This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/qOQMcO_XSSMHONHJzrh7779P3jo.roa File: qOQMcO_XSSMHONHJzrh7779P3jo.roa (raw, json) Hash identifier: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU= Subject key identifier: A8:E4:0C:70:EF:D7:49:23:07:38:D1:C9:CE:B8:7B:EF:BF:4F:DE:3A Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16 Certificate serial: 019B7F82FEEC4F1CF71088306C3877D261D3 Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/qOQMcO_XSSMHONHJzrh7779P3jo.roa Signing time: Fri 02 Jan 2026 16:20:49 +0000 ROA not before: Fri 02 Jan 2026 16:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48955 IP address blocks: 89.35.80.0/23 maxlen: 23 89.40.222.0/23 maxlen: 23 89.45.124.0/23 maxlen: 23 91.193.24.0/24 maxlen: 24 91.235.207.0/24 maxlen: 24 92.42.0.0/24 maxlen: 24 185.98.158.0/24 maxlen: 24 193.33.105.0/24 maxlen: 24 193.176.99.0/24 maxlen: 24 193.239.176.0/24 maxlen: 24 194.106.206.0/24 maxlen: 24 194.169.202.0/24 maxlen: 24 195.35.100.0/24 maxlen: 24 195.189.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:fe:ec:4f:1c:f7:10:88:30:6c:38:77:d2:61:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Validity Not Before: Jan 2 16:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8e40c70efd749230738d1c9ceb87befbf4fde3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:17:c7:5e:dc:ba:b6:c9:9a:63:34:5b:f3: 36:0a:13:f5:2f:88:97:e9:61:33:f4:56:42:fe:00: df:8a:b9:17:31:76:9e:0a:81:e1:ce:a4:33:07:3c: a4:5a:58:3e:64:e2:19:e9:a0:dc:e1:1d:e6:70:82: 4e:26:66:c8:34:27:a9:6e:89:b5:45:78:67:85:84: 5b:fd:d9:3a:70:ad:73:99:eb:42:fe:e2:b8:69:7a: a4:72:55:07:02:1a:91:89:4d:93:31:80:25:83:0a: a2:04:22:aa:57:34:af:b4:26:f4:da:2c:24:5b:fd: 71:28:dd:db:eb:8d:59:fc:44:1e:ee:52:36:11:ea: 8e:0a:ea:49:78:10:34:76:11:43:1d:9a:3a:51:c7: 33:2f:39:ee:8d:e6:0c:c8:b5:bd:2f:a7:e3:34:88: e1:a3:61:ac:51:6a:c6:cf:cf:da:69:d0:d3:0e:ed: 0c:6f:1a:8a:00:4d:89:1c:12:0a:67:3f:48:c1:dd: a7:a5:79:98:ee:56:d4:71:44:b9:cd:14:d3:73:4a: 2e:9d:a7:58:03:68:80:60:96:1c:c3:6d:cc:9c:10: f0:89:0e:7d:32:b7:62:5c:6d:3d:9a:1a:8e:42:46: 3d:9e:c6:1f:71:3f:1c:ff:23:b4:1a:54:51:da:73: 51:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E4:0C:70:EF:D7:49:23:07:38:D1:C9:CE:B8:7B:EF:BF:4F:DE:3A X509v3 Authority Key Identifier: keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/qOQMcO_XSSMHONHJzrh7779P3jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.80.0/23 89.40.222.0/23 89.45.124.0/23 91.193.24.0/24 91.235.207.0/24 92.42.0.0/24 185.98.158.0/24 193.33.105.0/24 193.176.99.0/24 193.239.176.0/24 194.106.206.0/24 194.169.202.0/24 195.35.100.0/24 195.189.156.