This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/CQ6pDyg1WnAvbUeSKsU2KF2TxFI.roa File: CQ6pDyg1WnAvbUeSKsU2KF2TxFI.roa (raw, json) Hash identifier: JGS4S+jSN2ALWQUeZ10tMWFRs27F1DHl4owC84Ny3Kk= Subject key identifier: 09:0E:A9:0F:28:35:5A:70:2F:6D:47:92:2A:C5:36:28:5D:93:C4:52 Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68 Certificate serial: 019B79ED455521E507CADAA1893EED1328E1 Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/CQ6pDyg1WnAvbUeSKsU2KF2TxFI.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216275 IP address blocks: 91.226.144.0/23 maxlen: 23 91.229.203.0/24 maxlen: 24 2a13:e740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:55:21:e5:07:ca:da:a1:89:3e:ed:13:28:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=090ea90f28355a702f6d47922ac536285d93c452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:7b:10:cf:35:90:26:ad:5e:4a:5e:b8:a8: 1a:df:57:ed:68:b6:c3:81:f9:a5:e5:33:62:aa:78: 69:6c:14:ee:c1:f6:fc:c1:f0:41:7b:f1:d4:88:c3: c9:39:27:b2:75:6f:3f:cb:d5:f7:15:ae:f8:12:96: 72:be:68:61:a2:8e:41:15:e5:c8:fe:94:10:bb:56: b0:f5:d3:f6:76:67:66:ff:36:e1:58:c0:2e:13:f2: e1:47:eb:cb:c1:a9:c8:ea:e4:9b:31:ba:93:b7:3e: 39:5f:d3:7f:35:36:35:b3:e1:0e:89:67:f8:7e:69: f9:44:23:28:6a:30:49:c9:d2:1e:13:83:40:48:6c: 42:79:f1:60:49:47:f7:33:96:a0:13:9a:7d:3f:fd: 8b:71:9a:40:4e:1b:ce:d4:0f:c8:be:dc:73:5e:9c: 91:e6:12:06:83:04:6b:f8:f0:36:6e:ff:77:df:a3: 00:ea:6a:72:bf:00:d3:1e:21:6b:72:eb:9a:93:8c: c1:ed:47:ce:18:56:e2:9d:66:aa:1c:9a:93:39:0b: 72:ed:1e:de:90:a6:7b:92:a6:44:81:27:22:58:e1: 4b:9a:e5:30:ac:74:42:f4:b5:de:3a:d2:cd:4b:77: 1c:79:bb:c5:14:5d:39:ee:7d:71:25:c0:2f:26:aa: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0E:A9:0F:28:35:5A:70:2F:6D:47:92:2A:C5:36:28:5D:93:C4:52 X509v3 Authority Key Identifier: keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/CQ6pDyg1WnAvbUeSKsU2KF2TxFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.144.0/23 91.229.203.0/24 IPv6: 2a13:e740::/29 Signature Algorithm: sha256WithRSAEncryption 77:ad:4e:3d:f1:ff:51:63:0d:2c:00:88:c0:bb:7c:53:b4:31: ff:6b:63:89:fa:0d:89:95:a5:2b:2f:ce:b9:05:1f:0d:e3:0d: 03:9d:6c:93:32:4f:4c:06:4c:98:fc:32:d0:e5:37:25:68:7b: 2e:3d:65:ad:e7:d8:b9:04:8a:3e:cd:d8:18:b3:4d:37:9b:bd: 97:a4:d8:3b:65:15:a5:67:0e:b9:f9:79:a7:a5:ad:d4:b6:9a: a1:e8:e3:2b:c1:e9:54:3b:54:5a:2d:e9:6b:17:d7:a3:ae:c7: 8b:4c:c6:7d:f2:b6:81:a3:7d:2b:62:4b:71:ec:fa:c1:43:77: 1c:95:11:f8:82:2e:f3:2a:27:af:30:3c:2e:62:28:0e:ad:7b: d9:18:68:c7:2e:98:62:03:2b:c4:29:3d:e4:fb:8f:ee:a5:c9: f2:78:90:40:bf:5b:42:9b:c4:8d:11:b5:09:81:93:ec:58:ce: 5e:7e:2c:c5:55:30:06:4f:77:3d:20:de:39:d1:1c:c6:6a:c9: 29:35:c2:05:95:40:62:ab:ce:9d:fd:99:cb:85:65:5e:45:60: 32:01:cc:f1:3a:e4:59:66:85:5d:8b:36:63:12:5a:ea:fe:e7: a5:49:c3:e5:9f:a4:9c:9b:0f:2a:fe:ac:a8:27:4d:a1:35:dc: 95:81:5b:c7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57UVVIeUHytqhiT7tEyjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDEzZmQyYWQ5ZTI1Yzg0YmMwYjU5ZTYwOGE2NDM2NjNl NmJiNjgwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTBlYTkwZjI4MzU1YTcwMmY2ZDQ3OTIyYWM1MzYyODVkOTNjNDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCJ7EM81kCatXkpeuKga31ftaLbD gfml5TNiqnhpbBTuwfb8wfBBe/HUiMPJOSeydW8/y9X3Fa74EpZyvmhhoo5BFeXI /pQQu1aw9dP2dmdm/zbhWMAuE/LhR+vLwanI6uSbMbqTtz45X9N/NTY1s+EOiWf4 fmn5RCMoajBJydIeE4NASGxCefFgSUf3M5agE5p9P/2LcZpAThvO1A/IvtxzXpyR 5hIGgwRr+PA2bv9336MA6mpyvwDTHiFrcuuak4zB7UfOGFbinWaqHJqTOQty7R7e kKZ7kqZEgSciWOFLmuUwrHRC9LXeOtLNS3ccebvFFF057n1xJcAvJqrPhQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAkOqQ8oNVpwL21HkirFNihdk8RSMB8GA1UdIwQY MBaAFK9BP9KtniXIS8C1nmCKZDZj5rtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YWY2MTUtMmM0ZS00Y2FmLWI1YWYt ZWJiZTFmNDc3ZjY4LzEvQ1E2cER5ZzFXbkF2YlVlU0tzVTJLRjJUeEZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85YWY2MTUtMmM0ZS00Y2FmLWI1YWYtZWJiZTFmNDc3ZjY4 LzEvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+KQAwQA W+XLMA0EAgACMAcDBQMqE+dAMA0GCSqGSIb3DQEBCwUAA4IBAQB3rU498f9RYw0s AIjAu3xTtDH/a2OJ+g2JlaUrL865BR8N4w0DnWyTMk9MBkyY/DLQ5TclaHsuPWWt 59i5BIo+zdgYs003m72XpNg7ZRWlZw65+Xmnpa3Utpqh6OMrwelUO1RaLelrF9ej rseLTMZ98raBo30rYktx7PrBQ3cclRH4gi7zKievMDwuYigOrXvZGGjHLphiAyvE KT3k+4/upcnyeJBAv1tCm8SNEbUJgZPsWM5efizFVTAGT3c9IN450RzGaskpNcIF lUBiq86d/ZnLhWVeRWAyAczxOuRZZoVdizZjElrq/uelScPln6Scmw8q/qyoJ02h NdyVgVvH -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:46 2026 by rpki-client