This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/CQ-BEl0cMUjmhYzcY2ZYGz7iPmg.roa File: CQ-BEl0cMUjmhYzcY2ZYGz7iPmg.roa (raw, json) Hash identifier: IVdKTM0Yxp2TPDqtVbZnlReXxKJAgo4s135GUv5aFjI= Subject key identifier: 09:0F:81:12:5D:1C:31:48:E6:85:8C:DC:63:66:58:1B:3E:E2:3E:68 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D206A97564FAAEA16CE171C4CD0A2 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/CQ-BEl0cMUjmhYzcY2ZYGz7iPmg.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51843 IP address blocks: 91.120.250.0/24 maxlen: 24 91.120.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:20:6a:97:56:4f:aa:ea:16:ce:17:1c:4c:d0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=090f81125d1c3148e6858cdc6366581b3ee23e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:85:67:13:c5:19:67:2d:99:f8:73:e5:dd: 69:76:76:3c:c5:de:e9:9c:ed:f1:ca:3c:36:e3:94: 0e:f4:73:c7:89:e9:12:11:63:bb:0f:e4:e1:b5:f4: c6:c7:18:21:a7:a0:39:f8:cb:3a:3b:56:8f:86:6c: 64:2d:16:60:e1:9f:24:d3:3c:c3:4d:fa:61:a9:ef: f2:7d:18:de:12:3c:cf:70:d5:c4:9d:dd:d3:6f:df: 18:7f:cf:2d:9f:8f:15:e6:26:99:7e:25:18:cb:89: 09:17:e0:a3:fc:1e:c1:a4:ad:13:ce:c7:0d:7e:4e: ce:d1:bb:25:f2:e8:40:ae:e1:59:df:b8:b1:de:c5: 03:ed:09:9f:17:f4:55:0e:d6:14:b1:1a:bb:8c:c1: f8:fc:b7:8b:08:d4:9f:c9:c7:30:bf:21:3c:77:02: e0:7c:dd:2a:4d:54:b4:20:0b:2b:79:a8:af:ab:f5: e0:72:17:e7:b5:a6:b7:e7:ab:11:6a:51:ee:e3:0e: cd:9c:9f:74:0b:69:f6:28:5c:8d:4f:aa:05:87:fb: d8:5c:b1:e7:d6:b8:09:69:db:72:9d:9f:63:68:09: a9:97:52:e0:b7:02:d7:36:27:d6:07:74:82:3f:34: c7:31:6c:83:52:73:4e:7c:ca:60:2f:b5:05:1f:c0: 28:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:81:12:5D:1C:31:48:E6:85:8C:DC:63:66:58:1B:3E:E2:3E:68 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/CQ-BEl0cMUjmhYzcY2ZYGz7iPmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.120.250.0/23 Signature Algorithm: sha256WithRSAEncryption 83:6f:54:c8:a4:1f:8f:2c:14:ac:0c:51:74:3a:54:61:2e:19: 7a:e1:eb:4f:26:a4:ab:b3:71:ce:d2:c8:68:9c:4a:26:44:2d: 64:30:08:35:78:01:25:df:e9:06:a8:75:00:7b:50:6d:c4:90: f4:30:31:8f:ff:24:53:23:59:ba:bb:ef:cf:76:f6:db:6f:4b: 91:43:e2:e8:00:ac:ff:2c:7a:b6:d8:af:ab:c7:e8:3b:3c:b6: 7d:21:8b:36:9f:d3:ec:1a:71:4f:4c:f7:71:44:8f:26:5f:31: 16:bd:c2:06:5f:d6:6a:d9:2a:30:24:6e:52:0c:69:a5:b8:7e: ff:cb:a1:f2:78:33:64:90:97:6a:52:46:f3:97:56:9f:99:0e: 43:fa:ab:c6:46:13:09:8a:f7:33:2c:41:ad:62:f4:4f:a9:7f: ba:21:0c:36:ed:56:2c:92:d7:8f:f4:1b:2b:97:a5:1c:6d:85: c5:9c:da:f8:70:ad:3d:52:ec:4f:b6:c9:c9:ec:55:24:0c:85: c4:f8:a5:cf:c0:90:27:86:45:3a:3e:52:ad:a0:81:dc:fb:97: 09:0d:07:a9:e0:26:70:a3:14:4e:8a:03:59:0c:a1:0f:12:56: 68:78:d3:05:0c:33:53:82:58:df:23:a8:f8:12:56:fc:d4:72: e7:5f:4e:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSBql1ZPquoWzhccTNCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTBmODExMjVkMWMzMTQ4ZTY4NThjZGM2MzY2NTgxYjNlZTIzZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+OFZxPFGWctmfhz5d1pdnY8xd7p nO3xyjw245QO9HPHiekSEWO7D+ThtfTGxxghp6A5+Ms6O1aPhmxkLRZg4Z8k0zzD Tfphqe/yfRjeEjzPcNXEnd3Tb98Yf88tn48V5iaZfiUYy4kJF+Cj/B7BpK0TzscN fk7O0bsl8uhAruFZ37ix3sUD7QmfF/RVDtYUsRq7jMH4/LeLCNSfyccwvyE8dwLg fN0qTVS0IAsreaivq/Xgchfntaa356sRalHu4w7NnJ90C2n2KFyNT6oFh/vYXLHn 1rgJadtynZ9jaAmpl1LgtwLXNifWB3SCPzTHMWyDUnNOfMpgL7UFH8Ao8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAkPgRJdHDFI5oWM3GNmWBs+4j5oMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvQ1EtQkVsMGNNVWptaFl6Y1kyWllHejdpUG1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW3j6MA0G CSqGSIb3DQEBCwUAA4IBAQCDb1TIpB+PLBSsDFF0OlRhLhl64etPJqSrs3HO0sho nEomRC1kMAg1eAEl3+kGqHUAe1BtxJD0MDGP/yRTI1m6u+/Pdvbbb0uRQ+LoAKz/ LHq22K+rx+g7PLZ9IYs2n9PsGnFPTPdxRI8mXzEWvcIGX9Zq2SowJG5SDGmluH7/ y6HyeDNkkJdqUkbzl1afmQ5D+qvGRhMJivczLEGtYvRPqX+6IQw27VYskteP9Bsr l6UcbYXFnNr4cK09UuxPtsnJ7FUkDIXE+KXPwJAnhkU6PlKtoIHc+5cJDQep4CZw oxROigNZDKEPElZoeNMFDDNTgljfI6j4Elb81HLnX07i -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:17 2026 by rpki-client