This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/2QZIkDsVUFZ0fA9DNP2jTLVLSAM.roa File: 2QZIkDsVUFZ0fA9DNP2jTLVLSAM.roa (raw, json) Hash identifier: qGAsY/mj+KUshvP9IGbzdbP+lJhmdQPEPt6/HveTaYk= Subject key identifier: D9:06:48:90:3B:15:50:56:74:7C:0F:43:34:FD:A3:4C:B5:4B:48:03 Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91 Certificate serial: 019B7D5BF5829795355A980BF72C3302BDE3 Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/2QZIkDsVUFZ0fA9DNP2jTLVLSAM.roa Signing time: Fri 02 Jan 2026 06:18:57 +0000 ROA not before: Fri 02 Jan 2026 06:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210165 IP address blocks: 91.225.1.0/24 maxlen: 24 193.104.118.0/24 maxlen: 24 2a12:3440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f5:82:97:95:35:5a:98:0b:f7:2c:33:02:bd:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91 Validity Not Before: Jan 2 06:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d90648903b155056747c0f4334fda34cb54b4803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:af:86:40:ed:6d:ee:4c:78:58:7f:83:3a:dd: a2:93:bf:9e:b2:65:be:d3:15:94:f9:c5:61:7c:00: 70:09:eb:b5:e8:1d:f1:be:fc:76:62:ba:34:f4:e3: 32:d9:e8:05:58:6e:73:fe:16:fb:85:b2:2e:f2:2e: 90:5f:12:f1:23:49:43:44:b3:a5:9b:27:81:16:97: 1d:3e:f9:85:c3:9c:34:13:e6:a8:57:dd:98:e7:35: c2:99:e2:96:bf:d9:4c:88:e7:de:75:73:23:aa:af: 7f:52:c9:c9:18:40:60:0e:f2:45:26:3d:f9:a2:b3: 98:e2:6c:37:ac:52:93:72:98:15:83:cc:b8:eb:48: 55:22:16:0e:56:cf:5c:b7:1b:24:21:5d:9e:17:04: 7c:d4:8c:df:be:56:e1:b1:21:af:fc:15:9f:1e:92: e9:d4:5d:fb:16:a0:f6:fb:47:33:d2:85:2f:e1:98: fb:1e:25:34:5c:1d:34:e1:a7:15:ce:58:c4:bb:a2: e1:b5:2b:43:e3:63:19:13:0a:fb:04:53:7b:06:b8: 05:bb:e6:37:8d:70:34:b2:46:f0:ee:01:f2:3e:13: d4:ca:19:f4:aa:f0:db:f9:6a:67:0c:61:9a:63:af: 72:27:95:c9:e6:55:37:06:1f:09:7f:6f:4b:e3:3c: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:06:48:90:3B:15:50:56:74:7C:0F:43:34:FD:A3:4C:B5:4B:48:03 X509v3 Authority Key Identifier: keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/2QZIkDsVUFZ0fA9DNP2jTLVLSAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.1.0/24 193.104.118.0/24 IPv6: 2a12:3440::/29 Signature Algorithm: sha256WithRSAEncryption 67:f9:f7:ee:84:9f:05:7a:d9:f8:7b:38:1e:da:a5:88:42:a4: f5:a0:9e:85:0c:0f:6d:82:d8:91:c6:bc:4b:b0:69:a6:5e:f7: 08:49:9f:32:f4:75:34:09:5d:fa:0d:c2:37:70:12:be:0c:fb: b3:ff:fd:11:8a:59:79:6a:e1:94:05:28:7e:75:79:ea:76:c1: 2f:0d:25:05:b2:ac:b2:4a:00:82:78:4f:b8:03:82:66:09:2a: d6:8c:a8:93:68:90:d6:bf:ad:4f:ad:ab:69:b9:6d:57:4b:08: 79:58:e3:dc:e3:f9:e0:15:e5:90:33:a2:fc:99:9b:6d:1e:8e: 9e:b5:ad:2e:15:9b:9f:ca:7d:ec:29:a3:c6:f7:7c:b4:36:b0: 11:e3:fa:98:24:a2:71:5b:c2:cf:75:c7:46:f2:c2:7c:33:dd: 2c:69:05:20:0f:75:72:af:50:8d:ba:4a:c0:8f:ec:37:bb:86: 75:d7:d7:5b:34:e2:75:65:b6:e2:51:ea:90:bf:1d:c0:de:88: 94:a2:db:7b:3b:8a:ab:15:b6:7e:17:87:1d:73:84:f8:77:d6: 7d:d0:cd:f9:db:46:fa:8a:92:a1:88:a4:14:81:8d:c7:ea:d9: ce:ac:14:e5:7d:ce:12:fe:0a:4c:b9:86:08:e7:8d:94:e6:c3: 06:29:2a:26 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9W/WCl5U1WpgL9ywzAr3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZjQ4NzQ5OTRkZTdhMTRlNGI1ODRmNmQyYjk2YjJkOTkx YjFlOTEwHhcNMjYwMTAyMDYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTA2NDg5MDNiMTU1MDU2NzQ3YzBmNDMzNGZkYTM0Y2I1NGI0ODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+q+GQO1t7kx4WH+DOt2ik7+esmW+ 0xWU+cVhfABwCeu16B3xvvx2Yro09OMy2egFWG5z/hb7hbIu8i6QXxLxI0lDRLOl myeBFpcdPvmFw5w0E+aoV92Y5zXCmeKWv9lMiOfedXMjqq9/UsnJGEBgDvJFJj35 orOY4mw3rFKTcpgVg8y460hVIhYOVs9ctxskIV2eFwR81IzfvlbhsSGv/BWfHpLp 1F37FqD2+0cz0oUv4Zj7HiU0XB004acVzljEu6LhtStD42MZEwr7BFN7BrgFu+Y3 jXA0skbw7gHyPhPUyhn0qvDb+WpnDGGaY69yJ5XJ5lU3Bh8Jf29L4zxpjwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNkGSJA7FVBWdHwPQzT9o0y1S0gDMB8GA1UdIwQY MBaAFG70h0mU3noU5LWE9tK5ay2ZGx6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMt NTBlNzQ2NDI0NjMwLzEvMlFaSWtEc1ZVRlowZkE5RE5QMmpUTFZMU0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMtNTBlNzQ2NDI0NjMw LzEvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+EBAwQA wWh2MA0EAgACMAcDBQMqEjRAMA0GCSqGSIb3DQEBCwUAA4IBAQBn+ffuhJ8Fetn4 ezge2qWIQqT1oJ6FDA9tgtiRxrxLsGmmXvcISZ8y9HU0CV36DcI3cBK+DPuz//0R ill5auGUBSh+dXnqdsEvDSUFsqyySgCCeE+4A4JmCSrWjKiTaJDWv61PratpuW1X Swh5WOPc4/ngFeWQM6L8mZttHo6eta0uFZufyn3sKaPG93y0NrAR4/qYJKJxW8LP dcdG8sJ8M90saQUgD3Vyr1CNukrAj+w3u4Z119dbNOJ1ZbbiUeqQvx3A3oiUott7 O4qrFbZ+F4cdc4T4d9Z90M3520b6ipKhiKQUgY3H6tnOrBTlfc4S/gpMuYYI542U 5sMGKSom -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:22 2026 by rpki-client