This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/kqgMt21-DFLMw82FOeig-EaUgf0.roa File: kqgMt21-DFLMw82FOeig-EaUgf0.roa (raw, json) Hash identifier: IMAdg24Zv5aLWg8Ll0N/xPxQR4lu+BjbaXj/E4I85pM= Subject key identifier: 92:A8:0C:B7:6D:7E:0C:52:CC:C3:CD:85:39:E8:A0:F8:46:94:81:FD Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF273AA1E66C902D8EEAE906EE4AB43 Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/kqgMt21-DFLMw82FOeig-EaUgf0.roa Signing time: Fri 02 Jan 2026 18:22:34 +0000 ROA not before: Fri 02 Jan 2026 18:22:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49704 IP address blocks: 82.119.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:73:aa:1e:66:c9:02:d8:ee:ae:90:6e:e4:ab:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92a80cb76d7e0c52ccc3cd8539e8a0f8469481fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:b1:78:68:7f:1e:ea:93:fb:13:dd:88:0d: 0f:45:b8:4a:1c:f0:67:da:29:15:f9:e3:16:9c:3b: 86:f6:58:41:31:54:12:e0:3d:ef:5d:09:30:a1:09: 0a:05:a4:25:5b:96:da:ea:24:c2:c3:78:5b:0a:f9: 3a:8c:89:79:2a:a6:bd:37:82:18:48:cb:da:be:80: df:15:f9:17:d8:3a:36:ae:44:6d:61:ba:7d:81:41: 4c:70:4d:ef:91:bf:3e:4b:e8:ec:a7:12:bb:b6:2e: 46:c2:fe:a3:3d:3a:64:1f:8a:1d:cd:c4:ae:e5:06: 16:e0:3b:db:00:b9:57:8b:14:52:9f:de:7d:ce:f4: a6:e3:39:8b:cf:24:ca:39:31:ad:ce:f2:7d:09:d1: ae:e7:0e:2b:3e:7f:6c:cd:70:c6:a6:bc:66:d4:e0: 22:ae:ad:20:a7:f9:33:6e:d1:85:9c:32:37:2a:91: 0e:66:a1:67:13:a1:be:8f:75:c1:b7:c9:31:8d:ca: 3e:b9:6f:1f:57:2a:45:25:3a:84:b5:ae:7a:d3:67: b5:b8:5d:01:ef:b1:01:10:3e:cf:d4:81:ec:a6:25: 29:55:6f:39:e0:7b:06:4a:7c:c1:99:b7:d6:1d:80: 4b:10:41:1e:89:89:34:28:f8:51:2a:be:4c:ca:e5: 93:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A8:0C:B7:6D:7E:0C:52:CC:C3:CD:85:39:E8:A0:F8:46:94:81:FD X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/kqgMt21-DFLMw82FOeig-EaUgf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.91.0/24 Signature Algorithm: sha256WithRSAEncryption 75:dd:a0:f8:11:92:d9:70:6e:f9:a5:f2:d1:ea:a1:26:36:4e: 39:f3:ce:7a:40:62:2d:69:f7:dd:50:fa:cc:a9:d2:90:f1:15: 11:0a:bf:8e:09:34:d5:d4:c8:f6:a9:89:f0:b5:7d:c4:13:8a: f5:3e:72:b6:63:48:f5:aa:45:f1:a3:9d:ea:ff:35:8c:7a:08: 97:03:f6:ee:39:0e:a6:76:65:91:4b:03:70:82:51:8d:b7:9d: 83:a9:55:18:73:6f:33:44:e8:a8:31:16:18:dd:ab:35:2c:f1: 17:1f:ac:cb:88:fe:ed:e5:65:ad:ec:e0:2a:32:e3:0d:7b:fe: 34:4b:c2:a6:60:09:9c:87:28:26:f1:47:8a:21:9c:0d:b7:1a: c3:44:39:18:a3:03:ea:dd:3c:98:46:4b:78:3f:94:16:f2:26: b3:c4:8a:70:ae:fc:cb:6b:f9:6a:5b:fe:1c:bf:76:e2:85:62: 06:cc:bf:b6:3a:11:46:f7:65:26:76:10:e6:4c:43:f5:2d:86: e8:88:f9:61:71:ee:48:f3:da:ee:ab:88:5b:f8:60:cf:16:6d: e7:46:5b:77:86:c2:92:63:ba:bd:54:c6:a7:c7:db:6d:67:42: c6:13:f1:fd:19:61:41:5e:3f:37:25:27:bd:40:26:8e:e5:c2: ad:99:66:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8nOqHmbJAtjurpBu5KtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmE4MGNiNzZkN2UwYzUyY2NjM2NkODUzOWU4YTBmODQ2OTQ4MWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRGxeGh/HuqT+xPdiA0PRbhKHPBn 2ikV+eMWnDuG9lhBMVQS4D3vXQkwoQkKBaQlW5ba6iTCw3hbCvk6jIl5Kqa9N4IY SMvavoDfFfkX2Do2rkRtYbp9gUFMcE3vkb8+S+jspxK7ti5Gwv6jPTpkH4odzcSu 5QYW4DvbALlXixRSn959zvSm4zmLzyTKOTGtzvJ9CdGu5w4rPn9szXDGprxm1OAi rq0gp/kzbtGFnDI3KpEOZqFnE6G+j3XBt8kxjco+uW8fVypFJTqEta5602e1uF0B 77EBED7P1IHspiUpVW854HsGSnzBmbfWHYBLEEEeiYk0KPhRKr5MyuWTXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKoDLdtfgxSzMPNhTnooPhGlIH9MB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEva3FnTXQyMS1ERkxNdzgyRk9laWctRWFVZ2YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUndbMA0G CSqGSIb3DQEBCwUAA4IBAQB13aD4EZLZcG75pfLR6qEmNk458856QGItaffdUPrM qdKQ8RURCr+OCTTV1Mj2qYnwtX3EE4r1PnK2Y0j1qkXxo53q/zWMegiXA/buOQ6m dmWRSwNwglGNt52DqVUYc28zROioMRYY3as1LPEXH6zLiP7t5WWt7OAqMuMNe/40 S8KmYAmchygm8UeKIZwNtxrDRDkYowPq3TyYRkt4P5QW8iazxIpwrvzLa/lqW/4c v3bihWIGzL+2OhFG92UmdhDmTEP1LYboiPlhce5I89ruq4hb+GDPFm3nRlt3hsKS Y7q9VManx9ttZ0LGE/H9GWFBXj83JSe9QCaO5cKtmWbv -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:30 2026 by rpki-client