This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa File: QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa (raw, json) Hash identifier: gdEjWQnWjf/YDqv1eeE481wpqiSUZPqETZ8kJJFiZJE= Subject key identifier: 40:37:D3:2F:12:0B:F5:B4:EC:D8:82:47:19:B1:BD:27:52:58:12:F2 Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0 Certificate serial: 019B797EC23002D26148D820A41DEC8331F6 Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50572 IP address blocks: 91.238.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c2:30:02:d2:61:48:d8:20:a4:1d:ec:83:31:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0 Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4037d32f120bf5b4ecd8824719b1bd27525812f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:b8:cf:94:f1:1f:e5:45:71:0b:bb:0c:7e: 56:23:ce:72:0b:d2:8a:b1:f6:cf:09:7f:34:10:e8: 50:73:38:db:54:81:21:2d:ad:fb:27:52:23:77:09: f6:60:62:20:b6:3c:57:37:b2:c6:d7:bb:5f:e7:24: 0d:ce:4b:d1:80:fe:ff:21:72:cb:3b:65:5d:6d:e7: 23:8d:ed:3b:1d:73:a0:78:88:d9:ba:8f:30:68:d5: 23:f3:98:e4:45:75:24:d9:c9:14:58:39:46:af:b6: 38:9e:f2:a3:6f:c0:a3:a1:fb:45:e1:73:ed:b6:80: 12:bb:3d:b1:51:2a:4d:bf:c0:df:77:97:20:15:3b: e2:a1:85:f5:28:d0:29:f8:24:d3:5d:02:88:fd:66: 72:7b:98:13:83:0c:d3:5d:4e:59:e8:60:2b:69:0e: 0e:bd:c4:86:42:aa:11:ac:93:fb:3d:13:f3:3c:a8: 50:42:a3:1b:56:44:8d:24:df:b9:41:e1:2a:f7:3a: e2:4b:cf:30:f3:68:e5:6f:1c:02:55:a7:7a:a0:c2: 14:b1:ea:f0:15:86:54:0b:0e:b1:07:f1:46:18:86: fb:3e:74:f7:90:50:22:84:80:4e:4c:58:50:c6:90: 76:18:36:51:06:ed:df:a3:73:d8:b8:bf:d3:d5:fc: 8d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:37:D3:2F:12:0B:F5:B4:EC:D8:82:47:19:B1:BD:27:52:58:12:F2 X509v3 Authority Key Identifier: keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.51.0/24 Signature Algorithm: sha256WithRSAEncryption 45:d0:9e:f6:0f:14:69:7f:b3:93:01:47:a8:f1:b0:c3:d3:f4: 5a:21:39:7a:75:da:2d:0b:d4:4f:09:48:c0:68:9e:bc:d0:e8: 05:fb:e4:a6:6d:98:58:78:aa:78:20:b5:be:c5:a9:0d:49:fb: 9b:eb:32:1f:af:6e:e2:23:fd:55:da:ff:aa:b0:83:97:f8:d8: 4c:2b:6d:9e:1f:20:ff:6c:4f:d1:a3:56:2a:76:4b:1f:4b:a5: 1f:0e:84:3a:dc:07:d4:bf:ab:7e:ae:1e:6f:0d:81:03:fb:e8: 77:0f:3a:b0:20:be:8a:13:2e:b3:70:64:52:6b:0a:10:7b:79: 2f:33:19:c2:a6:2e:e0:46:a1:90:7d:85:19:a4:38:0a:bf:d7: ff:ed:0c:e4:d4:f9:2e:77:ff:5e:e8:31:59:46:a3:e4:98:86: 46:76:78:11:a4:ff:a7:42:4b:f6:bb:54:89:a4:3a:01:5b:0a: 39:d1:72:8d:fb:a8:01:1e:4d:55:83:1e:92:e6:af:a8:21:b6: f9:05:09:5e:07:ce:9d:fd:3b:aa:f2:88:90:45:d7:1f:7b:a6: 29:d8:f1:de:5b:cc:c9:ff:05:92:d7:a3:dc:55:f8:70:df:12: 58:c8:d9:bd:e2:ba:f9:e3:a3:6f:59:9f:32:5c:f5:27:68:02: 15:a2:46:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsIwAtJhSNggpB3sgzH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1 MmI3ZDAwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDM3ZDMyZjEyMGJmNWI0ZWNkODgyNDcxOWIxYmQyNzUyNTgxMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2i4z5TxH+VFcQu7DH5WI85yC9KK sfbPCX80EOhQczjbVIEhLa37J1Ijdwn2YGIgtjxXN7LG17tf5yQNzkvRgP7/IXLL O2Vdbecjje07HXOgeIjZuo8waNUj85jkRXUk2ckUWDlGr7Y4nvKjb8CjoftF4XPt toASuz2xUSpNv8Dfd5cgFTvioYX1KNAp+CTTXQKI/WZye5gTgwzTXU5Z6GAraQ4O vcSGQqoRrJP7PRPzPKhQQqMbVkSNJN+5QeEq9zriS88w82jlbxwCVad6oMIUserw FYZUCw6xB/FGGIb7PnT3kFAihIBOTFhQxpB2GDZRBu3fo3PYuL/T1fyN1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEA30y8SC/W07NiCRxmxvSdSWBLyMB8GA1UdIwQY MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt NjNkZDI3NTMwMGJjLzEvUURmVEx4SUw5YlRzMklKSEdiRzlKMUpZRXZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+4zMA0G CSqGSIb3DQEBCwUAA4IBAQBF0J72DxRpf7OTAUeo8bDD0/RaITl6ddotC9RPCUjA aJ680OgF++SmbZhYeKp4ILW+xakNSfub6zIfr27iI/1V2v+qsIOX+NhMK22eHyD/ bE/Ro1YqdksfS6UfDoQ63AfUv6t+rh5vDYED++h3DzqwIL6KEy6zcGRSawoQe3kv MxnCpi7gRqGQfYUZpDgKv9f/7Qzk1Pkud/9e6DFZRqPkmIZGdngRpP+nQkv2u1SJ pDoBWwo50XKN+6gBHk1Vgx6S5q+oIbb5BQleB86d/Tuq8oiQRdcfe6Yp2PHeW8zJ /wWS16PcVfhw3xJYyNm94rr546NvWZ8yXPUnaAIVokbt -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:10 2026 by rpki-client