This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/qxrIUacDBXHJek6j0Nv7mnsRC1o.roa File: qxrIUacDBXHJek6j0Nv7mnsRC1o.roa (raw, json) Hash identifier: CfRfJJiJ6Hyf/sFNZprZ5Q2eEd/fc1DwfF6aEDqorAE= Subject key identifier: AB:1A:C8:51:A7:03:05:71:C9:7A:4E:A3:D0:DB:FB:9A:7B:11:0B:5A Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322 Certificate serial: 019B7D5C9AE9C72656C73F967E431BF7D210 Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/qxrIUacDBXHJek6j0Nv7mnsRC1o.roa Signing time: Fri 02 Jan 2026 06:19:39 +0000 ROA not before: Fri 02 Jan 2026 06:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 91.192.106.0/23 maxlen: 23 91.193.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9a:e9:c7:26:56:c7:3f:96:7e:43:1b:f7:d2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab1ac851a7030571c97a4ea3d0dbfb9a7b110b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:3f:c3:90:b8:3a:6a:94:b4:4e:07:7d:63: c0:e0:3c:a4:ef:09:e5:43:04:e6:8c:f0:ae:3e:fa: b0:7a:67:58:2f:54:ab:f5:d5:07:af:83:40:48:1b: 6e:d8:99:76:2f:07:a2:17:cf:7f:a7:26:e7:12:b0: ca:49:67:cb:ee:83:2a:24:ad:fa:be:6b:63:c2:da: ca:ba:b8:d1:48:de:3a:69:01:f0:b8:5a:f9:67:f9: 52:e8:32:e4:98:96:c9:ba:51:dd:65:0b:ce:16:fc: 8e:a6:b3:9a:87:4e:fe:09:44:80:9d:ad:9a:2f:08: 0f:c4:ed:3d:21:d1:23:76:36:a6:d6:0f:07:cc:a8: bc:07:4d:3c:2d:d5:4e:d4:39:a0:ad:13:02:6f:2e: 94:79:7e:08:d2:08:90:80:43:8d:0d:03:45:06:ad: fb:fd:c3:f0:f3:e6:bb:55:1d:97:df:cd:0c:7e:ff: 21:73:0e:61:1a:32:14:76:10:a0:4d:3b:2c:4a:ee: 52:1e:7d:0d:21:94:de:5d:4c:c1:2b:a7:b9:99:82: 93:5c:51:22:7a:fc:52:c0:0a:89:58:37:f4:e2:3b: 92:37:1f:8f:ee:f8:d6:4e:83:91:09:87:6f:11:13: 8a:73:c9:44:72:97:e4:2e:63:41:b8:43:ca:f9:5c: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:C8:51:A7:03:05:71:C9:7A:4E:A3:D0:DB:FB:9A:7B:11:0B:5A X509v3 Authority Key Identifier: keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/qxrIUacDBXHJek6j0Nv7mnsRC1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.106.0/23 91.193.58.0/23 Signature Algorithm: sha256WithRSAEncryption c2:13:2e:b9:70:1b:31:0a:55:c5:ed:16:7b:33:2c:ad:f6:e7: c3:e9:0d:7b:19:68:bb:f3:f4:88:14:a1:c0:98:32:33:2a:81: 9f:f4:49:e3:48:aa:90:b7:eb:77:0d:b5:2f:bd:15:1b:09:56: 41:6d:e2:c5:b1:b5:4d:fb:5f:1e:6e:0b:fd:7c:75:97:f0:66: d6:b7:74:ee:d8:13:00:84:6c:b1:31:94:b1:0e:74:b3:64:1b: 60:d3:f4:00:8a:8f:22:59:06:f7:bc:8a:14:e8:8c:b7:c9:28: ba:3e:fd:8c:dd:23:05:01:c6:5f:02:83:b9:0a:91:0c:80:99: 0b:fb:85:5c:7f:d9:54:5c:46:13:f1:d4:ca:cf:3f:0d:b3:3e: 27:e5:93:75:57:07:7f:f6:a7:ae:c2:ea:06:e8:07:a9:14:00: b7:e6:3a:69:c0:b3:f0:fc:ee:e9:ca:51:16:0a:14:a2:28:d0: e6:3e:64:40:a8:79:d5:41:0f:5d:4d:73:ef:9c:70:c4:96:53: e3:13:7c:de:a6:92:6d:ac:52:e7:90:2c:83:4c:41:71:39:1d: 79:0e:03:7f:f3:bb:38:a2:1e:ea:2c:e3:65:47:b5:83:a4:b0: d4:6a:95:d3:42:3b:23:57:61:52:d9:dc:e5:6f:ef:26:1f:cb: fa:6f:bb:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XJrpxyZWxz+WfkMb99IQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0 M2IzMjIwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjFhYzg1MWE3MDMwNTcxYzk3YTRlYTNkMGRiZmI5YTdiMTEwYjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZs/w5C4OmqUtE4HfWPA4Dyk7wnl QwTmjPCuPvqwemdYL1Sr9dUHr4NASBtu2Jl2LweiF89/pybnErDKSWfL7oMqJK36 vmtjwtrKurjRSN46aQHwuFr5Z/lS6DLkmJbJulHdZQvOFvyOprOah07+CUSAna2a LwgPxO09IdEjdjam1g8HzKi8B008LdVO1DmgrRMCby6UeX4I0giQgEONDQNFBq37 /cPw8+a7VR2X380Mfv8hcw5hGjIUdhCgTTssSu5SHn0NIZTeXUzBK6e5mYKTXFEi evxSwAqJWDf04juSNx+P7vjWToORCYdvEROKc8lEcpfkLmNBuEPK+VxRjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKsayFGnAwVxyXpOo9Db+5p7EQtaMB8GA1UdIwQY MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct ODIwMmE0NjdkNzUzLzEvcXhySVVhY0RCWEhKZWs2ajBOdjdtbnNSQzFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8BqAwQB W8E6MA0GCSqGSIb3DQEBCwUAA4IBAQDCEy65cBsxClXF7RZ7Myyt9ufD6Q17GWi7 8/SIFKHAmDIzKoGf9EnjSKqQt+t3DbUvvRUbCVZBbeLFsbVN+18ebgv9fHWX8GbW t3Tu2BMAhGyxMZSxDnSzZBtg0/QAio8iWQb3vIoU6Iy3ySi6Pv2M3SMFAcZfAoO5 CpEMgJkL+4Vcf9lUXEYT8dTKzz8Nsz4n5ZN1Vwd/9qeuwuoG6AepFAC35jppwLPw /O7pylEWChSiKNDmPmRAqHnVQQ9dTXPvnHDEllPjE3zeppJtrFLnkCyDTEFxOR15 DgN/87s4oh7qLONlR7WDpLDUapXTQjsjV2FS2dzlb+8mH8v6b7tX -----END CERTIFICATE-----Generated at Sun Jan 25 07:56:32 2026 by rpki-client