This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/qVOiKU3-XCJIV1dlmVqm9Z8OCSU.roa File: qVOiKU3-XCJIV1dlmVqm9Z8OCSU.roa (raw, json) Hash identifier: 1b1b4ZznQQVB7nOvdHCZX+1O8620BLLwp7A6OVcEvQw= Subject key identifier: A9:53:A2:29:4D:FE:5C:22:48:57:57:65:99:5A:A6:F5:9F:0E:09:25 Certificate issuer: /CN=dd5b224b6593e558038a9e40e660c77142755c1b Certificate serial: 019B78344B78633EAC75AC14C482480EAE3D Authority key identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/qVOiKU3-XCJIV1dlmVqm9Z8OCSU.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13011 IP address blocks: 91.209.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4b:78:63:3e:ac:75:ac:14:c4:82:48:0e:ae:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5b224b6593e558038a9e40e660c77142755c1b Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a953a2294dfe5c2248575765995aa6f59f0e0925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5c:d3:54:17:d6:04:84:01:b3:a3:5c:d8:fd: fa:22:53:85:a5:42:40:06:db:53:93:07:fe:60:46: a2:49:f5:a2:06:d2:55:28:c3:d7:36:b2:b9:76:2c: c2:6b:70:ba:40:28:84:d3:63:ba:6f:5e:cf:ab:59: 3d:61:af:60:3b:06:da:ec:33:1e:76:43:34:c4:f3: 25:ba:9a:f8:90:04:1d:73:63:7b:75:19:fe:93:fc: 98:59:e9:f5:9a:b9:24:59:f4:d9:4e:3c:bf:5b:d5: a8:19:6a:33:0b:6a:cb:66:1b:39:7b:63:b3:1e:fb: 2a:23:76:cf:9c:cd:e8:0c:f2:86:86:3b:ae:74:34: 98:be:31:46:e1:5c:14:a0:a6:2c:0e:7f:5c:33:0b: 63:56:27:a2:d1:1a:a3:4a:d2:b6:56:e1:f9:34:d0: a0:45:de:66:43:46:16:46:54:ff:e0:fc:df:e2:52: 51:a3:eb:9a:5f:b1:dc:71:59:1f:80:8d:7e:4e:f3: 2b:95:d3:4b:f8:1a:64:83:de:7e:bf:55:d6:4d:75: 6d:69:a7:f4:67:41:ba:e6:b2:e9:de:92:c3:f1:26: ad:37:3a:e0:3a:8f:72:8c:87:6d:bd:49:8b:75:7e: d2:ec:80:1c:2d:23:da:55:59:b9:2b:4c:e6:30:c6: 84:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:53:A2:29:4D:FE:5C:22:48:57:57:65:99:5A:A6:F5:9F:0E:09:25 X509v3 Authority Key Identifier: keyid:DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/qVOiKU3-XCJIV1dlmVqm9Z8OCSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.123.0/24 Signature Algorithm: sha256WithRSAEncryption 55:3f:47:7d:02:ca:4f:56:62:48:36:24:97:86:71:4b:58:14: a6:6b:00:4a:31:6c:d0:fc:d0:6f:9b:5e:e1:ba:92:64:98:47: 10:d7:9a:fd:87:d6:3d:ab:c8:46:bc:d2:23:9f:1b:e3:b9:9a: 4c:8d:b4:0f:14:45:cb:8d:de:12:ce:7f:bf:ba:48:94:39:ef: 12:39:b5:33:ef:14:2e:bb:cc:e2:fe:b9:23:08:7b:cb:c7:d4: 4c:28:d0:eb:e7:9a:53:e3:62:49:57:cd:3d:28:1f:95:44:1c: 38:36:ea:97:aa:d8:d1:7c:f3:78:ec:3a:14:ea:52:05:d6:5b: d3:51:7a:21:d9:a5:13:70:85:b6:02:99:63:56:0f:a6:56:7d: 01:f9:92:f2:08:52:29:09:10:b0:9a:fd:87:e4:1c:1b:cb:fe: e7:f1:2b:69:9f:60:95:80:f8:d0:b8:69:c1:9e:ce:4b:70:6f: 14:2e:e3:53:6c:e6:46:81:65:e7:15:f4:df:18:c9:4f:37:cc: 82:28:11:01:58:2c:85:10:cf:4e:9e:45:8e:d0:56:05:ad:e6: 53:5c:db:66:36:1e:bd:0b:67:f5:73:1b:b8:50:9e:47:e5:c9: bb:f5:f5:3a:9f:9b:07:5c:36:78:3b:fb:f4:52:c9:a9:9b:29: 1e:c1:92:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEt4Yz6sdawUxIJIDq49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWIyMjRiNjU5M2U1NTgwMzhhOWU0MGU2NjBjNzcxNDI3 NTVjMWIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTUzYTIyOTRkZmU1YzIyNDg1NzU3NjU5OTVhYTZmNTlmMGUwOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVzTVBfWBIQBs6Nc2P36IlOFpUJA BttTkwf+YEaiSfWiBtJVKMPXNrK5dizCa3C6QCiE02O6b17Pq1k9Ya9gOwba7DMe dkM0xPMlupr4kAQdc2N7dRn+k/yYWen1mrkkWfTZTjy/W9WoGWozC2rLZhs5e2Oz HvsqI3bPnM3oDPKGhjuudDSYvjFG4VwUoKYsDn9cMwtjViei0RqjStK2VuH5NNCg Rd5mQ0YWRlT/4Pzf4lJRo+uaX7HccVkfgI1+TvMrldNL+Bpkg95+v1XWTXVtaaf0 Z0G65rLp3pLD8SatNzrgOo9yjIdtvUmLdX7S7IAcLSPaVVm5K0zmMMaEUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKlToilN/lwiSFdXZZlapvWfDgklMB8GA1UdIwQY MBaAFN1bIktlk+VYA4qeQOZgx3FCdVwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1ZzaVMyV1Q1VmdEaXA1QTVtREhjVUoxWEJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NTJkZmUtYWNhZS00MjQzLWJmMzMt MzBiYmZjMDg1NWU0LzEvcVZPaUtVMy1YQ0pJVjFkbG1WcW05WjhPQ1NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi82NTJkZmUtYWNhZS00MjQzLWJmMzMtMzBiYmZjMDg1NWU0 LzEvM1ZzaVMyV1Q1VmdEaXA1QTVtREhjVUoxWEJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9F7MA0G CSqGSIb3DQEBCwUAA4IBAQBVP0d9AspPVmJINiSXhnFLWBSmawBKMWzQ/NBvm17h upJkmEcQ15r9h9Y9q8hGvNIjnxvjuZpMjbQPFEXLjd4Szn+/ukiUOe8SObUz7xQu u8zi/rkjCHvLx9RMKNDr55pT42JJV809KB+VRBw4NuqXqtjRfPN47DoU6lIF1lvT UXoh2aUTcIW2ApljVg+mVn0B+ZLyCFIpCRCwmv2H5Bwby/7n8Stpn2CVgPjQuGnB ns5LcG8ULuNTbOZGgWXnFfTfGMlPN8yCKBEBWCyFEM9OnkWO0FYFreZTXNtmNh69 C2f1cxu4UJ5H5cm79fU6n5sHXDZ4O/v0UsmpmykewZId -----END CERTIFICATE-----Generated at Tue Feb 10 07:29:47 2026 by rpki-client