This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/q8Sc-hb4z8RPWefbF866BBRja54.roa File: q8Sc-hb4z8RPWefbF866BBRja54.roa (raw, json) Hash identifier: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY= Subject key identifier: AB:C4:9C:FA:16:F8:CF:C4:4F:59:E7:DB:17:CE:BA:04:14:63:6B:9E Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Certificate serial: 019B7C13118E012D5238D98345152D76BB09 Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/q8Sc-hb4z8RPWefbF866BBRja54.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43576 IP address blocks: 91.197.144.0/22 maxlen: 22 91.197.144.0/24 maxlen: 24 91.197.145.0/24 maxlen: 24 91.197.146.0/24 maxlen: 24 91.197.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:11:8e:01:2d:52:38:d9:83:45:15:2d:76:bb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abc49cfa16f8cfc44f59e7db17ceba0414636b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:c6:77:dc:86:50:4b:d6:dc:67:38:68:b0: 17:8a:17:0b:5b:f0:1f:43:f0:9c:1a:ed:e2:8f:8d: c4:8b:70:c7:6e:72:f5:3e:5f:58:a8:01:8a:c8:99: 42:15:08:5b:83:ce:02:5b:24:21:23:11:70:4f:79: f0:41:a9:36:ac:84:2c:fe:89:7d:40:49:45:30:02: 10:81:9e:af:f0:b3:9d:46:47:e5:17:05:e6:90:47: 99:63:f6:1a:47:62:fa:cd:5b:75:83:79:42:fa:3c: 53:81:b9:64:39:69:f9:67:fc:82:b8:62:03:05:08: 46:68:e9:f7:79:12:72:12:7c:05:1e:28:4d:1f:49: ef:98:6c:b3:ac:a7:7d:aa:15:84:54:f6:08:67:4d: a9:a7:f7:03:ab:8f:46:b6:5a:3d:6d:50:9f:53:2f: cf:41:32:48:89:c9:c4:c7:14:9e:f0:78:73:11:77: f9:4c:8c:44:20:1a:6c:2e:62:5d:96:e2:8f:35:92: 5c:2c:a3:94:eb:35:a3:60:5f:c2:db:7e:bc:18:4f: 63:f8:23:72:3a:02:f9:34:41:a5:fc:08:8f:96:19: a1:72:bc:d4:4a:cc:bb:96:66:13:23:b2:a1:80:bd: fa:05:2b:81:1d:3d:19:2b:f6:68:b8:22:b3:60:4c: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C4:9C:FA:16:F8:CF:C4:4F:59:E7:DB:17:CE:BA:04:14:63:6B:9E X509v3 Authority Key Identifier: keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/q8Sc-hb4z8RPWefbF866BBRja54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.144.0/22 Signature Algorithm: sha256WithRSAEncryption c0:d5:71:db:5a:c6:d6:40:cc:18:0d:2b:8c:b6:63:74:33:23: 0b:bd:9e:cf:ba:f3:76:10:31:f8:99:a7:c5:a5:fe:3c:8b:24: 24:6f:4a:55:e5:b9:00:b5:d7:5f:13:f6:25:80:1b:aa:a5:1b: 10:41:46:a6:89:1c:af:3d:89:d2:52:aa:74:82:bb:00:0e:78: 4c:df:0e:57:34:cd:5f:2b:70:1f:d2:02:08:30:9a:43:a7:05: d6:94:71:52:27:23:ab:74:7a:72:e8:62:02:86:65:13:1a:7c: b5:35:90:29:d9:38:18:df:44:da:ee:bd:ed:36:05:10:18:bd: 6d:04:ac:00:ab:53:ed:b2:d1:cb:91:41:e7:31:82:9f:2f:4a: ae:52:bf:f4:eb:e6:38:f1:36:b2:fe:2a:03:b6:72:6c:96:aa: bf:a3:ad:42:e1:25:74:ee:4e:1c:3c:1b:59:16:a3:dd:5e:b6: 1e:05:4c:a0:0a:e8:2c:67:d0:c2:7e:8d:0e:91:30:54:f5:f8: 75:15:ed:d6:2d:e3:01:f0:a0:21:6b:12:08:68:1e:93:19:95: 0f:8e:35:a7:b1:d4:3e:92:62:7b:f6:01:bd:66:70:75:5f:64: bf:27:00:e5:82:00:e8:e9:a8:0e:80:d5:2d:06:da:68:b9:a0: b1:b0:95:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExGOAS1SONmDRRUtdrsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MGU5ZDAzOGYxYmMwMDVmM2IwOWM1ZGNhODIwYWQ4MTA5 NDhiM2UwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmM0OWNmYTE2ZjhjZmM0NGY1OWU3ZGIxN2NlYmEwNDE0NjM2YjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG/Gd9yGUEvW3Gc4aLAXihcLW/Af Q/CcGu3ij43Ei3DHbnL1Pl9YqAGKyJlCFQhbg84CWyQhIxFwT3nwQak2rIQs/ol9 QElFMAIQgZ6v8LOdRkflFwXmkEeZY/YaR2L6zVt1g3lC+jxTgblkOWn5Z/yCuGID BQhGaOn3eRJyEnwFHihNH0nvmGyzrKd9qhWEVPYIZ02pp/cDq49Gtlo9bVCfUy/P QTJIicnExxSe8HhzEXf5TIxEIBpsLmJdluKPNZJcLKOU6zWjYF/C2368GE9j+CNy OgL5NEGl/AiPlhmhcrzUSsy7lmYTI7KhgL36BSuBHT0ZK/ZouCKzYEybEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKvEnPoW+M/ET1nn2xfOugQUY2ueMB8GA1UdIwQY MBaAFIQOnQOPG8AF87CcXcqCCtgQlIs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMt Y2U5ZTFiODI5NjdkLzEvcThTYy1oYjR6OFJQV2VmYkY4NjZCQlJqYTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMtY2U5ZTFiODI5Njdk LzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8WQMA0G CSqGSIb3DQEBCwUAA4IBAQDA1XHbWsbWQMwYDSuMtmN0MyMLvZ7PuvN2EDH4mafF pf48iyQkb0pV5bkAtddfE/YlgBuqpRsQQUamiRyvPYnSUqp0grsADnhM3w5XNM1f K3Af0gIIMJpDpwXWlHFSJyOrdHpy6GIChmUTGny1NZAp2TgY30Ta7r3tNgUQGL1t BKwAq1PtstHLkUHnMYKfL0quUr/06+Y48Tay/ioDtnJslqq/o61C4SV07k4cPBtZ FqPdXrYeBUygCugsZ9DCfo0OkTBU9fh1Fe3WLeMB8KAhaxIIaB6TGZUPjjWnsdQ+ kmJ79gG9ZnB1X2S/JwDlggDo6agOgNUtBtpouaCxsJU8 -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:55 2026 by rpki-client