This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/QFN1Pmp0QiKx5d3w_NYc2ZWKHEw.roa File: QFN1Pmp0QiKx5d3w_NYc2ZWKHEw.roa (raw, json) Hash identifier: Xxu/WKTNsoIWst3QbQSPutJklBpFRyV1E6yTl52XKwg= Subject key identifier: 40:53:75:3E:6A:74:42:22:B1:E5:DD:F0:FC:D6:1C:D9:95:8A:1C:4C Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346 Certificate serial: 019B7834F33B9AEE66173C67E3BFB2DD04A4 Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/QFN1Pmp0QiKx5d3w_NYc2ZWKHEw.roa Signing time: Thu 01 Jan 2026 06:18:14 +0000 ROA not before: Thu 01 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51838 IP address blocks: 91.220.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f3:3b:9a:ee:66:17:3c:67:e3:bf:b2:dd:04:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20d5b8483b1712b7023541056e73085366d29346 Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4053753e6a744222b1e5ddf0fcd61cd9958a1c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c4:e9:cd:31:1f:f7:30:fb:35:ec:2f:df:ed: d2:41:91:4e:a7:02:ad:85:b0:4f:f1:63:fb:45:29: 64:dc:6c:e5:7e:0c:26:0d:4e:a7:76:31:65:3a:dd: ed:e0:2c:cc:b0:d4:e8:61:95:50:4e:2b:87:e4:14: da:69:ec:7c:93:f4:47:60:3c:99:95:d8:a3:a5:87: db:3f:3e:9a:69:20:e4:38:00:a6:b5:2b:ea:b3:e2: 35:19:59:f4:d3:3a:09:a2:c9:3b:5f:be:63:28:71: cf:b3:19:24:b0:1a:71:42:c0:6c:57:c6:a1:10:05: 1d:7f:2a:e6:95:c4:db:44:5e:ff:5f:8b:f7:cb:71: 3e:d7:dd:ef:83:5a:1c:56:1c:8e:c2:86:70:37:5f: d3:4f:15:c1:72:06:91:e8:27:15:e9:8f:25:6a:95: 22:ff:60:55:1b:ce:ae:ab:ae:bc:74:c6:02:26:1d: 61:11:cb:c5:06:d1:b2:9b:22:bd:6d:14:0c:be:65: 61:51:db:da:ec:6e:10:1f:29:34:59:b0:f2:65:fb: d3:27:23:e1:8f:69:06:83:34:f3:c2:2e:4f:85:32: c3:69:78:01:3e:f0:e4:9b:cc:2f:4c:b1:73:c9:47: 03:a4:fe:3c:fb:ac:22:bb:20:85:e4:e9:e3:bd:1b: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:75:3E:6A:74:42:22:B1:E5:DD:F0:FC:D6:1C:D9:95:8A:1C:4C X509v3 Authority Key Identifier: keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/QFN1Pmp0QiKx5d3w_NYc2ZWKHEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.145.0/24 Signature Algorithm: sha256WithRSAEncryption 80:e1:13:8f:ad:9d:70:35:22:0c:0e:0b:ab:2f:ce:2c:4b:69: 8f:a4:cb:18:65:d4:9c:bc:c9:3c:4d:1c:0c:f1:e2:58:f7:c8: 23:2a:48:3f:d1:fe:8d:32:d3:25:7c:86:2a:dc:cf:0a:a5:4e: 1d:88:1b:9a:2e:e2:4f:33:68:f4:bd:49:8f:ef:3e:f7:af:42: 8c:a2:2e:f3:10:6c:89:16:ca:eb:93:c8:4d:61:44:04:27:48: 26:a4:a5:00:7c:5d:da:2a:90:34:ad:b8:11:50:5c:b6:3b:5f: 4a:7d:0b:c7:a4:7f:6f:8c:09:62:ae:ae:b3:c2:14:4b:53:82: 5a:d2:4a:e3:3f:2f:25:f0:d7:fe:ac:3b:3a:1e:9a:92:47:df: 30:41:39:ee:7d:ae:cc:a5:95:49:3b:83:71:22:25:7e:86:83: 85:d6:1f:9c:94:fd:a3:c0:7f:e0:fa:2e:cd:a4:1e:e2:d9:0d: f8:67:1f:ad:99:cf:ec:b5:21:f5:c8:3b:35:f2:8c:40:af:e9: f0:e4:e3:53:11:76:01:10:c5:5a:7d:40:93:b6:00:dc:cd:9a: 04:03:cb:98:85:4f:6e:e6:e2:c2:7b:98:91:37:d8:b1:9a:31: 2e:2b:b4:f6:d7:cb:f3:4f:0a:ec:fe:5f:ed:d3:26:46:6c:9d: 9a:2a:25:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPM7mu5mFzxn47+y3QSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZDViODQ4M2IxNzEyYjcwMjM1NDEwNTZlNzMwODUzNjZk MjkzNDYwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDUzNzUzZTZhNzQ0MjIyYjFlNWRkZjBmY2Q2MWNkOTk1OGExYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMTpzTEf9zD7Newv3+3SQZFOpwKt hbBP8WP7RSlk3GzlfgwmDU6ndjFlOt3t4CzMsNToYZVQTiuH5BTaaex8k/RHYDyZ ldijpYfbPz6aaSDkOACmtSvqs+I1GVn00zoJosk7X75jKHHPsxkksBpxQsBsV8ah EAUdfyrmlcTbRF7/X4v3y3E+193vg1ocVhyOwoZwN1/TTxXBcgaR6CcV6Y8lapUi /2BVG86uq668dMYCJh1hEcvFBtGymyK9bRQMvmVhUdva7G4QHyk0WbDyZfvTJyPh j2kGgzTzwi5PhTLDaXgBPvDkm8wvTLFzyUcDpP48+6wiuyCF5OnjvRvDTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBTdT5qdEIiseXd8PzWHNmVihxMMB8GA1UdIwQY MBaAFCDVuEg7FxK3AjVBBW5zCFNm0pNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEt MGMyZmY3OTM3ZTZmLzEvUUZOMVBtcDBRaUt4NWQzd19OWWMyWldLSEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEtMGMyZmY3OTM3ZTZm LzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9yRMA0G CSqGSIb3DQEBCwUAA4IBAQCA4ROPrZ1wNSIMDgurL84sS2mPpMsYZdScvMk8TRwM 8eJY98gjKkg/0f6NMtMlfIYq3M8KpU4diBuaLuJPM2j0vUmP7z73r0KMoi7zEGyJ Fsrrk8hNYUQEJ0gmpKUAfF3aKpA0rbgRUFy2O19KfQvHpH9vjAlirq6zwhRLU4Ja 0krjPy8l8Nf+rDs6HpqSR98wQTnufa7MpZVJO4NxIiV+hoOF1h+clP2jwH/g+i7N pB7i2Q34Zx+tmc/stSH1yDs18oxAr+nw5ONTEXYBEMVafUCTtgDczZoEA8uYhU9u 5uLCe5iRN9ixmjEuK7T218vzTwrs/l/t0yZGbJ2aKiXz -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:17 2026 by rpki-client