This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/1JQv5SOtSeXXkOrfiZJVS0aL7xU.roa File: 1JQv5SOtSeXXkOrfiZJVS0aL7xU.roa (raw, json) Hash identifier: AMT4fhj0NQTYFJqA1ljnLjH+q0LAKk7Eo+Nf4uYT4Lg= Subject key identifier: D4:94:2F:E5:23:AD:49:E5:D7:90:EA:DF:89:92:55:4B:46:8B:EF:15 Certificate issuer: /CN=daafe90f9d081334cc928edee9bc731540708dfd Certificate serial: 019B77596FF20C80D5FF0AF25894B6A0201E Authority key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/1JQv5SOtSeXXkOrfiZJVS0aL7xU.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50951 IP address blocks: 91.216.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6f:f2:0c:80:d5:ff:0a:f2:58:94:b6:a0:20:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daafe90f9d081334cc928edee9bc731540708dfd Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4942fe523ad49e5d790eadf8992554b468bef15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:a2:63:64:97:6e:0e:7a:f9:27:24:4f:68: c1:c1:e6:87:3b:60:18:55:34:c7:12:3a:df:d7:23: fa:3e:2f:86:01:bc:29:ee:b7:5e:21:5f:61:3d:75: 46:be:3f:3a:f8:a3:ee:25:9e:42:c4:3f:50:52:a3: cd:01:37:4e:05:d9:eb:aa:67:e7:c0:8c:22:0d:eb: 3b:2a:b6:4b:59:81:da:6a:d5:f9:b0:b7:a4:67:48: f7:ae:b4:ce:1b:6a:ee:ff:0d:f1:65:0a:93:e7:e8: 74:5e:cd:3d:92:9d:90:f2:a3:b1:a4:3b:9a:b8:f5: 0a:b9:d3:60:96:02:72:2a:8a:49:8d:16:e2:de:5d: 7e:ef:7a:ac:e3:a5:c1:a7:f1:a7:ab:59:69:57:3c: b5:82:dd:8f:4f:eb:6c:a1:76:c2:97:84:0d:c5:53: 17:78:bb:d6:0b:1d:49:bd:3d:f8:c6:a5:12:7f:96: 33:55:d3:05:e2:e6:0a:d1:70:20:ab:be:e6:ff:d6: 0e:c4:25:35:36:05:ca:02:c7:d6:c0:46:f7:07:1a: 8b:f3:cd:39:d8:e4:cb:cc:d3:f3:d0:00:11:0a:91: c2:7b:53:d6:56:d8:e4:94:30:21:73:0b:4a:fe:01: 66:3e:2c:f5:79:09:90:63:8a:ab:c1:41:9a:ab:31: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:94:2F:E5:23:AD:49:E5:D7:90:EA:DF:89:92:55:4B:46:8B:EF:15 X509v3 Authority Key Identifier: keyid:DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/1JQv5SOtSeXXkOrfiZJVS0aL7xU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.50.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:5a:89:e5:38:b7:02:19:8b:c0:e6:ba:14:c6:4f:ff:e1:95: a3:ae:bb:0f:a2:1a:f2:a5:31:29:e1:f5:f2:ab:29:ec:3f:ed: 59:0c:0d:8a:54:68:36:a4:dc:55:f9:c7:d8:7e:50:b8:a6:fe: d8:f9:66:e3:c2:3a:d2:ed:de:92:61:40:65:a6:72:27:d3:fa: 03:ab:0f:78:90:23:73:cc:6e:91:00:7a:50:c8:91:4c:61:a7: cd:fe:0a:51:83:40:ed:e0:ca:5f:6f:2e:85:11:0e:18:90:26: 79:46:5a:8c:ef:23:04:45:df:ef:af:7b:f9:74:21:f5:9d:98: de:96:4d:36:e2:61:c4:0c:26:23:4a:03:4d:b4:7a:4b:c3:d6: d6:d4:86:be:51:11:71:9c:bf:50:ee:14:b8:0e:39:15:8e:6f: 38:0d:8a:6c:65:4b:a1:3d:12:f6:ad:60:94:15:85:3e:47:3d: cf:25:6d:d9:e1:d3:ba:ca:87:f0:26:4d:59:73:26:85:f0:5e: a8:99:18:ca:a0:d0:c3:ab:c7:d8:47:fd:37:bd:33:01:f6:77: 2d:10:06:5f:6c:8d:40:30:e8:d5:d1:71:e4:59:2f:31:bd:3d: 48:92:59:e8:db:a7:4e:4b:43:3d:49:6a:8e:bc:fe:67:49:10: dd:bb:3f:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WW/yDIDV/wryWJS2oCAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWZlOTBmOWQwODEzMzRjYzkyOGVkZWU5YmM3MzE1NDA3 MDhkZmQwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDk0MmZlNTIzYWQ0OWU1ZDc5MGVhZGY4OTkyNTU0YjQ2OGJlZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgiiY2SXbg56+SckT2jBweaHO2AY VTTHEjrf1yP6Pi+GAbwp7rdeIV9hPXVGvj86+KPuJZ5CxD9QUqPNATdOBdnrqmfn wIwiDes7KrZLWYHaatX5sLekZ0j3rrTOG2ru/w3xZQqT5+h0Xs09kp2Q8qOxpDua uPUKudNglgJyKopJjRbi3l1+73qs46XBp/Gnq1lpVzy1gt2PT+tsoXbCl4QNxVMX eLvWCx1JvT34xqUSf5YzVdMF4uYK0XAgq77m/9YOxCU1NgXKAsfWwEb3BxqL8805 2OTLzNPz0AARCpHCe1PWVtjklDAhcwtK/gFmPiz1eQmQY4qrwUGaqzEDNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNSUL+UjrUnl15Dq34mSVUtGi+8VMB8GA1UdIwQY MBaAFNqv6Q+dCBM0zJKO3um8cxVAcI39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnFfcEQ1MElFelRNa283ZTZieHpGVUJ3amYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84YmIzYzEtMTk5ZC00NDliLWFjNDYt YmJkOTJjY2FmYTg4LzEvMUpRdjVTT3RTZVhYa09yZmlaSlZTMGFMN3hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84YmIzYzEtMTk5ZC00NDliLWFjNDYtYmJkOTJjY2FmYTg4 LzEvMnFfcEQ1MElFelRNa283ZTZieHpGVUJ3amYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gyMA0G CSqGSIb3DQEBCwUAA4IBAQBfWonlOLcCGYvA5roUxk//4ZWjrrsPohrypTEp4fXy qynsP+1ZDA2KVGg2pNxV+cfYflC4pv7Y+WbjwjrS7d6SYUBlpnIn0/oDqw94kCNz zG6RAHpQyJFMYafN/gpRg0Dt4Mpfby6FEQ4YkCZ5RlqM7yMERd/vr3v5dCH1nZje lk024mHEDCYjSgNNtHpLw9bW1Ia+URFxnL9Q7hS4DjkVjm84DYpsZUuhPRL2rWCU FYU+Rz3PJW3Z4dO6yofwJk1ZcyaF8F6omRjKoNDDq8fYR/03vTMB9nctEAZfbI1A MOjV0XHkWS8xvT1Iklno26dOS0M9SWqOvP5nSRDduz8o -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:54 2026 by rpki-client