This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/qIq5EIN8KZxnuGsPHMVzjJm2lso.roa File: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (raw, json) Hash identifier: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU= Subject key identifier: A8:8A:B9:10:83:7C:29:9C:67:B8:6B:0F:1C:C5:73:8C:99:B6:96:CA Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be Certificate serial: 019B7AC79E7EC264A06E53D98EB5D484AB28 Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/qIq5EIN8KZxnuGsPHMVzjJm2lso.roa Signing time: Thu 01 Jan 2026 18:17:41 +0000 ROA not before: Thu 01 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214391 IP address blocks: 91.195.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9e:7e:c2:64:a0:6e:53:d9:8e:b5:d4:84:ab:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f91e5b58da326e654e994fef2195276759579be Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a88ab910837c299c67b86b0f1cc5738c99b696ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:2c:05:c4:fc:13:1d:df:e7:11:2b:f5:e1: 5d:7c:76:13:27:46:3c:60:2b:44:4e:b7:1e:3a:7a: 48:6a:e7:c5:2f:a2:06:52:af:92:42:4f:c7:e6:17: bb:29:44:30:d0:cd:9f:ef:c4:f1:7b:78:23:37:90: 90:68:3b:a1:0d:0e:e2:66:2b:d0:a7:ad:60:7b:eb: dd:1c:13:d9:2f:12:84:9a:b5:b9:8f:bb:a6:fd:d4: b2:3b:1a:c2:8d:74:1a:40:df:56:e4:5a:5b:a7:f5: 00:27:6e:72:b6:23:e3:df:b2:2a:a6:f2:d9:51:4a: 97:4a:28:d0:f8:b5:56:7c:9c:20:77:35:4c:64:8f: 0e:92:e6:cb:f6:16:21:ea:05:b9:8b:9c:ab:55:93: 0b:4a:31:f6:44:11:07:26:6e:67:38:8b:bb:00:59: f4:3b:ef:57:1c:de:01:58:c0:ca:db:12:d4:c6:ea: 6b:64:b9:0f:6e:fd:61:ba:dd:e6:b7:12:4f:7d:e6: 1e:99:e1:0b:42:e7:fd:a8:e1:9c:ea:57:b6:cb:8d: 17:58:15:92:a5:5f:eb:3e:f5:88:5e:00:13:77:98: 08:93:d7:a6:ac:1b:42:ba:e7:51:94:79:55:cf:59: 31:4f:97:8e:54:96:79:df:fa:fe:92:16:5a:cd:3d: 94:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8A:B9:10:83:7C:29:9C:67:B8:6B:0F:1C:C5:73:8C:99:B6:96:CA X509v3 Authority Key Identifier: keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/qIq5EIN8KZxnuGsPHMVzjJm2lso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.217.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:69:76:d0:63:67:e4:c6:0d:85:b9:96:b3:14:ef:7e:7c:93: 1d:31:31:83:b2:f6:ba:fb:68:04:03:96:da:ea:93:fc:01:f1: d6:09:8d:96:1d:5e:18:f2:1a:13:db:8d:2a:fd:b4:cb:b2:bf: 79:bf:bc:56:07:60:cf:7e:3b:2b:9e:07:4e:b5:bf:3a:e2:37: 5c:35:d7:2e:d3:2b:83:dd:fc:78:b4:7f:5a:44:76:1e:c3:f6: 7d:a1:0e:d1:83:ed:c0:76:5d:63:be:d2:85:04:15:79:15:59: e9:71:95:88:d4:fa:67:b4:f3:c2:a1:c0:8a:f5:3f:c6:c6:37: 61:a8:f8:2b:de:57:de:05:c1:41:2b:96:65:64:d0:fc:64:41: 14:e2:3c:8c:49:78:95:38:fc:10:73:55:9a:86:24:4a:4b:31: e9:93:fa:06:ac:9a:03:a8:33:77:10:11:8c:93:ad:8b:a7:38: 84:69:9a:82:77:4f:95:ae:10:ed:cd:ec:2b:e9:73:c8:4f:5c: a3:89:2a:a8:67:05:13:fb:85:f0:03:da:5e:54:ce:29:b3:8b: b2:91:5c:a0:57:9a:3a:2f:47:cd:66:02:c9:30:45:2e:82:23: d4:db:a0:1f:a3:66:4f:cb:aa:79:92:ae:d2:17:35:e0:40:ca: 8c:94:23:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x55+wmSgblPZjrXUhKsoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTFlNWI1OGRhMzI2ZTY1NGU5OTRmZWYyMTk1Mjc2NzU5 NTc5YmUwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODhhYjkxMDgzN2MyOTljNjdiODZiMGYxY2M1NzM4Yzk5YjY5NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NksBcT8Ex3f5xEr9eFdfHYTJ0Y8 YCtETrceOnpIaufFL6IGUq+SQk/H5he7KUQw0M2f78Txe3gjN5CQaDuhDQ7iZivQ p61ge+vdHBPZLxKEmrW5j7um/dSyOxrCjXQaQN9W5Fpbp/UAJ25ytiPj37IqpvLZ UUqXSijQ+LVWfJwgdzVMZI8OkubL9hYh6gW5i5yrVZMLSjH2RBEHJm5nOIu7AFn0 O+9XHN4BWMDK2xLUxuprZLkPbv1hut3mtxJPfeYemeELQuf9qOGc6le2y40XWBWS pV/rPvWIXgATd5gIk9emrBtCuudRlHlVz1kxT5eOVJZ53/r+khZazT2UwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKiKuRCDfCmcZ7hrDxzFc4yZtpbKMB8GA1UdIwQY MBaAFA+R5bWNoybmVOmU/vIZUnZ1lXm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEt ODI0Y2NlZmQ5YzgxLzEvcUlxNUVJTjhLWnhudUdzUEhNVnpqSm0ybHNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEtODI0Y2NlZmQ5Yzgx LzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8PZMA0G CSqGSIb3DQEBCwUAA4IBAQA/aXbQY2fkxg2FuZazFO9+fJMdMTGDsva6+2gEA5ba 6pP8AfHWCY2WHV4Y8hoT240q/bTLsr95v7xWB2DPfjsrngdOtb864jdcNdcu0yuD 3fx4tH9aRHYew/Z9oQ7Rg+3Adl1jvtKFBBV5FVnpcZWI1PpntPPCocCK9T/Gxjdh qPgr3lfeBcFBK5ZlZND8ZEEU4jyMSXiVOPwQc1WahiRKSzHpk/oGrJoDqDN3EBGM k62LpziEaZqCd0+VrhDtzewr6XPIT1yjiSqoZwUT+4XwA9peVM4ps4uykVygV5o6 L0fNZgLJMEUugiPU26Afo2ZPy6p5kq7SFzXgQMqMlCMi -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:37 2026 by rpki-client