This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qjmsjyG1dH7y5JET-VEus3XkN00.roa File: qjmsjyG1dH7y5JET-VEus3XkN00.roa (raw, json) Hash identifier: 1gwncIolv2YdxrjA7wnMu37fIyXh4F6Qrrz5r9T3csM= Subject key identifier: AA:39:AC:8F:21:B5:74:7E:F2:E4:91:13:F9:51:2E:B3:75:E4:37:4D Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5312168DE11A0A0A92049ACEEEEAC Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qjmsjyG1dH7y5JET-VEus3XkN00.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31527 IP address blocks: 213.91.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:31:21:68:de:11:a0:a0:a9:20:49:ac:ee:ee:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa39ac8f21b5747ef2e49113f9512eb375e4374d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:51:e3:a6:7e:49:d8:f3:44:61:9a:f9:53: 38:c0:e7:cc:09:ce:97:e4:6f:0d:1c:bb:52:50:c9: a0:30:9a:46:b8:2c:1c:4d:e3:2e:43:64:c0:cb:5a: 4b:2c:b6:54:96:cb:06:96:b1:56:ea:1c:c4:70:49: 81:1b:45:74:41:30:b5:12:9d:0a:dd:66:c5:c7:4b: 9e:83:fc:e3:94:31:22:0a:05:8b:cf:67:f5:e3:6f: f6:ea:4f:1b:52:51:d0:e6:f0:2e:68:a3:04:b2:22: 14:58:d1:fc:14:93:9a:b2:0f:97:9c:8e:0a:3e:6c: 00:ee:2c:3c:19:b3:43:f4:22:42:e2:21:e2:bc:f2: 53:da:8e:6f:67:6f:4e:e1:5d:87:d9:0c:3c:c1:d6: 41:18:0b:5a:b9:f1:9c:f5:21:20:1d:7c:cc:76:48: 25:5c:32:3e:f5:13:ca:da:37:a6:c5:45:ea:c6:69: b5:d2:0a:e3:4c:0c:9e:cd:38:4e:33:da:47:b8:9a: be:3f:da:81:b9:c9:fe:9d:38:a1:75:ad:f8:92:fc: 31:4d:29:cd:ff:da:01:cd:5e:65:27:45:eb:13:c6: 3b:eb:13:1a:7a:ab:dd:d6:f1:d7:4c:3a:62:c1:25: 37:19:a1:c6:7e:4e:0e:2f:50:d4:55:51:91:d9:86: 51:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:39:AC:8F:21:B5:74:7E:F2:E4:91:13:F9:51:2E:B3:75:E4:37:4D X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qjmsjyG1dH7y5JET-VEus3XkN00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.91.252.0/24 Signature Algorithm: sha256WithRSAEncryption 53:fc:79:c7:db:d1:6e:d7:30:f3:ff:f0:ee:c7:41:28:62:02: 2c:9d:8d:77:24:05:16:23:53:8d:de:39:e6:96:c9:2a:04:53: 82:de:f9:07:00:ef:55:4d:55:df:f0:48:eb:26:01:cf:30:b8: c1:fb:9d:4d:c2:f5:63:9b:67:93:29:58:28:76:33:a9:e9:f1: 5d:bf:4a:cd:8f:e1:3d:eb:74:78:28:c6:97:85:85:8a:3f:e3: 71:6c:a4:50:3b:0c:5d:4f:d7:e5:2d:0e:30:04:55:90:46:b3: 62:52:fe:41:24:12:f1:b4:86:03:02:dd:ce:43:25:ab:3b:59: d8:90:39:65:fe:ea:b7:2d:f3:7f:eb:80:bf:4c:b7:23:cc:4c: 82:ab:31:90:9b:ea:74:f2:85:ce:b4:ba:08:23:ea:3e:e7:45: 3c:1f:c5:14:66:75:4d:76:ab:84:8f:47:11:3f:b8:26:0e:c3: 6d:89:ed:d0:a4:52:35:aa:3f:83:2d:be:5c:bd:04:1c:82:1f: 5e:c5:f7:22:4f:61:ca:6a:c0:1f:8c:07:f8:e0:25:78:e1:62: b4:56:c3:4c:ee:be:03:d9:c3:18:b7:74:5d:56:82:2f:d3:82: db:2a:ac:ec:ca:04:16:eb:02:ef:1c:b0:c5:6b:3f:d2:42:00: 20:7b:fb:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTEhaN4RoKCpIEms7u6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTM5YWM4ZjIxYjU3NDdlZjJlNDkxMTNmOTUxMmViMzc1ZTQzNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy1R46Z+SdjzRGGa+VM4wOfMCc6X 5G8NHLtSUMmgMJpGuCwcTeMuQ2TAy1pLLLZUlssGlrFW6hzEcEmBG0V0QTC1Ep0K 3WbFx0ueg/zjlDEiCgWLz2f142/26k8bUlHQ5vAuaKMEsiIUWNH8FJOasg+XnI4K PmwA7iw8GbND9CJC4iHivPJT2o5vZ29O4V2H2Qw8wdZBGAtaufGc9SEgHXzMdkgl XDI+9RPK2jemxUXqxmm10grjTAyezThOM9pHuJq+P9qBucn+nTihda34kvwxTSnN /9oBzV5lJ0XrE8Y76xMaeqvd1vHXTDpiwSU3GaHGfk4OL1DUVVGR2YZR7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKo5rI8htXR+8uSRE/lRLrN15DdNMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvcWptc2p5RzFkSDd5NUpFVC1WRXVzM1hrTjAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Vv8MA0G CSqGSIb3DQEBCwUAA4IBAQBT/HnH29Fu1zDz//Dux0EoYgIsnY13JAUWI1ON3jnm lskqBFOC3vkHAO9VTVXf8EjrJgHPMLjB+51NwvVjm2eTKVgodjOp6fFdv0rNj+E9 63R4KMaXhYWKP+NxbKRQOwxdT9flLQ4wBFWQRrNiUv5BJBLxtIYDAt3OQyWrO1nY kDll/uq3LfN/64C/TLcjzEyCqzGQm+p08oXOtLoII+o+50U8H8UUZnVNdquEj0cR P7gmDsNtie3QpFI1qj+DLb5cvQQcgh9exfciT2HKasAfjAf44CV44WK0VsNM7r4D 2cMYt3RdVoIv04LbKqzsygQW6wLvHLDFaz/SQgAge/tL -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:50 2026 by rpki-client