This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/rqerlNmrLuq2_e9gT61g1lPKhKw.roa File: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (raw, json) Hash identifier: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI= Subject key identifier: AE:A7:AB:94:D9:AB:2E:EA:B6:FD:EF:60:4F:AD:60:D6:53:CA:84:AC Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Certificate serial: 019B77588F3DC11085D80414ECBC803699BA Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/rqerlNmrLuq2_e9gT61g1lPKhKw.roa Signing time: Thu 01 Jan 2026 02:17:31 +0000 ROA not before: Thu 01 Jan 2026 02:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210078 IP address blocks: 91.247.120.0/23 maxlen: 23 91.247.122.0/24 maxlen: 24 91.247.125.0/24 maxlen: 24 109.200.136.0/22 maxlen: 22 109.200.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8f:3d:c1:10:85:d8:04:14:ec:bc:80:36:99:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Validity Not Before: Jan 1 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aea7ab94d9ab2eeab6fdef604fad60d653ca84ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:40:4e:7f:72:51:b4:a9:b3:39:db:55:02: 29:22:1f:63:5f:49:71:0b:72:d3:83:c4:12:d2:b5: 19:46:ab:56:40:30:10:d0:94:e8:47:e3:9c:a2:ea: 31:91:84:94:71:fb:14:b6:0a:8e:16:aa:33:a3:17: 58:26:11:05:41:d1:39:2a:5c:bd:fb:1c:28:9c:df: d8:09:ef:c4:82:6b:44:6a:99:ca:6d:c1:34:c3:af: 0f:7d:3d:fd:29:c2:81:28:45:b7:cd:63:b3:ad:5c: 57:f3:af:14:67:84:af:7f:1a:b0:a9:46:43:78:3f: 8a:58:a9:e1:d7:4c:02:ee:9a:c5:23:f3:e1:a4:fa: bb:b2:74:30:82:37:47:b6:76:73:78:70:35:cf:ae: 8f:8c:72:f6:d5:6c:d6:ae:e2:94:03:38:a8:81:e4: 93:19:67:c6:2b:e2:5a:90:5c:f2:95:b1:0c:30:45: 66:f4:01:d5:0b:4d:90:94:af:02:d6:52:a8:3d:b0: f8:65:01:c2:91:e2:1a:c4:dd:4a:26:68:e8:4b:bd: 0f:7e:ef:4a:27:14:7d:68:20:d5:c8:0a:f9:6c:f9: 58:06:cd:c9:c4:16:96:21:36:7b:b4:c6:e4:8d:59: b8:4e:8b:7c:ed:83:56:d7:dc:f2:80:47:b7:ad:d8: 27:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A7:AB:94:D9:AB:2E:EA:B6:FD:EF:60:4F:AD:60:D6:53:CA:84:AC X509v3 Authority Key Identifier: keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/rqerlNmrLuq2_e9gT61g1lPKhKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.247.120.0-91.247.122.255 91.247.125.0/24 109.200.136.0-109.200.141.255 Signature Algorithm: sha256WithRSAEncryption 79:e1:ce:e0:19:3d:99:97:ac:64:87:93:3f:ed:43:d3:3c:3c: 6b:e8:58:3f:5e:29:ba:e8:f0:74:52:e4:cf:6e:a9:f0:27:1e: b1:f5:87:22:44:c3:62:69:3c:62:20:25:b5:60:5c:19:16:ac: 09:5c:10:b4:c8:06:94:e0:69:e3:8d:1d:1c:8d:52:d9:fb:35: 64:12:24:99:ee:3a:58:86:eb:39:fa:40:b6:0c:ef:ef:03:31: 17:72:54:d2:20:68:93:9c:1f:bf:61:1e:ce:35:ac:d7:cd:22: e3:a4:11:69:c3:46:5a:57:2e:f0:9f:c8:1a:b1:61:dd:a1:80: dd:a5:e9:2b:3b:e4:ca:f6:5a:f7:1c:e5:3e:6e:0c:2b:b9:cb: 45:81:93:23:98:fe:ce:90:3f:78:dc:f1:7a:af:db:29:bc:f7: 73:e8:e1:63:5f:00:2e:40:bb:f5:de:b8:57:07:64:c4:2f:fa: c0:11:f1:e6:66:ea:b3:3f:33:ea:fb:08:46:30:e5:94:99:b2: 87:22:22:8f:f3:73:dc:a2:1e:28:ce:94:15:6e:bf:75:18:b3: e8:03:6f:06:4a:b9:a0:ca:bd:dc:11:a8:8f:1e:9b:5b:ad:53: 24:b7:30:1e:03:e9:2b:b7:c6:d7:55:b4:a4:89:34:fc:90:d4: ef:f5:ad:a3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt3WI89wRCF2AQU7LyANpm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4 YjlkODcwHhcNMjYwMTAxMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWE3YWI5NGQ5YWIyZWVhYjZmZGVmNjA0ZmFkNjBkNjUzY2E4NGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJtATn9yUbSpsznbVQIpIh9jX0lx C3LTg8QS0rUZRqtWQDAQ0JToR+OcouoxkYSUcfsUtgqOFqozoxdYJhEFQdE5Kly9 +xwonN/YCe/EgmtEapnKbcE0w68PfT39KcKBKEW3zWOzrVxX868UZ4SvfxqwqUZD eD+KWKnh10wC7prFI/PhpPq7snQwgjdHtnZzeHA1z66PjHL21WzWruKUAziogeST GWfGK+JakFzylbEMMEVm9AHVC02QlK8C1lKoPbD4ZQHCkeIaxN1KJmjoS70Pfu9K JxR9aCDVyAr5bPlYBs3JxBaWITZ7tMbkjVm4Tot87YNW19zygEe3rdgnwQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK6nq5TZqy7qtv3vYE+tYNZTyoSsMB8GA1UdIwQY MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt Y2Q5NzQwNDI2NDlmLzEvcnFlcmxObXJMdXEyX2U5Z1Q2MWcxbFBLaEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBANb93gD BABb93oDBABb930wDAMEA23IiAMEAW3IjDANBgkqhkiG9w0BAQsFAAOCAQEAeeHO 4Bk9mZesZIeTP+1D0zw8a+hYP14puujwdFLkz26p8CcesfWHIkTDYmk8YiAltWBc GRasCVwQtMgGlOBp440dHI1S2fs1ZBIkme46WIbrOfpAtgzv7wMxF3JU0iBok5wf v2EezjWs180i46QRacNGWlcu8J/IGrFh3aGA3aXpKzvkyvZa9xzlPm4MK7nLRYGT I5j+zpA/eNzxeq/bKbz3c+jhY18ALkC79d64VwdkxC/6wBHx5mbqsz8z6vsIRjDl lJmyhyIij/Nz3KIeKM6UFW6/dRiz6ANvBkq5oMq93BGojx6bW61TJLcwHgPpK7fG 11W0pIk0/JDU7/Wtow== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:57 2026 by rpki-client