This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/qXx90FSqDeV2TFA5z5gkzjt5MT4.roa File: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (raw, json) Hash identifier: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao= Subject key identifier: A9:7C:7D:D0:54:AA:0D:E5:76:4C:50:39:CF:98:24:CE:3B:79:31:3E Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F8248C332AAC22BFCFB2A7BA20EE082 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/qXx90FSqDeV2TFA5z5gkzjt5MT4.roa Signing time: Fri 02 Jan 2026 16:20:03 +0000 ROA not before: Fri 02 Jan 2026 16:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55096 IP address blocks: 31.186.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:48:c3:32:aa:c2:2b:fc:fb:2a:7b:a2:0e:e0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a97c7dd054aa0de5764c5039cf9824ce3b79313e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:da:35:66:d2:ef:9e:8c:c3:a7:b5:b3:9a: a4:de:d9:9d:dd:49:9a:81:5e:c7:e3:8d:1b:93:2c: 7f:ed:4c:72:5b:6e:6b:ff:58:89:ae:38:4c:6a:c0: 11:8e:74:22:bd:2f:91:13:9c:47:1c:bf:68:8b:8c: 5b:a2:5c:63:35:c4:30:72:58:0b:a0:74:08:80:3e: f6:31:04:7d:5b:f5:2c:bf:bb:9f:6e:4f:dc:53:fe: 5f:89:58:36:fc:d3:0b:7e:b9:db:5e:e5:65:7b:29: 73:0c:51:3e:7b:f9:3f:6a:9a:f7:8c:01:d4:d8:de: 1c:94:e0:b8:c3:06:53:d8:eb:55:8a:a8:e9:50:2e: b0:f0:2d:d0:d5:05:a6:51:cd:23:c4:9d:de:dc:b9: 95:a2:49:d3:6e:3f:bf:2d:d9:47:40:7c:16:e2:04: 36:01:ea:92:4f:56:76:58:5b:03:55:48:65:4c:b7: de:21:d5:fa:39:fd:88:01:76:de:e1:d9:a4:07:9d: 90:6e:41:4f:fa:b5:22:96:81:1a:b7:48:43:6c:c9: ca:93:ea:40:87:22:5a:14:8a:cc:6f:99:d1:9e:d2: dd:87:40:96:2c:8e:54:d1:c2:0c:3a:36:c5:0c:4c: 27:fb:5d:b5:82:0f:6e:e1:2c:98:30:28:d1:bc:4a: d6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7C:7D:D0:54:AA:0D:E5:76:4C:50:39:CF:98:24:CE:3B:79:31:3E X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/qXx90FSqDeV2TFA5z5gkzjt5MT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.245.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:98:42:9b:07:d8:e4:db:cc:0e:47:8c:aa:91:04:89:8b:a2: 37:95:01:dc:d1:4c:47:2b:62:cd:d6:ed:3f:08:57:2f:cc:f4: 51:7c:44:0f:4a:0a:d2:c8:fa:17:30:e7:b8:6f:60:a6:5a:a6: ee:fa:cc:ac:46:4d:45:2a:6d:c9:88:a9:a6:c8:ee:1b:c3:76: ad:9a:e8:86:8f:46:49:14:8f:7b:cb:95:58:8d:0d:a7:1a:1f: 31:12:c1:0e:03:e6:e0:c3:96:93:b1:8a:e0:8e:68:80:5c:e7: d9:57:1f:51:fa:d6:a0:10:3c:6c:cd:5c:0c:7e:f2:24:f1:f7: eb:2e:82:d1:59:b7:73:64:b5:c0:c6:d2:8b:66:36:d0:37:5b: 9b:1d:06:d8:60:11:9b:d4:7b:10:cd:69:3a:77:4a:85:02:fa: 68:70:38:10:5d:3b:3f:95:ef:38:f5:0c:92:89:95:2d:68:e8: 4e:be:16:63:68:2c:38:f0:a5:f9:67:1d:15:99:a3:3e:08:75: 2d:cb:74:e6:04:9a:dc:82:59:55:2d:87:54:57:c4:09:3a:33: bf:f0:a8:23:23:07:e2:54:6d:fe:37:a2:74:12:af:49:cd:19: 64:e6:bb:12:64:d3:61:ba:90:42:bc:d4:ae:fa:aa:0b:d6:6b: 42:1e:88:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gkjDMqrCK/z7KnuiDuCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTdjN2RkMDU0YWEwZGU1NzY0YzUwMzljZjk4MjRjZTNiNzkzMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFXaNWbS756Mw6e1s5qk3tmd3Uma gV7H440bkyx/7UxyW25r/1iJrjhMasARjnQivS+RE5xHHL9oi4xbolxjNcQwclgL oHQIgD72MQR9W/Usv7ufbk/cU/5fiVg2/NMLfrnbXuVleylzDFE+e/k/apr3jAHU 2N4clOC4wwZT2OtViqjpUC6w8C3Q1QWmUc0jxJ3e3LmVoknTbj+/LdlHQHwW4gQ2 AeqST1Z2WFsDVUhlTLfeIdX6Of2IAXbe4dmkB52QbkFP+rUiloEat0hDbMnKk+pA hyJaFIrMb5nRntLdh0CWLI5U0cIMOjbFDEwn+121gg9u4SyYMCjRvErWxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKl8fdBUqg3ldkxQOc+YJM47eTE+MB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcVh4OTBGU3FEZVYyVEZBNXo1Z2t6anQ1TVQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7r1MA0G CSqGSIb3DQEBCwUAA4IBAQAKmEKbB9jk28wOR4yqkQSJi6I3lQHc0UxHK2LN1u0/ CFcvzPRRfEQPSgrSyPoXMOe4b2CmWqbu+sysRk1FKm3JiKmmyO4bw3atmuiGj0ZJ FI97y5VYjQ2nGh8xEsEOA+bgw5aTsYrgjmiAXOfZVx9R+tagEDxszVwMfvIk8ffr LoLRWbdzZLXAxtKLZjbQN1ubHQbYYBGb1HsQzWk6d0qFAvpocDgQXTs/le849QyS iZUtaOhOvhZjaCw48KX5Zx0VmaM+CHUty3TmBJrcgllVLYdUV8QJOjO/8KgjIwfi VG3+N6J0Eq9JzRlk5rsSZNNhupBCvNSu+qoL1mtCHoho -----END CERTIFICATE-----Generated at Sat Jan 10 23:30:53 2026 by rpki-client