This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/9qN4udPUuYowf7HliZ_TGQM3Bms.roa File: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (raw, json) Hash identifier: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY= Subject key identifier: F6:A3:78:B9:D3:D4:B9:8A:30:7F:B1:E5:89:9F:D3:19:03:37:06:6B Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Certificate serial: 019B7AC7CF2F4578FFE9D85812F75B7A6F54 Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/9qN4udPUuYowf7HliZ_TGQM3Bms.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206125 IP address blocks: 89.190.6.0/24 maxlen: 24 185.151.76.0/22 maxlen: 22 2a03:7c03::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cf:2f:45:78:ff:e9:d8:58:12:f7:5b:7a:6f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6a378b9d3d4b98a307fb1e5899fd3190337066b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f7:8b:c4:96:5a:d1:16:cf:00:c5:9e:47:a8: e1:97:0c:d8:19:fc:ab:64:72:ec:10:dc:9b:16:96: c6:63:4f:98:46:ba:1a:fe:2b:19:ad:05:9e:86:85: a4:dd:20:8e:e2:76:03:f3:a9:9f:d1:f0:02:ef:8f: 47:2b:e4:7a:01:71:ba:56:fc:c4:88:85:8b:d1:7e: 62:a5:c2:bd:ba:ab:c8:97:33:86:e4:b7:eb:f8:b3: 90:78:1e:c1:2b:6e:bc:76:f7:03:b7:68:b1:97:a2: 08:9a:c6:11:db:87:78:62:18:a3:54:f7:3d:43:49: 78:68:0e:e3:9c:dd:70:fe:04:1d:c7:f3:fe:01:0a: d5:11:7c:58:58:2d:cf:e1:cb:9b:e7:2d:eb:05:76: 95:d2:e6:0e:64:25:1c:e7:42:86:aa:a4:26:cf:04: 15:5b:33:72:81:2f:19:28:06:66:72:2b:57:28:d0: 8a:c3:99:99:96:aa:6c:b2:54:b8:2d:66:19:66:97: 58:33:71:01:82:cc:18:69:46:b1:5c:6f:ef:bd:c8: 9d:43:0e:6d:b4:98:d7:53:e2:53:e5:fd:ad:b8:0f: 9e:a6:fd:d3:52:28:5a:4f:ed:38:7d:7f:b9:1b:d4: ea:a0:ba:6c:d0:89:25:91:0a:f2:d4:90:e9:2f:6c: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A3:78:B9:D3:D4:B9:8A:30:7F:B1:E5:89:9F:D3:19:03:37:06:6B X509v3 Authority Key Identifier: keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/9qN4udPUuYowf7HliZ_TGQM3Bms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.190.6.0/24 185.151.76.0/22 IPv6: 2a03:7c03::/32 Signature Algorithm: sha256WithRSAEncryption 35:6d:4e:88:cf:97:ca:33:82:4c:55:c3:48:61:ab:59:de:2c: de:7d:63:d1:af:98:90:5f:09:fd:d9:83:7d:dc:55:9e:31:a0: a8:5d:4a:76:bf:95:1f:3a:84:0c:fe:a7:31:c2:47:73:d2:ba: 63:81:2a:e7:97:a6:e9:90:66:c3:0d:0b:c2:bc:cc:c5:a9:7c: 9d:29:03:fc:39:60:fb:41:54:de:7b:af:76:c4:cc:59:1d:9e: 6a:27:d5:00:3a:25:fe:b7:06:c8:79:96:71:29:5b:d7:ee:dc: 8b:6a:22:f3:c3:95:ee:cb:4b:03:10:0b:ac:99:cd:42:f9:64: 6a:d6:41:20:5c:d6:b8:a4:d6:b9:ef:23:e0:6c:ee:db:0c:c6: 48:ad:72:68:ce:ae:df:23:59:54:3f:ed:e6:fa:c5:b9:d2:d2: 9e:4f:a2:2b:a7:9c:bf:9b:9e:00:ba:d2:49:63:77:1b:4a:b8: 6c:0b:e8:9c:a1:fa:c4:03:bc:59:78:5b:45:20:4b:e5:a3:39: 42:d5:fc:63:ba:48:c1:0d:10:9c:c8:ea:38:aa:bd:a4:34:6d: 80:76:6e:5d:7f:93:34:41:bc:4d:db:b0:f6:75:28:f2:ef:12: 1b:55:d1:e7:2d:9d:02:45:96:c2:ab:1d:0c:00:a2:71:f9:d0: 30:21:5a:74 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x88vRXj/6dhYEvdbem9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw Y2QzZTcwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmEzNzhiOWQzZDRiOThhMzA3ZmIxZTU4OTlmZDMxOTAzMzcwNjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifeLxJZa0RbPAMWeR6jhlwzYGfyr ZHLsENybFpbGY0+YRroa/isZrQWehoWk3SCO4nYD86mf0fAC749HK+R6AXG6VvzE iIWL0X5ipcK9uqvIlzOG5Lfr+LOQeB7BK268dvcDt2ixl6IImsYR24d4YhijVPc9 Q0l4aA7jnN1w/gQdx/P+AQrVEXxYWC3P4cub5y3rBXaV0uYOZCUc50KGqqQmzwQV WzNygS8ZKAZmcitXKNCKw5mZlqpsslS4LWYZZpdYM3EBgswYaUaxXG/vvcidQw5t tJjXU+JT5f2tuA+epv3TUihaT+04fX+5G9TqoLps0IklkQry1JDpL2xxlwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPajeLnT1LmKMH+x5Ymf0xkDNwZrMB8GA1UdIwQY MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt YzQzYWIyYTEyZDU1LzEvOXFONHVkUFV1WW93ZjdIbGlaX1RHUU0zQm1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1 LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAWb4GAwQC uZdMMA0EAgACMAcDBQAqA3wDMA0GCSqGSIb3DQEBCwUAA4IBAQA1bU6Iz5fKM4JM VcNIYatZ3izefWPRr5iQXwn92YN93FWeMaCoXUp2v5UfOoQM/qcxwkdz0rpjgSrn l6bpkGbDDQvCvMzFqXydKQP8OWD7QVTee692xMxZHZ5qJ9UAOiX+twbIeZZxKVvX 7tyLaiLzw5Xuy0sDEAusmc1C+WRq1kEgXNa4pNa57yPgbO7bDMZIrXJozq7fI1lU P+3m+sW50tKeT6Irp5y/m54AutJJY3cbSrhsC+icofrEA7xZeFtFIEvlozlC1fxj ukjBDRCcyOo4qr2kNG2Adm5df5M0QbxN27D2dSjy7xIbVdHnLZ0CRZbCqx0MAKJx +dAwIVp0 -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:15 2026 by rpki-client