This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/QxbuEgaCbRaD-slTv7YdUYD7rWQ.roa File: QxbuEgaCbRaD-slTv7YdUYD7rWQ.roa (raw, json) Hash identifier: d2KUx7esd7yDYioAhXgs0Rm4+uRrblcxg8RCa82DopQ= Subject key identifier: 43:16:EE:12:06:82:6D:16:83:FA:C9:53:BF:B6:1D:51:80:FB:AD:64 Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61 Certificate serial: 019B78A250C2D1CACD02AD3BFA384CAE7760 Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/QxbuEgaCbRaD-slTv7YdUYD7rWQ.roa Signing time: Thu 01 Jan 2026 08:17:41 +0000 ROA not before: Thu 01 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212631 IP address blocks: 91.220.243.0/24 maxlen: 24 2a0d:2380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:50:c2:d1:ca:cd:02:ad:3b:fa:38:4c:ae:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61 Validity Not Before: Jan 1 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4316ee1206826d1683fac953bfb61d5180fbad64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:75:35:90:2c:87:fe:c8:ea:94:2a:ce:03: 13:a3:3a:be:8d:ba:3e:fb:49:24:58:03:ee:c7:29: af:6b:f4:b8:c6:dd:81:6a:30:d4:0f:c3:f5:8a:10: 29:6f:84:2e:65:1b:c0:bd:22:9d:a5:4d:7b:dd:4b: 97:68:af:a8:1d:13:e5:87:7b:b0:da:d0:be:aa:7a: ce:b1:fc:c6:da:4a:f0:0f:6c:be:f7:a7:a1:67:83: a1:b2:1d:53:40:7e:26:3d:29:5f:40:63:76:75:55: 9d:a0:a6:40:5d:2a:ab:35:1d:83:85:ae:ba:de:03: 6c:49:57:05:e2:6f:61:9b:9f:0e:1e:f9:3d:33:84: 18:8e:d4:9f:1b:53:4f:95:77:e8:0f:2a:90:8c:33: ea:8b:13:f4:e3:e9:ba:8f:0e:e9:54:05:c3:1f:b0: 0e:29:db:a7:52:04:9e:86:ea:48:7b:c6:46:bf:23: b6:2a:66:d8:fb:00:6a:41:ca:f1:69:3f:34:ed:7d: b5:e6:73:85:32:d8:87:7e:2a:8f:2d:ff:b9:35:60: 99:b0:67:22:98:47:88:a8:ff:b2:22:75:22:0d:dc: 59:56:2a:a3:ee:38:72:5a:a5:01:39:f2:8d:fe:79: 2f:5c:1a:69:b9:c9:5c:90:1d:5b:7d:5c:42:e9:dd: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:EE:12:06:82:6D:16:83:FA:C9:53:BF:B6:1D:51:80:FB:AD:64 X509v3 Authority Key Identifier: keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/QxbuEgaCbRaD-slTv7YdUYD7rWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.243.0/24 IPv6: 2a0d:2380::/29 Signature Algorithm: sha256WithRSAEncryption 1c:19:a7:be:24:ba:1c:51:ae:0f:86:81:da:4e:a5:03:b5:6a: 34:56:71:aa:db:46:4f:b8:3a:5b:e3:aa:b6:76:ee:57:72:5a: 7d:9c:36:2f:08:c2:57:f0:45:c6:08:49:b3:9d:82:b4:e9:fd: 16:22:4b:73:55:27:0d:93:33:5f:33:a3:8a:e2:78:18:31:7e: 80:54:ce:fa:fa:6a:6a:97:29:8c:67:6c:d1:33:76:13:44:ec: 57:b0:37:60:39:74:fe:50:4b:04:5d:39:42:0f:ac:fb:0c:30: 1a:81:44:10:13:6e:d6:77:e2:3a:ab:bc:9b:d7:b0:ea:c4:a2: 4b:f2:ec:f5:26:27:66:8d:61:5c:17:a7:82:3b:78:d9:02:68: 4d:78:d2:48:f2:ba:2f:be:b6:75:67:a7:fa:82:dc:53:f6:ff: 80:57:d4:ad:67:b2:29:f3:c6:32:a1:13:fc:35:26:20:61:c3: 41:28:9b:64:40:53:cd:20:05:04:30:42:bc:35:6f:98:88:06: a8:a7:d5:b8:d6:0d:75:7e:75:38:93:50:c1:68:53:21:ff:d7: 9c:50:a8:bf:6d:7a:40:71:1d:85:3c:d6:1c:f4:56:9b:3b:97: f8:bb:90:09:06:b1:0d:c4:67:98:2b:ca:5a:e3:1c:00:10:13: 3a:00:d0:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4olDC0crNAq07+jhMrndgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YjUzYjg2ZWIxZjE5ZDBhZTdjMDBiMTMyZTk3YzAzYTk0 YmZmNjEwHhcNMjYwMTAxMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzE2ZWUxMjA2ODI2ZDE2ODNmYWM5NTNiZmI2MWQ1MTgwZmJhZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLh1NZAsh/7I6pQqzgMTozq+jbo+ +0kkWAPuxymva/S4xt2BajDUD8P1ihApb4QuZRvAvSKdpU173UuXaK+oHRPlh3uw 2tC+qnrOsfzG2krwD2y+96ehZ4Ohsh1TQH4mPSlfQGN2dVWdoKZAXSqrNR2Dha66 3gNsSVcF4m9hm58OHvk9M4QYjtSfG1NPlXfoDyqQjDPqixP04+m6jw7pVAXDH7AO KdunUgSehupIe8ZGvyO2KmbY+wBqQcrxaT807X215nOFMtiHfiqPLf+5NWCZsGci mEeIqP+yInUiDdxZViqj7jhyWqUBOfKN/nkvXBppuclckB1bfVxC6d2/KQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEMW7hIGgm0Wg/rJU7+2HVGA+61kMB8GA1UdIwQY MBaAFJi1O4brHxnQrnwAsTLpfAOpS/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUt Mjc1YzVmNzMxYjQ0LzEvUXhidUVnYUNiUmFELXNsVHY3WWRVWUQ3cldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUtMjc1YzVmNzMxYjQ0 LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9zzMA0E AgACMAcDBQMqDSOAMA0GCSqGSIb3DQEBCwUAA4IBAQAcGae+JLocUa4PhoHaTqUD tWo0VnGq20ZPuDpb46q2du5Xclp9nDYvCMJX8EXGCEmznYK06f0WIktzVScNkzNf M6OK4ngYMX6AVM76+mpqlymMZ2zRM3YTROxXsDdgOXT+UEsEXTlCD6z7DDAagUQQ E27Wd+I6q7yb17DqxKJL8uz1JidmjWFcF6eCO3jZAmhNeNJI8rovvrZ1Z6f6gtxT 9v+AV9StZ7Ip88YyoRP8NSYgYcNBKJtkQFPNIAUEMEK8NW+YiAaop9W41g11fnU4 k1DBaFMh/9ecUKi/bXpAcR2FPNYc9FabO5f4u5AJBrENxGeYK8pa4xwAEBM6ANCy -----END CERTIFICATE-----Generated at Mon Feb 9 23:04:13 2026 by rpki-client