSucH/vw/jErd6danwaBaGW lCqFU/5MkN4wWToSQ9Jn1vWJCCDW8SrOlzAHkNanTIraloOpLEcj+UkWR2+MysMs DVOVpJ7f200ItLCzqjqAXO675NU/r5C3dFpruj62EIZvp4DCVJQdHkkpG3QlXehP VrMGJ9UaqkVi/qcpH+MZgUOm5bVxfltmvOFUJuvTMeod0M+mN210fz+kdkqtfT6q aNaoEzlA2y3LQoy21h1itgwx5gnCIfcbseUvfgUVlBziSzNb8HMKLa/ahPv4rgPe gvk= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:39 2026 by rpki-client