This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/qzGW8ddbejTKs6ZDaO2LewDJniw.roa File: qzGW8ddbejTKs6ZDaO2LewDJniw.roa (raw, json) Hash identifier: 4T6c4O+OyjJ20YgF2wsk1E/zwTD8ABZLIuETZ2+U1D4= Subject key identifier: AB:31:96:F1:D7:5B:7A:34:CA:B3:A6:43:68:ED:8B:7B:00:C9:9E:2C Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Certificate serial: 019B7F14FA840AE05657583CE4033A8BEAC1 Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/qzGW8ddbejTKs6ZDaO2LewDJniw.roa Signing time: Fri 02 Jan 2026 14:20:39 +0000 ROA not before: Fri 02 Jan 2026 14:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51942 IP address blocks: 91.235.174.0/24 maxlen: 24 188.227.204.0/22 maxlen: 22 195.69.225.0/24 maxlen: 24 195.88.202.0/23 maxlen: 23 2a02:7f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fa:84:0a:e0:56:57:58:3c:e4:03:3a:8b:ea:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab3196f1d75b7a34cab3a64368ed8b7b00c99e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:38:0b:a1:dd:8a:bc:11:69:d4:35:14:d2: 61:b8:1d:f0:89:72:2f:af:d5:4e:df:7a:9e:ae:ac: 23:9d:95:2c:7d:fa:a6:04:70:82:21:95:e2:a7:c9: a1:df:c9:47:be:ce:ab:26:ef:45:77:01:98:71:ac: e6:7c:5c:c4:54:47:d5:0f:37:68:3f:f6:65:ee:b2: f1:22:b6:40:4d:59:59:48:07:49:c1:bc:4b:d3:02: 68:30:e3:4f:26:da:8d:b5:b2:e3:ec:03:41:aa:c1: 28:99:51:19:8a:81:a6:9b:da:3b:11:47:4b:01:b9: e0:e0:4e:78:88:38:b7:b3:98:36:af:1a:29:e5:fc: aa:21:b2:d6:45:d0:d2:59:62:09:61:63:9a:8d:1f: 25:30:57:e1:e6:f8:9d:b1:f7:6d:cd:a0:1b:f8:b8: 3d:59:fb:a0:52:c1:31:37:f7:5e:d9:e9:a3:9f:ad: 9f:e2:58:25:56:dd:76:22:7d:53:09:c1:3b:d4:91: 90:12:86:ae:d9:6c:88:e0:dd:6b:c5:ba:d1:83:d8: d1:3a:e2:94:15:ad:f2:77:e8:63:b8:10:13:01:c7: c9:e7:21:ec:9c:b5:ec:ce:cf:e9:27:40:d4:26:27: ca:86:80:a0:80:92:e6:bd:a6:3f:7e:fa:4b:46:b3: 49:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:31:96:F1:D7:5B:7A:34:CA:B3:A6:43:68:ED:8B:7B:00:C9:9E:2C X509v3 Authority Key Identifier: keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/qzGW8ddbejTKs6ZDaO2LewDJniw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.174.0/24 188.227.204.0/22 195.69.225.0/24 195.88.202.0/23 IPv6: 2a02:7f80::/29 Signature Algorithm: sha256WithRSAEncryption be:7f:49:9d:db:f5:8d:93:0d:ab:79:c6:9a:cf:2e:fa:c2:e3: 04:b9:0d:ef:df:10:81:53:d6:1f:3c:7f:1b:c4:0a:63:9e:3d: 7c:6f:df:5f:5a:e3:db:86:15:5d:1b:e9:85:d8:bd:64:95:ce: d1:96:6a:60:32:57:32:9d:1b:de:2e:7a:d6:33:f6:36:c5:7b: 0e:98:a1:c5:f5:7f:18:9d:33:39:75:8b:9a:b7:49:43:6e:2b: f5:83:b4:1c:c3:dc:d5:fa:5a:15:bd:df:8f:51:17:92:12:4d: 93:ca:2e:7e:f8:75:62:e3:a6:3a:df:7b:d9:67:5f:69:9f:94: ca:da:d0:d5:2f:bb:e7:d7:b9:0a:8c:46:ab:cc:bd:4a:3a:2b: d8:e2:08:0c:db:ab:12:2a:13:0c:88:93:5b:5e:ea:70:6c:2a: ac:99:6b:71:3b:ff:84:2f:d2:5f:09:5f:b5:9e:01:dc:b9:f0: 51:41:a0:c3:70:a8:d2:5c:2d:67:cd:5d:4a:a1:f5:db:56:79: 04:df:d8:3d:35:2d:a3:5a:64:59:33:04:d5:93:91:d8:9e:23: 1b:9d:df:46:ad:99:ef:5c:e2:96:fa:56:61:5c:8e:0a:09:c4: c8:41:35:26:58:b6:c8:97:8c:66:53:1b:b0:ab:aa:03:5c:f0: 73:56:d7:ed -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/FPqECuBWV1g85AM6i+rBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmExNWQ0N2JhNGY0NDgyNzY0NDcyZDhkOTcxNDZhMWVi YmJmODYwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjMxOTZmMWQ3NWI3YTM0Y2FiM2E2NDM2OGVkOGI3YjAwYzk5ZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOA4C6HdirwRadQ1FNJhuB3wiXIv r9VO33qerqwjnZUsffqmBHCCIZXip8mh38lHvs6rJu9FdwGYcazmfFzEVEfVDzdo P/Zl7rLxIrZATVlZSAdJwbxL0wJoMONPJtqNtbLj7ANBqsEomVEZioGmm9o7EUdL Abng4E54iDi3s5g2rxop5fyqIbLWRdDSWWIJYWOajR8lMFfh5vidsfdtzaAb+Lg9 WfugUsExN/de2emjn62f4lglVt12In1TCcE71JGQEoau2WyI4N1rxbrRg9jROuKU Fa3yd+hjuBATAcfJ5yHsnLXszs/pJ0DUJifKhoCggJLmvaY/fvpLRrNJ2QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKsxlvHXW3o0yrOmQ2jti3sAyZ4sMB8GA1UdIwQY MBaAFGW6FdR7pPRIJ2RHLY2XFGoeu7+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAt ZmUzYjkxOGMzMDk3LzEvcXpHVzhkZGJlalRLczZaRGFPMkxld0RKbml3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAtZmUzYjkxOGMzMDk3 LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAW+uuAwQC vOPMAwQAw0XhAwQBw1jKMA0EAgACMAcDBQMqAn+AMA0GCSqGSIb3DQEBCwUAA4IB AQC+f0md2/WNkw2recaazy76wuMEuQ3v3xCBU9YfPH8bxApjnj18b99fWuPbhhVd G+mF2L1klc7RlmpgMlcynRveLnrWM/Y2xXsOmKHF9X8YnTM5dYuat0lDbiv1g7Qc w9zV+loVvd+PUReSEk2Tyi5++HVi46Y633vZZ19pn5TK2tDVL7vn17kKjEarzL1K OivY4ggM26sSKhMMiJNbXupwbCqsmWtxO/+EL9JfCV+1ngHcufBRQaDDcKjSXC1n zV1KofXbVnkE39g9NS2jWmRZMwTVk5HYniMbnd9GrZnvXOKW+lZhXI4KCcTIQTUm WLbIl4xmUxuwq6oDXPBzVtft -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:54 2026 by rpki-client