This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/qGKXqkQ2oiJ9zvb8d_lurIkeU6E.roa File: qGKXqkQ2oiJ9zvb8d_lurIkeU6E.roa (raw, json) Hash identifier: wXMPkR08yI/8IECW5Ighi7GQrII+Bv0ovubrEn3k1cs= Subject key identifier: A8:62:97:AA:44:36:A2:22:7D:CE:F6:FC:77:F9:6E:AC:89:1E:53:A1 Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Certificate serial: 019B7E387D41549EA13B6CE64F1684ABA65B Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/qGKXqkQ2oiJ9zvb8d_lurIkeU6E.roa Signing time: Fri 02 Jan 2026 10:19:49 +0000 ROA not before: Fri 02 Jan 2026 10:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24577 IP address blocks: 91.187.224.0/19 maxlen: 19 185.108.68.0/22 maxlen: 22 194.145.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7d:41:54:9e:a1:3b:6c:e6:4f:16:84:ab:a6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a86297aa4436a2227dcef6fc77f96eac891e53a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:0c:33:64:58:91:78:a0:11:30:0b:8c:9f: 1d:21:0b:87:4b:47:94:b3:95:fb:65:be:32:68:43: 0a:df:89:80:43:c6:27:86:f3:1c:09:e3:58:3c:6d: c7:35:6a:0a:04:45:c3:d6:a4:77:f3:39:8b:8e:53: 88:a2:c5:62:d1:db:3d:a3:d8:7e:66:67:fc:43:56: 08:36:ba:92:fd:87:78:00:21:6d:65:d4:f1:ca:4d: 7b:36:c3:ef:36:30:82:fb:97:59:43:93:b3:c3:c2: 24:c6:75:ba:7b:bd:65:08:63:d2:a3:0f:b6:63:b5: 04:17:49:e8:d0:82:e1:b7:cc:38:c6:26:51:30:ab: 29:57:31:31:c3:c3:31:df:75:40:50:46:c4:0a:f0: e1:cd:d1:91:77:49:88:73:b0:ff:a8:d0:0d:cd:75: 0b:ad:20:a7:f3:c5:f3:7d:f5:bb:11:bf:7e:1b:01: d3:fc:c0:2f:c0:21:4b:d4:b6:78:e2:2d:04:57:6a: 5c:05:61:37:94:51:ca:44:cb:bf:02:7d:e3:e8:f1: 8b:f9:20:68:a2:ac:73:5c:4c:c7:aa:1a:da:c9:b5: e5:a7:45:6f:b5:ff:c5:8a:49:be:bb:85:78:15:8e: f9:8f:d0:5f:80:57:b0:4a:50:bc:15:23:90:bd:01: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:62:97:AA:44:36:A2:22:7D:CE:F6:FC:77:F9:6E:AC:89:1E:53:A1 X509v3 Authority Key Identifier: keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/qGKXqkQ2oiJ9zvb8d_lurIkeU6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.187.224.0/19 185.108.68.0/22 194.145.204.0/23 Signature Algorithm: sha256WithRSAEncryption 31:e7:30:bb:93:9f:ff:f2:42:2d:03:c4:d2:fe:2f:7f:c3:8c: 7f:e6:4e:ac:cc:db:91:c9:5c:6d:04:42:cb:19:53:28:ff:ab: e9:5e:59:40:f3:84:7c:ab:8f:36:27:c1:65:cc:58:89:ca:a6: 37:b7:33:1c:38:e4:8f:d6:d1:0a:9a:3d:da:d4:e9:11:b2:6b: da:f2:32:89:1f:bb:3f:ff:f5:2a:dc:b8:e7:4a:16:68:8c:5f: 82:e7:33:9a:7b:63:7a:f3:a7:0b:aa:a3:84:ad:11:7a:e8:94: 72:8a:f6:b2:dc:38:1a:b9:13:8f:b8:65:df:9a:00:62:7b:ac: 20:f8:b9:16:79:a4:34:48:3e:9e:59:7e:9d:25:8f:da:3b:84: 80:ef:1f:7f:ad:f7:e5:0a:f3:33:bf:70:85:0a:1e:f4:79:b6: 76:a9:eb:28:e1:ac:83:5d:26:d9:54:9a:87:c6:af:07:d8:0b: 45:0d:f2:7a:1f:73:97:aa:70:d4:94:d5:26:62:61:ff:d5:50: 7f:5f:88:b5:4a:c8:ed:98:32:2c:ef:39:03:ed:30:82:4d:19: 1e:41:ec:f3:9d:21:0e:d9:b8:23:b2:8b:a7:3c:c5:34:bf:f6: b2:00:5e:9c:dd:c4:34:e6:5b:70:52:6d:ec:98:e3:e8:06:79: 1d:70:f3:a1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OH1BVJ6hO2zmTxaEq6ZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODljMzk5NWUyNDYxZDVhNTJmZDRmMTAwMDc4MmY5OWE0 ZDQ4MjIwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODYyOTdhYTQ0MzZhMjIyN2RjZWY2ZmM3N2Y5NmVhYzg5MWU1M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HgMM2RYkXigETALjJ8dIQuHS0eU s5X7Zb4yaEMK34mAQ8YnhvMcCeNYPG3HNWoKBEXD1qR38zmLjlOIosVi0ds9o9h+ Zmf8Q1YINrqS/Yd4ACFtZdTxyk17NsPvNjCC+5dZQ5Ozw8IkxnW6e71lCGPSow+2 Y7UEF0no0ILht8w4xiZRMKspVzExw8Mx33VAUEbECvDhzdGRd0mIc7D/qNANzXUL rSCn88XzffW7Eb9+GwHT/MAvwCFL1LZ44i0EV2pcBWE3lFHKRMu/An3j6PGL+SBo oqxzXEzHqhraybXlp0Vvtf/Fikm+u4V4FY75j9BfgFewSlC8FSOQvQGVHQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKhil6pENqIifc72/Hf5bqyJHlOhMB8GA1UdIwQY MBaAFGaJw5leJGHVpS/U8QAHgvmaTUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMt NDFlYWExZmRlMTFiLzEvcUdLWHFrUTJvaUo5enZiOGRfbHVySWtlVTZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMtNDFlYWExZmRlMTFi LzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFW7vgAwQC uWxEAwQBwpHMMA0GCSqGSIb3DQEBCwUAA4IBAQAx5zC7k5//8kItA8TS/i9/w4x/ 5k6szNuRyVxtBELLGVMo/6vpXllA84R8q482J8FlzFiJyqY3tzMcOOSP1tEKmj3a 1OkRsmva8jKJH7s///Uq3LjnShZojF+C5zOae2N686cLqqOErRF66JRyivay3Dga uROPuGXfmgBie6wg+LkWeaQ0SD6eWX6dJY/aO4SA7x9/rfflCvMzv3CFCh70ebZ2 qeso4ayDXSbZVJqHxq8H2AtFDfJ6H3OXqnDUlNUmYmH/1VB/X4i1SsjtmDIs7zkD 7TCCTRkeQezznSEO2bgjsounPMU0v/ayAF6c3cQ05ltwUm3smOPoBnkdcPOh -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:15 2026 by rpki-client