This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/NqUE_7vgG-i019hpuas3mtpVIf4.roa
File: NqUE_7vgG-i019hpuas3mtpVIf4.roa (raw, json)
Hash identifier: X2ZRbDZD/jel7nDnPIG6pqjl2LVgOhthOTW0hTf7CyA=
Subject key identifier: 36:A5:04:FF:BB:E0:1B:E8:B4:D7:D8:69:B9:AB:37:9A:DA:55:21:FE
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019B7C806172C69FB1A23071EE398CC0D0DC
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/NqUE_7vgG-i019hpuas3mtpVIf4.roa
Signing time: Fri 02 Jan 2026 02:19:06 +0000
ROA not before: Fri 02 Jan 2026 02:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61179
IP address blocks: 91.250.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:61:72:c6:9f:b1:a2:30:71:ee:39:8c:c0:d0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 02:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36a504ffbbe01be8b4d7d869b9ab379ada5521fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:2c:f9:77:0e:f6:7b:cd:9c:dc:44:e0:10:
a9:3b:54:61:01:b2:bf:cf:26:29:37:3f:21:7c:6e:
52:45:88:23:92:58:4d:2c:7c:d0:9d:bb:6b:27:af:
ee:df:d6:d2:93:4c:f4:03:c1:17:5a:91:08:57:99:
79:55:a4:59:fe:fe:44:6a:41:42:7c:6d:d6:5c:8f:
7d:9f:a8:24:2d:3f:25:f0:97:3b:d0:7a:1d:ed:4b:
d3:9f:d7:f9:c4:2d:23:f7:11:d4:f9:c6:83:de:dc:
9a:de:c8:c5:8f:26:c9:ca:3e:83:d0:b8:dc:ca:ff:
db:77:1e:67:46:6c:f5:ab:bf:a2:73:90:b9:16:79:
82:14:20:e2:85:dc:4f:8f:72:ea:65:c1:ea:91:37:
a7:89:9b:f7:61:5b:17:57:9c:33:6a:65:9a:91:62:
91:14:07:0e:5f:51:6e:39:a4:e9:0e:09:16:ee:74:
ab:49:63:12:b9:4b:c5:15:fd:89:4a:4f:95:3a:3b:
2c:21:70:b8:59:3a:04:52:a1:8b:fb:96:d8:b6:29:
9b:80:b0:e9:67:bc:16:df:ef:18:56:41:9c:37:1e:
5f:22:1e:69:1f:3c:34:80:7b:0a:60:05:9b:43:16:
28:55:52:94:b2:78:74:69:2d:7f:7d:a1:d8:49:3b:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A5:04:FF:BB:E0:1B:E8:B4:D7:D8:69:B9:AB:37:9A:DA:55:21:FE
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/NqUE_7vgG-i019hpuas3mtpVIf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.250.0/23
Signature Algorithm: sha256WithRSAEncryption
99:13:aa:78:d0:10:77:1d:86:b1:7a:2b:12:c3:b5:91:2a:99:
24:8b:08:45:3c:4a:94:c6:c9:e9:b1:66:08:80:2c:51:d6:be:
40:0d:22:d6:25:dd:15:be:ce:a4:03:bd:1b:81:41:ba:17:9c:
9f:da:0d:b2:70:e9:47:3b:23:df:2e:bd:f2:2d:f8:23:43:2a:
06:d5:1b:6a:f7:57:83:57:86:4f:1a:87:e9:29:2c:23:49:b2:
c3:8e:df:aa:a4:69:4d:a1:8c:b2:18:fd:8c:8d:8a:7b:bd:da:
b0:0c:80:eb:d1:b2:eb:9e:de:e8:84:5f:9b:af:cc:7b:1e:e4:
4e:22:3c:d1:fe:10:6f:4f:b5:b7:94:3c:cb:9f:29:19:c3:cd:
d8:01:fb:00:f3:fe:78:bb:d4:18:e8:7f:01:a4:60:ac:cd:df:
1c:05:5c:09:85:d6:ec:1b:29:45:39:dd:e0:88:7a:a0:3b:8d:
62:fc:79:0f:08:26:02:7f:f5:1a:71:1a:66:8e:02:0d:1c:f7:
e4:ed:42:b4:dd:f8:1c:22:2f:b9:94:ec:9d:29:53:c1:41:db:
96:78:f4:9c:e4:8d:36:bd:71:48:1d:06:ca:9d:c6:de:c3:36:
84:c4:a3:1e:fa:f3:53:41:ad:7b:56:59:ee:93:cf:53:7d:9c:
d9:b5:a0:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gGFyxp+xojBx7jmMwNDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm
MWUyMTQwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmE1MDRmZmJiZTAxYmU4YjRkN2Q4NjliOWFiMzc5YWRhNTUyMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RQs+XcO9nvNnNxE4BCpO1RhAbK/
zyYpNz8hfG5SRYgjklhNLHzQnbtrJ6/u39bSk0z0A8EXWpEIV5l5VaRZ/v5EakFC
fG3WXI99n6gkLT8l8Jc70Hod7UvTn9f5xC0j9xHU+caD3tya3sjFjybJyj6D0Ljc
yv/bdx5nRmz1q7+ic5C5FnmCFCDihdxPj3LqZcHqkTeniZv3YVsXV5wzamWakWKR
FAcOX1FuOaTpDgkW7nSrSWMSuUvFFf2JSk+VOjssIXC4WToEUqGL+5bYtimbgLDp
Z7wW3+8YVkGcNx5fIh5pHzw0gHsKYAWbQxYoVVKUsnh0aS1/faHYSTvRvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDalBP+74BvotNfYabmrN5raVSH+MB8GA1UdIwQY
MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt
ODhhM2M0MWZhZWUyLzEvTnFVRV83dmdHLWkwMTlocHVhczNtdHBWSWY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy
LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/r6MA0G
CSqGSIb3DQEBCwUAA4IBAQCZE6p40BB3HYaxeisSw7WRKpkkiwhFPEqUxsnpsWYI
gCxR1r5ADSLWJd0Vvs6kA70bgUG6F5yf2g2ycOlHOyPfLr3yLfgjQyoG1Rtq91eD
V4ZPGofpKSwjSbLDjt+qpGlNoYyyGP2MjYp7vdqwDIDr0bLrnt7ohF+br8x7HuRO
IjzR/hBvT7W3lDzLnykZw83YAfsA8/54u9QY6H8BpGCszd8cBVwJhdbsGylFOd3g
iHqgO41i/HkPCCYCf/UacRpmjgINHPfk7UK03fgcIi+5lOydKVPBQduWePSc5I02
vXFIHQbKncbewzaExKMe+vNTQa17Vlnuk89TfZzZtaA3
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:01 2026 by rpki-client