This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/Q4ow8LCimKzjYqCIeM6du1pQCj4.roa File: Q4ow8LCimKzjYqCIeM6du1pQCj4.roa (raw, json) Hash identifier: gGIn6jSJgA0OXpF2GsDtGiH/BCzdqF5tX7x9AZXnSTE= Subject key identifier: 43:8A:30:F0:B0:A2:98:AC:E3:62:A0:88:78:CE:9D:BB:5A:50:0A:3E Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1 Certificate serial: 019B7758A37A9E08D5091AA2EFC9449FD50A Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/Q4ow8LCimKzjYqCIeM6du1pQCj4.roa Signing time: Thu 01 Jan 2026 02:17:36 +0000 ROA not before: Thu 01 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61051 IP address blocks: 91.209.46.0/24 maxlen: 24 2a05:f540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a3:7a:9e:08:d5:09:1a:a2:ef:c9:44:9f:d5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=438a30f0b0a298ace362a08878ce9dbb5a500a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:51:bc:07:85:e4:e4:c0:9b:6c:a5:55:07: 76:d5:c2:de:57:11:71:92:31:fd:16:6b:c0:7f:98: a3:66:21:43:06:5f:21:bc:2c:85:83:c2:ca:71:9e: 49:1e:26:c6:51:49:9c:9f:f5:f8:b5:71:82:ef:40: 22:fb:20:07:50:fc:48:de:12:7c:13:93:a5:eb:83: cd:19:96:02:6f:e7:dd:65:53:38:88:c7:50:75:09: 43:6b:e1:d1:fd:5c:67:37:85:4f:f2:24:de:e0:ae: e7:c7:3b:ff:9a:83:4d:95:76:4e:19:77:66:a7:8f: e0:54:4a:13:72:81:25:01:cb:e9:53:f6:35:1c:1f: 84:a5:b1:e1:a2:cb:fb:4e:23:47:4d:90:ff:7e:84: 9a:61:af:6e:42:e5:10:dd:a7:03:a7:0f:c6:b4:68: 95:31:1a:16:68:15:18:69:e5:e0:52:0f:e3:60:61: b0:b9:57:d1:8f:16:9a:d3:0b:fc:8c:30:e8:6f:15: 93:70:e5:f7:08:7a:fe:1a:19:29:7e:73:af:70:2e: 33:7d:ca:04:66:f1:e7:ff:91:f3:85:2f:13:ad:6d: 59:cc:43:51:47:bc:23:68:81:b1:7e:ad:d6:3d:35: 38:0c:6e:fb:a3:c9:12:9f:96:69:79:35:fa:ed:39: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8A:30:F0:B0:A2:98:AC:E3:62:A0:88:78:CE:9D:BB:5A:50:0A:3E X509v3 Authority Key Identifier: keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/Q4ow8LCimKzjYqCIeM6du1pQCj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.46.0/24 IPv6: 2a05:f540::/29 Signature Algorithm: sha256WithRSAEncryption 84:ea:99:87:f5:8a:6d:a4:ec:93:37:d7:f1:c1:af:8a:5f:20: 6d:cd:92:14:f6:9a:e6:3a:95:a1:a8:c7:e3:5c:ed:67:0f:9d: 56:85:dc:08:36:c9:d9:5a:c8:7e:5d:fd:72:62:93:ab:ca:bd: b8:34:a0:24:78:0f:4d:92:6b:6e:22:87:42:89:30:a4:00:2e: 6b:ea:29:51:bb:00:b4:2b:6d:7c:df:05:2c:03:91:e5:d2:75: 5c:b3:6a:6f:89:5b:d6:bb:c9:f6:ee:f3:92:eb:62:b5:f5:70: 73:32:15:d1:9d:3f:12:a9:6d:da:d1:54:e8:ef:80:2e:78:c8: aa:36:ed:53:19:9e:30:1e:3d:3b:c7:c0:33:09:f0:30:8c:99: ff:24:99:74:af:49:3a:45:56:27:6c:6e:24:c6:9b:bb:d6:e3: 09:0f:84:73:7f:d0:fa:a7:5e:b7:41:64:23:dd:7f:f0:ba:7c: ae:97:26:68:5b:47:5b:8c:c5:e6:dc:b8:4d:3b:70:70:d5:c6: 2b:aa:79:74:05:e3:07:e5:3e:15:61:ce:db:02:ff:fa:81:f4: bb:0a:37:73:8d:42:95:3a:40:3e:b2:3f:96:1a:df:11:2a:0e: d0:5b:17:9e:87:98:f1:d2:b7:29:24:1f:0b:6e:4c:5a:e9:7b: 9a:c4:ee:bf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WKN6ngjVCRqi78lEn9UKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmY0MzNiYjRjZWRkNzJkODZjNDRlZDg1OTk5MDM1MjJi NWU0ZjEwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzhhMzBmMGIwYTI5OGFjZTM2MmEwODg3OGNlOWRiYjVhNTAwYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDtRvAeF5OTAm2ylVQd21cLeVxFx kjH9FmvAf5ijZiFDBl8hvCyFg8LKcZ5JHibGUUmcn/X4tXGC70Ai+yAHUPxI3hJ8 E5Ol64PNGZYCb+fdZVM4iMdQdQlDa+HR/VxnN4VP8iTe4K7nxzv/moNNlXZOGXdm p4/gVEoTcoElAcvpU/Y1HB+EpbHhosv7TiNHTZD/foSaYa9uQuUQ3acDpw/GtGiV MRoWaBUYaeXgUg/jYGGwuVfRjxaa0wv8jDDobxWTcOX3CHr+GhkpfnOvcC4zfcoE ZvHn/5HzhS8TrW1ZzENRR7wjaIGxfq3WPTU4DG77o8kSn5ZpeTX67Tn6twIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEOKMPCwopis42KgiHjOnbtaUAo+MB8GA1UdIwQY MBaAFDFvQzu0zt1y2GxE7YWZkDUiteTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS83M2M4MjktMTUxOC00ZDQxLTkyYzIt N2UwYWI4YmNhZTg5LzEvUTRvdzhMQ2ltS3pqWXFDSWVNNmR1MXBRQ2o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS83M2M4MjktMTUxOC00ZDQxLTkyYzItN2UwYWI4YmNhZTg5 LzEvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9EuMA0E AgACMAcDBQMqBfVAMA0GCSqGSIb3DQEBCwUAA4IBAQCE6pmH9YptpOyTN9fxwa+K XyBtzZIU9prmOpWhqMfjXO1nD51WhdwINsnZWsh+Xf1yYpOryr24NKAkeA9Nkmtu IodCiTCkAC5r6ilRuwC0K2183wUsA5Hl0nVcs2pviVvWu8n27vOS62K19XBzMhXR nT8SqW3a0VTo74AueMiqNu1TGZ4wHj07x8AzCfAwjJn/JJl0r0k6RVYnbG4kxpu7 1uMJD4Rzf9D6p163QWQj3X/wunyulyZoW0dbjMXm3LhNO3Bw1cYrqnl0BeMH5T4V Yc7bAv/6gfS7CjdzjUKVOkA+sj+WGt8RKg7QWxeeh5jx0rcpJB8Lbkxa6XuaxO6/ -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:03 2026 by rpki-client