This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/Q2rRoJXpXa3a3SwooTdf3uV3wgU.roa File: Q2rRoJXpXa3a3SwooTdf3uV3wgU.roa (raw, json) Hash identifier: fHgw9Vex+UqLybix6EKx0Tqbyqm27d9FJ8vUgMV12jo= Subject key identifier: 43:6A:D1:A0:95:E9:5D:AD:DA:DD:2C:28:A1:37:5F:DE:E5:77:C2:05 Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2 Certificate serial: 019B7C113CB914599FA6A326D0FAACEA1E0A Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/Q2rRoJXpXa3a3SwooTdf3uV3wgU.roa Signing time: Fri 02 Jan 2026 00:17:42 +0000 ROA not before: Fri 02 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49127 IP address blocks: 91.217.253.0/24 maxlen: 24 91.220.28.0/24 maxlen: 24 91.220.35.0/24 maxlen: 24 91.220.71.0/24 maxlen: 24 164.138.248.0/21 maxlen: 24 164.138.254.0/24 maxlen: 24 2a0a:7d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:3c:b9:14:59:9f:a6:a3:26:d0:fa:ac:ea:1e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2 Validity Not Before: Jan 2 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=436ad1a095e95daddadd2c28a1375fdee577c205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:79:a8:99:e8:c0:a9:96:37:37:f0:05:a4:a6: 76:54:5d:80:70:e6:01:54:36:99:d1:a7:f2:b8:1e: 76:0f:90:12:27:0a:3d:ea:eb:ad:93:a9:1c:5c:a5: d3:fe:bd:2c:ed:dd:b8:2d:05:21:e7:22:08:db:6b: ab:22:ca:9f:79:66:e4:3b:fa:ce:0c:03:58:d6:bf: 0f:79:41:fc:42:15:2d:28:fe:99:d4:7d:79:6c:e7: b5:ff:0b:bb:ab:41:3e:67:af:86:7f:59:7f:62:ee: e2:6e:83:98:e9:fd:9e:de:50:9f:11:0d:e4:bb:48: e2:25:7e:53:e0:f1:c5:00:61:48:47:6d:c3:bb:10: c5:db:59:80:0f:f3:a4:60:f6:63:ce:d8:81:7c:6c: 3f:f7:5b:e1:85:1d:f6:70:fc:0a:6a:9d:98:3e:d3: 95:f8:34:ad:1e:7b:e3:a3:7b:ef:d0:07:b5:57:c4: c6:9b:39:bc:ef:ee:18:b2:b5:36:45:51:4c:c7:50: 3e:02:73:fa:83:aa:a3:5a:fa:a5:9e:5c:3c:04:20: ff:ba:ae:ba:f6:24:9a:7b:f2:d5:0b:eb:fe:72:c4: 33:37:22:b8:0a:97:23:cc:f9:66:5c:59:27:2e:9e: cc:ce:6e:6e:cf:31:f7:de:34:0e:8e:59:e6:b9:02: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6A:D1:A0:95:E9:5D:AD:DA:DD:2C:28:A1:37:5F:DE:E5:77:C2:05 X509v3 Authority Key Identifier: keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/Q2rRoJXpXa3a3SwooTdf3uV3wgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.253.0/24 91.220.28.0/24 91.220.35.0/24 91.220.71.0/24 164.138.248.0/21 IPv6: 2a0a:7d40::/32 Signature Algorithm: sha256WithRSAEncryption 18:b4:25:41:9c:58:11:30:26:4e:03:c7:6a:b4:9a:fe:a0:63: 