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:c0:c3:b3:f6:7f:6e:63:09:27:e2:cc:1f:dc:77:74:48:93: 25:f9:9b:a7:2c:3d:90:84:be:2b:5e:43:24:03:59:2a:9d:6a: cf:96:38:4b:0a:7b:ff:3c:96:08:62:16:5e:3a:00:48:b4:54: a3:21:17:d7:96:67:96:9e:50:be:92:f0:07:eb:37:36:82:fc: 12:2d:f3:26:15:e8:ae:65:fe:3d:21:db:1c:5e:31:f7:b5:7a: cd:01:55:a3:ab:09:19:62:f8:56:b7:9e:2e:29:c9:8b:b5:58: d0:29:aa:c9:ed:3f:37:41:e2:9a:51:db:d1:af:00:33:28:4b: 0c:57:b1:dd:c7:47:af:f4:b2:99:3e:f2:bb:b8:87:19:05:45: fe:54:f1:22:12:2a:a5:04:29:e1:ed:08:b8:50:06:d2:ab:9f: 68:b2:ca:3c:52:2c:47:ec:5a:a9:cc:71:9b:c0:fc:5b:9a:be: 13:0e:15:87:4b:3e:02:0d:1b:fd:71:2f:8c:6c:b5:92:ce:52: e4:4a:4b:e7:f7:88:e1:3b:91:ea:06:29:fe:62:b1:6c:0a:e2: 17:e8:70:6f:8a:00:84:92:be:d6:48:e3:a1:b5:8e:d0:79:d8: a9:d7:b8:3a:f7:07:0e:f0:0f:d9:bd:ef:8b:d2:f4:de:0d:08: 36:3e:fc:97 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt/gv7sTxz3EIgwbDh30mHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx MGRlMTYwHhcNMjYwMTAyMTYyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGU0MGM3MGVmZDc0OTIzMDczOGQxYzljZWI4N2JlZmJmNGZkZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI0Xx17curbJmmM0W/M2ChP1L4iX 6WEz9FZC/gDfirkXMXaeCoHhzqQzBzykWlg+ZOIZ6aDc4R3mcIJOJmbINCepbom1 RXhnhYRb/dk6cK1zmetC/uK4aXqkclUHAhqRiU2TMYAlgwqiBCKqVzSvtCb02iwk W/1xKN3b641Z/EQe7lI2EeqOCupJeBA0dhFDHZo6UcczLznujeYMyLW9L6fjNIjh o2GsUWrGz8/aadDTDu0MbxqKAE2JHBIKZz9Iwd2npXmY7lbUcUS5zRTTc0ounadY A2iAYJYcw23MnBDwiQ59MrdiXG09mhqOQkY9nsYfcT8c/yO0GlRR2nNRGwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFKjkDHDv10kjBzjRyc64e++/T946MB8GA1UdIwQY MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt YmMwZGJhOTMyYjM1LzEvcU9RTWNPX1hTU01IT05ISnpyaDc3NzlQM2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1 LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQBWSNQAwQB WSjeAwQBWS18AwQAW8EYAwQAW+vPAwQAXCoAAwQAuWKeAwQAwSFpAwQAwbBjAwQA we+wAwQAwmrOAwQAwqnKAwQAwyNkAwQAw72cMA0GCSqGSIb3DQEBCwUAA4IBAQBL wMOz9n9uYwkn4swf3Hd0SJMl+ZunLD2QhL4rXkMkA1kqnWrPljhLCnv/PJYIYhZe OgBItFSjIRfXlmeWnlC+kvAH6zc2gvwSLfMmFeiuZf49IdscXjH3tXrNAVWjqwkZ YvhWt54uKcmLtVjQKarJ7T83QeKaUdvRrwAzKEsMV7Hdx0ev9LKZPvK7uIcZBUX+ VPEiEiqlBCnh7Qi4UAbSq59osso8UixH7FqpzHGbwPxbmr4TDhWHSz4CDRv9cS+M bLWSzlLkSkvn94jhO5HqBin+YrFsCuIX6HBvigCEkr7WSOOhtY7Qedip17g69wcO 8A/Zve+L0vTeDQg2PvyX -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:16 2026 by rpki-client