This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/QV7nlixfPKhI7EyPWNfAD7Hr-34.roa File: QV7nlixfPKhI7EyPWNfAD7Hr-34.roa (raw, json) Hash identifier: RcoZUOLY0DZ86B3NQRroG5VCtYfjUx1K45ubhmkvdMY= Subject key identifier: 41:5E:E7:96:2C:5F:3C:A8:48:EC:4C:8F:58:D7:C0:0F:B1:EB:FB:7E Certificate issuer: /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Certificate serial: 019B7758C6E80A9DB4BD51D5A71CF1AB922F Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/QV7nlixfPKhI7EyPWNfAD7Hr-34.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47941 IP address blocks: 91.209.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c6:e8:0a:9d:b4:bd:51:d5:a7:1c:f1:ab:92:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=415ee7962c5f3ca848ec4c8f58d7c00fb1ebfb7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:4b:2f:0a:0a:4d:7b:c9:f4:fd:9f:1b:83: 62:79:0d:20:29:6c:1b:68:91:f7:6a:47:3c:e5:1f: 69:93:0a:03:23:d2:a3:44:a5:2b:61:04:8c:52:43: 68:55:ac:e2:76:23:9a:f3:01:83:37:85:ce:42:89: 29:db:e0:87:27:5c:06:84:b2:81:27:47:4f:a7:fe: 6d:55:ac:77:91:53:8d:43:39:83:89:42:7e:ac:34: 22:7b:cf:41:f4:0a:ea:1e:08:a2:1f:74:dd:20:5c: 1d:8c:63:f7:97:3e:11:a7:23:95:d4:af:e0:32:e6: 15:6f:b1:00:bd:48:1c:f6:82:9b:fa:5d:e9:7e:4c: 70:fa:28:a1:19:57:39:66:c2:9a:1b:37:2e:c9:ec: b6:1e:89:76:34:46:3e:96:4f:28:0d:5f:ac:a0:ca: e8:89:10:6d:de:54:f3:bc:27:b2:d9:47:ac:f3:2a: 80:75:1a:c5:96:e5:74:c9:8d:bd:1f:92:93:83:e7: 13:11:71:7c:d4:8a:94:1f:8a:8c:a2:34:6f:78:4a: c3:f5:3f:90:69:34:82:d2:79:d2:fd:e8:9d:b7:be: 89:99:91:6b:3d:3b:f3:62:cc:38:e3:45:57:93:cd: b4:51:60:cb:c2:bc:e7:1a:fb:df:63:b3:56:f1:cb: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5E:E7:96:2C:5F:3C:A8:48:EC:4C:8F:58:D7:C0:0F:B1:EB:FB:7E X509v3 Authority Key Identifier: keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/QV7nlixfPKhI7EyPWNfAD7Hr-34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.10.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:dd:5e:72:23:d2:83:3d:a5:20:6a:37:9d:0f:b0:e5:f3:b2: 24:b3:c6:6c:14:4b:36:9f:4e:ba:2d:38:fe:d9:15:8c:b3:bd: a6:f7:31:03:7e:48:86:c9:bc:0d:b3:0d:b3:5f:4d:a8:49:b2: 72:ba:10:7e:3f:52:c7:10:e3:8c:62:cf:3f:cf:b8:36:ff:c3: a6:8f:73:5b:2c:3a:70:66:23:25:87:8b:2b:f2:b7:98:38:0d: cc:3c:fd:be:e8:ce:13:a6:7a:df:41:ea:a9:75:70:ce:26:44: 00:78:9b:12:59:25:e9:56:f3:c4:9e:73:a3:73:eb:e8:d4:dd: ce:bf:99:18:7d:38:02:87:cc:c2:fd:b9:aa:9b:9c:6f:a5:90: 5b:de:2a:24:6b:a7:a7:21:b6:a7:08:40:84:40:0b:b9:8d:3e: 08:85:35:75:34:ee:ce:be:67:52:58:ae:3f:48:0a:d0:7e:52: d0:0d:37:e4:98:e7:cd:8e:c5:e2:49:1b:58:de:08:31:7d:08: 9f:56:5c:9c:56:54:42:f8:38:e5:1b:88:8f:77:e9:4e:f8:b0: f0:2d:a6:3c:e0:c1:cc:f7:fe:6b:a9:c8:76:64:a7:c7:a5:c0: 2e:11:d9:1a:d5:cb:9b:c2:b9:d5:aa:38:3a:d8:b5:56:1a:1c: 7d:2f:03:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMboCp20vVHVpxzxq5IvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWJmODE3ZTFhOTJmM2NkN2Y0OWRmNmEzMWMyNjVmZmU0 NzgwMDgwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTVlZTc5NjJjNWYzY2E4NDhlYzRjOGY1OGQ3YzAwZmIxZWJmYjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGtLLwoKTXvJ9P2fG4NieQ0gKWwb aJH3akc85R9pkwoDI9KjRKUrYQSMUkNoVazidiOa8wGDN4XOQokp2+CHJ1wGhLKB J0dPp/5tVax3kVONQzmDiUJ+rDQie89B9ArqHgiiH3TdIFwdjGP3lz4RpyOV1K/g MuYVb7EAvUgc9oKb+l3pfkxw+iihGVc5ZsKaGzcuyey2Hol2NEY+lk8oDV+soMro iRBt3lTzvCey2Ues8yqAdRrFluV0yY29H5KTg+cTEXF81IqUH4qMojRveErD9T+Q aTSC0nnS/eidt76JmZFrPTvzYsw440VXk820UWDLwrznGvvfY7NW8cuCuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEFe55YsXzyoSOxMj1jXwA+x6/t+MB8GA1UdIwQY MBaAFHLr+BfhqS881/Sd9qMcJl/+R4AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEt YzlmN2MwZTdhY2M2LzEvUVY3bmxpeGZQS2hJN0V5UFdOZkFEN0hyLTM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEtYzlmN2MwZTdhY2M2 LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9EKMA0G CSqGSIb3DQEBCwUAA4IBAQAt3V5yI9KDPaUgajedD7Dl87Iks8ZsFEs2n066LTj+ 2RWMs72m9zEDfkiGybwNsw2zX02oSbJyuhB+P1LHEOOMYs8/z7g2/8Omj3NbLDpw ZiMlh4sr8reYOA3MPP2+6M4TpnrfQeqpdXDOJkQAeJsSWSXpVvPEnnOjc+vo1N3O v5kYfTgCh8zC/bmqm5xvpZBb3ioka6enIbanCECEQAu5jT4IhTV1NO7OvmdSWK4/ SArQflLQDTfkmOfNjsXiSRtY3ggxfQifVlycVlRC+DjlG4iPd+lO+LDwLaY84MHM 9/5rqch2ZKfHpcAuEdka1cubwrnVqjg62LVWGhx9LwOd -----END CERTIFICATE-----Generated at Sat Jan 10 14:24:04 2026 by rpki-client