This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/_lqYoZCtbgCjPqgBQS1sChiV3po.roa File: _lqYoZCtbgCjPqgBQS1sChiV3po.roa (raw, json) Hash identifier: DngSWjpo0gMX1VJjUcfS5UeVdo84wIcXiRvQtRs7PEI= Subject key identifier: FE:5A:98:A1:90:AD:6E:00:A3:3E:A8:01:41:2D:6C:0A:18:95:DE:9A Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511 Certificate serial: 019B7A5A89B2B0A7F70D93E12CBDE9331C97 Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/_lqYoZCtbgCjPqgBQS1sChiV3po.roa Signing time: Thu 01 Jan 2026 16:18:32 +0000 ROA not before: Thu 01 Jan 2026 16:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43178 IP address blocks: 91.194.126.0/23 maxlen: 23 91.194.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:89:b2:b0:a7:f7:0d:93:e1:2c:bd:e9:33:1c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511 Validity Not Before: Jan 1 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe5a98a190ad6e00a33ea801412d6c0a1895de9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:c9:cb:9e:bc:2b:cc:22:a9:04:7a:2e:1e: 1e:af:dc:71:d9:7b:a0:26:bf:bf:9e:7f:c6:ee:99: 09:7a:dd:48:d8:0b:c5:3d:c7:b1:12:ad:96:07:95: 7e:1a:87:ad:9b:d7:77:0f:38:55:60:b4:6b:27:6e: 65:a7:76:f0:f8:59:b5:28:4a:a9:99:9f:ec:4e:7b: 16:b6:58:bb:d0:30:d0:97:dd:9c:90:62:c9:b2:76: 9b:a6:5e:52:0e:ed:62:ba:89:bb:55:1b:e0:fd:83: 07:27:a3:9d:73:34:8d:ce:98:de:78:7e:5e:a8:93: 5c:a9:80:0d:94:4d:89:62:a1:7f:a1:7d:26:5e:96: 03:f8:37:36:20:6a:8f:2a:6c:06:a1:d6:5f:8b:c0: 38:cb:d4:51:22:25:64:01:dd:9b:0e:ab:a7:1c:4d: b6:d0:d4:03:1c:71:37:1c:29:62:b8:f1:dd:68:3e: 0f:01:e7:d1:3e:9e:98:af:90:f9:7d:d0:51:e2:13: a7:61:0b:79:e5:f4:da:b2:95:1c:55:1b:d6:ac:29: 83:01:10:02:ef:58:f7:c0:60:2f:c6:b7:3f:33:80: 1b:23:55:7b:e7:d6:02:4a:fd:b1:85:b8:8c:c5:fd: c1:44:35:d2:41:43:b6:4f:9c:e3:a9:81:00:8f:8f: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5A:98:A1:90:AD:6E:00:A3:3E:A8:01:41:2D:6C:0A:18:95:DE:9A X509v3 Authority Key Identifier: keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/_lqYoZCtbgCjPqgBQS1sChiV3po.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.126.0/23 Signature Algorithm: sha256WithRSAEncryption 64:12:5a:b2:af:32:7b:94:fa:15:a9:b3:67:5c:ca:01:dd:bb: ac:18:72:d0:cf:5f:2c:05:1b:8b:5b:66:31:05:0f:9c:00:f2: 86:61:db:8d:f6:e7:fc:cc:ee:a9:f0:09:a6:4e:de:18:97:d3: 98:7b:0a:60:4d:c2:73:80:20:2d:2a:87:3e:d8:71:7e:64:72: f4:8d:8b:7a:56:30:71:dd:80:82:82:91:60:aa:5a:09:16:d0: 24:a3:e3:99:77:0e:c1:eb:de:d4:8d:cd:40:89:71:d0:c7:fd: a4:a7:e9:6e:65:71:5d:85:a9:13:90:df:27:f2:8e:cf:e9:37: 5e:97:be:d7:34:4e:ef:c0:06:db:c7:ae:af:b0:2d:0b:d8:e7: bd:8a:96:f3:09:25:57:ca:a9:4e:7b:4f:bc:a9:0d:9e:30:fd: a3:2e:71:93:b9:e4:85:81:8d:ab:97:db:a8:90:0b:c3:5b:24: 48:af:bd:a6:6d:fb:c0:67:d5:39:81:e8:00:ab:31:1f:57:1d: 2e:ff:05:61:ac:81:7a:26:9d:0b:f8:cf:95:d4:d4:65:7b:cb: 55:98:90:f8:b8:27:e2:1a:31:85:3f:4b:93:ba:95:0c:ec:b3: a9:67:c6:a1:6c:6d:17:30:49:3c:fc:76:66:26:74:af:14:05: cd:10:eb:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WomysKf3DZPhLL3pMxyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MGMxYWQ1NDdiOTNlYmY2NTVjNTgwNDM4ZGZhNWFlNDI3 YzY1MTEwHhcNMjYwMTAxMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTVhOThhMTkwYWQ2ZTAwYTMzZWE4MDE0MTJkNmMwYTE4OTVkZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tTJy568K8wiqQR6Lh4er9xx2Xug Jr+/nn/G7pkJet1I2AvFPcexEq2WB5V+Goetm9d3DzhVYLRrJ25lp3bw+Fm1KEqp mZ/sTnsWtli70DDQl92ckGLJsnabpl5SDu1iuom7VRvg/YMHJ6OdczSNzpjeeH5e qJNcqYANlE2JYqF/oX0mXpYD+Dc2IGqPKmwGodZfi8A4y9RRIiVkAd2bDqunHE22 0NQDHHE3HCliuPHdaD4PAefRPp6Yr5D5fdBR4hOnYQt55fTaspUcVRvWrCmDARAC 71j3wGAvxrc/M4AbI1V759YCSv2xhbiMxf3BRDXSQUO2T5zjqYEAj4/4IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP5amKGQrW4Aoz6oAUEtbAoYld6aMB8GA1UdIwQY MBaAFKQMGtVHuT6/ZVxYBDjfpa5CfGURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEF3YTFVZTVQcjlsWEZnRU9OLWxya0o4WlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82YTRlNTctZmJlMy00YmMyLWI4YTUt ZGM4ZmNjNmJkYWFhLzEvX2xxWW9aQ3RiZ0NqUHFnQlFTMXNDaGlWM3BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy82YTRlNTctZmJlMy00YmMyLWI4YTUtZGM4ZmNjNmJkYWFh LzEvcEF3YTFVZTVQcjlsWEZnRU9OLWxya0o4WlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8J+MA0G CSqGSIb3DQEBCwUAA4IBAQBkElqyrzJ7lPoVqbNnXMoB3busGHLQz18sBRuLW2Yx BQ+cAPKGYduN9uf8zO6p8AmmTt4Yl9OYewpgTcJzgCAtKoc+2HF+ZHL0jYt6VjBx 3YCCgpFgqloJFtAko+OZdw7B697Ujc1AiXHQx/2kp+luZXFdhakTkN8n8o7P6Tde l77XNE7vwAbbx66vsC0L2Oe9ipbzCSVXyqlOe0+8qQ2eMP2jLnGTueSFgY2rl9uo kAvDWyRIr72mbfvAZ9U5gegAqzEfVx0u/wVhrIF6Jp0L+M+V1NRle8tVmJD4uCfi GjGFP0uTupUM7LOpZ8ahbG0XMEk8/HZmJnSvFAXNEOt+ -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:35 2026 by rpki-client