This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa File: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (raw, json) Hash identifier: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM= Subject key identifier: 7E:A9:EA:81:1F:9A:C5:59:CA:9C:0D:0F:D4:C3:4C:38:43:E5:38:A4 Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575 Certificate serial: 019B783548B308EB4DA90318CBE2E4E56FFA Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa Signing time: Thu 01 Jan 2026 06:18:36 +0000 ROA not before: Thu 01 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41887 IP address blocks: 81.23.230.0/23 maxlen: 23 81.23.230.0/24 maxlen: 24 81.23.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:48:b3:08:eb:4d:a9:03:18:cb:e2:e4:e5:6f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ea9ea811f9ac559ca9c0d0fd4c34c3843e538a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:68:fc:c1:8d:49:0c:22:af:88:1d:d0:fd: 47:c3:7f:9d:da:76:09:0c:07:42:da:c2:c4:ba:8c: cb:05:23:ac:1c:03:46:18:35:ba:a3:b9:95:51:cb: ce:19:d7:6e:3b:90:53:78:23:6b:7b:4e:cf:e4:fe: 32:69:17:37:d4:2c:f1:83:e3:6c:6a:a1:69:1f:5b: a5:1a:f9:da:44:25:e1:85:bc:6f:c0:89:fd:ef:1d: 8e:0b:83:e2:be:f9:88:3a:b2:ce:3a:c8:60:7f:02: 7d:f7:96:56:c9:97:6f:da:9b:d6:2f:24:3d:76:3c: ae:b1:21:15:58:b1:0c:57:06:a5:e0:7c:46:2c:3c: 31:54:c6:06:70:04:7d:eb:ea:c2:cf:4d:2d:c5:c7: ff:15:12:dd:a2:4e:1e:fc:62:fd:05:c6:22:22:1c: c6:da:44:04:f2:20:70:d6:0a:f0:74:ee:41:39:e3: 75:2b:4a:61:13:83:37:a3:36:c4:c4:81:75:8c:af: e1:29:a9:8c:0a:87:ef:43:03:89:c8:c9:60:b6:67: 33:52:e9:bf:96:16:1e:d4:b3:19:34:18:31:9a:ee: df:da:3e:8e:24:62:ca:ea:88:99:a2:c8:19:d1:d5: b5:27:45:38:7f:fc:29:3f:68:c5:fc:22:ad:bd:20: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A9:EA:81:1F:9A:C5:59:CA:9C:0D:0F:D4:C3:4C:38:43:E5:38:A4 X509v3 Authority Key Identifier: keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.23.230.0/23 Signature Algorithm: sha256WithRSAEncryption 59:f2:90:39:4d:d6:fb:d1:ae:83:7a:74:71:4a:23:97:cd:85: 9d:10:7c:33:95:f4:9d:90:a1:2d:ad:f8:94:47:54:74:86:68: 04:75:11:8d:c5:90:c9:a1:40:31:98:16:eb:0a:8f:7a:de:16: 89:3a:c2:10:f9:06:54:4b:a6:05:20:cd:3c:2a:a1:e8:e6:7a: 1f:2c:71:29:7b:d9:ec:60:78:d4:ac:1b:1b:72:9c:6c:ef:0c: 01:50:2c:1b:20:d1:ac:bc:7e:65:10:2b:27:3e:ae:3e:9e:9c: b1:a5:38:d7:55:09:2e:75:d4:30:db:e5:00:f1:cf:47:89:8d: 53:5e:f4:d2:3e:1c:f7:91:03:58:e6:e6:06:05:85:5e:78:7e: 7d:fe:81:b2:f7:96:a3:a5:66:65:53:8c:2d:6e:1e:67:30:31: d6:98:fb:0f:7d:d6:06:b4:a1:1c:c7:e5:c8:7e:fb:ed:c0:f2: ee:eb:0d:bf:13:82:0a:aa:d7:8c:10:88:ee:23:f9:f2:cd:17: 65:51:99:bb:ba:e7:57:1c:16:1a:af:59:91:aa:c6:28:d1:b4: 61:4e:0b:8b:03:62:6c:15:54:22:0a:c3:fe:a9:e2:a8:c1:3f: 4a:17:b7:bb:7c:1e:41:3a:e3:8d:f3:99:ba:80:52:bc:2f:64: 4e:bc:d2:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUizCOtNqQMYy+Lk5W/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDhjMzJhNzAzOTcyYWFlYTA5M2EwMWY4ZGVkZjU3Zjk2 NzU1NzUwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWE5ZWE4MTFmOWFjNTU5Y2E5YzBkMGZkNGMzNGMzODQzZTUzOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O5o/MGNSQwir4gd0P1Hw3+d2nYJ DAdC2sLEuozLBSOsHANGGDW6o7mVUcvOGdduO5BTeCNre07P5P4yaRc31Czxg+Ns aqFpH1ulGvnaRCXhhbxvwIn97x2OC4PivvmIOrLOOshgfwJ995ZWyZdv2pvWLyQ9 djyusSEVWLEMVwal4HxGLDwxVMYGcAR96+rCz00txcf/FRLdok4e/GL9BcYiIhzG 2kQE8iBw1grwdO5BOeN1K0phE4M3ozbExIF1jK/hKamMCofvQwOJyMlgtmczUum/ lhYe1LMZNBgxmu7f2j6OJGLK6oiZosgZ0dW1J0U4f/wpP2jF/CKtvSAb/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH6p6oEfmsVZypwND9TDTDhD5TikMB8GA1UdIwQY MBaAFJHYwypwOXKq6gk6Afje31f5Z1V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEt M2MxMjc4MWUyMDJkLzEvZnFucWdSLWF4Vm5LbkEwUDFNTk1PRVBsT0tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEtM2MxMjc4MWUyMDJk LzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBURfmMA0G CSqGSIb3DQEBCwUAA4IBAQBZ8pA5Tdb70a6DenRxSiOXzYWdEHwzlfSdkKEtrfiU R1R0hmgEdRGNxZDJoUAxmBbrCo963haJOsIQ+QZUS6YFIM08KqHo5nofLHEpe9ns YHjUrBsbcpxs7wwBUCwbINGsvH5lECsnPq4+npyxpTjXVQkuddQw2+UA8c9HiY1T XvTSPhz3kQNY5uYGBYVeeH59/oGy95ajpWZlU4wtbh5nMDHWmPsPfdYGtKEcx+XI fvvtwPLu6w2/E4IKqteMEIjuI/nyzRdlUZm7uudXHBYar1mRqsYo0bRhTguLA2Js FVQiCsP+qeKowT9KF7e7fB5BOuON85m6gFK8L2ROvNKs -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:25 2026 by rpki-client