4b:31:54:ba:2e:31:88:62:67:a5:77:d2:33:b2:ac:58:b0:28: 4a:47:64:3a:e4:fa:ad:ce:8c:b5:57:be:d1:02:ac:74:80:89: d9:c3:36:ea:7d:7b:29:81:72:5f:83:cb:b1:c8:ef:26:86:d9: 6a:75:ce:cb:f4:56:3a:26:44:65:fe:39:6b:0a:34:e9:b7:69: 95:af:53:a0:13:76:c6:55:87:39:de:9e:2e:f8:7b:83:ea:e7: 32:41:01:5d:f6:88:fa:c8:84:4d:08:b3:e7:57:c3:3b:e9:0e: 48:cf:27:53:23:cb:3a:4c:32:88:c8:d0:0f:8a:c7:e5:a7:60: 49:66:22:7c:d7:6f:d6:95:d7:b5:d9:42:87:f8:bd:7b:74:ea: 71:61:67:a7:6d:7f:ce:ad:68:dc:04:db:0d:ae:eb:0c:bb:66: c1:6a:ee:41:cf:6c:f2:d2:2a:30:c0:18:61:ed:1b:17:30:3f: fa:9f:26:c8:cb:7f:a9:b6:79:86:09:55:bb:5a:92:4c:6f:b1: 4a:39:ae:a8:7f:94:40:00:29:04:7f:cb:87:ef:10:42:4e:c4: 43:43:c5:55:08:32:82:e1:12:05:2e:82:11:93:49:0e:ac:91: a0:2e:06:33 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8ETy5FFmfpqMm0Pqs6h4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTBkMzA4NGJmOGFhOWVhNzc3ZDI0NWI2MGQ1MTFiZTE4 OWVhYjIwHhcNMjYwMTAyMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzZhZDFhMDk1ZTk1ZGFkZGFkZDJjMjhhMTM3NWZkZWU1NzdjMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HmomejAqZY3N/AFpKZ2VF2AcOYB VDaZ0afyuB52D5ASJwo96uutk6kcXKXT/r0s7d24LQUh5yII22urIsqfeWbkO/rO DANY1r8PeUH8QhUtKP6Z1H15bOe1/wu7q0E+Z6+Gf1l/Yu7iboOY6f2e3lCfEQ3k u0jiJX5T4PHFAGFIR23DuxDF21mAD/OkYPZjztiBfGw/91vhhR32cPwKap2YPtOV +DStHnvjo3vv0Ae1V8TGmzm87+4YsrU2RVFMx1A+AnP6g6qjWvqlnlw8BCD/uq66 9iSae/LVC+v+csQzNyK4CpcjzPlmXFknLp7Mzm5uzzH33jQOjlnmuQJYgwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFENq0aCV6V2t2t0sKKE3X97ld8IFMB8GA1UdIwQY MBaAFOtQ0whL+Kqep3fSRbYNURvhieqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMmU3MmMtNzQ5MS00N2UyLWFjNTMt YWMwYzYwMTAwNDc4LzEvUTJyUm9KWHBYYTNhM1N3b29UZGYzdVYzd2dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xMmU3MmMtNzQ5MS00N2UyLWFjNTMtYWMwYzYwMTAwNDc4 LzEvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAW9n9AwQA W9wcAwQAW9wjAwQAW9xHAwQDpIr4MA0EAgACMAcDBQAqCn1AMA0GCSqGSIb3DQEB CwUAA4IBAQAYtCVBnFgRMCZOA8dqtJr+oGNLMVS6LjGIYmeld9IzsqxYsChKR2Q6 5Pqtzoy1V77RAqx0gInZwzbqfXspgXJfg8uxyO8mhtlqdc7L9FY6JkRl/jlrCjTp t2mVr1OgE3bGVYc53p4u+HuD6ucyQQFd9oj6yIRNCLPnV8M76Q5IzydTI8s6TDKI yNAPisflp2BJZiJ812/Wlde12UKH+L17dOpxYWenbX/OrWjcBNsNrusMu2bBau5B z2zy0iowwBhh7RsXMD/6nybIy3+ptnmGCVW7WpJMb7FKOa6of5RAACkEf8uH7xBC TsRDQ8VVCDKC4RIFLoIRk0kOrJGgLgYz -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:25 2026 by rpki-client