This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/q0DtQiqbRO1kiEzIVX5k6xXoq10.roa File: q0DtQiqbRO1kiEzIVX5k6xXoq10.roa (raw, json) Hash identifier: VGW6dfujXrAz0Uz3C08uLwMIn29nKSm2vfftvsO0bU8= Subject key identifier: AB:40:ED:42:2A:9B:44:ED:64:88:4C:C8:55:7E:64:EB:15:E8:AB:5D Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019BA19D89ABE10C6CE928559133F5E0C988 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/q0DtQiqbRO1kiEzIVX5k6xXoq10.roa Signing time: Fri 09 Jan 2026 07:16:54 +0000 ROA not before: Fri 09 Jan 2026 07:16:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401776 IP address blocks: 91.200.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:9d:89:ab:e1:0c:6c:e9:28:55:91:33:f5:e0:c9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 9 07:16:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab40ed422a9b44ed64884cc8557e64eb15e8ab5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:0e:49:97:b7:4a:e5:5e:83:5c:9f:68:5c: f6:1d:cc:a2:ff:8c:71:9e:f0:0e:92:7a:ad:b0:da: 4c:a3:ed:94:7e:09:46:fa:a4:39:95:0d:4c:9d:20: 1f:1a:fe:d5:f9:30:59:32:a7:81:72:61:e8:b2:9b: 85:01:5d:dd:9d:1f:2f:d4:ae:9a:89:1e:8e:87:24: 9e:c2:ec:28:73:e4:e1:52:f9:1e:13:ea:a8:8f:1b: 93:b3:c4:d1:6e:74:7d:9d:91:4d:2e:94:2f:a6:bc: 54:93:67:4f:02:89:36:79:6f:cf:c4:a9:35:a5:db: 0d:2e:49:fc:b5:f6:3f:23:e2:79:97:26:25:68:2f: 3d:aa:c2:cc:d9:49:5a:97:01:c9:7b:ad:c7:29:65: 25:41:77:29:97:0a:3e:5e:b7:64:34:ad:f2:5c:51: 94:f8:4d:c9:56:d6:c4:f0:97:74:eb:bc:92:70:e2: c8:90:2f:b0:90:8e:c3:fe:58:15:0a:ab:1a:02:2b: e1:ea:0b:62:f6:2a:d0:4b:8f:ae:30:a3:d3:31:be: a4:1a:77:4d:c7:2c:40:93:a4:3d:48:b6:80:8a:79: 81:1c:bc:fa:f7:8b:b7:1b:bf:d2:57:63:86:9e:98: 01:b4:ae:d8:5f:41:aa:78:cc:f4:8c:14:41:7c:40: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:40:ED:42:2A:9B:44:ED:64:88:4C:C8:55:7E:64:EB:15:E8:AB:5D X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/q0DtQiqbRO1kiEzIVX5k6xXoq10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:9c:30:0e:fe:bc:16:4e:c2:1c:6f:c5:fa:22:2b:4d:fe:29: df:6e:03:6b:e1:8b:24:48:59:c8:9c:b7:a2:dd:62:1a:b6:a7: ef:a3:e7:6e:df:67:5f:85:22:d6:6f:6f:1f:82:9a:29:94:63: f4:62:ff:8d:ff:21:ea:07:ba:26:3b:56:a3:f4:36:95:ac:2d: 11:9c:62:c7:de:58:dd:4e:e9:43:57:58:8b:d3:ee:84:0c:d7: 43:dd:c7:f4:52:16:4a:fd:73:fe:81:11:f8:2e:40:7b:b9:e2: 72:a1:46:58:6f:01:26:1f:b5:2e:41:9d:c2:01:bc:7f:fb:5e: 9a:f1:28:f5:1d:a5:bf:e3:00:75:09:50:f9:b1:ca:88:26:1c: 98:6d:b1:e8:4a:50:5d:2f:e3:cf:29:82:3f:e2:20:cd:99:10: 23:33:a3:b5:8d:8c:a0:1c:f8:b5:08:ee:f0:66:11:6c:25:6d: d7:47:ad:9a:52:5e:4b:4f:9d:51:00:aa:25:f5:2e:0a:78:d4: e5:ac:15:f9:07:a9:21:e5:5e:63:88:65:f2:83:80:96:10:ca: a8:ca:02:e5:59:11:c7:6f:aa:e6:26:ea:cb:28:20:1e:33:e2: 65:65:7f:2a:9d:5f:1d:a8:e8:52:25:34:38:75:53:59:ca:19: 9a:b4:40:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuhnYmr4Qxs6ShVkTP14MmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTA5MDcxNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjQwZWQ0MjJhOWI0NGVkNjQ4ODRjYzg1NTdlNjRlYjE1ZThhYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfYOSZe3SuVeg1yfaFz2Hcyi/4xx nvAOknqtsNpMo+2UfglG+qQ5lQ1MnSAfGv7V+TBZMqeBcmHospuFAV3dnR8v1K6a iR6OhySewuwoc+ThUvkeE+qojxuTs8TRbnR9nZFNLpQvprxUk2dPAok2eW/PxKk1 pdsNLkn8tfY/I+J5lyYlaC89qsLM2UlalwHJe63HKWUlQXcplwo+XrdkNK3yXFGU +E3JVtbE8Jd067yScOLIkC+wkI7D/lgVCqsaAivh6gti9irQS4+uMKPTMb6kGndN xyxAk6Q9SLaAinmBHLz694u3G7/SV2OGnpgBtK7YX0GqeMz0jBRBfEBcpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtA7UIqm0TtZIhMyFV+ZOsV6KtdMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvcTBEdFFpcWJSTzFraUV6SVZYNWs2eFhvcTEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8j9MA0G CSqGSIb3DQEBCwUAA4IBAQA/nDAO/rwWTsIcb8X6IitN/infbgNr4YskSFnInLei 3WIatqfvo+du32dfhSLWb28fgpoplGP0Yv+N/yHqB7omO1aj9DaVrC0RnGLH3ljd TulDV1iL0+6EDNdD3cf0UhZK/XP+gRH4LkB7ueJyoUZYbwEmH7UuQZ3CAbx/+16a 8Sj1HaW/4wB1CVD5scqIJhyYbbHoSlBdL+PPKYI/4iDNmRAjM6O1jYygHPi1CO7w ZhFsJW3XR62aUl5LT51RAKol9S4KeNTlrBX5B6kh5V5jiGXyg4CWEMqoygLlWRHH b6rmJurLKCAeM+JlZX8qnV8dqOhSJTQ4dVNZyhmatEBE -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:34 2026 by rpki-client