This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa File: qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa (raw, json) Hash identifier: OvZ+jG+TA2c8r8TRVg+Z8VbBKScMi5fnRQ6Z1I4vZyA= Subject key identifier: A8:F9:48:26:55:26:34:A6:C2:09:BA:E0:E8:A0:A9:15:D5:18:F0:DF Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db Certificate serial: 019B7AC93861E2DDAF446CE25839ED50DE6C Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa Signing time: Thu 01 Jan 2026 18:19:26 +0000 ROA not before: Thu 01 Jan 2026 18:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25160 IP address blocks: 91.244.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:38:61:e2:dd:af:44:6c:e2:58:39:ed:50:de:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db Validity Not Before: Jan 1 18:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8f94826552634a6c209bae0e8a0a915d518f0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:07:f0:a5:91:47:91:83:da:bd:81:e6:de: 34:ea:77:7d:8d:d5:28:86:df:50:b6:0d:d0:2d:3a: 61:31:72:d6:92:d4:99:b8:b5:e4:f8:b3:3f:38:1c: 1c:fb:db:43:7e:78:9a:32:2d:53:af:6b:ca:1a:33: 78:06:06:14:fe:31:12:30:0d:52:e7:ea:1c:fa:b3: 92:ff:c5:d3:1e:a1:72:19:7c:c2:64:fd:96:a0:79: c6:03:83:1d:ac:7a:f1:ae:3a:0b:a2:a8:f5:a2:ce: a1:b2:bf:e4:d9:11:ee:f9:b4:84:10:2c:aa:34:10: b2:7f:d3:47:fd:b1:68:37:4b:94:74:00:5b:0f:7d: 50:c9:2c:a2:cb:d1:b3:00:ab:88:c0:af:8e:e2:53: d0:50:ee:ac:fd:5e:5a:e1:cf:04:99:d5:08:60:e0: b0:d8:c6:0b:4e:ef:99:4c:e7:79:b7:e5:3b:39:d7: 18:1a:44:bb:35:b1:a3:c2:09:a5:86:8b:e1:c7:c1: f9:c3:81:2e:1f:38:af:6a:60:f3:d4:5e:cf:9c:b5: 17:4f:3c:d8:7a:02:82:e4:88:de:d2:67:b5:59:2e: 8e:12:70:c2:c3:0a:46:d5:cb:c5:c4:70:5d:d7:b9: 25:31:4a:1a:2a:c8:1a:2f:83:4d:32:6b:0d:06:10: 87:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F9:48:26:55:26:34:A6:C2:09:BA:E0:E8:A0:A9:15:D5:18:F0:DF X509v3 Authority Key Identifier: keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.236.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:1c:44:e2:32:d3:43:86:31:7c:7b:78:cc:74:6b:61:1b:4f: 01:9e:6b:75:f0:c1:7e:49:7d:8d:09:74:1a:cb:af:be:fa:33: 6b:61:c9:9a:c0:b3:bf:b3:ae:43:ca:9b:fd:fd:0d:eb:57:f3: cf:9e:9d:ad:29:ea:23:9e:ae:f9:39:f1:9d:4a:0f:2e:45:87: 5b:93:32:57:31:be:83:50:83:3c:c4:8b:83:7a:28:4d:b3:50: 2a:06:56:e8:8a:3b:6d:c6:c6:a6:b7:f8:32:77:c5:92:9e:91: 6a:5f:20:fc:27:80:b6:84:f1:19:b6:f2:d4:63:58:f2:6f:27: 88:c4:a2:f4:a9:c6:2c:12:c9:9b:b5:14:76:dc:ae:4e:0c:b0: f8:77:e3:0f:ef:a7:b5:fc:5f:af:ae:c7:28:24:10:ad:57:3a: 5c:da:1d:3e:e0:f7:8d:a7:52:24:d6:02:e0:d8:75:f1:f0:c5: 23:99:7b:4d:61:36:27:57:00:fc:89:b1:16:94:88:cb:ce:01: 30:11:80:d0:ef:51:1c:d2:0e:d5:ac:63:d9:5b:2b:d0:ff:cf: d1:47:ae:fd:d7:de:4a:7a:4c:22:2d:94:82:a1:36:c9:fc:2f: e8:07:41:da:27:b2:d7:4d:cd:33:ae:da:13:3d:30:e5:00:c3: 95:4c:d0:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yThh4t2vRGziWDntUN5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMmU1YjY3ZjI1Y2JkODgyY2E0ZDAyM2QyMWVmOThkNDgz NzM1ZGIwHhcNMjYwMTAxMTgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGY5NDgyNjU1MjYzNGE2YzIwOWJhZTBlOGEwYTkxNWQ1MThmMGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkkH8KWRR5GD2r2B5t406nd9jdUo ht9Qtg3QLTphMXLWktSZuLXk+LM/OBwc+9tDfniaMi1Tr2vKGjN4BgYU/jESMA1S 5+oc+rOS/8XTHqFyGXzCZP2WoHnGA4MdrHrxrjoLoqj1os6hsr/k2RHu+bSEECyq NBCyf9NH/bFoN0uUdABbD31QySyiy9GzAKuIwK+O4lPQUO6s/V5a4c8EmdUIYOCw 2MYLTu+ZTOd5t+U7OdcYGkS7NbGjwgmlhovhx8H5w4EuHzivamDz1F7PnLUXTzzY egKC5Ije0me1WS6OEnDCwwpG1cvFxHBd17klMUoaKsgaL4NNMmsNBhCH9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKj5SCZVJjSmwgm64OigqRXVGPDfMB8GA1UdIwQY MBaAFKsuW2fyXL2ILKTQI9Ie+Y1INzXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEt M2Y2ZWMyNDk3MTdjLzEvcVBsSUpsVW1OS2JDQ2JyZzZLQ3BGZFVZOE44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEtM2Y2ZWMyNDk3MTdj LzEvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/TsMA0G CSqGSIb3DQEBCwUAA4IBAQAKHETiMtNDhjF8e3jMdGthG08Bnmt18MF+SX2NCXQa y6+++jNrYcmawLO/s65Dypv9/Q3rV/PPnp2tKeojnq75OfGdSg8uRYdbkzJXMb6D UIM8xIuDeihNs1AqBlboijttxsamt/gyd8WSnpFqXyD8J4C2hPEZtvLUY1jybyeI xKL0qcYsEsmbtRR23K5ODLD4d+MP76e1/F+vrscoJBCtVzpc2h0+4PeNp1Ik1gLg 2HXx8MUjmXtNYTYnVwD8ibEWlIjLzgEwEYDQ71Ec0g7VrGPZWyvQ/8/RR679195K ekwiLZSCoTbJ/C/oB0HaJ7LXTc0zrtoTPTDlAMOVTNA8 -----END CERTIFICATE-----Generated at Sat Jan 3 18:32:37 2026 by rpki-client