This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qKwJ65bEBbzVkEbbmo3MSUV6CTI.roa File: qKwJ65bEBbzVkEbbmo3MSUV6CTI.roa (raw, json) Hash identifier: OPVBEl0Rlw+nDfgKAGe+WyCqW4KurkQqR50ZHboGVgs= Subject key identifier: A8:AC:09:EB:96:C4:05:BC:D5:90:46:DB:9A:8D:CC:49:45:7A:09:32 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14F9A75D0DA48F62223042EBC8EE1E Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qKwJ65bEBbzVkEbbmo3MSUV6CTI.roa Signing time: Fri 02 Jan 2026 14:20:39 +0000 ROA not before: Fri 02 Jan 2026 14:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43395 IP address blocks: 81.12.90.0/23 maxlen: 23 87.107.31.0/24 maxlen: 24 87.107.32.0/23 maxlen: 23 87.107.85.0/24 maxlen: 24 87.107.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f9:a7:5d:0d:a4:8f:62:22:30:42:eb:c8:ee:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8ac09eb96c405bcd59046db9a8dcc49457a0932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:c6:3e:7d:04:7f:ed:93:99:62:31:01:ee: 5d:ad:11:7f:86:87:78:27:9d:7c:84:f0:40:73:ce: fa:69:a2:7a:e3:90:64:b7:00:66:c2:e0:61:ac:c4: a2:52:36:f1:e1:96:f4:e0:1a:17:66:25:70:88:0c: 2f:35:8a:bb:7f:c7:45:81:46:a6:8d:83:08:8a:44: 30:aa:7b:be:dc:67:0e:4f:59:37:ec:da:a9:7b:45: a3:4f:84:f1:1a:30:5d:47:28:47:51:3d:9b:e0:89: e4:cd:cd:bf:9e:9e:ce:c9:6a:1c:65:61:21:81:54: 3c:35:1d:95:d0:14:4f:22:80:e3:f1:15:42:36:b9: 44:f8:07:92:ee:22:67:2c:b1:dd:f2:26:f3:13:90: 4e:d1:e9:60:a2:67:0f:9b:cb:c1:1a:e0:3f:17:8d: 74:24:c7:cf:93:11:9e:c0:3a:a8:e3:20:f1:32:57: 8e:7c:dd:48:6d:9b:3e:b9:cb:99:25:11:55:b3:ec: e3:c6:b2:b2:41:aa:35:10:6a:ec:31:e2:ac:59:ee: 68:e2:b6:06:00:02:ef:ee:f7:54:e9:32:72:01:aa: 0d:63:db:fc:ea:70:ea:46:99:0f:e5:b2:9a:0c:5e: 87:72:8d:8f:90:a7:9f:e1:99:7d:ac:dc:8a:f2:57: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AC:09:EB:96:C4:05:BC:D5:90:46:DB:9A:8D:CC:49:45:7A:09:32 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qKwJ65bEBbzVkEbbmo3MSUV6CTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.12.90.0/23 87.107.31.0-87.107.33.255 87.107.85.0/24 87.107.142.0/23 Signature Algorithm: sha256WithRSAEncryption 69:9f:95:b4:2d:fc:ee:95:be:ac:4e:1e:ad:8f:1c:45:c8:cb: 3d:c2:44:ce:51:15:80:c5:bb:cc:be:39:d7:c7:9a:0f:03:60: 3a:b3:ec:92:f3:c3:10:22:1a:b3:8f:07:93:5d:77:f6:a5:c8: 13:5e:d8:b4:9d:ef:32:e3:d2:0a:42:d3:b5:be:43:11:41:b3: 21:c2:66:23:ea:64:fa:8e:b9:25:3a:e5:5c:4c:08:81:45:51: 5b:f7:6a:cb:18:4a:18:d8:2d:b7:f2:60:de:3e:1e:5e:e7:e7: 62:c7:ec:a0:1b:cd:f6:3a:cf:0a:58:87:ca:26:7c:68:57:e1: 77:46:f7:ca:67:c9:c6:08:86:cf:d0:7e:f3:f1:a3:6c:aa:ea: 3d:8a:75:4c:57:cd:34:b0:d1:c0:92:6e:c1:0a:45:0b:28:45: f1:d4:9f:82:b1:b7:ef:ae:bc:6c:e4:3e:cf:61:b5:31:e0:f8: 3c:42:b5:fc:24:a0:b6:90:34:f2:ad:ef:60:58:fb:19:8a:e0: a9:d9:15:30:d6:68:c0:b5:5a:a2:8e:ae:9c:0b:59:e9:9b:c8: 39:12:93:4d:21:a3:f7:86:99:1c:72:e6:d6:d3:27:ee:1e:b5: 46:f4:27:ac:79:49:53:f9:44:77:b1:d7:e2:b1:f5:2e:af:7c: c0:b5:5e:c5 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FPmnXQ2kj2IiMELryO4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGFjMDllYjk2YzQwNWJjZDU5MDQ2ZGI5YThkY2M0OTQ1N2EwOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG7GPn0Ef+2TmWIxAe5drRF/hod4 J518hPBAc876aaJ645BktwBmwuBhrMSiUjbx4Zb04BoXZiVwiAwvNYq7f8dFgUam jYMIikQwqnu+3GcOT1k37Nqpe0WjT4TxGjBdRyhHUT2b4Inkzc2/np7OyWocZWEh gVQ8NR2V0BRPIoDj8RVCNrlE+AeS7iJnLLHd8ibzE5BO0elgomcPm8vBGuA/F410 JMfPkxGewDqo4yDxMleOfN1IbZs+ucuZJRFVs+zjxrKyQao1EGrsMeKsWe5o4rYG AALv7vdU6TJyAaoNY9v86nDqRpkP5bKaDF6Hco2PkKef4Zl9rNyK8le/YwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKisCeuWxAW81ZBG25qNzElFegkyMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvcUt3SjY1YkVCYnpWa0ViYm1vM01TVVY2Q1RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBUQxaMAwD BABXax8DBAFXayADBABXa1UDBAFXa44wDQYJKoZIhvcNAQELBQADggEBAGmflbQt /O6VvqxOHq2PHEXIyz3CRM5RFYDFu8y+OdfHmg8DYDqz7JLzwxAiGrOPB5Ndd/al yBNe2LSd7zLj0gpC07W+QxFBsyHCZiPqZPqOuSU65VxMCIFFUVv3assYShjYLbfy YN4+Hl7n52LH7KAbzfY6zwpYh8omfGhX4XdG98pnycYIhs/QfvPxo2yq6j2KdUxX zTSw0cCSbsEKRQsoRfHUn4Kxt++uvGzkPs9htTHg+DxCtfwkoLaQNPKt72BY+xmK 4KnZFTDWaMC1WqKOrpwLWembyDkSk00ho/eGmRxy5tbTJ+4etUb0J6x5SVP5RHex 1+Kx9S6vfMC1XsU= -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:33 2026 by rpki-client