This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/qtCMKtFADXmQGhh_eKtzrmWvBa8.roa File: qtCMKtFADXmQGhh_eKtzrmWvBa8.roa (raw, json) Hash identifier: kbuv7JTegWevUL9mK4rEjoFikGWED4pulN6YzvI+XDs= Subject key identifier: AA:D0:8C:2A:D1:40:0D:79:90:1A:18:7F:78:AB:73:AE:65:AF:05:AF Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c Certificate serial: 019B7FF06DBB63DD94D7567D9A56143C9EA0 Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/qtCMKtFADXmQGhh_eKtzrmWvBa8.roa Signing time: Fri 02 Jan 2026 18:20:21 +0000 ROA not before: Fri 02 Jan 2026 18:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44929 IP address blocks: 91.203.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:6d:bb:63:dd:94:d7:56:7d:9a:56:14:3c:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c Validity Not Before: Jan 2 18:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aad08c2ad1400d79901a187f78ab73ae65af05af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:db:f9:06:f6:44:da:25:ba:8e:21:d8:69: 69:28:86:4e:70:0e:0b:02:bf:ae:65:e8:45:7c:b9: aa:87:b3:71:dc:ce:2d:2e:9f:d9:69:7b:e1:82:a1: f2:ba:91:11:b3:65:5d:e0:a1:a8:24:c6:98:cd:2d: 66:f7:9c:35:73:23:02:ca:07:39:89:b2:ec:8f:7c: e6:9d:8e:f4:f5:df:fd:fc:f8:71:1e:22:92:35:23: fb:1b:c2:58:d6:49:f8:b0:59:14:29:fe:84:31:f4: 8e:84:9e:18:e6:5f:3c:64:72:80:8b:89:a0:64:18: f8:3d:13:44:0d:5d:96:c6:37:a4:f2:f8:ad:12:6d: 72:4c:a3:64:b5:2e:8f:38:84:8c:b8:de:49:a5:c4: ed:11:84:8f:30:67:90:16:77:a6:8e:d9:2f:e7:e3: 18:ae:8b:7f:b2:b4:3e:68:9b:a0:98:3e:20:82:8d: ac:b4:f1:03:a0:6a:b5:8c:04:f8:57:df:f2:c1:7b: 60:54:96:b8:4c:2b:6e:36:8e:5f:c4:8a:0a:8e:98: 3c:8f:4f:65:83:1e:5f:97:32:5b:74:30:37:c2:28: 0e:7d:88:b5:eb:40:f6:64:61:d8:20:16:23:e4:57: 44:17:bb:f5:29:e5:84:c7:91:3a:68:ea:c2:a0:a4: ac:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D0:8C:2A:D1:40:0D:79:90:1A:18:7F:78:AB:73:AE:65:AF:05:AF X509v3 Authority Key Identifier: keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/qtCMKtFADXmQGhh_eKtzrmWvBa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.29.0/24 Signature Algorithm: sha256WithRSAEncryption 71:89:2a:c8:a7:eb:1c:8a:47:27:7c:50:2f:da:9a:7f:d4:97: eb:c8:8a:45:d3:85:19:5a:cc:47:61:5c:e0:1c:be:f4:91:21: 46:5c:39:76:be:6a:ae:b1:6c:4b:2b:ff:13:e6:d3:48:bd:bb: c1:fa:21:5e:87:db:6e:60:e8:6a:57:46:d0:55:41:88:b1:ef: ec:a7:f3:a7:4e:fd:02:01:db:91:a6:8d:c2:ba:5b:3d:0a:f4: 0e:c1:98:33:65:45:96:a4:2d:ef:8b:f7:6d:99:04:cd:6e:95: 8a:ea:7e:b9:87:6c:2b:dc:02:ae:5f:ac:0f:72:aa:68:a3:e3: 5a:ad:83:f8:bf:e1:eb:f7:be:28:07:1a:52:61:6e:4a:df:22: 73:dd:f5:93:2e:fd:70:fe:0b:62:3b:c7:59:bc:8e:f5:b0:87: b1:ac:8b:07:53:91:32:79:c8:57:b3:fc:7f:72:61:f3:df:af: b0:f1:55:28:83:96:d9:55:48:7b:9c:43:07:e7:e0:0a:df:90: e3:59:1c:23:43:1e:2d:e8:24:20:0e:bf:11:a9:9a:80:5d:02: 1a:4d:ca:a2:50:80:27:ce:e7:c0:e9:d0:a0:5c:35:9d:03:ca: a1:f0:a3:80:6d:1a:83:77:a4:9c:4c:a4:43:21:f8:21:b8:5e: 35:ab:a0:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8G27Y92U11Z9mlYUPJ6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZWUxMjY4ZmUwYWFkZjMxN2FiNDRmZDgxNmQxMGZlNTRk ZGZjMGMwHhcNMjYwMTAyMTgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWQwOGMyYWQxNDAwZDc5OTAxYTE4N2Y3OGFiNzNhZTY1YWYwNWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2jb+Qb2RNoluo4h2GlpKIZOcA4L Ar+uZehFfLmqh7Nx3M4tLp/ZaXvhgqHyupERs2Vd4KGoJMaYzS1m95w1cyMCygc5 ibLsj3zmnY709d/9/PhxHiKSNSP7G8JY1kn4sFkUKf6EMfSOhJ4Y5l88ZHKAi4mg ZBj4PRNEDV2Wxjek8vitEm1yTKNktS6POISMuN5JpcTtEYSPMGeQFnemjtkv5+MY rot/srQ+aJugmD4ggo2stPEDoGq1jAT4V9/ywXtgVJa4TCtuNo5fxIoKjpg8j09l gx5flzJbdDA3wigOfYi160D2ZGHYIBYj5FdEF7v1KeWEx5E6aOrCoKSs0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrQjCrRQA15kBoYf3irc65lrwWvMB8GA1UdIwQY MBaAFIbuEmj+Cq3zF6tE/YFtEP5U3fwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgt MWI3MTFhZWMxZmJjLzEvcXRDTUt0RkFEWG1RR2hoX2VLdHpybVd2QmE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgtMWI3MTFhZWMxZmJj LzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8sdMA0G CSqGSIb3DQEBCwUAA4IBAQBxiSrIp+scikcnfFAv2pp/1JfryIpF04UZWsxHYVzg HL70kSFGXDl2vmqusWxLK/8T5tNIvbvB+iFeh9tuYOhqV0bQVUGIse/sp/OnTv0C AduRpo3Culs9CvQOwZgzZUWWpC3vi/dtmQTNbpWK6n65h2wr3AKuX6wPcqpoo+Na rYP4v+Hr974oBxpSYW5K3yJz3fWTLv1w/gtiO8dZvI71sIexrIsHU5EyechXs/x/ cmHz36+w8VUog5bZVUh7nEMH5+AK35DjWRwjQx4t6CQgDr8RqZqAXQIaTcqiUIAn zufA6dCgXDWdA8qh8KOAbRqDd6ScTKRDIfghuF41q6BW -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:01 2026 by rpki-client