This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/qO1xGMDRTz1c6NG2XcRW45Jlxs0.roa File: qO1xGMDRTz1c6NG2XcRW45Jlxs0.roa (raw, json) Hash identifier: lXx7crxtNnNAXWSdBnarR4QfhtaUFVtePQBiE/rqIY0= Subject key identifier: A8:ED:71:18:C0:D1:4F:3D:5C:E8:D1:B6:5D:C4:56:E3:92:65:C6:CD Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f Certificate serial: 019B7FF13E0A2B5D2F51AFC6712381AF2C68 Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/qO1xGMDRTz1c6NG2XcRW45Jlxs0.roa Signing time: Fri 02 Jan 2026 18:21:15 +0000 ROA not before: Fri 02 Jan 2026 18:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208096 IP address blocks: 89.200.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:3e:0a:2b:5d:2f:51:af:c6:71:23:81:af:2c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f Validity Not Before: Jan 2 18:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8ed7118c0d14f3d5ce8d1b65dc456e39265c6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b6:9b:e6:68:84:df:82:f6:e0:d5:b6:76:45: de:d3:a9:b1:b4:0b:69:7f:8c:a6:e1:da:00:f1:af: a3:16:1e:de:c4:7d:dc:63:d1:5c:29:7f:01:67:cd: 1a:75:d6:2a:b5:39:2f:fe:82:ca:04:43:bf:83:4b: f1:b0:49:3d:b4:a7:2c:e2:47:76:b5:92:76:8d:45: d1:55:d5:ca:eb:c7:08:0d:a7:bd:07:2f:2c:f7:83: ac:9d:d1:20:df:4e:57:a5:0f:81:4c:8c:54:7c:ae: 6f:05:03:32:3a:f6:1d:61:f3:29:9f:74:bc:51:13: d0:85:9d:69:6f:71:a7:52:f7:0e:12:a1:43:2a:b5: 3d:64:ec:9d:d0:9d:d8:f6:d2:28:3e:3e:9f:cd:b1: f6:1e:01:3c:5a:f0:cd:a5:f0:39:33:c9:a0:c3:72: 81:c1:db:4a:cd:c8:f1:07:85:80:38:7d:cc:a6:4f: 8e:6a:08:a5:8a:f5:d6:06:4b:1d:4c:ec:49:23:35: 64:b8:75:a4:62:01:58:14:5a:7d:4d:9f:b5:5b:be: 9f:67:f4:bf:a6:6b:85:fb:13:cc:f6:f8:a6:6e:42: 29:3d:d3:22:75:2a:44:6d:b9:c6:88:84:9f:c4:eb: 00:a7:8c:c7:44:ef:df:8c:d1:c9:de:df:5b:fc:6f: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:ED:71:18:C0:D1:4F:3D:5C:E8:D1:B6:5D:C4:56:E3:92:65:C6:CD X509v3 Authority Key Identifier: keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/qO1xGMDRTz1c6NG2XcRW45Jlxs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.200.246.0/24 Signature Algorithm: sha256WithRSAEncryption b3:be:b8:34:06:d4:4f:1a:db:34:2f:b4:ba:76:72:53:f1:70: 8d:da:4a:ac:e8:56:2f:68:83:aa:dc:0f:7d:4b:7a:6b:d0:53: eb:43:ce:14:75:67:7f:4b:eb:44:57:f2:2f:be:90:95:ba:7a: 9a:5b:e3:53:78:5e:f9:7f:03:5d:bf:41:39:7b:47:06:05:9a: 42:35:a8:95:69:a5:3b:0c:6e:c8:6b:ef:d8:14:45:6a:8e:28: ea:bd:cc:82:7c:1b:3a:7b:41:6e:7e:c4:17:0a:8c:7f:b9:9b: 05:5d:6a:2b:3d:08:83:7e:0e:8f:32:ff:d3:b4:1b:c3:15:57: 5a:d2:1f:cd:3c:82:0f:da:21:26:dd:2b:fd:c8:fa:c0:5b:24: 17:b9:82:9a:1f:45:61:d5:fc:19:d2:b3:65:1f:bc:8e:c0:91: b8:3a:fc:5a:52:11:f2:10:14:7a:1d:26:54:21:46:b9:69:24: d9:9d:39:5e:ce:bf:64:12:86:ab:1d:50:f2:7e:aa:43:c9:73: 97:23:a4:28:75:c6:46:b7:76:96:12:c4:bc:57:c2:91:ae:fb: 3e:3a:57:53:05:88:39:fc:9f:3a:c7:a4:b1:34:bc:62:f3:fd: 24:5e:26:d7:75:54:1f:6f:27:4a:b2:c7:39:fd:30:24:12:9c: b8:78:94:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8T4KK10vUa/GcSOBryxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5 YjI5NmYwHhcNMjYwMTAyMTgyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGVkNzExOGMwZDE0ZjNkNWNlOGQxYjY1ZGM0NTZlMzkyNjVjNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbab5miE34L24NW2dkXe06mxtAtp f4ym4doA8a+jFh7exH3cY9FcKX8BZ80addYqtTkv/oLKBEO/g0vxsEk9tKcs4kd2 tZJ2jUXRVdXK68cIDae9By8s94OsndEg305XpQ+BTIxUfK5vBQMyOvYdYfMpn3S8 URPQhZ1pb3GnUvcOEqFDKrU9ZOyd0J3Y9tIoPj6fzbH2HgE8WvDNpfA5M8mgw3KB wdtKzcjxB4WAOH3Mpk+OagilivXWBksdTOxJIzVkuHWkYgFYFFp9TZ+1W76fZ/S/ pmuF+xPM9vimbkIpPdMidSpEbbnGiISfxOsAp4zHRO/fjNHJ3t9b/G9MaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKjtcRjA0U89XOjRtl3EVuOSZcbNMB8GA1UdIwQY MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct NzMxYWJjNmY3NWNhLzEvcU8xeEdNRFJUejFjNk5HMlhjUlc0NUpseHMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWcj2MA0G CSqGSIb3DQEBCwUAA4IBAQCzvrg0BtRPGts0L7S6dnJT8XCN2kqs6FYvaIOq3A99 S3pr0FPrQ84UdWd/S+tEV/IvvpCVunqaW+NTeF75fwNdv0E5e0cGBZpCNaiVaaU7 DG7Ia+/YFEVqjijqvcyCfBs6e0FufsQXCox/uZsFXWorPQiDfg6PMv/TtBvDFVda 0h/NPIIP2iEm3Sv9yPrAWyQXuYKaH0Vh1fwZ0rNlH7yOwJG4OvxaUhHyEBR6HSZU IUa5aSTZnTlezr9kEoarHVDyfqpDyXOXI6QodcZGt3aWEsS8V8KRrvs+OldTBYg5 /J86x6SxNLxi8/0kXibXdVQfbydKssc5/TAkEpy4eJS4 -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:57 2026 by rpki-client