This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/q-RWodK7a-3CkL-IcmgLBAtseBw.roa File: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (raw, json) Hash identifier: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4= Subject key identifier: AB:E4:56:A1:D2:BB:6B:ED:C2:90:BF:88:72:68:0B:04:0B:6C:78:1C Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e Certificate serial: 019B78A31C4F22E9E9DEF450A632EF4B3F42 Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/q-RWodK7a-3CkL-IcmgLBAtseBw.roa Signing time: Thu 01 Jan 2026 08:18:34 +0000 ROA not before: Thu 01 Jan 2026 08:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205399 IP address blocks: 141.98.116.0/24 maxlen: 24 141.98.117.0/24 maxlen: 24 141.98.118.0/24 maxlen: 24 141.98.119.0/24 maxlen: 24 194.26.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1c:4f:22:e9:e9:de:f4:50:a6:32:ef:4b:3f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abe456a1d2bb6bedc290bf8872680b040b6c781c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:48:4f:73:91:76:66:a3:43:6f:85:07:50: c2:b3:d5:19:ab:2a:12:71:da:08:05:48:d6:10:1e: eb:54:66:fe:83:ca:4d:8e:d7:f7:05:0f:9f:f4:41: 63:3d:7e:49:90:c7:4a:4a:02:15:0b:17:9d:3c:ff: 47:7f:dc:af:7c:4e:92:b5:ef:fe:d1:6f:c8:fa:09: 61:5b:ba:ee:e0:30:b9:ff:0d:c9:f6:aa:cf:f4:bd: 8c:59:1a:7f:ae:d8:03:46:bb:7f:ff:2c:e8:a7:81: 73:ec:26:32:c0:ad:33:7f:fb:8c:c6:09:21:56:4d: 4e:17:d5:ef:95:f5:b9:61:94:0d:c7:a0:7b:b6:3c: 7c:2d:be:06:ba:66:c7:f0:f3:d7:8a:e4:f3:11:22: 6f:b1:2f:e0:53:67:1b:1d:c0:df:45:eb:f7:97:fb: fd:92:04:b2:13:22:f9:88:d2:bd:e1:38:e0:14:1b: 2f:1b:a6:ac:65:17:4f:e4:61:9c:0a:cb:12:57:67: 95:72:4d:6d:6c:38:6d:51:44:fb:30:7d:01:f0:58: 24:d9:c9:5b:f3:f8:b8:79:38:74:a3:af:c7:e5:62: 73:49:88:ca:8f:0f:00:ed:0c:d2:c1:d4:dc:8e:ca: d0:60:8d:4d:6f:58:f4:ca:03:da:03:2c:8a:b5:f0: 21:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E4:56:A1:D2:BB:6B:ED:C2:90:BF:88:72:68:0B:04:0B:6C:78:1C X509v3 Authority Key Identifier: keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/q-RWodK7a-3CkL-IcmgLBAtseBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.116.0/22 194.26.109.0/24 Signature Algorithm: sha256WithRSAEncryption 16:97:fe:b3:eb:09:f8:7d:f4:ab:26:e5:e5:12:85:03:55:f2: b6:67:c9:0e:c6:65:98:18:27:29:97:29:fd:2b:59:d8:4b:98: be:c1:91:dc:23:55:60:04:cb:e6:ee:a8:1a:c6:16:82:1a:d8: 02:eb:47:88:4c:3c:08:18:29:08:0c:bf:85:a8:eb:b6:b0:14: 6c:4e:19:8c:a4:ad:28:f2:e4:f1:c8:23:a0:1e:17:57:23:22: ef:02:7a:9a:b8:0d:6a:a9:09:dc:6d:7e:2b:0e:56:24:55:3b: 8b:bf:5e:7b:61:2c:59:49:dd:eb:74:ec:b7:19:86:b3:39:62: 54:44:f7:c3:a2:bf:3b:b9:ce:8c:45:0c:0b:61:80:56:52:8a: 9a:d4:42:f6:ff:1f:e7:04:5d:71:5e:4d:37:38:97:40:15:7e: 2b:1a:e0:af:37:12:b4:d5:d2:6c:2f:ca:1c:b2:64:e8:23:e0: e8:89:41:71:01:1e:0b:7a:e5:d9:6b:95:e2:83:bc:4b:7c:d1: 0c:46:b1:26:37:c3:30:2a:93:e6:b3:8c:3d:31:7a:3c:35:ae: 8c:c7:3b:32:4a:21:2e:31:33:67:b4:5b:b7:f6:27:dc:8e:9c: eb:f4:73:ab:5e:b6:d9:4b:b1:ac:17:cb:11:6f:c6:24:0d:71: 9a:46:fb:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxxPIunp3vRQpjLvSz9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2 Nzg5NmUwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmU0NTZhMWQyYmI2YmVkYzI5MGJmODg3MjY4MGIwNDBiNmM3ODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQdIT3ORdmajQ2+FB1DCs9UZqyoS cdoIBUjWEB7rVGb+g8pNjtf3BQ+f9EFjPX5JkMdKSgIVCxedPP9Hf9yvfE6Ste/+ 0W/I+glhW7ru4DC5/w3J9qrP9L2MWRp/rtgDRrt//yzop4Fz7CYywK0zf/uMxgkh Vk1OF9XvlfW5YZQNx6B7tjx8Lb4GumbH8PPXiuTzESJvsS/gU2cbHcDfRev3l/v9 kgSyEyL5iNK94TjgFBsvG6asZRdP5GGcCssSV2eVck1tbDhtUUT7MH0B8Fgk2clb 8/i4eTh0o6/H5WJzSYjKjw8A7QzSwdTcjsrQYI1Nb1j0ygPaAyyKtfAhmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKvkVqHSu2vtwpC/iHJoCwQLbHgcMB8GA1UdIwQY MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt YjM4YzgwOTUxOTgxLzEvcS1SV29kSzdhLTNDa0wtSWNtZ0xCQXRzZUJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCjWJ0AwQA whptMA0GCSqGSIb3DQEBCwUAA4IBAQAWl/6z6wn4ffSrJuXlEoUDVfK2Z8kOxmWY GCcplyn9K1nYS5i+wZHcI1VgBMvm7qgaxhaCGtgC60eITDwIGCkIDL+FqOu2sBRs ThmMpK0o8uTxyCOgHhdXIyLvAnqauA1qqQncbX4rDlYkVTuLv157YSxZSd3rdOy3 GYazOWJURPfDor87uc6MRQwLYYBWUoqa1EL2/x/nBF1xXk03OJdAFX4rGuCvNxK0 1dJsL8ocsmToI+DoiUFxAR4LeuXZa5Xig7xLfNEMRrEmN8MwKpPms4w9MXo8Na6M xzsySiEuMTNntFu39ifcjpzr9HOrXrbZS7GsF8sRb8YkDXGaRvuS -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:40 2026 by rpki-client