This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/qAZnmniLW_dV4hlpW7R2ti-Qf5Y.roa File: qAZnmniLW_dV4hlpW7R2ti-Qf5Y.roa (raw, json) Hash identifier: kn3rkTVNHJAXIfTVxFKEVNSH2gRezL0pTR8nuUYg8FQ= Subject key identifier: A8:06:67:9A:78:8B:5B:F7:55:E2:19:69:5B:B4:76:B6:2F:90:7F:96 Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Certificate serial: 019B7D5B9058E1BC9C4BF47EF29A0DE07E37 Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/qAZnmniLW_dV4hlpW7R2ti-Qf5Y.roa Signing time: Fri 02 Jan 2026 06:18:31 +0000 ROA not before: Fri 02 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40964 IP address blocks: 89.107.129.0/24 maxlen: 24 89.107.130.0/23 maxlen: 23 89.107.132.0/23 maxlen: 23 89.107.134.0/23 maxlen: 23 2a01:afc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:90:58:e1:bc:9c:4b:f4:7e:f2:9a:0d:e0:7e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Validity Not Before: Jan 2 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a806679a788b5bf755e219695bb476b62f907f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:b7:24:19:79:a5:34:73:96:61:41:17:89: 48:33:1c:18:b7:a1:50:dc:13:bd:f0:12:54:2b:bd: 39:23:84:5d:bf:4e:fc:dd:75:73:b3:10:5d:cf:af: 20:dc:15:50:6a:13:c0:7e:a1:4c:8f:8d:d9:96:0d: 18:39:4a:22:14:dc:9b:89:dc:30:d7:5a:72:32:cb: 6d:1d:f1:6f:94:ef:76:3e:bc:dd:1b:28:eb:2f:fc: 20:83:4d:7a:ce:07:9f:11:47:84:e8:8e:6d:3c:c9: 92:0c:8d:6e:54:f7:bc:be:ed:58:59:6b:a6:74:32: e6:d2:90:37:6a:44:d4:2e:20:6d:79:d2:17:2f:a8: 86:21:32:dc:41:1d:9d:dd:6c:48:1f:c9:36:97:5a: 2c:03:eb:2a:71:cc:4a:e5:ba:80:5f:6f:e6:96:84: 22:92:ce:c5:e8:50:ce:1d:6e:13:48:92:5e:e5:30: 74:60:c1:bc:89:34:bf:f3:f7:1f:fe:a9:bc:30:20: 08:24:2d:9c:44:71:81:5e:ca:a7:6d:2e:3e:96:1d: d6:d4:b7:eb:57:0e:10:fa:77:79:0e:27:4b:c5:ea: a4:f1:4e:fb:69:4d:b7:8e:6a:31:4e:1c:06:85:ea: 5f:5f:d4:72:f7:bd:16:06:8c:b3:06:f0:03:8a:d8: 54:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:06:67:9A:78:8B:5B:F7:55:E2:19:69:5B:B4:76:B6:2F:90:7F:96 X509v3 Authority Key Identifier: keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/qAZnmniLW_dV4hlpW7R2ti-Qf5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.129.0-89.107.135.255 IPv6: 2a01:afc0::/32 Signature Algorithm: sha256WithRSAEncryption 57:46:75:92:af:d7:01:23:b5:6d:fa:d5:b8:9b:e4:f4:81:4c: 24:7f:8f:a3:7e:e1:c6:62:62:cf:dd:58:9d:8b:c9:05:82:ed: d6:0b:8d:76:ec:92:1e:cc:ff:55:26:ef:38:4e:61:83:b7:ee: 67:e1:69:23:e2:7d:45:de:1f:d8:ef:9a:de:20:56:43:58:ae: ee:d0:4f:21:15:31:db:2f:2b:18:ee:60:90:20:f2:64:f6:85: 0d:45:56:11:e6:3f:d2:a2:47:f5:ad:a9:fb:70:0d:d4:08:04: 70:37:8c:8a:e1:24:2f:c5:2f:ec:c0:d4:a8:55:f3:40:a0:e8: a6:ba:fa:07:55:5d:a4:09:fd:c8:f1:5f:dc:1f:7d:bc:1a:48: d7:33:7f:f8:f4:93:95:57:0a:8e:60:b6:14:ea:a4:33:57:cf: e9:d9:1a:81:fa:ef:11:98:c0:43:ea:7c:b8:be:1d:04:b0:b1: f6:a9:ed:9d:32:16:33:51:df:6a:02:bc:c6:b6:83:91:44:5d: ed:d3:a4:0c:69:38:28:59:8f:ee:4d:9c:8a:c8:73:e3:ad:90: c6:08:60:e6:25:b5:b7:56:2d:b7:8e:9b:00:80:11:5e:be:41: e3:72:24:2d:e2:10:a3:e4:43:24:a3:fd:91:60:ed:b4:d3:85: 87:f8:f0:4c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9W5BY4bycS/R+8poN4H43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZGQzNWNjZmY2YzJiODZhMWZhZDhmMTAzYmMyMDA3MGQw OWU1MGQwHhcNMjYwMTAyMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODA2Njc5YTc4OGI1YmY3NTVlMjE5Njk1YmI0NzZiNjJmOTA3Zjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta+3JBl5pTRzlmFBF4lIMxwYt6FQ 3BO98BJUK705I4Rdv0783XVzsxBdz68g3BVQahPAfqFMj43Zlg0YOUoiFNybidww 11pyMsttHfFvlO92PrzdGyjrL/wgg016zgefEUeE6I5tPMmSDI1uVPe8vu1YWWum dDLm0pA3akTULiBtedIXL6iGITLcQR2d3WxIH8k2l1osA+sqccxK5bqAX2/mloQi ks7F6FDOHW4TSJJe5TB0YMG8iTS/8/cf/qm8MCAIJC2cRHGBXsqnbS4+lh3W1Lfr Vw4Q+nd5DidLxeqk8U77aU23jmoxThwGhepfX9Ry970WBoyzBvADithUzwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKgGZ5p4i1v3VeIZaVu0drYvkH+WMB8GA1UdIwQY MBaAFLPdNcz/bCuGofrY8QO8IAcNCeUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEt MmIxMDUwNTFiYTU5LzEvcUFabm1uaUxXX2RWNGhscFc3UjJ0aS1RZjVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEtMmIxMDUwNTFiYTU5 LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBABZa4ED BANZa4AwDQQCAAIwBwMFACoBr8AwDQYJKoZIhvcNAQELBQADggEBAFdGdZKv1wEj tW361bib5PSBTCR/j6N+4cZiYs/dWJ2LyQWC7dYLjXbskh7M/1Um7zhOYYO37mfh aSPifUXeH9jvmt4gVkNYru7QTyEVMdsvKxjuYJAg8mT2hQ1FVhHmP9KiR/Wtqftw DdQIBHA3jIrhJC/FL+zA1KhV80Cg6Ka6+gdVXaQJ/cjxX9wffbwaSNczf/j0k5VX Co5gthTqpDNXz+nZGoH67xGYwEPqfLi+HQSwsfap7Z0yFjNR32oCvMa2g5FEXe3T pAxpOChZj+5NnIrIc+OtkMYIYOYltbdWLbeOmwCAEV6+QeNyJC3iEKPkQySj/ZFg 7bTThYf48Ew= -----END CERTIFICATE-----Generated at Wed Jan 21 20:27:32 2026 by rpki-client