This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/Qtqqzn9yRNvrI3RXEfT5VayjgJI.roa File: Qtqqzn9yRNvrI3RXEfT5VayjgJI.roa (raw, json) Hash identifier: lOFGAsrm5iHQNlLgX36AU9zrlOWulEYrqP1lI6ectMM= Subject key identifier: 42:DA:AA:CE:7F:72:44:DB:EB:23:74:57:11:F4:F9:55:AC:A3:80:92 Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9 Certificate serial: 019B7FF296FE50162FF2CB93E78581BA9883 Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/Qtqqzn9yRNvrI3RXEfT5VayjgJI.roa Signing time: Fri 02 Jan 2026 18:22:43 +0000 ROA not before: Fri 02 Jan 2026 18:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57126 IP address blocks: 91.230.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:96:fe:50:16:2f:f2:cb:93:e7:85:81:ba:98:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9 Validity Not Before: Jan 2 18:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42daaace7f7244dbeb23745711f4f955aca38092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7a:6b:63:d6:82:72:e2:45:37:5a:e4:72:f4: 6a:cc:f4:09:84:68:76:20:c1:4d:05:9e:57:36:9c: f7:b9:56:4e:10:9e:c9:3f:3d:89:e6:0f:24:fb:8b: 23:f9:55:4d:a4:e0:70:8a:38:ac:46:3e:e1:bf:01: 4a:a3:8b:48:84:07:4a:f3:24:f5:f5:2f:f5:43:20: a7:ac:bd:4d:cd:75:13:ce:a9:28:ca:86:e0:40:fb: ab:e9:0a:bd:23:d9:55:1a:fe:08:0d:b4:db:81:0f: 3f:5a:41:cf:63:cf:3f:c3:9d:98:f6:c4:db:af:2f: 68:7d:0f:6b:51:e7:b2:33:27:e2:3a:01:c5:50:d6: d0:95:8e:b2:66:b7:3f:4d:ea:5b:df:e0:25:2d:ab: 6d:45:45:98:0b:e0:6c:4b:c8:97:5a:67:29:2c:c7: 40:ae:ec:fe:15:4f:69:da:e6:aa:5e:0f:13:98:dd: 31:64:a0:60:27:6f:67:77:4b:d6:1c:21:2b:01:8d: f4:de:cf:00:49:c7:85:23:37:49:63:89:db:d2:a2: 55:7b:82:42:c6:03:fa:d3:7e:69:bd:0e:9c:c9:18: cf:28:fe:3b:1b:b9:63:d3:ed:a2:15:de:4c:a1:2e: cc:b3:db:f5:db:d9:14:4b:ff:58:c8:bd:d4:2d:d8: eb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DA:AA:CE:7F:72:44:DB:EB:23:74:57:11:F4:F9:55:AC:A3:80:92 X509v3 Authority Key Identifier: keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/Qtqqzn9yRNvrI3RXEfT5VayjgJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.234.0/24 Signature Algorithm: sha256WithRSAEncryption 88:33:92:8a:15:24:25:dd:8c:71:b3:d3:c7:b5:fc:93:c1:70: 5c:f7:e2:12:69:c4:73:e3:cb:54:4f:f0:1e:65:c9:3a:ef:91: 74:42:57:55:cc:d1:57:1b:1b:ae:6f:8a:8e:6d:c9:74:cd:66: dd:b9:5c:50:84:5d:7a:1a:b3:43:6a:0b:be:60:9d:96:87:74: fc:3a:4b:af:d7:47:ed:9d:47:37:a8:e9:68:9e:67:72:5b:50: 37:58:05:4d:93:93:93:9d:ad:f5:68:a3:c9:49:f3:c3:73:a6: f3:5f:97:dd:2b:c5:77:13:0a:a1:49:e4:f9:9a:1e:ed:c2:d0: b4:de:35:a0:d1:b9:dd:0a:5a:a3:b5:78:76:c4:f9:68:5a:46: 8d:38:3d:f6:52:1b:ab:e2:1c:78:1d:a3:4c:17:ed:bb:05:63: 33:9b:47:ff:20:41:5f:cc:5b:c0:58:91:7b:f8:d0:e9:a0:df: db:43:f0:4a:42:a4:aa:f8:8f:a6:1e:d7:d4:ec:51:28:6c:4a: cb:cb:13:cd:92:73:9e:8b:1f:71:81:90:3d:01:54:92:4a:c3: d4:4d:bb:4e:65:ba:6c:36:1c:32:2f:1f:52:8d:ac:1d:9d:46: 5b:19:9c:31:9e:65:c5:08:24:f9:86:c7:31:89:95:5c:6a:6b: b9:f0:1e:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8pb+UBYv8suT54WBupiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0 MzRkYTkwHhcNMjYwMTAyMTgyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmRhYWFjZTdmNzI0NGRiZWIyMzc0NTcxMWY0Zjk1NWFjYTM4MDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XprY9aCcuJFN1rkcvRqzPQJhGh2 IMFNBZ5XNpz3uVZOEJ7JPz2J5g8k+4sj+VVNpOBwijisRj7hvwFKo4tIhAdK8yT1 9S/1QyCnrL1NzXUTzqkoyobgQPur6Qq9I9lVGv4IDbTbgQ8/WkHPY88/w52Y9sTb ry9ofQ9rUeeyMyfiOgHFUNbQlY6yZrc/Tepb3+AlLattRUWYC+BsS8iXWmcpLMdA ruz+FU9p2uaqXg8TmN0xZKBgJ29nd0vWHCErAY303s8ASceFIzdJY4nb0qJVe4JC xgP6035pvQ6cyRjPKP47G7lj0+2iFd5MoS7Ms9v129kUS/9YyL3ULdjrHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFELaqs5/ckTb6yN0VxH0+VWso4CSMB8GA1UdIwQY MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt NGYzZWU4MzY1ZDhmLzEvUXRxcXpuOXlSTnZySTNSWEVmVDVWYXlqZ0pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+bqMA0G CSqGSIb3DQEBCwUAA4IBAQCIM5KKFSQl3Yxxs9PHtfyTwXBc9+ISacRz48tUT/Ae Zck675F0QldVzNFXGxuub4qObcl0zWbduVxQhF16GrNDagu+YJ2Wh3T8Okuv10ft nUc3qOlonmdyW1A3WAVNk5OTna31aKPJSfPDc6bzX5fdK8V3EwqhSeT5mh7twtC0 3jWg0bndClqjtXh2xPloWkaNOD32Uhur4hx4HaNMF+27BWMzm0f/IEFfzFvAWJF7 +NDpoN/bQ/BKQqSq+I+mHtfU7FEobErLyxPNknOeix9xgZA9AVSSSsPUTbtOZbps NhwyLx9SjawdnUZbGZwxnmXFCCT5hscxiZVcamu58B6y -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:00 2026 by rpki-client