This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/QZEL4d0SfEFoVacqVFYZirUZF0c.roa File: QZEL4d0SfEFoVacqVFYZirUZF0c.roa (raw, json) Hash identifier: L9KDQaVkcUjKs2cT9P0W49YAOlVadQY6gzwYQcZwv2E= Subject key identifier: 41:91:0B:E1:DD:12:7C:41:68:55:A7:2A:54:56:19:8A:B5:19:17:47 Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42 Certificate serial: 019B77C6E460B487B53F2A68DA2FE259FCB0 Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/QZEL4d0SfEFoVacqVFYZirUZF0c.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50161 IP address blocks: 91.222.168.0/22 maxlen: 22 195.211.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e4:60:b4:87:b5:3f:2a:68:da:2f:e2:59:fc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41910be1dd127c416855a72a5456198ab5191747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:96:24:ab:6f:a1:53:5c:02:bb:ba:eb:7f: 6d:87:12:02:89:f3:a1:92:be:10:8f:54:57:8e:cb: 6e:5f:39:ea:61:b3:77:48:85:95:e9:16:b0:54:02: 0b:b1:de:87:d0:e8:25:49:86:93:ec:29:1f:c4:38: 46:f0:c9:12:b1:5f:dc:18:63:12:8f:d1:4a:a1:9f: 48:e9:cd:84:67:95:65:2b:8b:32:f8:b9:f8:29:0c: 6f:be:bc:db:08:b3:02:ca:9b:a3:f8:ca:29:88:ef: ac:c5:73:b0:6d:83:d3:29:a6:ab:8f:cf:51:a4:58: 8e:93:e6:5b:78:3a:35:f9:64:53:02:5b:33:e8:f1: ad:21:9f:5f:57:46:af:63:1a:6d:e2:ed:ab:cd:00: 42:f0:dc:d0:92:14:c8:b2:65:14:e5:88:6b:f9:40: 38:b4:a2:d0:65:00:41:0d:5b:5f:e0:5d:e0:ab:35: 27:3d:02:fb:b5:32:55:06:0b:00:cf:df:3a:b7:1f: 6a:f8:d0:e6:fc:26:0d:7d:f0:21:14:8b:a7:c4:a2: a5:45:a9:f6:98:1e:63:b5:43:d2:e6:d0:56:0c:15: 43:4b:ca:4b:f7:8a:f2:95:15:84:c9:2d:a6:5c:79: 92:18:e9:21:43:73:42:ce:d1:83:a9:d2:78:4c:fa: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:91:0B:E1:DD:12:7C:41:68:55:A7:2A:54:56:19:8A:B5:19:17:47 X509v3 Authority Key Identifier: keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/QZEL4d0SfEFoVacqVFYZirUZF0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.168.0/22 195.211.240.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:0e:3a:77:83:44:99:a8:a5:29:3a:08:ce:b4:e4:a0:11:c4: 64:5e:b1:4a:75:e1:1e:51:08:a0:69:f1:f1:c9:8a:17:15:f9: 98:9d:39:bb:1a:45:21:38:7f:53:c9:9e:46:07:21:d0:8f:bd: 1c:c1:ae:a7:1f:10:a7:75:31:f9:b1:29:53:7f:b7:6b:c0:28: da:9e:77:f5:95:c8:82:e3:2d:06:e3:86:d5:c5:25:56:11:64: 8b:e8:49:98:ba:c5:e6:8f:6f:61:40:34:11:29:7e:bc:58:0e: 6e:40:48:e9:a5:41:e3:22:7e:0c:f7:89:21:b7:8b:f5:03:48: be:08:d8:95:f2:23:a3:24:65:b6:51:c4:47:26:47:69:f0:e3: 51:45:0e:c3:dc:82:7e:16:2e:53:6d:0a:cf:4e:23:89:22:06: 5c:17:c6:a8:78:f2:59:0d:f1:8e:ca:d2:46:8b:6f:d8:52:8a: 58:62:d5:73:9b:ab:96:87:ff:71:80:f0:ec:3b:0b:8a:a5:68: 16:f3:10:8e:7c:60:e7:53:7f:ba:ca:b0:bd:a2:09:c1:f0:be: 38:09:ee:31:51:52:09:05:77:f5:a1:5b:e1:ba:1f:85:5c:99: 0d:fa:0b:42:07:50:0d:d4:79:b5:78:ca:ea:91:a0:c4:af:43: a5:6e:29:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xuRgtIe1Pypo2i/iWfywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTQzODllOWY0ZDVjYzhjNDg2ZDY4MjJiZWYxZjQ0ZWY3 Y2VkNDIwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTkxMGJlMWRkMTI3YzQxNjg1NWE3MmE1NDU2MTk4YWI1MTkxNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+CWJKtvoVNcAru6639thxICifOh kr4Qj1RXjstuXznqYbN3SIWV6RawVAILsd6H0OglSYaT7CkfxDhG8MkSsV/cGGMS j9FKoZ9I6c2EZ5VlK4sy+Ln4KQxvvrzbCLMCypuj+MopiO+sxXOwbYPTKaarj89R pFiOk+ZbeDo1+WRTAlsz6PGtIZ9fV0avYxpt4u2rzQBC8NzQkhTIsmUU5Yhr+UA4 tKLQZQBBDVtf4F3gqzUnPQL7tTJVBgsAz986tx9q+NDm/CYNffAhFIunxKKlRan2 mB5jtUPS5tBWDBVDS8pL94rylRWEyS2mXHmSGOkhQ3NCztGDqdJ4TPrG5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEGRC+HdEnxBaFWnKlRWGYq1GRdHMB8GA1UdIwQY MBaAFImkOJ6fTVzIxIbWgivvH0TvfO1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lNjBhMzEtMWQ3Ni00ZDlmLTgwMGEt MjEzNDg0ODRmZjFiLzEvUVpFTDRkMFNmRUZvVmFjcVZGWVppclVaRjBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lNjBhMzEtMWQ3Ni00ZDlmLTgwMGEtMjEzNDg0ODRmZjFi LzEvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW96oAwQC w9PwMA0GCSqGSIb3DQEBCwUAA4IBAQCPDjp3g0SZqKUpOgjOtOSgEcRkXrFKdeEe UQigafHxyYoXFfmYnTm7GkUhOH9TyZ5GByHQj70cwa6nHxCndTH5sSlTf7drwCja nnf1lciC4y0G44bVxSVWEWSL6EmYusXmj29hQDQRKX68WA5uQEjppUHjIn4M94kh t4v1A0i+CNiV8iOjJGW2UcRHJkdp8ONRRQ7D3IJ+Fi5TbQrPTiOJIgZcF8aoePJZ DfGOytJGi2/YUopYYtVzm6uWh/9xgPDsOwuKpWgW8xCOfGDnU3+6yrC9ognB8L44 Ce4xUVIJBXf1oVvhuh+FXJkN+gtCB1AN1Hm1eMrqkaDEr0OlbilG -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:03 2026 by rpki-client