This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tql0FgvF8jM67zKzan8fSoCPqyY.roa File: tql0FgvF8jM67zKzan8fSoCPqyY.roa (raw, json) Hash identifier: jzRJqZKoQvGXakDBy7gTkwDQzK2ydiIYPXdbZN2bkPc= Subject key identifier: B6:A9:74:16:0B:C5:F2:33:3A:EF:32:B3:6A:7F:1F:4A:80:8F:AB:26 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8541417DF51B5563B222BCD3044706 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tql0FgvF8jM67zKzan8fSoCPqyY.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202722 IP address blocks: 91.242.80.0/24 maxlen: 24 91.242.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:41:41:7d:f5:1b:55:63:b2:22:bc:d3:04:47:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6a974160bc5f2333aef32b36a7f1f4a808fab26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d8:0f:32:3d:67:9e:c7:01:98:ca:d6:4f:a9: 8d:33:60:a9:57:bd:68:b9:fa:72:87:5f:57:ab:6b: a4:32:39:bf:6a:19:4f:51:e1:ad:a8:0f:5b:0a:e7: d8:6e:d7:a8:3d:be:34:ac:05:86:f9:9a:66:18:fa: 9e:a9:62:c3:f3:ab:be:be:85:3e:1a:69:be:d7:7c: fa:49:41:b5:4b:6d:a1:23:b2:8b:bf:a0:ae:34:69: 37:b6:5a:f2:a3:e7:c8:61:18:0f:73:35:da:b8:bf: 56:c0:29:03:df:74:78:50:bc:f2:f1:c3:a1:d7:1a: 74:b3:fd:47:68:d1:5a:64:b8:d6:af:19:8d:6b:2a: 46:88:06:99:db:f2:d0:65:61:37:44:95:f4:19:ab: 84:ec:78:5c:5b:ee:a0:dc:51:6a:e3:7f:7b:a6:87: d5:74:90:a2:a4:9d:84:44:d7:dd:8d:95:04:7a:66: cb:ad:94:0a:7b:43:c6:f5:10:9a:20:d4:ee:b4:65: 94:f8:4d:6e:9a:f8:2d:eb:37:6e:4e:dc:3d:be:80: c9:68:49:56:c8:b3:e7:63:fd:0a:ca:95:ee:fc:e1: 76:75:db:9b:8a:11:14:fd:55:7a:a3:06:77:d4:b6: 8a:cc:b3:2e:ef:22:43:10:96:a6:d3:32:17:6e:09: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A9:74:16:0B:C5:F2:33:3A:EF:32:B3:6A:7F:1F:4A:80:8F:AB:26 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tql0FgvF8jM67zKzan8fSoCPqyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.80.0/24 91.242.99.0/24 Signature Algorithm: sha256WithRSAEncryption 90:9a:d1:e1:e0:12:b2:c3:5b:ab:db:68:11:f8:38:65:b4:cd: 21:14:df:2d:0b:45:78:3f:a4:f4:20:89:6e:ff:cd:e8:e7:3b: 2d:b1:d5:50:44:e2:e1:25:df:57:1d:b2:bb:31:cb:10:0a:30: 23:b6:da:44:58:2c:6e:e0:b1:e8:d9:1a:a3:4c:ec:ca:3c:b5: 8f:ca:90:79:13:68:ea:80:c4:54:8a:ce:21:03:77:43:2e:3d: 3c:cb:04:d2:ee:71:50:4c:51:e0:90:5d:40:54:44:6a:33:07: 62:06:81:06:27:dc:0b:f8:7c:5a:f8:bd:c3:87:a1:b8:16:b3: cd:37:3f:10:4f:8f:bb:ad:99:41:de:1c:7a:df:8d:01:7a:c4: fe:2b:0c:75:f0:2c:cd:b6:80:55:f9:51:ac:c8:78:bb:66:b4: 78:d1:3b:21:36:f8:c0:ae:8a:dd:1d:f7:20:c2:16:c7:b5:c2: 71:7e:cb:19:b8:12:b7:59:78:b5:e9:ad:9a:42:15:5a:62:18: 1a:ac:81:9a:30:ce:0c:11:c8:3d:73:94:30:00:d4:a8:0c:2a: 46:cb:9b:5f:9b:86:b2:88:79:71:4d:77:b9:94:76:83:87:3e: d5:d4:91:66:73:03:4c:9d:a9:5d:f8:77:e9:f6:dc:da:04:31: 8d:aa:bd:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hUFBffUbVWOyIrzTBEcGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmE5NzQxNjBiYzVmMjMzM2FlZjMyYjM2YTdmMWY0YTgwOGZhYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9gPMj1nnscBmMrWT6mNM2CpV71o ufpyh19Xq2ukMjm/ahlPUeGtqA9bCufYbteoPb40rAWG+ZpmGPqeqWLD86u+voU+ Gmm+13z6SUG1S22hI7KLv6CuNGk3tlryo+fIYRgPczXauL9WwCkD33R4ULzy8cOh 1xp0s/1HaNFaZLjWrxmNaypGiAaZ2/LQZWE3RJX0GauE7HhcW+6g3FFq4397pofV dJCipJ2ERNfdjZUEembLrZQKe0PG9RCaINTutGWU+E1umvgt6zduTtw9voDJaElW yLPnY/0KypXu/OF2ddubihEU/VV6owZ31LaKzLMu7yJDEJam0zIXbgmoiQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLapdBYLxfIzOu8ys2p/H0qAj6smMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvdHFsMEZndkY4ak02N3pLemFuOGZTb0NQcXlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/JQAwQA W/JjMA0GCSqGSIb3DQEBCwUAA4IBAQCQmtHh4BKyw1ur22gR+DhltM0hFN8tC0V4 P6T0IIlu/83o5zstsdVQROLhJd9XHbK7McsQCjAjttpEWCxu4LHo2RqjTOzKPLWP ypB5E2jqgMRUis4hA3dDLj08ywTS7nFQTFHgkF1AVERqMwdiBoEGJ9wL+Hxa+L3D h6G4FrPNNz8QT4+7rZlB3hx6340BesT+Kwx18CzNtoBV+VGsyHi7ZrR40TshNvjA rordHfcgwhbHtcJxfssZuBK3WXi16a2aQhVaYhgarIGaMM4MEcg9c5QwANSoDCpG y5tfm4ayiHlxTXe5lHaDhz7V1JFmcwNMnald+Hfp9tzaBDGNqr17 -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:48 2026 by rpki-client