This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/qdUh2hSoqgeqIRg-X_UezX9LadQ.roa File: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (raw, json) Hash identifier: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA= Subject key identifier: A9:D5:21:DA:14:A8:AA:07:AA:21:18:3E:5F:F5:1E:CD:7F:4B:69:D4 Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Certificate serial: 019B7F857F4849A5EBA50268D153A4B85082 Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/qdUh2hSoqgeqIRg-X_UezX9LadQ.roa Signing time: Fri 02 Jan 2026 16:23:33 +0000 ROA not before: Fri 02 Jan 2026 16:23:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42244 IP address blocks: 91.189.80.0/23 maxlen: 23 91.189.82.0/24 maxlen: 24 91.189.84.0/23 maxlen: 23 91.189.86.0/23 maxlen: 23 178.218.208.0/23 maxlen: 23 178.218.210.0/23 maxlen: 23 178.218.212.0/22 maxlen: 22 178.218.216.0/23 maxlen: 23 178.218.218.0/24 maxlen: 24 178.218.220.0/23 maxlen: 23 178.218.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:7f:48:49:a5:eb:a5:02:68:d1:53:a4:b8:50:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Validity Not Before: Jan 2 16:23:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9d521da14a8aa07aa21183e5ff51ecd7f4b69d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:11:db:1f:9f:b6:d0:28:a7:27:65:4a:ab: 43:7e:fc:bc:9e:d2:ad:03:dd:77:89:99:db:fc:be: cc:ed:37:9c:72:52:9e:cd:46:cc:5b:bc:6f:e9:35: 37:f1:68:1a:19:b3:64:fb:34:1e:10:c5:3d:bb:79: d1:9a:cc:7d:d0:6e:00:44:35:54:c5:08:41:ad:e7: cc:05:f9:16:61:56:84:55:90:84:a6:48:69:06:8d: 7b:df:c1:66:f1:72:76:4a:c1:4a:97:41:33:67:a3: df:ff:a2:fa:88:7e:88:63:ba:e4:c4:16:fe:56:a9: 27:e0:29:3f:34:15:16:52:d6:7c:70:e0:bd:3a:9e: bb:12:0c:5a:33:26:d7:90:06:72:52:e5:d0:13:27: 6f:c0:75:2d:d1:fa:e6:39:6a:c5:2c:19:31:1c:9a: b0:9b:c6:31:49:dd:ad:b4:82:2b:48:0a:fc:11:14: 66:be:2c:b3:50:57:f7:20:a5:a0:51:68:48:77:04: a5:9d:10:e0:2b:f3:d5:a1:5f:be:1c:fb:b0:f8:4b: cf:9b:43:d8:e1:68:c6:9e:15:92:2d:69:07:65:0e: 92:eb:8d:a3:a6:30:83:78:24:ed:fc:de:2c:e4:63: 66:a0:5c:72:1a:61:66:33:c1:69:fb:c4:36:14:5a: 5f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D5:21:DA:14:A8:AA:07:AA:21:18:3E:5F:F5:1E:CD:7F:4B:69:D4 X509v3 Authority Key Identifier: keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/qdUh2hSoqgeqIRg-X_UezX9LadQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.189.80.0-91.189.82.255 91.189.84.0/22 178.218.208.0-178.218.218.255 178.218.220.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:49:68:78:da:1e:94:ec:b9:60:3e:b1:04:01:b4:9e:63:a6: 09:cf:bc:35:ce:74:ef:6c:cf:c5:72:7b:d2:d0:7d:89:be:9d: e3:01:8b:a9:b1:bb:a3:15:60:ff:a6:31:a5:98:6a:08:ed:7d: a3:13:9e:3a:ff:30:cb:0d:a9:8e:19:27:76:e7:69:b1:3c:be: 92:db:1c:bc:fe:db:d9:86:ad:82:61:08:38:35:9a:d0:b9:0a: ed:97:10:56:99:80:37:eb:28:ef:92:45:e6:ef:56:dc:0d:4a: 8a:21:cd:7b:7b:29:35:d1:1f:dc:9e:aa:44:0b:c7:37:d9:77: e5:a7:a2:b8:7d:cc:fa:74:dc:47:42:f9:92:19:dc:e1:78:4a: d8:c6:2b:a9:43:78:f9:cb:bd:67:85:21:a6:32:53:45:8c:b8: 12:a9:96:ef:e6:11:b7:a3:4c:4e:4d:aa:86:3c:25:cf:35:5e: 66:a0:9b:49:b9:0f:ef:7e:14:a9:f2:d1:96:42:c5:a3:1c:01: 68:d5:d6:b9:c4:a6:c0:39:1e:69:79:b5:b2:a8:86:16:2f:bf: 97:70:31:11:9c:e9:04:51:89:2b:8b:4c:5d:ee:65:1a:40:24: a2:63:a7:b2:d3:52:ba:1e:33:9a:65:d8:6e:0e:1b:80:a2:46: ed:2a:b3:4d -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/hX9ISaXrpQJo0VOkuFCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi MTc2ZjEwHhcNMjYwMTAyMTYyMzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWQ1MjFkYTE0YThhYTA3YWEyMTE4M2U1ZmY1MWVjZDdmNGI2OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY0R2x+fttAopydlSqtDfvy8ntKt A913iZnb/L7M7TecclKezUbMW7xv6TU38WgaGbNk+zQeEMU9u3nRmsx90G4ARDVU xQhBrefMBfkWYVaEVZCEpkhpBo1738Fm8XJ2SsFKl0EzZ6Pf/6L6iH6IY7rkxBb+ Vqkn4Ck/NBUWUtZ8cOC9Op67EgxaMybXkAZyUuXQEydvwHUt0frmOWrFLBkxHJqw m8YxSd2ttIIrSAr8ERRmviyzUFf3IKWgUWhIdwSlnRDgK/PVoV++HPuw+EvPm0PY 4WjGnhWSLWkHZQ6S642jpjCDeCTt/N4s5GNmoFxyGmFmM8Fp+8Q2FFpfqQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFKnVIdoUqKoHqiEYPl/1Hs1/S2nUMB8GA1UdIwQY MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt MWEyYWJkYTFhOWU1LzEvcWRVaDJoU29xZ2VxSVJnLVhfVWV6WDlMYWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1 LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBARbvVAD BABbvVIDBAJbvVQwDAMEBLLa0AMEALLa2gMEArLa3DANBgkqhkiG9w0BAQsFAAOC AQEAjEloeNoelOy5YD6xBAG0nmOmCc+8Nc5072zPxXJ70tB9ib6d4wGLqbG7oxVg /6YxpZhqCO19oxOeOv8wyw2pjhkndudpsTy+ktscvP7b2YatgmEIODWa0LkK7ZcQ VpmAN+so75JF5u9W3A1KiiHNe3spNdEf3J6qRAvHN9l35aeiuH3M+nTcR0L5khnc 4XhK2MYrqUN4+cu9Z4UhpjJTRYy4EqmW7+YRt6NMTk2qhjwlzzVeZqCbSbkP734U qfLRlkLFoxwBaNXWucSmwDkeaXm1sqiGFi+/l3AxEZzpBFGJK4tMXe5lGkAkomOn stNSuh4zmmXYbg4bgKJG7SqzTQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:41 2026 by rpki-client