This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/1-Qbrqy3eaDyYZjmaWJLP3YQsQ0U.roa File: 1-Qbrqy3eaDyYZjmaWJLP3YQsQ0U.roa (raw, json) Hash identifier: 1GmvfspmxhXRZfjHjp+Nn84fIdG09U8DoT1IgAU3Frc= Subject key identifier: F9:06:EB:AB:2D:DE:68:3C:98:66:39:9A:58:92:CF:DD:84:2C:43:45 Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019B77C74217816595D5751C37528319CB67 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/1-Qbrqy3eaDyYZjmaWJLP3YQsQ0U.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 91.217.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:42:17:81:65:95:d5:75:1c:37:52:83:19:cb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f906ebab2dde683c9866399a5892cfdd842c4345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:82:88:c8:d1:7a:13:01:db:76:30:70:0d: 1e:be:db:af:d1:2e:d2:08:30:98:c8:74:55:4f:0d: d9:90:29:d2:78:e7:16:47:25:a9:3e:51:f7:c2:60: c4:ef:07:f3:d0:3b:ff:4c:35:9c:40:35:7d:76:59: aa:1b:45:9a:f3:99:a8:9a:fe:11:8e:a5:51:0c:27: b6:d7:b1:92:d2:27:70:d1:1c:40:0b:29:f9:3f:ed: 19:be:09:d6:2a:62:fa:ad:0f:8b:50:d4:18:3b:84: 6e:61:93:6b:04:97:c6:2c:59:e7:e8:e7:24:fd:09: 9c:18:d1:e1:1b:94:a8:ad:81:68:cb:a8:a2:2f:0b: c4:e1:72:c9:1f:99:ce:90:32:59:3b:37:2a:bc:b1: c3:93:f9:0e:63:2a:b8:e5:58:7e:ba:66:48:20:58: 47:d1:8c:6d:b4:be:4f:94:29:25:36:d4:63:3e:d6: eb:8f:c1:0a:dd:6b:71:be:b5:36:ee:5d:c1:9e:6c: 76:d5:65:95:1e:be:da:8f:f8:ec:f9:40:94:7a:d8: 7d:93:39:86:20:0f:15:08:f4:57:3a:41:60:4a:5f: a8:9e:ef:e5:e1:e4:4e:7e:0d:b9:85:43:44:46:2b: d1:5d:c4:9e:3e:f8:d5:6c:0f:47:67:2a:1d:e4:b7: cc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:EB:AB:2D:DE:68:3C:98:66:39:9A:58:92:CF:DD:84:2C:43:45 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/1-Qbrqy3eaDyYZjmaWJLP3YQsQ0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.223.0/24 Signature Algorithm: sha256WithRSAEncryption 04:50:46:f3:0d:76:d9:dc:7c:f6:c6:7d:24:b5:10:73:b1:72: 72:02:85:a6:0c:09:18:a0:af:8f:66:8a:40:af:ed:d5:f8:8d: 42:24:d0:92:ae:f2:d2:ab:12:e6:08:7a:92:e2:97:b9:f1:1e: 16:52:28:77:3e:f1:ed:67:d8:54:67:ef:5b:f5:fd:bb:66:ee: 62:f2:1e:5e:fc:7d:cb:72:f3:37:f5:f9:ca:13:76:89:0a:bc: 9e:1f:54:ad:99:8c:88:33:e8:1d:b3:4c:f6:ba:a3:a6:6f:cd: 7c:c4:54:e1:89:26:2f:e8:61:4f:dd:27:12:b9:e1:a7:bb:1c: d1:46:96:8c:89:4f:4e:44:ca:d8:9f:16:23:53:24:60:f4:0a: ef:5f:46:80:6f:2d:e0:86:4d:33:08:6e:9e:b3:0f:fa:5e:5e: 6f:de:00:4f:2a:87:ba:f8:cc:17:d8:41:19:15:d3:70:9e:bd: 60:2b:37:b6:7d:91:ce:a2:a3:56:c2:cf:9f:15:f3:db:58:0d: a1:32:24:65:46:6a:64:a5:e9:23:91:5b:0c:48:b6:a5:be:d8: c7:b1:b1:6b:da:19:a8:26:93:87:0c:53:0f:94:cf:9e:99:4d: 00:26:7c:0b:3e:62:3c:b6:3f:d6:87:11:fa:34:39:aa:84:97: a8:fc:66:01 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x0IXgWWV1XUcN1KDGctnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTA2ZWJhYjJkZGU2ODNjOTg2NjM5OWE1ODkyY2ZkZDg0MmM0MzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkyCiMjRehMB23YwcA0evtuv0S7S CDCYyHRVTw3ZkCnSeOcWRyWpPlH3wmDE7wfz0Dv/TDWcQDV9dlmqG0Wa85momv4R jqVRDCe217GS0idw0RxACyn5P+0ZvgnWKmL6rQ+LUNQYO4RuYZNrBJfGLFnn6Ock /QmcGNHhG5SorYFoy6iiLwvE4XLJH5nOkDJZOzcqvLHDk/kOYyq45Vh+umZIIFhH 0YxttL5PlCklNtRjPtbrj8EK3WtxvrU27l3Bnmx21WWVHr7aj/js+UCUeth9kzmG IA8VCPRXOkFgSl+onu/l4eROfg25hUNERivRXcSePvjVbA9HZyod5LfMkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPkG66st3mg8mGY5mliSz92ELENFMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvMS1RYnJxeTNlYUR5WVpqbWFXSkxQM1lRc1EwVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDEvZWJmMzgxLTAwYzgtNDgwZC1hNjZjLTc2YTFkNGQ4MzE5 Ny8xL090YzB6NURIYzBLSUJybG9JSlVWdVJTREdwMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvZ3zAN BgkqhkiG9w0BAQsFAAOCAQEABFBG8w122dx89sZ9JLUQc7FycgKFpgwJGKCvj2aK QK/t1fiNQiTQkq7y0qsS5gh6kuKXufEeFlIodz7x7WfYVGfvW/X9u2buYvIeXvx9 y3LzN/X5yhN2iQq8nh9UrZmMiDPoHbNM9rqjpm/NfMRU4YkmL+hhT90nErnhp7sc 0UaWjIlPTkTK2J8WI1MkYPQK719GgG8t4IZNMwhunrMP+l5eb94ATyqHuvjMF9hB GRXTcJ69YCs3tn2RzqKjVsLPnxXz21gNoTIkZUZqZKXpI5FbDEi2pb7Yx7Gxa9oZ qCaThwxTD5TPnplNACZ8Cz5iPLY/1ocR+jQ5qoSXqPxmAQ== -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:21 2026 by rpki-client