This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/qmZ4U9hGV8VSwz5yK7CScI-NPoI.roa File: qmZ4U9hGV8VSwz5yK7CScI-NPoI.roa (raw, json) Hash identifier: lBrjEmgGCnOGQAjqYMA0OP4JZ/cwhcFHf/zVri7F27g= Subject key identifier: AA:66:78:53:D8:46:57:C5:52:C3:3E:72:2B:B0:92:70:8F:8D:3E:82 Certificate issuer: /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79 Certificate serial: 019B7C800D79D5F302097491CE4C2388D8B3 Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/qmZ4U9hGV8VSwz5yK7CScI-NPoI.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58174 IP address blocks: 91.239.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0d:79:d5:f3:02:09:74:91:ce:4c:23:88:d8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa667853d84657c552c33e722bb092708f8d3e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cc:0d:7f:f1:f8:f0:52:a4:da:d3:95:b5:d7: 64:5b:14:24:64:a5:49:f2:7a:77:27:9d:e5:bc:71: a1:3e:5a:9c:59:db:65:ad:22:de:53:69:0c:83:73: 84:d9:12:b3:43:b5:2e:f6:d2:8f:be:3b:c1:dc:ca: a4:26:5e:c7:67:6c:11:5c:bb:37:a9:cd:e6:56:69: b8:43:e1:93:bb:a7:79:78:4e:e9:cf:92:a3:44:00: b7:12:71:d4:2e:85:61:c5:30:07:05:9e:c1:0f:eb: 44:db:c5:b3:a4:93:01:98:ad:b9:17:94:dc:01:2f: 4c:7f:2b:b1:08:9b:31:05:12:f8:20:6b:1f:12:39: cf:6e:45:b6:58:e6:af:87:a2:40:dc:1e:98:3d:e3: 05:ff:cd:55:bd:a4:d7:fc:7f:ec:d4:92:c0:2f:a7: fe:8d:c2:be:60:9e:3c:19:ca:d7:f0:9d:58:60:82: 8f:bc:3f:ff:0f:90:45:07:bb:bf:f9:c6:6c:75:2c: 17:4a:f7:44:e1:22:6c:b4:32:aa:b4:ee:2d:0a:89: e4:2d:57:fd:bc:83:b2:30:6a:e5:31:da:51:a6:00: 7a:8e:8a:3c:2d:3b:d1:7d:68:66:58:21:6f:a4:9d: f4:c3:6a:92:03:4f:4a:02:a3:9b:91:63:e1:5b:4d: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:66:78:53:D8:46:57:C5:52:C3:3E:72:2B:B0:92:70:8F:8D:3E:82 X509v3 Authority Key Identifier: keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/qmZ4U9hGV8VSwz5yK7CScI-NPoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.123.0/24 Signature Algorithm: sha256WithRSAEncryption ba:a1:13:bd:b9:a0:8b:48:0f:ea:c3:f7:39:51:f2:db:91:40: 9b:8a:5b:19:57:71:a1:a6:02:2f:d1:bd:85:0b:b5:a5:4c:9b: 2c:2d:fc:1f:06:86:54:f0:9c:36:77:2b:89:5f:db:12:95:08: e0:c2:3e:88:b7:12:f7:78:78:72:43:41:c9:9f:fc:12:90:16: b4:96:ab:88:03:f4:58:4f:5d:e2:6d:b8:8a:30:41:10:e4:95: ef:fc:6f:49:2a:a0:ae:cc:1c:a0:60:58:ee:1e:2e:be:18:2d: 32:17:0f:49:40:16:93:28:1a:48:68:15:85:0e:3c:8c:84:75: 71:8c:dc:b5:a9:93:18:58:e1:81:6c:3d:8d:5d:65:23:96:f1: 00:1b:5f:49:91:e1:58:40:64:46:6f:d1:d6:8f:7c:ad:f1:99: 64:52:5c:2a:e7:69:21:65:d7:0a:a6:5d:c0:e4:e9:f8:d0:3c: 3f:a5:0e:4d:11:05:1d:04:b5:b9:8c:6b:7f:88:0f:2a:af:40: 96:71:dd:82:08:e6:4d:7a:22:67:70:39:35:0b:7b:ed:ed:04: be:23:4a:c6:2d:ca:81:83:6c:ba:14:8a:3f:11:08:da:a4:c9: 51:a1:58:56:f6:17:a3:e2:f3:d1:18:10:61:19:f8:de:f8:a5: 01:13:76:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gA151fMCCXSRzkwjiNizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjM2JhZDZhZTQ5MTY0M2QwNzVlMjFjYmE4NTllZjI4ZTI2 ZTNjNzkwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTY2Nzg1M2Q4NDY1N2M1NTJjMzNlNzIyYmIwOTI3MDhmOGQzZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MwNf/H48FKk2tOVtddkWxQkZKVJ 8np3J53lvHGhPlqcWdtlrSLeU2kMg3OE2RKzQ7Uu9tKPvjvB3MqkJl7HZ2wRXLs3 qc3mVmm4Q+GTu6d5eE7pz5KjRAC3EnHULoVhxTAHBZ7BD+tE28WzpJMBmK25F5Tc AS9MfyuxCJsxBRL4IGsfEjnPbkW2WOavh6JA3B6YPeMF/81VvaTX/H/s1JLAL6f+ jcK+YJ48GcrX8J1YYIKPvD//D5BFB7u/+cZsdSwXSvdE4SJstDKqtO4tConkLVf9 vIOyMGrlMdpRpgB6joo8LTvRfWhmWCFvpJ30w2qSA09KAqObkWPhW00w8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKpmeFPYRlfFUsM+ciuwknCPjT6CMB8GA1UdIwQY MBaAFIw7rWrkkWQ9B14hy6hZ7yjibjx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hZWY4YTQtMjhjOC00YTk2LTllY2Mt NTBkODk1ZDRhZTIzLzEvcW1aNFU5aEdWOFZTd3o1eUs3Q1NjSS1OUG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hZWY4YTQtMjhjOC00YTk2LTllY2MtNTBkODk1ZDRhZTIz LzEvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+97MA0G CSqGSIb3DQEBCwUAA4IBAQC6oRO9uaCLSA/qw/c5UfLbkUCbilsZV3GhpgIv0b2F C7WlTJssLfwfBoZU8Jw2dyuJX9sSlQjgwj6ItxL3eHhyQ0HJn/wSkBa0lquIA/RY T13ibbiKMEEQ5JXv/G9JKqCuzBygYFjuHi6+GC0yFw9JQBaTKBpIaBWFDjyMhHVx jNy1qZMYWOGBbD2NXWUjlvEAG19JkeFYQGRGb9HWj3yt8ZlkUlwq52khZdcKpl3A 5On40Dw/pQ5NEQUdBLW5jGt/iA8qr0CWcd2CCOZNeiJncDk1C3vt7QS+I0rGLcqB g2y6FIo/EQjapMlRoVhW9hej4vPRGBBhGfje+KUBE3Yg -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:27 2026 by rpki-client