This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/qgrlS83bNE9MYEyjpHkdusYjIJs.roa File: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (raw, json) Hash identifier: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw= Subject key identifier: AA:0A:E5:4B:CD:DB:34:4F:4C:60:4C:A3:A4:79:1D:BA:C6:23:20:9B Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf Certificate serial: 019B79ED0B4C3834D88AC230A7724D578591 Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/qgrlS83bNE9MYEyjpHkdusYjIJs.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56368 IP address blocks: 91.198.172.0/24 maxlen: 24 91.198.185.0/24 maxlen: 24 91.198.196.0/24 maxlen: 24 2a0f:8840::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0b:4c:38:34:d8:8a:c2:30:a7:72:4d:57:85:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa0ae54bcddb344f4c604ca3a4791dbac623209b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:15:0e:a3:80:2b:af:a3:82:55:54:00:ab: 15:f2:f0:98:48:50:74:4e:c6:5b:25:14:72:da:ff: 6c:28:3f:58:84:2c:7a:34:e6:db:2b:17:6b:6c:80: c3:aa:8d:a7:f1:89:e2:4c:e2:ca:a2:36:f0:5a:c6: b0:92:54:6d:48:7e:30:91:a0:4c:a7:e9:a8:81:f7: 15:11:c6:e2:bd:e2:4f:78:5f:1b:b4:e4:2d:04:22: 01:8b:2c:ae:7f:ea:6e:49:18:88:65:30:cd:86:91: 7d:99:27:eb:f4:c8:cc:34:ce:da:b8:1b:e3:2b:22: de:c4:3c:ae:59:28:b7:f3:b3:4c:df:59:33:b6:30: 7e:ea:f3:cb:7e:1f:a2:ec:4e:41:15:9e:6e:6e:d8: d4:d2:13:41:cd:45:0e:6b:da:21:85:d6:6b:57:ba: 6f:ba:bd:8f:a3:9f:7f:91:9f:26:b2:7c:60:5d:f7: 11:24:92:76:40:9a:45:8f:e2:dd:e8:12:02:86:b4: 2f:9c:13:a7:e3:2d:74:f9:a4:b1:87:19:1c:35:37: a0:91:6d:d0:32:ac:74:ca:fb:99:08:95:a8:d4:9b: 95:38:2a:29:ba:2b:99:34:29:60:d8:70:45:30:11: ee:ff:13:85:9e:20:d3:75:dc:d0:de:5b:ab:6b:79: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0A:E5:4B:CD:DB:34:4F:4C:60:4C:A3:A4:79:1D:BA:C6:23:20:9B X509v3 Authority Key Identifier: keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/qgrlS83bNE9MYEyjpHkdusYjIJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.172.0/24 91.198.185.0/24 91.198.196.0/24 IPv6: 2a0f:8840::/29 Signature Algorithm: sha256WithRSAEncryption 3c:61:09:b4:25:79:ec:69:ea:53:18:6c:a7:87:ff:72:76:db: 32:c3:bb:ae:2d:e2:f4:5f:ed:c1:ef:95:58:bc:d0:a0:f4:7e: 68:40:e0:7c:8b:b9:09:b1:3b:f6:10:81:1b:d1:9c:5c:b9:99: 6e:fa:ea:f8:a9:29:20:c4:52:0d:b1:89:4e:c9:3b:ed:33:ff: 0e:99:7e:55:59:a6:19:4f:9c:ea:c0:ed:bd:9a:a9:bd:31:84: 85:2d:6b:b2:e3:b4:04:52:ce:1b:38:85:48:75:13:a4:8a:c9: 31:dc:ee:7e:9b:ed:fb:99:2c:f0:a2:61:0f:ee:f7:6c:e2:8b: 34:61:ae:e1:fa:72:24:2b:36:0a:25:b3:94:f6:bd:3f:42:6b: 4c:cd:12:e6:c9:5a:07:36:0c:d7:11:92:97:bd:20:02:d2:3f: 2d:c8:dd:a3:0e:21:62:15:78:bc:96:29:f9:ab:20:fe:8f:d6: 51:9d:0b:85:5e:06:4e:5e:82:0e:07:dc:0c:70:50:7b:ba:c8: 84:76:60:0a:16:9a:88:7c:06:de:9d:0e:d5:82:55:9b:39:92: 19:d9:68:5d:d4:9f:3c:fa:d8:3b:a9:48:a1:a4:23:82:70:c0: 32:d6:ea:39:62:da:96:cc:66:f3:0d:53:7a:df:f9:1f:a7:57: 85:d7:cd:81 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57QtMODTYisIwp3JNV4WRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTc5NzIyYzNhMGNiMGMzMzUxYzU5NWRmYTNkN2VhZDgx ZjE2YmYwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTBhZTU0YmNkZGIzNDRmNGM2MDRjYTNhNDc5MWRiYWM2MjMyMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApckVDqOAK6+jglVUAKsV8vCYSFB0 TsZbJRRy2v9sKD9YhCx6NObbKxdrbIDDqo2n8YniTOLKojbwWsawklRtSH4wkaBM p+mogfcVEcbiveJPeF8btOQtBCIBiyyuf+puSRiIZTDNhpF9mSfr9MjMNM7auBvj KyLexDyuWSi387NM31kztjB+6vPLfh+i7E5BFZ5ubtjU0hNBzUUOa9ohhdZrV7pv ur2Po59/kZ8msnxgXfcRJJJ2QJpFj+Ld6BIChrQvnBOn4y10+aSxhxkcNTegkW3Q Mqx0yvuZCJWo1JuVOCopuiuZNClg2HBFMBHu/xOFniDTddzQ3lura3kkSwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKoK5UvN2zRPTGBMo6R5HbrGIyCbMB8GA1UdIwQY MBaAFGhXlyLDoMsMM1HFld+j1+rYHxa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mYTgzNmMtMWNkMy00YmE3LWI1OTgt OWY1NTk3YjU2Yjc2LzEvcWdybFM4M2JORTlNWUV5anBIa2R1c1lqSUpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mYTgzNmMtMWNkMy00YmE3LWI1OTgtOWY1NTk3YjU2Yjc2 LzEvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW8asAwQA W8a5AwQAW8bEMA0EAgACMAcDBQMqD4hAMA0GCSqGSIb3DQEBCwUAA4IBAQA8YQm0 JXnsaepTGGynh/9ydtsyw7uuLeL0X+3B75VYvNCg9H5oQOB8i7kJsTv2EIEb0Zxc uZlu+ur4qSkgxFINsYlOyTvtM/8OmX5VWaYZT5zqwO29mqm9MYSFLWuy47QEUs4b OIVIdROkiskx3O5+m+37mSzwomEP7vds4os0Ya7h+nIkKzYKJbOU9r0/QmtMzRLm yVoHNgzXEZKXvSAC0j8tyN2jDiFiFXi8lin5qyD+j9ZRnQuFXgZOXoIOB9wMcFB7 usiEdmAKFpqIfAbenQ7VglWbOZIZ2Whd1J88+tg7qUihpCOCcMAy1uo5YtqWzGbz DVN63/kfp1eF182B -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:22 2026 by rpki-client