This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QyQQLeVbbCSj762W5JjtYNh4iEo.roa File: QyQQLeVbbCSj762W5JjtYNh4iEo.roa (raw, json) Hash identifier: /LNHGFGlpWEfZjbU/RNLouPwBD9WxI7+n8rSpKoh/bw= Subject key identifier: 43:24:10:2D:E5:5B:6C:24:A3:EF:AD:96:E4:98:ED:60:D8:78:88:4A Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80012B79D9D6AD1BA6F6A2343F19EC Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QyQQLeVbbCSj762W5JjtYNh4iEo.roa Signing time: Fri 02 Jan 2026 02:18:42 +0000 ROA not before: Fri 02 Jan 2026 02:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2288 IP address blocks: 90.84.28.0/24 maxlen: 24 90.84.29.0/24 maxlen: 24 90.84.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:01:2b:79:d9:d6:ad:1b:a6:f6:a2:34:3f:19:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4324102de55b6c24a3efad96e498ed60d878884a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:40:23:60:43:7a:96:cb:25:d1:b2:60:e6:a9: 19:73:2b:ee:e5:8a:15:0b:f1:a7:96:15:70:69:2a: 6b:4e:8c:b7:66:e2:38:9c:56:e2:2c:fe:18:c6:fe: 53:b4:41:a9:4d:a2:71:59:a2:1d:bf:5c:a2:0c:b4: 33:4d:06:0b:c7:0e:47:40:3e:ab:0f:ea:b8:b6:3d: a5:f8:b0:e6:ce:a3:57:3d:19:bb:58:77:77:af:cd: f8:c8:83:fe:3d:e3:e3:cf:24:bc:7d:85:12:f9:57: 01:da:9e:bb:fd:83:f3:fe:c9:ea:2b:ab:8b:35:e6: f8:0e:fa:c0:0c:8f:1f:30:25:4d:53:c9:3e:2c:78: 65:53:4e:6a:8c:2d:08:09:fd:8d:70:2e:ec:3a:20: b4:e9:ca:85:a6:84:16:56:26:9c:00:ee:16:db:bd: 57:ce:1d:f6:cf:4b:d7:93:07:c1:03:75:a7:3b:9f: 66:09:d3:ce:a2:a4:5a:a3:ad:a3:b6:e4:4e:d5:38: f1:f2:62:bd:9e:38:34:a8:e9:ee:42:fe:c1:63:ab: ef:76:80:f4:dc:f8:6f:0b:ac:85:54:8d:5f:a9:af: 4d:dc:99:9e:8b:a6:e6:4e:bf:6f:bb:28:d3:f3:34: 32:38:0c:2d:30:7b:92:cf:3d:e1:cc:04:12:f0:5c: b6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:24:10:2D:E5:5B:6C:24:A3:EF:AD:96:E4:98:ED:60:D8:78:88:4A X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QyQQLeVbbCSj762W5JjtYNh4iEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.84.28.0-90.84.30.255 Signature Algorithm: sha256WithRSAEncryption 32:ab:5b:67:59:06:f3:0c:0a:63:54:6e:97:63:3d:cb:50:e9: 6e:21:6c:10:25:fb:e8:39:de:75:93:70:9e:8d:1e:4a:44:a1: 6f:62:92:48:ea:66:5e:e0:64:53:b9:7f:ec:0f:0a:34:30:e9: 41:81:ea:56:66:8b:23:6b:b7:13:47:ec:75:3c:3f:3b:68:9a: 17:e9:81:0e:30:dd:11:70:a7:fd:5a:ef:be:cd:65:51:5b:b8: d1:74:fd:27:f0:64:49:2a:73:3c:f6:28:06:cb:35:06:57:ef: 1c:cd:fe:ba:79:08:20:d1:b0:a0:d9:20:f8:b3:14:7a:91:f2: 49:f0:92:7c:91:da:4b:da:cb:c1:3f:a7:6e:ea:35:eb:13:9c: 7e:84:88:c4:79:c7:59:24:08:a6:e6:7d:a4:f0:62:17:57:54: 06:a1:56:4f:43:86:d2:b3:97:01:2d:00:e4:6b:3b:77:bc:31: 6a:0f:a4:9a:9a:99:14:2f:1a:fb:a0:1f:b3:79:c0:0c:09:b3: b0:7c:21:85:3f:c7:57:19:d3:49:6f:ed:b4:2d:c2:f6:fe:80: 04:3f:b8:6b:c1:57:b1:07:63:be:99:ea:ea:62:28:56:1c:dd: 7b:0a:d7:a0:e1:5e:af:c4:fa:47:2a:30:a3:d6:43:69:02:8f: 70:6d:f7:97 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gAErednWrRum9qI0PxnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzI0MTAyZGU1NWI2YzI0YTNlZmFkOTZlNDk4ZWQ2MGQ4Nzg4ODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EAjYEN6lssl0bJg5qkZcyvu5YoV C/GnlhVwaSprToy3ZuI4nFbiLP4Yxv5TtEGpTaJxWaIdv1yiDLQzTQYLxw5HQD6r D+q4tj2l+LDmzqNXPRm7WHd3r834yIP+PePjzyS8fYUS+VcB2p67/YPz/snqK6uL Neb4DvrADI8fMCVNU8k+LHhlU05qjC0ICf2NcC7sOiC06cqFpoQWViacAO4W271X zh32z0vXkwfBA3WnO59mCdPOoqRao62jtuRO1Tjx8mK9njg0qOnuQv7BY6vvdoD0 3PhvC6yFVI1fqa9N3Jmei6bmTr9vuyjT8zQyOAwtMHuSzz3hzAQS8Fy2JQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEMkEC3lW2wko++tluSY7WDYeIhKMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvUXlRUUxlVmJiQ1NqNzYyVzVKanRZTmg0aUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJaVBwD BABaVB4wDQYJKoZIhvcNAQELBQADggEBADKrW2dZBvMMCmNUbpdjPctQ6W4hbBAl ++g53nWTcJ6NHkpEoW9ikkjqZl7gZFO5f+wPCjQw6UGB6lZmiyNrtxNH7HU8Pzto mhfpgQ4w3RFwp/1a777NZVFbuNF0/SfwZEkqczz2KAbLNQZX7xzN/rp5CCDRsKDZ IPizFHqR8knwknyR2kvay8E/p27qNesTnH6EiMR5x1kkCKbmfaTwYhdXVAahVk9D htKzlwEtAORrO3e8MWoPpJqamRQvGvugH7N5wAwJs7B8IYU/x1cZ00lv7bQtwvb+ gAQ/uGvBV7EHY76Z6upiKFYc3XsK16DhXq/E+kcqMKPWQ2kCj3Bt95c= -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:14 2026 by rpki-client