This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/q0uTD1TYBfOSkr_Hq6YnaOjJPT4.roa File: q0uTD1TYBfOSkr_Hq6YnaOjJPT4.roa (raw, json) Hash identifier: mUJ6CfqZZS7USPUfxMuvlTw60JrCy/sd8I2pytEOK9k= Subject key identifier: AB:4B:93:0F:54:D8:05:F3:92:92:BF:C7:AB:A6:27:68:E8:C9:3D:3E Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578 Certificate serial: 019B77593D5D7D408B73F96BD2554F14F09F Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/q0uTD1TYBfOSkr_Hq6YnaOjJPT4.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43906 IP address blocks: 91.198.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3d:5d:7d:40:8b:73:f9:6b:d2:55:4f:14:f0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab4b930f54d805f39292bfc7aba62768e8c93d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0c:dc:db:07:58:79:8c:34:16:2a:92:09:48: 47:b4:9b:6a:e0:5b:4e:da:10:07:d8:a5:86:df:17: 89:1b:4c:22:e5:9f:b2:99:99:40:ae:e2:7a:eb:7c: 23:3e:1d:ea:a5:a9:f1:10:06:5a:b8:ed:2e:89:fd: a3:c3:f3:e9:42:44:b0:6d:15:a4:0d:b9:fe:20:57: 6e:77:b7:fe:2d:8b:48:1e:53:a7:76:12:b1:02:92: ff:51:f5:ae:72:ad:d2:45:46:84:07:32:c5:19:e9: 00:12:44:e8:48:5f:75:9f:db:6a:e3:07:87:1c:4e: 90:ca:c0:a8:89:20:60:59:e1:33:97:6d:c7:d5:47: 31:bb:6c:ac:21:d1:35:b0:6a:91:f4:7c:14:09:8e: 76:35:ac:26:d7:eb:75:0b:0b:bd:c4:ae:6e:ce:9b: df:e4:0d:bd:80:3d:f0:27:0d:f7:25:ec:17:7c:e7: 20:4c:bf:13:76:0e:aa:ff:87:37:5a:52:89:91:37: 8e:d5:21:62:87:10:8d:9c:be:7c:b0:63:40:df:22: 17:7c:96:e1:f8:a2:2a:b5:9b:ef:d1:c4:39:0a:1a: 07:3c:55:c2:07:a1:85:92:42:9a:13:2b:97:e1:5a: 92:73:3e:4f:47:d2:35:22:0e:6d:e4:0b:db:25:1b: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:93:0F:54:D8:05:F3:92:92:BF:C7:AB:A6:27:68:E8:C9:3D:3E X509v3 Authority Key Identifier: keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/q0uTD1TYBfOSkr_Hq6YnaOjJPT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.229.0/24 Signature Algorithm: sha256WithRSAEncryption 68:51:88:d8:e5:5a:46:31:d8:73:49:7d:4f:c3:69:34:0a:3e: 82:f2:36:61:9c:98:d6:31:43:0e:e3:bd:8e:ee:65:81:f5:c3: 73:41:eb:10:92:3a:6e:3f:b6:84:66:6e:35:29:f1:b9:8c:12: de:de:27:4e:ef:7d:d9:13:5e:8f:22:59:36:aa:1c:fe:82:73: 6e:2d:f2:88:b5:59:54:a9:c3:3f:18:5d:b3:8c:4c:00:61:e8: 1c:df:c8:85:9d:8a:4d:ac:b1:10:91:b5:fd:e9:0b:09:3a:35: d6:1f:f2:1e:cf:dc:f0:4a:a8:74:74:68:3f:28:28:f8:6a:b3: f6:07:c5:80:5f:32:84:b2:46:9b:fa:95:18:b4:6e:8d:01:4b: 17:b9:14:d6:be:f4:4e:6a:e0:5a:01:83:04:48:ae:78:a2:b4: d6:d9:7b:c9:68:7f:f5:67:da:bf:e2:d9:1b:4f:bf:ee:9d:76: 2e:f1:88:dd:66:a8:86:26:7e:ab:05:a1:b7:69:14:84:fa:91: f0:fe:dc:71:1c:4b:4e:e3:24:b9:21:1f:6a:cc:37:9f:2b:85: cf:dd:99:5a:f7:03:21:a5:29:b1:70:1a:8b:21:9e:73:4e:e0: db:5a:6d:ec:bf:6c:ef:a3:b5:df:d4:45:80:f0:21:70:11:88: 73:30:f3:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WT1dfUCLc/lr0lVPFPCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTc5ZDM3ZGEwMTZhYmQxMzI3OTI3MGJhNTVkNmIzYzI5 NjA1NzgwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjRiOTMwZjU0ZDgwNWYzOTI5MmJmYzdhYmE2Mjc2OGU4YzkzZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAzc2wdYeYw0FiqSCUhHtJtq4FtO 2hAH2KWG3xeJG0wi5Z+ymZlAruJ663wjPh3qpanxEAZauO0uif2jw/PpQkSwbRWk Dbn+IFdud7f+LYtIHlOndhKxApL/UfWucq3SRUaEBzLFGekAEkToSF91n9tq4weH HE6QysCoiSBgWeEzl23H1Ucxu2ysIdE1sGqR9HwUCY52Nawm1+t1Cwu9xK5uzpvf 5A29gD3wJw33JewXfOcgTL8Tdg6q/4c3WlKJkTeO1SFihxCNnL58sGNA3yIXfJbh +KIqtZvv0cQ5ChoHPFXCB6GFkkKaEyuX4VqScz5PR9I1Ig5t5AvbJRudxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtLkw9U2AXzkpK/x6umJ2joyT0+MB8GA1UdIwQY MBaAFBaXnTfaAWq9EyeScLpV1rPClgV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzIt YjlkYmRjOGI0MzljLzEvcTB1VEQxVFlCZk9Ta3JfSHE2WW5hT2pKUFQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzItYjlkYmRjOGI0Mzlj LzEvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8blMA0G CSqGSIb3DQEBCwUAA4IBAQBoUYjY5VpGMdhzSX1Pw2k0Cj6C8jZhnJjWMUMO472O 7mWB9cNzQesQkjpuP7aEZm41KfG5jBLe3idO733ZE16PIlk2qhz+gnNuLfKItVlU qcM/GF2zjEwAYegc38iFnYpNrLEQkbX96QsJOjXWH/Iez9zwSqh0dGg/KCj4arP2 B8WAXzKEskab+pUYtG6NAUsXuRTWvvROauBaAYMESK54orTW2XvJaH/1Z9q/4tkb T7/unXYu8YjdZqiGJn6rBaG3aRSE+pHw/txxHEtO4yS5IR9qzDefK4XP3Zla9wMh pSmxcBqLIZ5zTuDbWm3sv2zvo7Xf1EWA8CFwEYhzMPPL -----END CERTIFICATE-----Generated at Mon Jan 26 22:24:39 2026 by rpki-client