This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa File: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (raw, json) Hash identifier: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds= Subject key identifier: AB:E9:23:BC:0C:E9:C7:E6:58:0D:7A:4E:4B:F7:2F:88:46:00:68:E7 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B7BA3D8F08DF09BE14AE2431B1E97C657 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 81.90.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d8:f0:8d:f0:9b:e1:4a:e2:43:1b:1e:97:c6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abe923bc0ce9c7e6580d7a4e4bf72f88460068e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:f4:5a:6b:7a:fc:a7:4c:50:06:e2:d6:59: 71:1a:3b:a7:22:d5:9a:0a:20:a1:6b:27:29:27:76: 3a:0a:31:3c:1b:b9:81:86:af:20:91:e0:f7:0b:16: 06:a2:f7:d7:0a:10:8f:69:6e:53:78:86:b4:94:4a: ce:18:f7:1e:f9:be:e2:88:3d:9d:fc:b9:c1:f4:0c: a1:f0:48:d0:a1:2f:6d:38:31:da:34:17:6f:0e:db: 89:2b:a5:22:57:df:f6:d2:ac:9b:e3:01:c8:b0:35: 48:a0:e4:58:a0:44:cf:d6:15:98:95:7b:fa:1d:35: 15:95:1e:a8:21:d7:ed:ab:83:c5:6e:53:35:cb:36: 3e:34:dd:dd:07:36:16:4c:ca:33:e4:cd:9a:54:5b: 5a:ea:11:3f:0c:4b:9a:1d:03:6e:33:e0:5b:bf:a6: 65:6f:c1:c7:c9:45:14:36:77:5a:34:a9:03:0b:f6: f9:b6:04:d5:95:10:ca:8b:88:39:b7:86:36:40:29: 6e:43:73:8a:0a:e9:2d:e5:e8:3f:20:5a:16:53:1d: e9:06:3f:32:45:63:fe:97:93:db:ec:2a:7b:d4:f2: 6c:d6:31:d8:3e:97:d6:ed:ca:51:51:3f:ba:25:58: d5:ba:a2:15:a9:d0:49:49:4a:82:63:1b:25:11:97: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E9:23:BC:0C:E9:C7:E6:58:0D:7A:4E:4B:F7:2F:88:46:00:68:E7 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.25.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:c2:d6:58:4e:e8:78:27:eb:88:26:14:fa:74:73:9e:e2:74: 67:5f:08:5f:e2:d1:0d:5b:5f:69:5c:eb:69:45:1c:1f:df:8f: 5f:73:b6:aa:2e:ef:ce:72:03:fe:98:7a:4e:06:51:5d:44:92: 13:7b:84:7a:63:cf:cb:64:28:86:4c:2a:6f:cc:5f:66:65:69: 01:a7:1c:95:ea:12:aa:08:1c:25:d7:75:7b:b9:07:97:e3:5e: 9e:6e:10:99:83:82:7a:01:30:2e:fe:3f:56:1a:a9:27:dc:cf: d5:8e:74:6d:34:a5:be:78:85:c7:e1:89:fa:c2:e2:f3:5b:5a: b6:af:ba:16:c6:4d:3f:92:34:75:20:6b:cb:58:fc:d7:1e:8e: 4b:7f:47:a8:0b:4b:ba:61:0a:b5:d9:de:69:6d:cb:fc:cb:58: 3c:e4:93:7a:d8:46:70:59:53:3c:d1:2d:0b:ca:55:81:6a:44: a2:ac:46:c4:d9:59:97:6c:f0:9b:91:37:4e:ab:f5:eb:7e:54: 8b:02:95:37:54:40:a2:24:31:e7:3c:b1:30:22:cb:5d:1f:96: 17:88:88:06:50:bc:57:a2:ff:4b:7d:5f:ca:95:d0:60:7c:dd: 9f:ef:a5:2d:ec:bf:26:22:43:5f:73:2d:28:1d:54:9b:fb:52: 93:d4:e4:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9jwjfCb4UriQxsel8ZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmU5MjNiYzBjZTljN2U2NTgwZDdhNGU0YmY3MmY4ODQ2MDA2OGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20v0Wmt6/KdMUAbi1llxGjunItWa CiChaycpJ3Y6CjE8G7mBhq8gkeD3CxYGovfXChCPaW5TeIa0lErOGPce+b7iiD2d /LnB9Ayh8EjQoS9tODHaNBdvDtuJK6UiV9/20qyb4wHIsDVIoORYoETP1hWYlXv6 HTUVlR6oIdftq4PFblM1yzY+NN3dBzYWTMoz5M2aVFta6hE/DEuaHQNuM+Bbv6Zl b8HHyUUUNndaNKkDC/b5tgTVlRDKi4g5t4Y2QCluQ3OKCukt5eg/IFoWUx3pBj8y RWP+l5Pb7Cp71PJs1jHYPpfW7cpRUT+6JVjVuqIVqdBJSUqCYxslEZd60wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKvpI7wM6cfmWA16Tkv3L4hGAGjnMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvcS1ranZBenB4LVpZRFhwT1NfY3ZpRVlBYU9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUVoZMA0G CSqGSIb3DQEBCwUAA4IBAQBrwtZYTuh4J+uIJhT6dHOe4nRnXwhf4tENW19pXOtp RRwf349fc7aqLu/OcgP+mHpOBlFdRJITe4R6Y8/LZCiGTCpvzF9mZWkBpxyV6hKq CBwl13V7uQeX416ebhCZg4J6ATAu/j9WGqkn3M/VjnRtNKW+eIXH4Yn6wuLzW1q2 r7oWxk0/kjR1IGvLWPzXHo5Lf0eoC0u6YQq12d5pbcv8y1g85JN62EZwWVM80S0L ylWBakSirEbE2VmXbPCbkTdOq/XrflSLApU3VECiJDHnPLEwIstdH5YXiIgGULxX ov9LfV/KldBgfN2f76Ut7L8mIkNfcy0oHVSb+1KT1OQv -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:31 2026 by rpki-client