This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/WQgnD-JktijZnRhzkWWmxreQGms.roa File: WQgnD-JktijZnRhzkWWmxreQGms.roa (raw, json) Hash identifier: bt7fHkMyPJ2bu7raN/9QpGM2Pefyuc7nqym8N0GRFqM= Subject key identifier: 59:08:27:0F:E2:64:B6:28:D9:9D:18:73:91:65:A6:C6:B7:90:1A:6B Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6AE1B9C77423F37C39836AB68CDB6 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/WQgnD-JktijZnRhzkWWmxreQGms.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214382 IP address blocks: 80.91.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ae:1b:9c:77:42:3f:37:c3:98:36:ab:68:cd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5908270fe264b628d99d18739165a6c6b7901a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:e9:f6:d0:ad:e0:e8:64:fa:82:59:8a:ed: 51:a0:57:54:16:f4:7e:8a:dd:53:99:c5:1d:f1:db: da:db:33:bc:75:04:24:05:a3:ae:68:54:8f:2a:a1: 42:ed:65:0d:8a:f6:f3:b8:45:89:bc:cc:7d:b3:78: b3:bf:ae:75:51:83:e5:6f:c0:79:71:14:da:7e:04: f3:87:34:1f:c7:93:22:05:75:29:f9:30:bf:da:c6: d0:21:ad:15:ae:cd:37:25:dd:b4:e1:5f:ef:b3:a9: 31:30:a5:60:5c:5f:ee:fa:4b:fc:44:8c:ee:0c:47: fc:e8:01:a2:4f:59:b1:ca:a7:c1:97:17:af:36:e2: 64:7b:86:49:51:f7:c4:2f:f0:b7:76:c9:64:7c:49: 94:7d:64:ff:9a:68:44:df:93:e3:dc:f9:49:e5:4a: 24:32:df:8d:93:81:ed:bb:1f:b7:fe:9c:2c:b7:c9: 43:55:fe:29:e5:c8:b3:2d:83:27:bc:93:77:1a:41: 86:fe:27:c2:68:29:5e:7f:e5:c9:05:d3:63:91:a5: 49:13:15:10:c7:2d:e7:d8:39:4e:6e:15:05:51:d1: 54:3e:db:c8:6c:6d:d4:fa:cc:05:1f:af:f7:d3:4c: 9d:63:0c:9e:38:c0:79:29:5c:fa:0b:98:eb:42:ec: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:08:27:0F:E2:64:B6:28:D9:9D:18:73:91:65:A6:C6:B7:90:1A:6B X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/WQgnD-JktijZnRhzkWWmxreQGms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.71.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:2d:32:a6:65:a6:22:11:40:f1:f6:61:f3:5b:c0:bf:86:6a: a5:2f:7c:73:f7:1e:c0:e2:4b:08:01:76:0e:c6:a8:2c:c0:be: 38:bd:b6:6b:99:20:3b:36:74:ef:55:a0:0b:67:73:ee:ad:94: da:71:4f:63:15:12:65:35:2f:e9:f5:80:c0:60:b1:99:50:6e: 18:87:08:97:5b:38:43:e4:6a:52:df:b9:14:47:7f:eb:60:6b: c2:8b:d9:c6:a6:61:4d:28:33:db:36:fc:85:64:37:e8:42:f9: 86:ba:5f:da:3f:68:8e:50:c2:89:c2:48:d9:c7:a9:f9:1b:09: 37:20:17:b3:e4:f7:8c:e0:80:2a:16:87:16:ab:3b:66:f1:aa: af:57:2a:c6:92:52:6f:52:1e:0f:d2:71:94:cd:97:a6:64:0d: ac:73:4e:ea:10:38:f0:aa:f8:2f:46:b6:c3:0f:71:3b:5f:30: 91:68:3e:73:73:b9:bc:d6:e2:7b:2a:d4:c0:f4:77:3b:9e:5a: 2d:2d:4d:94:83:43:77:55:e9:96:bc:09:c9:e7:24:3f:ed:61: 54:09:d7:38:bd:19:50:f6:9e:b7:93:7d:a8:00:be:f2:03:e0: 34:6b:e0:3e:e9:b9:c6:cc:bc:1f:42:c7:87:aa:2c:96:4a:a8: 63:84:98:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pq4bnHdCPzfDmDaraM22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTA4MjcwZmUyNjRiNjI4ZDk5ZDE4NzM5MTY1YTZjNmI3OTAxYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrLp9tCt4Ohk+oJZiu1RoFdUFvR+ it1TmcUd8dva2zO8dQQkBaOuaFSPKqFC7WUNivbzuEWJvMx9s3izv651UYPlb8B5 cRTafgTzhzQfx5MiBXUp+TC/2sbQIa0Vrs03Jd204V/vs6kxMKVgXF/u+kv8RIzu DEf86AGiT1mxyqfBlxevNuJke4ZJUffEL/C3dslkfEmUfWT/mmhE35Pj3PlJ5Uok Mt+Nk4Htux+3/pwst8lDVf4p5cizLYMnvJN3GkGG/ifCaClef+XJBdNjkaVJExUQ xy3n2DlObhUFUdFUPtvIbG3U+swFH6/300ydYwyeOMB5KVz6C5jrQuwhzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFkIJw/iZLYo2Z0Yc5Flpsa3kBprMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvV1FnbkQtSmt0aWpablJoemtXV214cmVRR21zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFtHMA0G CSqGSIb3DQEBCwUAA4IBAQCLLTKmZaYiEUDx9mHzW8C/hmqlL3xz9x7A4ksIAXYO xqgswL44vbZrmSA7NnTvVaALZ3PurZTacU9jFRJlNS/p9YDAYLGZUG4YhwiXWzhD 5GpS37kUR3/rYGvCi9nGpmFNKDPbNvyFZDfoQvmGul/aP2iOUMKJwkjZx6n5Gwk3 IBez5PeM4IAqFocWqztm8aqvVyrGklJvUh4P0nGUzZemZA2sc07qEDjwqvgvRrbD D3E7XzCRaD5zc7m81uJ7KtTA9Hc7nlotLU2Ug0N3VemWvAnJ5yQ/7WFUCdc4vRlQ 9p63k32oAL7yA+A0a+A+6bnGzLwfQseHqiyWSqhjhJj9 -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:36 2026 by rpki-client