This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/qWRFNxO39FmZwXVOfW9a3qdDZ_M.roa File: qWRFNxO39FmZwXVOfW9a3qdDZ_M.roa (raw, json) Hash identifier: rirbnyAccpPKWOcuInuVk5mCK3dHmlXm6puqdnxTn/s= Subject key identifier: A9:64:45:37:13:B7:F4:59:99:C1:75:4E:7D:6F:5A:DE:A7:43:67:F3 Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2 Certificate serial: 019B7DCA589E0A964FD49B1A9BD51611F8C5 Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/qWRFNxO39FmZwXVOfW9a3qdDZ_M.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60945 IP address blocks: 91.218.58.0/24 maxlen: 24 92.60.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:58:9e:0a:96:4f:d4:9b:1a:9b:d5:16:11:f8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a964453713b7f45999c1754e7d6f5adea74367f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:10:e5:ba:fd:24:34:ac:2d:dd:de:f1:1b: e1:39:62:df:b3:43:f1:63:d0:9c:ec:5c:17:44:74: 11:36:c5:b0:75:f0:a7:f3:b4:e6:09:93:43:d4:31: 91:47:23:68:6d:de:49:9a:60:8d:63:ef:f7:fc:9a: fe:db:94:d4:90:4f:29:db:b9:79:88:26:2c:67:9c: 70:59:38:61:03:9e:2b:3a:6f:f7:6f:38:05:f1:14: e6:0d:08:d4:63:f1:4f:92:b7:db:18:96:85:f8:55: 79:c5:45:9c:f4:99:45:16:8a:1d:36:0c:27:61:6d: b2:fe:17:76:0b:6f:e8:90:4e:47:c0:b2:3c:d2:25: 6a:98:ab:b1:86:97:7b:fe:8c:93:b1:ab:65:4a:a4: f0:84:52:0c:2f:57:c8:fe:ed:56:e3:1b:a9:83:5c: d7:e6:09:15:b5:41:1c:06:73:e8:36:84:0c:ff:7d: 47:17:d6:76:35:3d:84:ee:e9:7c:f8:04:38:d6:fc: 4a:2a:e9:d6:33:86:fd:cb:a9:59:26:7c:2b:7b:d9: eb:4e:5b:c1:8a:9e:df:f2:71:0f:a3:24:88:6c:40: c2:2e:a4:7a:94:6d:70:08:53:66:b0:41:71:e3:0e: 78:e4:f2:16:1e:ae:cc:39:ab:a7:91:ad:19:5b:21: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:64:45:37:13:B7:F4:59:99:C1:75:4E:7D:6F:5A:DE:A7:43:67:F3 X509v3 Authority Key Identifier: keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/qWRFNxO39FmZwXVOfW9a3qdDZ_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.58.0/24 92.60.44.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:65:6e:f2:c8:60:d8:5a:d4:86:87:d0:6e:45:48:66:41:10: 64:27:5c:b0:9f:ec:00:9d:ce:fb:38:4a:e6:68:dc:4f:3a:d7: 1d:c3:b2:ee:ee:a2:14:39:c7:60:21:c8:41:37:5e:68:8d:1e: ac:5f:12:5f:a7:23:5a:f3:17:a6:f3:bd:fd:ef:a0:a9:7f:ee: c6:f7:92:bc:d2:f3:24:e3:15:6c:c8:c3:22:5c:1e:c5:9e:b4: 4e:e6:50:d2:db:44:cc:9e:a9:af:e9:2a:89:03:c6:4d:06:e9: 9d:59:9c:a2:c7:c8:07:3c:a3:72:49:1e:b5:6e:13:c5:44:1b: e6:71:ff:84:32:8c:96:b1:9d:ad:b9:96:58:30:a9:02:29:04: 58:11:f5:d7:bb:ca:fe:00:c5:8f:ca:cd:7f:98:9c:a7:4a:b9: cd:a1:85:43:00:94:cd:45:35:b5:26:3e:32:76:c4:0c:c6:b5: 97:2c:dc:42:a9:5e:62:c4:e8:c1:de:d0:2a:c1:dc:4c:bd:a2: 28:54:9a:87:42:ee:79:19:1e:e0:ff:58:19:4e:62:b3:7c:c6: 1c:9c:11:e0:30:eb:0e:8b:69:60:a0:dc:e9:f8:25:ca:2e:4d: 6e:a5:06:be:ad:33:27:ba:50:7f:9b:85:c8:62:b7:55:92:e4: 87:8c:3d:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ylieCpZP1Jsam9UWEfjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YWM5ZWRkMjQwYmZjNDUyMGNlMGJjOWIyNDU5NjNkMjRl MmJmZTIwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTY0NDUzNzEzYjdmNDU5OTljMTc1NGU3ZDZmNWFkZWE3NDM2N2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshYQ5br9JDSsLd3e8RvhOWLfs0Px Y9Cc7FwXRHQRNsWwdfCn87TmCZND1DGRRyNobd5JmmCNY+/3/Jr+25TUkE8p27l5 iCYsZ5xwWThhA54rOm/3bzgF8RTmDQjUY/FPkrfbGJaF+FV5xUWc9JlFFoodNgwn YW2y/hd2C2/okE5HwLI80iVqmKuxhpd7/oyTsatlSqTwhFIML1fI/u1W4xupg1zX 5gkVtUEcBnPoNoQM/31HF9Z2NT2E7ul8+AQ41vxKKunWM4b9y6lZJnwre9nrTlvB ip7f8nEPoySIbEDCLqR6lG1wCFNmsEFx4w545PIWHq7MOaunka0ZWyGWMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKlkRTcTt/RZmcF1Tn1vWt6nQ2fzMB8GA1UdIwQY MBaAFCisnt0kC/xFIM4LybJFlj0k4r/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUt ODVhNTM0ZjE4MGZkLzEvcVdSRk54TzM5Rm1ad1hWT2ZXOWEzcWREWl9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUtODVhNTM0ZjE4MGZk LzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9o6AwQC XDwsMA0GCSqGSIb3DQEBCwUAA4IBAQCOZW7yyGDYWtSGh9BuRUhmQRBkJ1ywn+wA nc77OErmaNxPOtcdw7Lu7qIUOcdgIchBN15ojR6sXxJfpyNa8xem873976Cpf+7G 95K80vMk4xVsyMMiXB7FnrRO5lDS20TMnqmv6SqJA8ZNBumdWZyix8gHPKNySR61 bhPFRBvmcf+EMoyWsZ2tuZZYMKkCKQRYEfXXu8r+AMWPys1/mJynSrnNoYVDAJTN RTW1Jj4ydsQMxrWXLNxCqV5ixOjB3tAqwdxMvaIoVJqHQu55GR7g/1gZTmKzfMYc nBHgMOsOi2lgoNzp+CXKLk1upQa+rTMnulB/m4XIYrdVkuSHjD1d -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:33 2026 by rpki-client