This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qQd4Mym41HaojinLWn5qtS6aH24.roa File: qQd4Mym41HaojinLWn5qtS6aH24.roa (raw, json) Hash identifier: R/0iKLfqKE1l69nFmTE0cewweiaVjx+O08zRUD+PC4s= Subject key identifier: A9:07:78:33:29:B8:D4:76:A8:8E:29:CB:5A:7E:6A:B5:2E:9A:1F:6E Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B91F7DF4D8FA22D1EB4D95F44E1531455 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qQd4Mym41HaojinLWn5qtS6aH24.roa Signing time: Tue 06 Jan 2026 06:21:39 +0000 ROA not before: Tue 06 Jan 2026 06:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 89.36.23.0/24 maxlen: 24 93.114.192.0/24 maxlen: 24 185.150.0.0/24 maxlen: 24 220.158.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:91:f7:df:4d:8f:a2:2d:1e:b4:d9:5f:44:e1:53:14:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 6 06:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a907783329b8d476a88e29cb5a7e6ab52e9a1f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:4b:26:ca:29:a1:04:c0:e9:b2:02:3f:d3: 7e:55:6b:26:1b:f0:ed:3a:96:c4:1c:45:28:b1:9f: f2:c3:67:f3:ee:65:4f:f5:4b:c5:1a:e0:a5:46:81: 8c:cd:a2:3e:fe:8f:29:83:75:4a:02:5b:40:89:89: 56:60:b4:00:e7:51:c0:f6:b6:f0:04:54:e3:3c:1e: a5:20:36:ba:ac:66:db:08:f4:bb:d5:8a:72:6f:34: 36:fe:bb:d7:27:64:c1:47:b2:cf:f0:54:ae:87:ec: f5:bb:6b:54:40:22:a9:3b:0a:f7:4e:c2:f8:48:b2: ea:60:0b:b6:a6:80:0f:43:74:8a:34:22:15:d2:34: 95:c6:3f:f2:c5:ad:b9:ce:68:8b:c5:c1:f8:2f:ab: 02:72:1c:b3:b0:6f:75:63:24:c7:4d:4e:40:e6:2c: 5b:84:c8:06:7b:ae:63:f6:64:09:c2:99:bd:74:dc: e8:3c:f4:6e:fe:f2:d6:16:94:97:b7:b3:62:59:9a: af:37:e3:69:fa:0e:d5:c8:37:7a:c6:55:2a:7d:d9: 3c:6f:2e:61:8d:91:73:57:bd:f8:10:14:c5:69:4a: 16:9b:ad:d1:ab:45:2d:a2:27:cb:c5:55:23:bc:42: 62:19:77:ef:81:8e:07:67:3e:da:a6:3c:e9:05:30: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:07:78:33:29:B8:D4:76:A8:8E:29:CB:5A:7E:6A:B5:2E:9A:1F:6E X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qQd4Mym41HaojinLWn5qtS6aH24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.23.0/24 93.114.192.0/24 185.150.0.0/24 220.158.198.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:17:4c:c0:cc:f8:13:6b:67:3a:72:b8:48:e6:d8:fa:67:3f: f1:b7:fc:a0:d6:a8:dc:85:9f:ce:d5:75:79:66:31:5f:39:a8: 09:50:14:bc:e6:0a:d0:6a:2c:38:26:6d:c8:72:d9:bb:ed:49: e9:ab:5a:c1:f2:85:dc:e7:c8:95:90:64:8a:8b:7b:40:38:fa: a1:6f:7d:49:d2:36:72:ef:37:15:07:49:7b:6f:5e:fc:e2:bd: d5:5b:55:8f:b7:16:b8:2c:08:32:80:76:7d:f9:94:4d:70:36: 1e:27:f8:63:f5:5a:4f:f9:78:16:a7:23:e8:fa:fe:f5:d0:d4: 71:83:3b:25:c6:a2:40:a1:11:22:f5:55:50:bf:87:fe:c5:3b: 16:4e:f8:e0:9b:7c:3c:23:9e:af:59:5e:be:21:c5:92:e0:88: 0a:78:10:70:18:b0:cf:64:4c:b2:6e:0a:5d:18:df:55:cf:50: e5:83:56:31:97:61:91:63:fb:c5:0d:25:b7:34:6e:b6:a5:74: f7:fa:47:01:73:a1:ec:6d:40:93:26:25:bd:73:e4:53:cb:55: b4:72:28:cb:aa:c4:83:e1:3d:da:31:d4:a4:f1:df:d2:2b:8c: 18:a8:a1:b8:3d:01:8c:1a:71:d0:5e:d2:38:e4:10:6a:16:bc: 11:f1:a2:5e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuR999Nj6ItHrTZX0ThUxRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTA2MDYyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTA3NzgzMzI5YjhkNDc2YTg4ZTI5Y2I1YTdlNmFiNTJlOWExZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus9LJsopoQTA6bICP9N+VWsmG/Dt OpbEHEUosZ/yw2fz7mVP9UvFGuClRoGMzaI+/o8pg3VKAltAiYlWYLQA51HA9rbw BFTjPB6lIDa6rGbbCPS71YpybzQ2/rvXJ2TBR7LP8FSuh+z1u2tUQCKpOwr3TsL4 SLLqYAu2poAPQ3SKNCIV0jSVxj/yxa25zmiLxcH4L6sCchyzsG91YyTHTU5A5ixb hMgGe65j9mQJwpm9dNzoPPRu/vLWFpSXt7NiWZqvN+Np+g7VyDd6xlUqfdk8by5h jZFzV734EBTFaUoWm63Rq0UtoifLxVUjvEJiGXfvgY4HZz7apjzpBTDIUQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKkHeDMpuNR2qI4py1p+arUumh9uMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvcVFkNE15bTQxSGFvamluTFduNXF0UzZhSDI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWSQXAwQA XXLAAwQAuZYAAwQA3J7GMA0GCSqGSIb3DQEBCwUAA4IBAQBfF0zAzPgTa2c6crhI 5tj6Zz/xt/yg1qjchZ/O1XV5ZjFfOagJUBS85grQaiw4Jm3Ictm77Unpq1rB8oXc 58iVkGSKi3tAOPqhb31J0jZy7zcVB0l7b1784r3VW1WPtxa4LAgygHZ9+ZRNcDYe J/hj9VpP+XgWpyPo+v710NRxgzslxqJAoREi9VVQv4f+xTsWTvjgm3w8I56vWV6+ IcWS4IgKeBBwGLDPZEyybgpdGN9Vz1Dlg1Yxl2GRY/vFDSW3NG62pXT3+kcBc6Hs bUCTJiW9c+RTy1W0cijLqsSD4T3aMdSk8d/SK4wYqKG4PQGMGnHQXtI45BBqFrwR 8aJe -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:26 2026 by rpki-client