This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/qzSmIaL5OGBdTdVlMvJi_bUV2t4.roa File: qzSmIaL5OGBdTdVlMvJi_bUV2t4.roa (raw, json) Hash identifier: G/QX/MIiigz0ShuLcId897JAOScEU/rXCaDf81F1fIY= Subject key identifier: AB:34:A6:21:A2:F9:38:60:5D:4D:D5:65:32:F2:62:FD:B5:15:DA:DE Certificate issuer: /CN=c79a7ca44027d2e5ad389f169ed15936d7851166 Certificate serial: 019B79ECE9D755E4AF6999ECA6A25E45D0CC Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/qzSmIaL5OGBdTdVlMvJi_bUV2t4.roa Signing time: Thu 01 Jan 2026 14:18:48 +0000 ROA not before: Thu 01 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204881 IP address blocks: 91.213.235.0/24 maxlen: 24 91.240.163.0/24 maxlen: 24 2a12:fd40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e9:d7:55:e4:af:69:99:ec:a6:a2:5e:45:d0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166 Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab34a621a2f938605d4dd56532f262fdb515dade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4c:e9:60:e3:20:be:3b:0f:f2:13:6e:d8:e5: 79:1c:37:f6:9f:88:03:96:58:17:01:27:dc:e8:c7: 53:ab:a2:f0:82:4e:60:0e:08:44:f7:6d:ef:86:1e: 60:01:87:2a:72:52:58:38:d9:a8:8d:e5:bf:01:2b: 66:e6:02:b1:e1:c5:fb:f3:97:fb:65:b6:9e:5b:6c: 19:38:73:43:dc:62:d7:8a:85:95:1b:ed:af:0e:b2: e8:6e:c7:b4:e8:4c:b3:40:55:9e:ee:f8:c3:0f:26: 99:66:30:1f:14:5f:b5:6e:94:c8:5e:c6:bf:e2:0e: 1a:71:d8:3c:35:50:a1:fc:8e:dd:90:b7:82:b5:01: c2:a8:2e:16:94:bb:40:a8:b2:9e:85:3b:15:74:3b: 03:40:e3:6a:69:a4:11:73:f9:3d:df:30:d5:43:32: 6d:22:cf:c0:8c:b7:fc:1e:77:ea:53:58:13:8e:d6: 36:bf:91:7f:e0:90:38:03:ed:52:e1:f9:a2:e6:e4: b6:97:46:6b:be:f5:bb:49:a1:80:2d:1c:84:17:7a: 7c:df:a1:cd:ee:10:ba:55:b0:74:3c:05:18:8a:3b: f2:5d:27:a4:8c:99:b7:3e:af:0b:e4:c2:ae:c1:5f: 4d:89:d5:e7:16:b8:7a:b5:c0:61:b3:8e:bf:f4:15: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:34:A6:21:A2:F9:38:60:5D:4D:D5:65:32:F2:62:FD:B5:15:DA:DE X509v3 Authority Key Identifier: keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/qzSmIaL5OGBdTdVlMvJi_bUV2t4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.235.0/24 91.240.163.0/24 IPv6: 2a12:fd40::/29 Signature Algorithm: sha256WithRSAEncryption 19:47:bd:a3:cd:9c:0f:43:aa:32:20:b0:48:e8:ac:33:5d:be: 70:ca:69:4f:41:69:59:14:50:af:74:4a:f6:2a:c2:4a:72:21: 71:28:8d:62:d1:f8:76:42:29:6a:8e:a6:92:4a:c8:d1:72:a6: a3:75:15:c5:72:97:17:8e:74:e4:e8:57:00:7b:b5:dc:a5:25: b7:5c:b2:26:f8:0d:47:6f:45:4f:11:6e:2e:96:44:d8:af:0d: 8d:0b:cf:0c:0e:cc:31:82:ed:bc:4a:d4:5d:0c:8c:1e:69:f8: fa:81:3e:4c:4e:b4:ea:89:6b:ce:81:61:21:f7:52:0c:f9:68: a5:69:12:37:90:02:89:77:80:3b:ac:60:8a:d9:0a:aa:66:fa: ef:2b:71:50:1b:2f:81:9f:f6:5a:29:d9:de:f5:f5:71:0b:e7: a3:19:fe:a9:2d:9a:1d:ef:8a:13:bb:15:69:56:5d:8f:78:cf: 3c:87:e9:9c:1c:7c:f0:9c:93:fe:78:29:1b:df:d9:ff:62:13: 27:a8:ed:aa:a8:07:a9:39:06:07:27:b0:6b:4a:05:23:60:99: d1:c1:63:b7:d6:da:bf:92:e7:4e:7d:be:44:63:01:bf:6c:c7: dc:37:aa:1f:24:30:21:10:57:dc:5c:16:9f:f9:0c:38:ee:3c: f9:a1:33:dc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57OnXVeSvaZnspqJeRdDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OWE3Y2E0NDAyN2QyZTVhZDM4OWYxNjllZDE1OTM2ZDc4 NTExNjYwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjM0YTYyMWEyZjkzODYwNWQ0ZGQ1NjUzMmYyNjJmZGI1MTVkYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEzpYOMgvjsP8hNu2OV5HDf2n4gD llgXASfc6MdTq6Lwgk5gDghE923vhh5gAYcqclJYONmojeW/AStm5gKx4cX785f7 ZbaeW2wZOHND3GLXioWVG+2vDrLobse06EyzQFWe7vjDDyaZZjAfFF+1bpTIXsa/ 4g4acdg8NVCh/I7dkLeCtQHCqC4WlLtAqLKehTsVdDsDQONqaaQRc/k93zDVQzJt Is/AjLf8HnfqU1gTjtY2v5F/4JA4A+1S4fmi5uS2l0ZrvvW7SaGALRyEF3p836HN 7hC6VbB0PAUYijvyXSekjJm3Pq8L5MKuwV9NidXnFrh6tcBhs46/9BXCWQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKs0piGi+ThgXU3VZTLyYv21FdreMB8GA1UdIwQY MBaAFMeafKRAJ9LlrTifFp7RWTbXhRFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVwOHBFQW4wdVd0T0o4V250RlpOdGVGRVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lNTMzMTMtYmE2YS00ZTgxLWJhN2It NjcxNWY1OGNlZWJmLzEvcXpTbUlhTDVPR0JkVGRWbE12SmlfYlVWMnQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9lNTMzMTMtYmE2YS00ZTgxLWJhN2ItNjcxNWY1OGNlZWJm LzEveDVwOHBFQW4wdVd0T0o4V250RlpOdGVGRVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9XrAwQA W/CjMA0EAgACMAcDBQMqEv1AMA0GCSqGSIb3DQEBCwUAA4IBAQAZR72jzZwPQ6oy ILBI6KwzXb5wymlPQWlZFFCvdEr2KsJKciFxKI1i0fh2QilqjqaSSsjRcqajdRXF cpcXjnTk6FcAe7XcpSW3XLIm+A1Hb0VPEW4ulkTYrw2NC88MDswxgu28StRdDIwe afj6gT5MTrTqiWvOgWEh91IM+WilaRI3kAKJd4A7rGCK2QqqZvrvK3FQGy+Bn/Za Kdne9fVxC+ejGf6pLZod74oTuxVpVl2PeM88h+mcHHzwnJP+eCkb39n/YhMnqO2q qAepOQYHJ7BrSgUjYJnRwWO31tq/kudOfb5EYwG/bMfcN6ofJDAhEFfcXBaf+Qw4 7jz5oTPc -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:18 2026 by rpki-client