This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/qaLHn37xtjw3qy4avBKJZx30pG8.roa File: qaLHn37xtjw3qy4avBKJZx30pG8.roa (raw, json) Hash identifier: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU= Subject key identifier: A9:A2:C7:9F:7E:F1:B6:3C:37:AB:2E:1A:BC:12:89:67:1D:F4:A4:6F Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a Certificate serial: 019B7F80E4DBB6CCCBC516E655B9F70DBC69 Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/qaLHn37xtjw3qy4avBKJZx30pG8.roa Signing time: Fri 02 Jan 2026 16:18:32 +0000 ROA not before: Fri 02 Jan 2026 16:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199524 IP address blocks: 91.188.250.0/24 maxlen: 24 91.188.251.0/24 maxlen: 24 91.202.245.0/24 maxlen: 24 91.202.246.0/23 maxlen: 23 185.109.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:e4:db:b6:cc:cb:c5:16:e6:55:b9:f7:0d:bc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a Validity Not Before: Jan 2 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9a2c79f7ef1b63c37ab2e1abc1289671df4a46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:f3:a3:0f:3d:f3:52:33:42:54:4c:4c:e8: 55:61:55:a7:37:81:4d:e5:b6:f9:1b:13:e7:1c:42: cf:b2:44:6f:d6:9b:60:a3:20:bb:a5:c1:94:a8:7c: 55:47:36:ea:b6:ab:4e:69:d3:02:af:3b:3c:6e:e6: 86:1c:cb:6b:0b:29:48:56:65:05:12:7f:5c:7a:27: 51:fd:b6:b5:2c:6f:60:cc:62:a5:18:4b:2b:1a:7a: f0:a2:e0:81:e6:54:e9:16:62:73:ca:6b:86:74:8a: 98:c7:a8:d4:31:f0:f9:f5:67:60:5f:4e:23:20:e7: 7c:3a:25:38:04:c6:3b:91:96:66:de:13:8f:e3:6e: 1a:05:3c:5f:16:34:ee:fa:c4:7c:fa:f5:28:62:b0: 6d:45:06:60:44:b2:e1:6e:b9:b2:f3:e6:fa:a8:63: 00:4b:20:a6:f1:49:3d:c2:1f:9d:6a:95:a0:3b:8c: 15:cf:d3:04:21:7e:aa:5e:c7:82:47:2c:59:4c:3c: 0d:8d:66:6f:79:9f:f3:c1:f9:dd:f7:3a:2b:7f:86: 41:63:e6:a4:b8:c2:5b:bc:b8:d8:b9:53:c0:9f:bb: e6:18:f9:88:aa:5a:6e:a7:61:c4:99:e4:5d:7f:f2: 4a:02:ab:37:cc:7e:35:c5:59:67:3e:ac:95:0a:d3: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A2:C7:9F:7E:F1:B6:3C:37:AB:2E:1A:BC:12:89:67:1D:F4:A4:6F X509v3 Authority Key Identifier: keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/qaLHn37xtjw3qy4avBKJZx30pG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.250.0/23 91.202.245.0-91.202.247.255 185.109.31.0/24 Signature Algorithm: sha256WithRSAEncryption 93:7b:fd:95:f9:de:f0:06:f0:a8:27:ab:78:49:f3:1e:5a:86: 8a:56:2a:86:3b:d8:37:61:11:fd:07:64:f3:e8:eb:fe:87:15: fd:dc:e7:34:3c:fa:b9:87:79:85:17:40:a6:22:a2:9e:58:8d: 71:e8:97:83:c1:36:2f:e6:c8:b7:26:8c:67:32:fb:dd:39:b1: ac:fd:35:b0:80:58:d8:8e:61:dc:46:8b:5b:c8:5c:d8:ea:4c: dc:0f:5a:f1:8c:f4:44:78:5f:d4:ee:c0:6a:77:f2:9b:a3:91: 2c:53:c0:3e:17:c3:39:98:6a:8d:f7:26:d7:60:af:c4:6f:d5: 6e:3e:ef:94:f7:01:c7:ec:40:09:50:da:c3:a4:2d:61:a4:93: b0:e6:24:a3:4f:67:e6:f2:fa:0c:94:63:c1:d0:d2:c7:0a:d0: 43:5b:4e:9b:7b:47:fd:c0:f1:98:44:29:63:d1:3c:c9:d5:91: 99:13:f8:f4:3d:d8:4e:73:7d:7e:57:bf:fa:42:17:4c:1f:ed: be:e3:e8:21:d6:b3:90:b1:c8:3b:f1:ff:2a:f7:0c:63:20:d8: 76:b3:02:05:90:00:82:c3:6e:2b:88:d5:40:45:b4:56:c1:6d: ff:cc:72:32:a1:8e:88:62:20:19:ea:30:05:71:2f:dd:f5:d2: 7d:19:38:66 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/gOTbtszLxRbmVbn3DbxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4 ZTY3MGEwHhcNMjYwMTAyMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWEyYzc5ZjdlZjFiNjNjMzdhYjJlMWFiYzEyODk2NzFkZjRhNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl/zow8981IzQlRMTOhVYVWnN4FN 5bb5GxPnHELPskRv1ptgoyC7pcGUqHxVRzbqtqtOadMCrzs8buaGHMtrCylIVmUF En9ceidR/ba1LG9gzGKlGEsrGnrwouCB5lTpFmJzymuGdIqYx6jUMfD59WdgX04j IOd8OiU4BMY7kZZm3hOP424aBTxfFjTu+sR8+vUoYrBtRQZgRLLhbrmy8+b6qGMA SyCm8Uk9wh+dapWgO4wVz9MEIX6qXseCRyxZTDwNjWZveZ/zwfnd9zorf4ZBY+ak uMJbvLjYuVPAn7vmGPmIqlpup2HEmeRdf/JKAqs3zH41xVlnPqyVCtP7JQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKmix59+8bY8N6suGrwSiWcd9KRvMB8GA1UdIwQY MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt YzI0MGJmYzljYmMxLzEvcWFMSG4zN3h0anczcXk0YXZCS0paeDMwcEc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBW7z6MAwD BABbyvUDBANbyvADBAC5bR8wDQYJKoZIhvcNAQELBQADggEBAJN7/ZX53vAG8Kgn q3hJ8x5ahopWKoY72DdhEf0HZPPo6/6HFf3c5zQ8+rmHeYUXQKYiop5YjXHol4PB Ni/myLcmjGcy+905saz9NbCAWNiOYdxGi1vIXNjqTNwPWvGM9ER4X9TuwGp38puj kSxTwD4XwzmYao33Jtdgr8Rv1W4+75T3AcfsQAlQ2sOkLWGkk7DmJKNPZ+by+gyU Y8HQ0scK0ENbTpt7R/3A8ZhEKWPRPMnVkZkT+PQ92E5zfX5Xv/pCF0wf7b7j6CHW s5CxyDvx/yr3DGMg2HazAgWQAILDbiuI1UBFtFbBbf/McjKhjohiIBnqMAVxL931 0n0ZOGY= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:37 2026 by rpki-client