This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/a-GQ10_VoZGMx2Uu4LVJHteO_m0.roa File: a-GQ10_VoZGMx2Uu4LVJHteO_m0.roa (raw, json) Hash identifier: NioNjVo8lGbEZZ9K9hzAzdA29RBjR5Al0oMN0vHtav4= Subject key identifier: 6B:E1:90:D7:4F:D5:A1:91:8C:C7:65:2E:E0:B5:49:1E:D7:8E:FE:6D Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a Certificate serial: 019B7D5C0B313BE44DD7D44408D7717F9886 Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/a-GQ10_VoZGMx2Uu4LVJHteO_m0.roa Signing time: Fri 02 Jan 2026 06:19:02 +0000 ROA not before: Fri 02 Jan 2026 06:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48415 IP address blocks: 91.223.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:0b:31:3b:e4:4d:d7:d4:44:08:d7:71:7f:98:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a Validity Not Before: Jan 2 06:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6be190d74fd5a1918cc7652ee0b5491ed78efe6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:77:b6:ac:d3:75:8d:ee:69:05:c5:e5:3f: 71:6a:f1:9f:7f:17:e3:5c:35:90:38:00:d8:db:b7: 0a:f6:2f:37:e6:93:35:56:03:db:4c:12:29:e0:d1: a9:a7:d9:56:e3:f3:04:90:eb:87:f2:b0:9b:f7:09: b0:c6:ae:e7:97:a1:f0:5a:63:62:a3:e9:8b:e7:a8: 01:96:52:54:d2:67:83:d7:06:99:2b:ae:99:b7:f1: 6f:31:a7:8a:66:fe:db:c9:a5:7d:c2:6d:0c:3b:9e: 1e:ac:9f:04:bb:21:7c:66:bf:c1:37:9c:36:fc:43: 7b:cd:01:10:c3:78:bb:12:7d:be:8e:80:c4:9f:91: 20:02:07:cd:a6:0a:39:29:08:cb:eb:60:3a:b6:4f: e1:57:9e:76:b3:67:05:be:53:5c:84:e8:fe:79:0f: 34:a8:bd:1c:58:a7:7c:48:a7:09:ab:8a:e6:b6:e7: bd:47:ad:29:8e:a0:9e:24:57:84:39:b7:1f:2f:15: 41:ed:1f:ad:20:38:5b:c0:39:27:c9:a8:09:ff:7e: 12:17:1e:c3:45:15:1f:c8:40:d7:ed:fa:6a:bb:10: 0d:c3:8a:37:dc:dd:05:76:c8:1f:8e:53:16:a7:e9: 5a:4d:31:3c:5d:ef:0a:2a:82:64:6f:34:cc:84:7d: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E1:90:D7:4F:D5:A1:91:8C:C7:65:2E:E0:B5:49:1E:D7:8E:FE:6D X509v3 Authority Key Identifier: keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/a-GQ10_VoZGMx2Uu4LVJHteO_m0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.245.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:b5:e9:c2:08:94:06:5c:37:3b:4d:01:b4:25:f8:e8:4a:3b: 39:34:dc:1c:3b:e1:85:03:e8:86:98:79:a9:95:3e:60:61:a5: 92:cf:d1:13:9f:96:a3:e3:79:f7:60:8f:0b:f1:ec:72:ae:bb: f2:0c:99:59:28:cc:fc:eb:73:27:cb:dc:42:ac:3f:0e:10:13: e8:01:8f:80:0e:f2:61:ba:32:25:ec:9f:b7:c1:e6:71:33:38: ac:f6:ba:96:9b:85:81:52:ca:1f:f9:81:7f:0d:53:0a:c4:af: c0:e7:f3:76:98:c5:55:ea:35:f1:0a:eb:98:0e:90:78:36:8a: 90:e5:e5:33:22:f1:c3:d6:8d:56:71:e3:70:e4:97:28:d2:6d: 39:91:26:bb:fa:88:2a:9e:8a:04:75:b7:c6:f0:41:44:91:b7: 3a:ee:20:72:04:5a:4d:4c:2c:80:38:6f:a2:d4:83:50:bd:4f: 4c:37:5f:a5:12:65:24:51:36:d7:0f:e4:dd:40:29:83:ca:0e: ce:11:cd:14:7d:5f:46:9c:97:4f:a7:f7:2b:e0:58:49:1c:03: a8:81:8b:ea:e0:1b:28:6b:82:d2:bf:9c:f9:04:a6:f3:f7:ed: 9f:5a:d6:c4:86:cb:8a:76:33:91:d1:4b:9f:eb:d9:44:24:82: 90:21:bd:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAsxO+RN19RECNdxf5iGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzIzMTYzYmJiNDY1ZjJhMGZhMmY5M2ZhNTBlZjNiMGQ0 YzZhOWEwHhcNMjYwMTAyMDYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmUxOTBkNzRmZDVhMTkxOGNjNzY1MmVlMGI1NDkxZWQ3OGVmZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRl3tqzTdY3uaQXF5T9xavGffxfj XDWQOADY27cK9i835pM1VgPbTBIp4NGpp9lW4/MEkOuH8rCb9wmwxq7nl6HwWmNi o+mL56gBllJU0meD1waZK66Zt/FvMaeKZv7byaV9wm0MO54erJ8EuyF8Zr/BN5w2 /EN7zQEQw3i7En2+joDEn5EgAgfNpgo5KQjL62A6tk/hV552s2cFvlNchOj+eQ80 qL0cWKd8SKcJq4rmtue9R60pjqCeJFeEObcfLxVB7R+tIDhbwDknyagJ/34SFx7D RRUfyEDX7fpquxANw4o33N0FdsgfjlMWp+laTTE8Xe8KKoJkbzTMhH1ATQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGvhkNdP1aGRjMdlLuC1SR7Xjv5tMB8GA1UdIwQY MBaAFMwyMWO7tGXyoPovk/pQ7zsNTGqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTIt MWVmMDA5MGI3MTU0LzEvYS1HUTEwX1ZvWkdNeDJVdTRMVkpIdGVPX20wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTItMWVmMDA5MGI3MTU0 LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/1MA0G CSqGSIb3DQEBCwUAA4IBAQBstenCCJQGXDc7TQG0JfjoSjs5NNwcO+GFA+iGmHmp lT5gYaWSz9ETn5aj43n3YI8L8exyrrvyDJlZKMz863Mny9xCrD8OEBPoAY+ADvJh ujIl7J+3weZxMzis9rqWm4WBUsof+YF/DVMKxK/A5/N2mMVV6jXxCuuYDpB4NoqQ 5eUzIvHD1o1WceNw5Jco0m05kSa7+ogqnooEdbfG8EFEkbc67iByBFpNTCyAOG+i 1INQvU9MN1+lEmUkUTbXD+TdQCmDyg7OEc0UfV9GnJdPp/cr4FhJHAOogYvq4Bso a4LSv5z5BKbz9+2fWtbEhsuKdjOR0Uuf69lEJIKQIb2N -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:13 2026 by rpki-client