This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/PQ1Cau6xIjwzfdiBMbZurFbWq4g.roa File: PQ1Cau6xIjwzfdiBMbZurFbWq4g.roa (raw, json) Hash identifier: TNQeQoC/qT98wAaweVjAuTu11UnJIuOyyoosQn8fzXw= Subject key identifier: 3D:0D:42:6A:EE:B1:22:3C:33:7D:D8:81:31:B6:6E:AC:56:D6:AB:88 Certificate issuer: /CN=082b54b05af5e3e8743e7bf4af41ea622bb09411 Certificate serial: 019B797EC358D16BB6802CCBFB551B888AD8 Authority key identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/PQ1Cau6xIjwzfdiBMbZurFbWq4g.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43534 IP address blocks: 91.197.92.0/22 maxlen: 22 91.197.92.0/24 maxlen: 24 91.197.93.0/24 maxlen: 24 91.197.94.0/24 maxlen: 24 91.197.95.0/24 maxlen: 24 193.163.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c3:58:d1:6b:b6:80:2c:cb:fb:55:1b:88:8a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082b54b05af5e3e8743e7bf4af41ea622bb09411 Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d0d426aeeb1223c337dd88131b66eac56d6ab88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:06:a1:53:6e:f3:d7:db:b5:53:ba:b6:13: e7:11:92:11:53:16:60:e6:6e:6c:87:ff:9a:7e:e2: cc:53:89:74:c0:15:d9:8b:76:8a:72:d1:07:4d:64: 17:d2:8d:67:63:ea:39:8a:44:76:eb:72:5f:e2:ec: 5a:2a:21:0e:eb:90:18:94:c4:28:2c:34:64:e7:b1: 73:c2:4f:fd:7a:01:7c:e6:01:95:d2:09:b3:e5:69: bf:8f:df:c5:1e:84:23:fe:71:c3:c6:80:bc:d1:44: cf:40:a2:06:74:78:aa:44:7c:ef:87:9b:cd:3d:0f: e8:7b:3c:c3:3d:51:ca:6e:cc:36:08:31:95:53:05: 84:6d:36:55:ff:65:51:74:60:7e:b4:a0:d9:93:bc: bd:5c:dd:93:59:0a:c2:46:e1:86:15:6d:a4:53:6e: a1:e2:cc:c0:ee:52:cb:11:6d:92:61:45:65:8e:a8: 78:c5:b7:5c:6c:2b:8a:51:33:0f:27:e5:1d:aa:98: 55:cf:3f:21:d5:76:4e:35:1c:56:6a:84:0e:47:cf: 3d:5b:db:f1:a7:6e:14:b7:b8:60:62:65:10:6e:94: 57:7f:c8:7e:ad:91:af:03:db:21:3c:38:e7:0d:f5: 1b:d2:d2:2a:25:74:0d:7d:1e:7b:6b:b4:ba:fe:9e: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0D:42:6A:EE:B1:22:3C:33:7D:D8:81:31:B6:6E:AC:56:D6:AB:88 X509v3 Authority Key Identifier: keyid:08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/PQ1Cau6xIjwzfdiBMbZurFbWq4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.92.0/22 193.163.48.0/24 Signature Algorithm: sha256WithRSAEncryption 34:1e:b4:48:c0:ca:d8:b8:d3:d6:73:fd:1d:a8:e0:4a:fd:fd: ce:de:66:4d:42:ea:9a:e8:8a:45:ee:dd:48:c9:88:e9:0f:6b: c2:2b:d2:50:aa:8a:0f:38:80:19:6f:7f:b8:c4:aa:f4:e4:00: 17:6d:bb:84:00:ff:e8:b7:f0:ad:b9:bd:1c:4c:1a:10:46:e7: 43:c8:fd:82:75:04:3f:46:b9:8f:70:10:99:23:c4:fd:0f:7e: 0a:02:0c:ac:a4:42:97:4e:d6:a7:8f:57:a5:36:55:a0:2f:31: b6:37:f0:54:e1:7f:a5:32:ed:67:a7:41:8a:8d:d1:0b:03:fe: 2c:ea:73:06:cd:3b:ab:1a:10:bf:c2:9e:d2:ad:f9:33:ef:e8: 6c:32:87:f2:17:fc:bb:8c:08:b4:4c:5c:93:6c:b6:6c:d1:8d: e1:c3:1a:b1:e2:66:d2:60:49:cc:06:77:aa:2e:f1:ae:60:f7: 66:63:b6:07:ee:52:5d:66:d3:b4:1f:30:df:24:93:d5:63:8d: 41:7c:5f:be:ea:cb:21:d6:be:9d:5f:a6:1f:3f:3f:31:25:45: 01:1b:cb:dd:d0:0f:1d:0a:25:69:fd:bd:07:47:51:cc:ef:99: 00:bb:91:8d:e7:82:f7:fa:23:e4:2a:78:28:65:09:96:0d:12: a1:00:9a:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fsNY0Wu2gCzL+1UbiIrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MmI1NGIwNWFmNWUzZTg3NDNlN2JmNGFmNDFlYTYyMmJi MDk0MTEwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDBkNDI2YWVlYjEyMjNjMzM3ZGQ4ODEzMWI2NmVhYzU2ZDZhYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02AGoVNu89fbtVO6thPnEZIRUxZg 5m5sh/+afuLMU4l0wBXZi3aKctEHTWQX0o1nY+o5ikR263Jf4uxaKiEO65AYlMQo LDRk57Fzwk/9egF85gGV0gmz5Wm/j9/FHoQj/nHDxoC80UTPQKIGdHiqRHzvh5vN PQ/oezzDPVHKbsw2CDGVUwWEbTZV/2VRdGB+tKDZk7y9XN2TWQrCRuGGFW2kU26h 4szA7lLLEW2SYUVljqh4xbdcbCuKUTMPJ+UdqphVzz8h1XZONRxWaoQOR889W9vx p24Ut7hgYmUQbpRXf8h+rZGvA9shPDjnDfUb0tIqJXQNfR57a7S6/p7OWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD0NQmrusSI8M33YgTG2bqxW1quIMB8GA1UdIwQY MBaAFAgrVLBa9ePodD579K9B6mIrsJQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0N0VXNGcjE0LWgwUG52MHIwSHFZaXV3bEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wOTAwYTEtOTI0Zi00OTZhLWFkNGMt MTk1MDYwNjcxYTBjLzEvUFExQ2F1NnhJand6ZmRpQk1iWnVyRmJXcTRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wOTAwYTEtOTI0Zi00OTZhLWFkNGMtMTk1MDYwNjcxYTBj LzEvQ0N0VXNGcjE0LWgwUG52MHIwSHFZaXV3bEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8VcAwQA waMwMA0GCSqGSIb3DQEBCwUAA4IBAQA0HrRIwMrYuNPWc/0dqOBK/f3O3mZNQuqa 6IpF7t1IyYjpD2vCK9JQqooPOIAZb3+4xKr05AAXbbuEAP/ot/Ctub0cTBoQRudD yP2CdQQ/RrmPcBCZI8T9D34KAgyspEKXTtanj1elNlWgLzG2N/BU4X+lMu1np0GK jdELA/4s6nMGzTurGhC/wp7Srfkz7+hsMofyF/y7jAi0TFyTbLZs0Y3hwxqx4mbS YEnMBneqLvGuYPdmY7YH7lJdZtO0HzDfJJPVY41BfF++6ssh1r6dX6YfPz8xJUUB G8vd0A8dCiVp/b0HR1HM75kAu5GN54L3+iPkKngoZQmWDRKhAJqf -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:56 2026 by rpki-client