This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/KqWucH5sI4MugF5p4PjTBd1XImI.roa File: KqWucH5sI4MugF5p4PjTBd1XImI.roa (raw, json) Hash identifier: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0= Subject key identifier: 2A:A5:AE:70:7E:6C:23:83:2E:80:5E:69:E0:F8:D3:05:DD:57:22:62 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A34A1B6390B3C7B508B175514BBBD5 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/KqWucH5sI4MugF5p4PjTBd1XImI.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 91.186.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4a:1b:63:90:b3:c7:b5:08:b1:75:51:4b:bb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aa5ae707e6c23832e805e69e0f8d305dd572262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:70:a6:75:2a:4b:0f:61:11:2d:3f:05:c9:0f: 2a:1f:c1:63:a6:85:37:d3:a2:b9:98:80:eb:d8:41: cb:a0:98:e9:06:d9:ec:95:45:36:61:9a:15:d8:e0: 5b:b0:e7:5d:e1:99:46:eb:a6:99:84:5d:e5:99:1c: 26:d0:bb:67:25:11:42:48:0e:f8:de:e3:95:0f:f6: f9:01:a3:44:e8:88:92:52:6d:99:60:17:03:44:90: e0:be:09:a0:ab:94:96:3a:75:07:c3:42:2b:ff:eb: 89:12:da:b5:7d:c8:22:6d:6e:62:18:82:95:9a:51: 75:9a:94:f7:bc:c0:a2:47:50:83:ad:53:93:62:d7: a6:bc:75:c3:4c:55:54:4d:bc:d3:d9:4e:c9:43:dd: 5e:46:ec:3c:f4:af:93:67:f5:1c:ca:e6:52:6e:02: e1:00:93:d5:4f:49:97:2c:25:ec:35:e6:7d:a4:4a: a5:85:91:a3:59:03:3c:04:49:71:cc:7a:d3:63:43: ae:5c:90:ef:e0:15:2e:7d:cd:8c:fa:e4:7e:a8:93: 91:f4:78:76:56:90:65:cb:fb:02:49:b3:49:a9:61: 38:59:31:c5:c7:c0:fc:b4:47:30:0d:3c:19:59:b1: b3:8b:13:8b:ed:a1:5f:6c:0e:da:77:39:91:6f:d9: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A5:AE:70:7E:6C:23:83:2E:80:5E:69:E0:F8:D3:05:DD:57:22:62 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/KqWucH5sI4MugF5p4PjTBd1XImI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.186.195.0/24 Signature Algorithm: sha256WithRSAEncryption 55:4f:df:e9:f0:7c:48:91:b4:77:42:d9:e6:cf:7b:64:14:3f: 99:62:a8:46:3e:42:fa:b6:db:aa:5e:db:26:ed:53:80:a6:03: 32:18:31:15:55:d3:72:b9:79:d6:5f:2e:10:89:7e:e2:b3:98: b7:64:cd:b1:76:e6:48:48:c9:05:f0:74:c7:b8:f2:36:74:c6: ae:82:1d:b0:f4:8e:ea:84:5d:54:b6:a5:46:82:9b:30:29:f7: ba:77:c2:6d:f6:32:e5:a5:71:6c:6f:85:33:67:f6:06:f4:ef: dd:be:40:11:fb:55:91:86:cf:06:e9:a9:72:36:94:54:2d:af: 20:19:e3:12:43:5a:8f:de:c6:fc:28:a8:9d:45:45:e0:3c:2f: 74:05:fd:66:f3:1b:a5:e3:26:29:59:cd:9c:1b:ec:6a:35:d0: 1b:3f:60:b9:eb:a5:48:0c:28:fd:b8:42:3a:2d:9b:fb:cb:4a: 95:0a:88:02:b0:2a:ca:8d:78:d8:7a:61:7a:dc:a3:d8:b2:f5: 2d:ae:53:32:57:72:65:99:67:7d:74:4e:30:88:0a:e2:15:f4: 0d:3c:4b:7f:f4:01:25:86:d5:92:44:62:97:a0:a7:94:c0:b0: 0d:56:81:94:d7:a2:bf:d1:8b:37:8c:7b:99:7c:a2:40:7a:12: 43:99:6c:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0obY5Czx7UIsXVRS7vVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWE1YWU3MDdlNmMyMzgzMmU4MDVlNjllMGY4ZDMwNWRkNTcyMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHCmdSpLD2ERLT8FyQ8qH8FjpoU3 06K5mIDr2EHLoJjpBtnslUU2YZoV2OBbsOdd4ZlG66aZhF3lmRwm0LtnJRFCSA74 3uOVD/b5AaNE6IiSUm2ZYBcDRJDgvgmgq5SWOnUHw0Ir/+uJEtq1fcgibW5iGIKV mlF1mpT3vMCiR1CDrVOTYtemvHXDTFVUTbzT2U7JQ91eRuw89K+TZ/UcyuZSbgLh AJPVT0mXLCXsNeZ9pEqlhZGjWQM8BElxzHrTY0OuXJDv4BUufc2M+uR+qJOR9Hh2 VpBly/sCSbNJqWE4WTHFx8D8tEcwDTwZWbGzixOL7aFfbA7adzmRb9l0uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCqlrnB+bCODLoBeaeD40wXdVyJiMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvS3FXdWNINXNJNE11Z0Y1cDRQalRCZDFYSW1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7rDMA0G CSqGSIb3DQEBCwUAA4IBAQBVT9/p8HxIkbR3Qtnmz3tkFD+ZYqhGPkL6ttuqXtsm 7VOApgMyGDEVVdNyuXnWXy4QiX7is5i3ZM2xduZISMkF8HTHuPI2dMaugh2w9I7q hF1UtqVGgpswKfe6d8Jt9jLlpXFsb4UzZ/YG9O/dvkAR+1WRhs8G6alyNpRULa8g GeMSQ1qP3sb8KKidRUXgPC90Bf1m8xul4yYpWc2cG+xqNdAbP2C566VIDCj9uEI6 LZv7y0qVCogCsCrKjXjYemF63KPYsvUtrlMyV3JlmWd9dE4wiAriFfQNPEt/9AEl htWSRGKXoKeUwLANVoGU16K/0Ys3jHuZfKJAehJDmWwz -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:08 2026 by rpki-client