This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/q4MMxbvpWnkqIJJ1G1vh9k5IaD0.roa File: q4MMxbvpWnkqIJJ1G1vh9k5IaD0.roa (raw, json) Hash identifier: atJClVpeASPtSX6kEGrHIIjj/e8dWQQKfuBLHQmvtvQ= Subject key identifier: AB:83:0C:C5:BB:E9:5A:79:2A:20:92:75:1B:5B:E1:F6:4E:48:68:3D Certificate issuer: /CN=6df293212d25d4863e386b9c480ddc9be738124f Certificate serial: 019B77C75F1A8C3B4ED7FA553C74AF9480A4 Authority key identifier: 6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/q4MMxbvpWnkqIJJ1G1vh9k5IaD0.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21263 IP address blocks: 192.81.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5f:1a:8c:3b:4e:d7:fa:55:3c:74:af:94:80:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6df293212d25d4863e386b9c480ddc9be738124f Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab830cc5bbe95a792a2092751b5be1f64e48683d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:92:6f:cd:97:37:83:91:6f:dc:40:72:f7: 78:05:fb:a3:bc:a8:cd:08:62:a3:44:52:59:92:d1: 78:ca:e2:3e:d5:f1:92:b0:58:b6:06:74:7d:98:52: b8:be:7c:8b:4a:c4:2a:ec:6f:eb:ad:74:0f:f5:e3: 59:89:9d:22:3d:b3:55:55:00:85:03:4d:77:43:e5: 0a:59:90:1c:8d:67:5e:da:0e:e0:01:07:98:93:ea: 00:ae:a3:82:37:90:2a:82:10:44:f3:ba:16:f0:ab: f7:c9:53:1a:f7:12:28:b0:1d:b2:8c:fd:d5:85:d8: 2a:01:da:2c:1d:56:34:fb:a6:df:95:71:f3:25:6b: 4e:fc:f2:a1:35:5b:b7:6d:c8:77:0d:3d:8e:74:aa: e9:c5:74:fe:2e:73:e8:f0:a9:31:3b:80:5c:90:da: 01:47:12:33:c6:51:6a:da:36:25:a0:57:12:b1:80: 64:ee:cb:72:00:48:c3:e0:49:2e:10:7b:54:ed:8e: ac:6b:d9:00:01:67:ed:2d:2c:ff:ba:c2:d0:4e:71: f7:2e:20:22:5a:0a:2c:da:40:a4:10:2c:da:05:c2: 65:00:9a:aa:2c:c3:bc:a4:ff:8b:09:99:6a:e2:61: 6e:a6:22:38:ed:35:c0:9d:41:0a:ef:31:ad:69:7a: 0f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:83:0C:C5:BB:E9:5A:79:2A:20:92:75:1B:5B:E1:F6:4E:48:68:3D X509v3 Authority Key Identifier: keyid:6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/q4MMxbvpWnkqIJJ1G1vh9k5IaD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.81.121.0/24 Signature Algorithm: sha256WithRSAEncryption 61:1a:13:e8:04:7f:62:bd:3c:e8:67:05:32:c4:40:dc:ef:5f: f7:cd:79:6b:e8:41:b4:00:2d:6c:17:a9:14:0b:f0:33:a0:a4: a9:e5:8e:f7:43:52:c2:c7:7c:db:4a:ae:f4:37:43:91:f3:c4: 8f:a5:58:e2:0e:00:6a:dd:c7:f5:58:e6:b6:d5:de:ce:34:f0: d0:67:c8:3e:1b:66:20:d5:3b:d9:3d:70:bd:52:74:3a:76:6c: 31:1a:dc:ef:4f:e6:2d:77:52:70:5b:9f:fd:7d:10:d1:b4:12: ca:33:4d:33:f3:af:ab:d5:f1:23:55:b8:e0:15:e9:b2:91:1b: b1:a7:8c:f5:2c:10:f9:a3:ff:26:d7:5b:04:63:4d:3b:4d:12: 9f:75:57:8f:8d:ee:cd:98:4d:dc:ff:77:be:f7:91:6c:fc:a3: 8c:5d:c8:ff:9f:c9:ea:bd:aa:a7:03:f3:f0:1d:14:d5:f2:b6: 96:5d:90:70:56:e8:f2:77:88:28:01:fa:2f:93:fb:0f:0e:7b: 91:63:5b:3a:f9:8b:df:c3:cd:60:91:b4:61:f6:b8:fe:fb:6a: d0:ba:af:e4:f5:87:99:ed:ee:71:ac:5e:1f:da:df:a3:4d:b2: 53:a2:28:bd:9c:b9:91:f2:d4:15:3c:d6:ab:f8:b0:28:39:e8: 5e:80:66:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x18ajDtO1/pVPHSvlICkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZjI5MzIxMmQyNWQ0ODYzZTM4NmI5YzQ4MGRkYzliZTcz ODEyNGYwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjgzMGNjNWJiZTk1YTc5MmEyMDkyNzUxYjViZTFmNjRlNDg2ODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTmSb82XN4ORb9xAcvd4BfujvKjN CGKjRFJZktF4yuI+1fGSsFi2BnR9mFK4vnyLSsQq7G/rrXQP9eNZiZ0iPbNVVQCF A013Q+UKWZAcjWde2g7gAQeYk+oArqOCN5AqghBE87oW8Kv3yVMa9xIosB2yjP3V hdgqAdosHVY0+6bflXHzJWtO/PKhNVu3bch3DT2OdKrpxXT+LnPo8KkxO4BckNoB RxIzxlFq2jYloFcSsYBk7styAEjD4EkuEHtU7Y6sa9kAAWftLSz/usLQTnH3LiAi Wgos2kCkECzaBcJlAJqqLMO8pP+LCZlq4mFupiI47TXAnUEK7zGtaXoPHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuDDMW76Vp5KiCSdRtb4fZOSGg9MB8GA1UdIwQY MBaAFG3ykyEtJdSGPjhrnEgN3JvnOBJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZLVElTMGwxSVktT0d1Y1NBM2NtLWM0RWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZWNiOGEtZDc2My00NjQyLTgwMzYt ZjQwMDQwMmI1MzZjLzEvcTRNTXhidnBXbmtxSUpKMUcxdmg5azVJYUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZWNiOGEtZDc2My00NjQyLTgwMzYtZjQwMDQwMmI1MzZj LzEvYmZLVElTMGwxSVktT0d1Y1NBM2NtLWM0RWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFF5MA0G CSqGSIb3DQEBCwUAA4IBAQBhGhPoBH9ivTzoZwUyxEDc71/3zXlr6EG0AC1sF6kU C/AzoKSp5Y73Q1LCx3zbSq70N0OR88SPpVjiDgBq3cf1WOa21d7ONPDQZ8g+G2Yg 1TvZPXC9UnQ6dmwxGtzvT+Ytd1JwW5/9fRDRtBLKM00z86+r1fEjVbjgFemykRux p4z1LBD5o/8m11sEY007TRKfdVePje7NmE3c/3e+95Fs/KOMXcj/n8nqvaqnA/Pw HRTV8raWXZBwVujyd4goAfovk/sPDnuRY1s6+Yvfw81gkbRh9rj++2rQuq/k9YeZ 7e5xrF4f2t+jTbJToii9nLmR8tQVPNar+LAoOehegGZS -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:13 2026 by rpki-client