This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa File: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (raw, json) Hash identifier: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys= Subject key identifier: A9:C0:5D:D5:0E:5B:55:6E:2C:78:7A:63:5F:05:B0:A6:42:5F:62:74 Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Certificate serial: 019B77C6AB177F87F35904F91F53AE9428A6 Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44591 IP address blocks: 91.199.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ab:17:7f:87:f3:59:04:f9:1f:53:ae:94:28:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9c05dd50e5b556e2c787a635f05b0a6425f6274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:ef:b5:d2:14:df:1a:5a:62:af:5e:87:19: c9:32:b9:f1:eb:19:ed:0b:f7:37:1b:9c:d3:7a:4a: 11:67:da:8b:45:77:d2:8f:dd:8f:a2:39:73:3e:3b: f3:97:e3:b9:ba:36:bb:2f:80:f7:b0:70:59:d3:62: 6c:46:2c:46:fc:70:fb:f4:78:7b:af:51:c5:69:d2: fd:5c:1b:23:f2:f7:fb:4e:9a:11:93:e9:24:20:78: cf:4e:8e:2d:af:a1:cb:73:57:c4:44:89:22:fd:52: 4f:78:6e:73:9a:b8:30:2b:61:48:85:4b:62:86:0f: 26:ca:e0:b5:99:b3:ac:a8:03:e2:42:1e:4d:5e:85: 13:e5:28:3d:55:21:c0:a3:47:cc:f4:a0:91:db:65: cc:d9:68:b1:05:77:8c:6f:df:cd:e2:0d:e9:a8:fa: e1:d6:ed:58:b7:3e:61:72:f0:20:8f:a6:df:2f:4f: ac:f8:07:cb:4f:58:fd:d1:46:4d:57:fa:a8:c1:67: 23:88:a2:37:84:72:c9:30:7c:e0:e1:5d:c0:fd:b4: 00:94:e6:65:33:f3:03:41:0d:4c:39:fc:4b:b7:b6: f1:47:52:f2:ba:e8:31:1b:ee:a2:2f:e1:9e:47:9f: a4:a6:96:55:0c:c8:f4:1d:38:08:fd:9f:e9:ea:93: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:5D:D5:0E:5B:55:6E:2C:78:7A:63:5F:05:B0:A6:42:5F:62:74 X509v3 Authority Key Identifier: keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.173.0/24 Signature Algorithm: sha256WithRSAEncryption 58:36:e8:ac:f4:67:2a:14:c0:cc:f7:b9:34:29:29:23:82:f2: d1:fc:7f:e9:68:84:7a:ac:08:75:94:4e:02:e1:53:72:60:9f: 42:61:81:81:05:68:13:69:db:ed:3d:cf:60:f1:79:4d:86:6f: f1:a9:70:66:a0:fb:89:4a:6a:2c:0e:6c:42:bc:3e:bf:1c:87: 1d:a4:7e:90:1a:1e:13:c9:5b:7b:e1:96:c8:09:9a:30:0b:c6: 9d:39:48:dc:df:29:33:75:ed:36:b7:f8:6e:39:e5:9e:61:6c: 4e:79:e8:46:ce:a5:6d:d1:77:f6:e0:31:71:b5:b0:74:6e:43: 9c:ee:84:2c:5b:11:22:3e:45:77:ee:b8:7f:64:bc:fb:71:d4: ec:ea:b7:c7:51:d1:f0:d5:91:13:ac:b9:fd:b8:e1:ed:e3:60: 96:c9:5a:37:ff:e7:1c:f5:c9:b8:f3:eb:a0:67:5b:69:07:5d: f9:a7:d3:0b:29:b8:fa:2a:1b:23:9c:ac:3a:72:ac:09:d1:9f: 92:f2:be:c4:21:dd:5a:b9:2b:16:2c:71:9f:8e:12:ef:e2:f5: 86:66:df:83:32:ea:9a:54:71:01:79:da:d4:97:67:92:d2:d1: 4a:ae:ed:73:e1:76:4b:24:50:2d:fb:46:5a:fc:5b:0b:a0:7c: a5:28:34:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqsXf4fzWQT5H1OulCimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3 NTdmM2YwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWMwNWRkNTBlNWI1NTZlMmM3ODdhNjM1ZjA1YjBhNjQyNWY2Mjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQPvtdIU3xpaYq9ehxnJMrnx6xnt C/c3G5zTekoRZ9qLRXfSj92PojlzPjvzl+O5uja7L4D3sHBZ02JsRixG/HD79Hh7 r1HFadL9XBsj8vf7TpoRk+kkIHjPTo4tr6HLc1fERIki/VJPeG5zmrgwK2FIhUti hg8myuC1mbOsqAPiQh5NXoUT5Sg9VSHAo0fM9KCR22XM2WixBXeMb9/N4g3pqPrh 1u1Ytz5hcvAgj6bfL0+s+AfLT1j90UZNV/qowWcjiKI3hHLJMHzg4V3A/bQAlOZl M/MDQQ1MOfxLt7bxR1LyuugxG+6iL+GeR5+kppZVDMj0HTgI/Z/p6pN0awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKnAXdUOW1VuLHh6Y18FsKZCX2J0MB8GA1UdIwQY MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt ZDg1MWU0MGQ1N2JmLzEvcWNCZDFRNWJWVzRzZUhwalh3V3dwa0pmWW5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8etMA0G CSqGSIb3DQEBCwUAA4IBAQBYNuis9GcqFMDM97k0KSkjgvLR/H/paIR6rAh1lE4C 4VNyYJ9CYYGBBWgTadvtPc9g8XlNhm/xqXBmoPuJSmosDmxCvD6/HIcdpH6QGh4T yVt74ZbICZowC8adOUjc3ykzde02t/huOeWeYWxOeehGzqVt0Xf24DFxtbB0bkOc 7oQsWxEiPkV37rh/ZLz7cdTs6rfHUdHw1ZETrLn9uOHt42CWyVo3/+cc9cm48+ug Z1tpB135p9MLKbj6KhsjnKw6cqwJ0Z+S8r7EId1auSsWLHGfjhLv4vWGZt+DMuqa VHEBedrUl2eS0tFKru1z4XZLJFAt+0Za/FsLoHylKDSA -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:19 2026 by rpki-client