This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/qOGZnmJn9twBLNZ-YPGtBuaarUA.roa File: qOGZnmJn9twBLNZ-YPGtBuaarUA.roa (raw, json) Hash identifier: 8dGXa2ecQGk4C5r7XMrelqu+XdDeVoRN8xB6oD32Evs= Subject key identifier: A8:E1:99:9E:62:67:F6:DC:01:2C:D6:7E:60:F1:AD:06:E6:9A:AD:40 Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f Certificate serial: 019B7C1342BB16ABB839744CA097B869AF94 Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/qOGZnmJn9twBLNZ-YPGtBuaarUA.roa Signing time: Fri 02 Jan 2026 00:19:55 +0000 ROA not before: Fri 02 Jan 2026 00:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.200.50.0/24 maxlen: 24 91.213.115.0/24 maxlen: 24 91.241.6.0/23 maxlen: 24 195.46.38.0/24 maxlen: 24 2001:678:264::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:42:bb:16:ab:b8:39:74:4c:a0:97:b8:69:af:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f Validity Not Before: Jan 2 00:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8e1999e6267f6dc012cd67e60f1ad06e69aad40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b4:56:5e:ad:e5:ef:d1:ad:d3:e7:54:e2:19: ac:90:fe:a9:9b:05:92:fe:c9:f1:c2:2c:9e:b6:34: 9e:47:5b:42:ce:70:9b:10:12:db:5a:23:92:96:6a: 9d:30:e8:f5:98:34:7c:2c:69:74:ff:fb:74:d9:fc: 09:fd:a2:50:7b:85:64:4a:c8:19:c1:57:62:6c:82: 16:80:5b:a9:79:99:92:ab:e5:ec:a2:b5:ae:b2:0b: d4:91:07:02:34:a9:8b:2e:7f:54:5b:ae:21:14:7e: b2:0a:fe:6f:99:56:94:22:43:82:d9:7b:4f:44:c8: a3:2e:20:29:99:ca:2e:f2:a9:91:a9:f0:8c:81:99: e9:58:4f:ba:50:c0:55:17:71:14:ba:5a:88:50:35: 8e:eb:f0:f8:d1:bc:2b:e5:39:22:63:e1:a0:e9:fa: 5a:31:a7:7f:45:1a:00:9c:db:f2:c8:10:19:47:48: 7e:04:1b:24:3d:4f:a1:e1:5f:63:74:a6:9a:b2:7d: 07:f2:be:8c:29:1d:da:1e:fc:25:99:27:4d:a4:cb: 85:e1:13:95:03:11:a2:1f:7c:58:bd:9c:31:8b:30: e6:d6:71:c6:92:ad:39:2c:ee:68:f7:89:38:6a:a1: 9d:30:ec:f8:d9:f8:91:b7:0d:f1:40:14:50:57:35: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E1:99:9E:62:67:F6:DC:01:2C:D6:7E:60:F1:AD:06:E6:9A:AD:40 X509v3 Authority Key Identifier: keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/qOGZnmJn9twBLNZ-YPGtBuaarUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.50.0/24 91.213.115.0/24 91.241.6.0/23 195.46.38.0/24 IPv6: 2001:678:264::/48 Signature Algorithm: sha256WithRSAEncryption 65:4f:c4:77:bf:9c:f0:4b:bc:0a:86:48:4a:ce:c8:90:7e:18: a9:d8:f5:93:2b:65:6b:c6:be:f4:5a:e1:45:13:e2:79:a5:99: 5e:4b:ed:e8:15:28:a7:fe:29:13:ce:a2:23:80:9b:8a:de:f2: 77:88:a3:15:c0:06:31:41:a9:0c:a4:fa:0a:08:16:88:7e:97: 0b:a7:fa:b0:b9:c8:00:d2:2c:3d:a5:48:d6:53:ae:a6:75:66: e0:4f:a4:a9:9e:74:da:9c:27:21:57:e5:f4:4f:1b:6b:7e:f9: 86:25:70:7a:24:f0:54:f4:be:9d:c0:07:1c:65:55:44:fe:a9: e7:69:37:27:b6:c5:f8:96:b7:a5:03:20:5b:6c:8a:ae:86:2e: 56:10:f9:47:f5:f9:50:c5:f0:bb:97:cb:1b:90:5b:3c:5d:10: 64:36:59:62:e7:8d:63:2a:3e:75:30:7b:c2:ec:b7:64:b0:a5: 31:f8:d6:d4:8b:06:3a:82:65:0e:e1:00:e1:84:60:4d:72:4d: cb:71:94:bf:38:cb:59:2d:9a:cb:d6:b9:94:88:b4:c6:58:e0: 6f:ee:87:2c:1e:c0:ce:9e:58:24:df:d6:32:98:a7:ca:1f:03: 91:ab:23:c8:f1:56:dc:30:fc:e5:88:ff:8e:78:78:ab:12:cb: 5a:63:ba:a9 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt8E0K7Fqu4OXRMoJe4aa+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTM4NDliZmYzMzdkZjhiOGIwYmQxYWUyNTJlZTYxMTlk OGE2MWYwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGUxOTk5ZTYyNjdmNmRjMDEyY2Q2N2U2MGYxYWQwNmU2OWFhZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27RWXq3l79Gt0+dU4hmskP6pmwWS /snxwiyetjSeR1tCznCbEBLbWiOSlmqdMOj1mDR8LGl0//t02fwJ/aJQe4VkSsgZ wVdibIIWgFupeZmSq+XsorWusgvUkQcCNKmLLn9UW64hFH6yCv5vmVaUIkOC2XtP RMijLiApmcou8qmRqfCMgZnpWE+6UMBVF3EUulqIUDWO6/D40bwr5TkiY+Gg6fpa Mad/RRoAnNvyyBAZR0h+BBskPU+h4V9jdKaasn0H8r6MKR3aHvwlmSdNpMuF4ROV AxGiH3xYvZwxizDm1nHGkq05LO5o94k4aqGdMOz42fiRtw3xQBRQVzWkewIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFKjhmZ5iZ/bcASzWfmDxrQbmmq1AMB8GA1UdIwQY MBaAFBqThJv/M334uLC9GuJS7mEZ2KYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjkt NDNlNjdkNWQwYTg1LzEvcU9HWm5tSm45dHdCTE5aLVlQR3RCdWFhclVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjktNDNlNjdkNWQwYTg1 LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAW8gyAwQA W9VzAwQBW/EGAwQAwy4mMA8EAgACMAkDBwAgAQZ4AmQwDQYJKoZIhvcNAQELBQAD ggEBAGVPxHe/nPBLvAqGSErOyJB+GKnY9ZMrZWvGvvRa4UUT4nmlmV5L7egVKKf+ KRPOoiOAm4re8neIoxXABjFBqQyk+goIFoh+lwun+rC5yADSLD2lSNZTrqZ1ZuBP pKmedNqcJyFX5fRPG2t++YYlcHok8FT0vp3ABxxlVUT+qedpNye2xfiWt6UDIFts iq6GLlYQ+Uf1+VDF8LuXyxuQWzxdEGQ2WWLnjWMqPnUwe8Lst2SwpTH41tSLBjqC ZQ7hAOGEYE1yTctxlL84y1ktmsvWuZSItMZY4G/uhywewM6eWCTf1jKYp8ofA5Gr I8jxVtww/OWI/454eKsSy1pjuqk= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:05 2026 by rpki-client