This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/QmnB2CMIfe5umcxczxRujV0wYEk.roa File: QmnB2CMIfe5umcxczxRujV0wYEk.roa (raw, json) Hash identifier: lwZAzq1D6hmN+6U+dqklR1EjzUoOQPeBNTMLHAdXkGQ= Subject key identifier: 42:69:C1:D8:23:08:7D:EE:6E:99:CC:5C:CF:14:6E:8D:5D:30:60:49 Certificate issuer: /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a Certificate serial: 019B78A2BBEAA1EC805745ADD88AF1C194D6 Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/QmnB2CMIfe5umcxczxRujV0wYEk.roa Signing time: Thu 01 Jan 2026 08:18:09 +0000 ROA not before: Thu 01 Jan 2026 08:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49544 IP address blocks: 91.221.208.0/24 maxlen: 24 2a0e:6b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:bb:ea:a1:ec:80:57:45:ad:d8:8a:f1:c1:94:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4269c1d823087dee6e99cc5ccf146e8d5d306049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:63:fd:00:70:0c:f4:1c:18:fb:0b:10:54: e8:5e:19:f9:dd:67:b6:22:2b:ba:9a:cb:6b:c4:6f: 45:2d:f2:b8:43:e9:17:3a:96:a9:bb:e9:02:32:2a: 77:72:30:01:8b:1f:87:51:9b:b5:98:f8:dc:42:82: 48:0a:c9:c1:b1:2b:e5:56:3a:7f:e4:7e:98:d3:d3: 3c:44:45:5f:87:90:f7:23:79:3d:ac:e9:56:ef:40: cf:9e:b9:83:16:32:95:97:10:f5:98:99:0d:9b:42: 26:4b:cd:8d:91:3b:39:c0:4b:e3:bc:15:4c:ed:a6: 04:c7:ff:4a:02:c1:eb:70:95:3b:16:3f:55:02:a6: 60:8b:47:4f:ed:2a:f2:9e:cb:7d:65:2e:b9:51:d8: fc:64:ca:a0:1a:ba:40:d6:35:c9:ec:f8:7d:82:8b: ba:16:2d:91:e1:5d:81:78:9d:6a:86:cc:5e:bf:f8: b6:6b:d7:12:2e:3e:d3:75:54:86:7f:59:92:42:e7: 9a:06:36:bb:de:f0:3a:94:d3:d7:55:6b:93:39:7a: 10:c3:0e:f4:f9:5d:ab:13:b6:3c:a3:f5:98:4e:f0: 63:a2:4f:8c:38:2d:b2:f7:4a:08:ab:20:f5:35:1c: ec:fd:97:3d:93:ff:40:cd:b4:2a:84:b3:b3:6a:91: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:69:C1:D8:23:08:7D:EE:6E:99:CC:5C:CF:14:6E:8D:5D:30:60:49 X509v3 Authority Key Identifier: keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/QmnB2CMIfe5umcxczxRujV0wYEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.208.0/24 IPv6: 2a0e:6b00::/48 Signature Algorithm: sha256WithRSAEncryption 2a:7e:1a:7c:c6:b3:3d:b6:c2:02:1e:ac:e6:9f:c6:86:15:d7: 17:0e:80:76:d2:b0:30:fa:e9:1c:4f:89:a4:40:51:ff:fc:a4: 87:dd:86:d1:22:a0:b2:ed:51:1c:ef:03:29:90:62:22:4c:2a: e8:71:4a:69:99:f4:a5:1b:11:58:22:d0:5e:83:cc:39:f1:cf: 78:86:bc:c0:19:e2:c6:00:e5:d7:dc:b3:74:a9:a1:9b:a6:3d: ee:31:89:80:15:d4:80:79:89:55:75:ab:8a:41:d1:b1:43:4a: f0:a6:01:53:5a:ea:17:5e:1f:39:dc:c4:97:32:a8:b7:91:2c: cd:6c:91:f6:da:01:0e:84:7b:29:83:73:38:51:69:4e:51:d2: 77:b4:50:b6:d4:38:d6:c5:be:2a:79:56:8c:b9:7c:bf:ec:5e: ad:bd:81:c8:43:a1:0c:ba:95:0e:62:0e:54:47:ae:4b:9e:20: 60:98:e9:21:d2:aa:8f:ce:f5:03:19:db:92:89:9f:76:84:a9: f4:c6:3a:0e:22:60:7e:96:8b:d2:42:27:09:ff:12:c1:7c:52: 30:f4:55:b9:2b:5c:2c:55:8d:8b:ff:2e:d7:80:5c:82:bc:27: 6c:7a:8c:ab:30:06:37:16:d8:7f:b4:c7:99:5d:f5:23:1f:09: 5e:ae:63:f0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4orvqoeyAV0Wt2IrxwZTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYWI0YzBjZjIxYzFhM2Q2ZWE0MTA2OGNiZTkwOGJlMzg4 ZTQ1MGEwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjY5YzFkODIzMDg3ZGVlNmU5OWNjNWNjZjE0NmU4ZDVkMzA2MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKRj/QBwDPQcGPsLEFToXhn53We2 Iiu6mstrxG9FLfK4Q+kXOpapu+kCMip3cjABix+HUZu1mPjcQoJICsnBsSvlVjp/ 5H6Y09M8REVfh5D3I3k9rOlW70DPnrmDFjKVlxD1mJkNm0ImS82NkTs5wEvjvBVM 7aYEx/9KAsHrcJU7Fj9VAqZgi0dP7Srynst9ZS65Udj8ZMqgGrpA1jXJ7Ph9gou6 Fi2R4V2BeJ1qhsxev/i2a9cSLj7TdVSGf1mSQueaBja73vA6lNPXVWuTOXoQww70 +V2rE7Y8o/WYTvBjok+MOC2y90oIqyD1NRzs/Zc9k/9AzbQqhLOzapHCqwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEJpwdgjCH3ubpnMXM8Ubo1dMGBJMB8GA1UdIwQY MBaAFIqrTAzyHBo9bqQQaMvpCL44jkUKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMt NTM3YjFiNDlkZmU3LzEvUW1uQjJDTUlmZTV1bWN4Y3p4UnVqVjB3WUVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMtNTM3YjFiNDlkZmU3 LzEvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW93QMA8E AgACMAkDBwAqDmsAAAAwDQYJKoZIhvcNAQELBQADggEBACp+GnzGsz22wgIerOaf xoYV1xcOgHbSsDD66RxPiaRAUf/8pIfdhtEioLLtURzvAymQYiJMKuhxSmmZ9KUb EVgi0F6DzDnxz3iGvMAZ4sYA5dfcs3SpoZumPe4xiYAV1IB5iVV1q4pB0bFDSvCm AVNa6hdeHzncxJcyqLeRLM1skfbaAQ6EeymDczhRaU5R0ne0ULbUONbFvip5Voy5 fL/sXq29gchDoQy6lQ5iDlRHrkueIGCY6SHSqo/O9QMZ25KJn3aEqfTGOg4iYH6W i9JCJwn/EsF8UjD0VbkrXCxVjYv/LteAXIK8J2x6jKswBjcW2H+0x5ld9SMfCV6u Y/A= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:01 2026 by rpki-client