This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/qkoAr_KuXYuK5zR2LayC2hJcN9Q.roa File: qkoAr_KuXYuK5zR2LayC2hJcN9Q.roa (raw, json) Hash identifier: QgFzqo+zZRD3aFWIozFXdcVEC6p5YunAVsbUCMVWzNY= Subject key identifier: AA:4A:00:AF:F2:AE:5D:8B:8A:E7:34:76:2D:AC:82:DA:12:5C:37:D4 Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207 Certificate serial: 019B77C730DB07DB2194B98B3318ADC258EF Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/qkoAr_KuXYuK5zR2LayC2hJcN9Q.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51780 IP address blocks: 91.209.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:30:db:07:db:21:94:b9:8b:33:18:ad:c2:58:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa4a00aff2ae5d8b8ae734762dac82da125c37d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:96:de:8b:b8:38:af:3e:1d:a0:5b:3e:6b: ff:ca:08:2e:e1:86:51:8b:5e:49:34:cf:0c:78:6e: e4:05:1f:af:dc:c8:3c:f5:4a:e7:74:94:0f:6c:3a: 90:14:e5:b0:1e:95:de:99:db:29:5b:d0:35:6b:38: c2:fb:e5:5a:df:3e:3d:13:78:b3:83:30:99:62:51: 2c:fc:84:b5:2e:8f:78:f0:4c:aa:63:c5:5b:2d:cb: 23:7f:7a:37:c2:59:ae:2a:89:a3:1d:ee:a9:26:ba: d5:68:f3:79:ea:90:1a:38:a5:69:bb:d5:3c:5d:0e: b7:a9:4f:80:76:81:86:e8:5d:90:7b:74:29:96:27: 92:a6:87:b5:93:94:ee:77:3d:7a:e9:04:16:e7:a9: d5:cb:18:28:2c:c5:4d:36:5a:f6:94:20:c5:af:f9: 5c:2b:8f:af:33:72:47:31:5a:f0:9b:e1:a6:03:d8: d2:26:cb:78:8f:1e:13:68:d4:42:7f:08:19:d8:e2: 70:f4:e2:25:50:66:3e:e0:cd:c4:3f:50:da:58:3f: 7f:42:06:b5:43:35:8e:ad:f0:ec:82:3f:27:8b:13: 3a:4a:15:3f:0f:40:31:37:f2:c5:80:df:96:19:22: a4:c6:aa:e2:86:6a:07:f4:06:c4:36:f0:b6:d9:d5: 5e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4A:00:AF:F2:AE:5D:8B:8A:E7:34:76:2D:AC:82:DA:12:5C:37:D4 X509v3 Authority Key Identifier: keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/qkoAr_KuXYuK5zR2LayC2hJcN9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.233.0/24 Signature Algorithm: sha256WithRSAEncryption 32:93:53:f6:0a:0f:3e:e9:27:b4:2b:1a:7c:2c:0c:42:46:b5: b6:57:ed:56:f3:51:ae:69:a6:72:f2:de:98:e0:29:68:6b:5d: 0f:40:10:bf:d6:7a:c9:38:14:2d:7f:1d:1b:91:8b:87:40:f8: d2:ad:5e:1e:b8:b5:cd:e3:6b:a6:0f:c9:4c:a4:3f:e2:15:e1: c0:f9:d0:a5:42:40:37:6d:4f:42:57:4e:71:0b:71:c8:d8:de: 4c:ce:39:8c:8f:97:9c:c0:9e:8a:d4:54:5f:29:6a:74:e0:1c: 34:d1:87:d2:6c:59:1d:b8:76:ea:97:06:ba:2f:46:ca:d1:2e: 29:34:c4:ea:aa:88:4e:8c:75:61:1f:c1:ec:34:e1:d5:bb:e2: 6c:30:c4:58:7b:d6:0f:2c:66:6c:72:98:34:56:fe:2d:38:cc: 04:7c:3a:3a:76:73:9e:20:71:f4:dd:30:95:dd:63:42:3f:bf: 2b:82:f0:50:e7:44:b2:0c:f3:61:12:7f:96:00:ba:ed:46:d3: a2:a2:1c:09:25:c3:ab:6a:5c:02:61:7b:2d:31:51:d3:c7:3b: 11:72:97:14:6e:6f:cf:c3:0c:7b:0b:d4:c1:15:6a:f8:72:0c: 5a:48:1f:b1:0c:e8:9b:02:ba:7a:6a:5b:4d:e0:92:a0:2a:88: 67:5d:b8:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzDbB9shlLmLMxitwljvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNjQ0NmE0YTFjYjU2YjNmNzZmZTZiNGRlZmFiYWQzYmQ5 YjUyMDcwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTRhMDBhZmYyYWU1ZDhiOGFlNzM0NzYyZGFjODJkYTEyNWMzN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbKW3ou4OK8+HaBbPmv/yggu4YZR i15JNM8MeG7kBR+v3Mg89UrndJQPbDqQFOWwHpXemdspW9A1azjC++Va3z49E3iz gzCZYlEs/IS1Lo948EyqY8VbLcsjf3o3wlmuKomjHe6pJrrVaPN56pAaOKVpu9U8 XQ63qU+AdoGG6F2Qe3QplieSpoe1k5Tudz166QQW56nVyxgoLMVNNlr2lCDFr/lc K4+vM3JHMVrwm+GmA9jSJst4jx4TaNRCfwgZ2OJw9OIlUGY+4M3EP1DaWD9/Qga1 QzWOrfDsgj8nixM6ShU/D0AxN/LFgN+WGSKkxqrihmoH9AbENvC22dVemQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKpKAK/yrl2Liuc0di2sgtoSXDfUMB8GA1UdIwQY MBaAFEJkRqShy1az92/mtN76utO9m1IHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEt ZWRlMDI4MmY5YmI5LzEvcWtvQXJfS3VYWXVLNXpSMkxheUMyaEpjTjlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEtZWRlMDI4MmY5YmI5 LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HpMA0G CSqGSIb3DQEBCwUAA4IBAQAyk1P2Cg8+6Se0Kxp8LAxCRrW2V+1W81GuaaZy8t6Y 4Cloa10PQBC/1nrJOBQtfx0bkYuHQPjSrV4euLXN42umD8lMpD/iFeHA+dClQkA3 bU9CV05xC3HI2N5MzjmMj5ecwJ6K1FRfKWp04Bw00YfSbFkduHbqlwa6L0bK0S4p NMTqqohOjHVhH8HsNOHVu+JsMMRYe9YPLGZscpg0Vv4tOMwEfDo6dnOeIHH03TCV 3WNCP78rgvBQ50SyDPNhEn+WALrtRtOiohwJJcOralwCYXstMVHTxzsRcpcUbm/P wwx7C9TBFWr4cgxaSB+xDOibArp6altN4JKgKohnXbgx -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:28 2026 by rpki-client