This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/q5DJrkGpFtBRVSTiER6qubZrzwg.roa File: q5DJrkGpFtBRVSTiER6qubZrzwg.roa (raw, json) Hash identifier: d2oZQywAG8/Q2HF8swgC8YVUSDiFpeqcb9GLnII1M0c= Subject key identifier: AB:90:C9:AE:41:A9:16:D0:51:55:24:E2:11:1E:AA:B9:B6:6B:CF:08 Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Certificate serial: 019B7C111B843D5C9CD1F830E4098C49778B Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/q5DJrkGpFtBRVSTiER6qubZrzwg.roa Signing time: Fri 02 Jan 2026 00:17:34 +0000 ROA not before: Fri 02 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60676 IP address blocks: 89.34.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1b:84:3d:5c:9c:d1:f8:30:e4:09:8c:49:77:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Validity Not Before: Jan 2 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab90c9ae41a916d0515524e2111eaab9b66bcf08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:06:ae:d5:b7:a0:c6:0a:3c:77:ab:30:fe: 35:18:77:45:e6:c5:e6:69:60:4d:ae:7b:fa:e3:7a: e8:fc:82:49:24:4a:33:94:45:5a:71:6c:a0:f8:84: ba:7b:05:33:68:33:03:f6:54:b1:39:02:a5:4c:8b: e2:7f:20:b7:d3:e1:66:33:6e:28:b9:1a:65:64:90: c4:25:fd:82:43:31:93:41:82:de:55:30:48:a9:38: 0e:29:dc:95:e5:ed:c6:cd:58:94:95:e9:ce:5c:00: 23:35:2f:20:25:e8:dd:e3:33:49:a0:ca:2a:f9:d7: 5f:a5:f9:77:e9:8a:ba:69:f1:08:dd:33:2a:6b:09: e4:08:21:b8:bb:ac:cb:ec:07:7d:97:83:e0:cb:10: 76:53:ba:bd:6d:12:0b:c5:6a:0d:42:c4:64:38:49: e3:2a:52:f3:77:68:6b:ec:cc:c2:a0:43:71:28:57: 9e:b8:21:5e:be:95:5e:8d:17:d1:de:08:b8:ef:6f: 5c:00:e8:d5:89:b0:87:20:7b:d6:06:27:74:9c:f5: 8e:e9:0e:95:f6:a1:de:32:ab:81:5c:9f:7d:cd:e3: ba:a6:d5:16:03:b3:9e:8f:4f:a3:69:94:97:d9:e9: 9a:c8:01:d9:af:af:0c:24:6f:28:2c:1c:73:74:f9: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:90:C9:AE:41:A9:16:D0:51:55:24:E2:11:1E:AA:B9:B6:6B:CF:08 X509v3 Authority Key Identifier: keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/q5DJrkGpFtBRVSTiER6qubZrzwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.91.0/24 Signature Algorithm: sha256WithRSAEncryption 83:6f:e3:a4:ea:e9:37:c2:21:f7:0c:bc:bd:49:49:cf:b2:ba: 25:4c:b0:44:dd:b0:ce:e2:2a:05:5c:2a:98:c4:7b:7d:da:6a: 18:4c:7c:d3:e8:36:00:98:ea:1e:4b:1a:cc:30:a4:50:61:66: 0b:ca:31:1c:8a:12:52:cc:cb:56:5a:f2:ec:0d:64:46:ea:dd: da:c6:57:f8:b8:25:30:de:7b:4a:e1:df:d5:80:d0:b1:a0:ac: 10:ac:ef:4b:d7:f2:28:59:3d:cb:8d:ed:ad:06:1a:07:5e:cf: 2b:b0:ca:c3:44:7b:8e:6e:39:9f:40:ea:a5:b3:a5:db:7f:70: 9d:4b:b3:b6:14:68:e8:f6:4a:ab:85:4c:d5:fc:46:b3:5a:70: a4:19:87:bd:a9:2b:8f:a9:56:33:59:e5:4a:3f:4b:63:f9:a8: b4:1f:8a:bb:67:95:c1:29:b4:8d:19:3b:dc:ad:25:b8:9a:d4: f5:5d:05:b0:a2:33:9d:8e:eb:42:b5:7f:14:f6:d6:a0:8a:8b: f0:6f:0a:4a:00:4e:05:33:14:80:04:4a:7d:c0:80:a9:a4:36: 64:ff:53:92:86:3a:8a:19:95:54:88:a0:0b:fc:69:93:ac:b3: 09:3b:6e:a3:37:a4:91:bd:3b:cc:0b:1e:aa:60:ac:30:27:45: 02:b4:66:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ERuEPVyc0fgw5AmMSXeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzA1OTFlMmViNDlkMDU1OWU2ZmNlN2VlMmFhODFmMGY1 OWJhNmYwHhcNMjYwMTAyMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjkwYzlhZTQxYTkxNmQwNTE1NTI0ZTIxMTFlYWFiOWI2NmJjZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD8GrtW3oMYKPHerMP41GHdF5sXm aWBNrnv643ro/IJJJEozlEVacWyg+IS6ewUzaDMD9lSxOQKlTIvifyC30+FmM24o uRplZJDEJf2CQzGTQYLeVTBIqTgOKdyV5e3GzViUlenOXAAjNS8gJejd4zNJoMoq +ddfpfl36Yq6afEI3TMqawnkCCG4u6zL7Ad9l4PgyxB2U7q9bRILxWoNQsRkOEnj KlLzd2hr7MzCoENxKFeeuCFevpVejRfR3gi4729cAOjVibCHIHvWBid0nPWO6Q6V 9qHeMquBXJ99zeO6ptUWA7Oej0+jaZSX2emayAHZr68MJG8oLBxzdPlqIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuQya5BqRbQUVUk4hEeqrm2a88IMB8GA1UdIwQY MBaAFMPAWR4utJ0FWeb85+4qqB8PWbpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQt ZTM0MDcxNzQ2NjNiLzEvcTVESnJrR3BGdEJSVlNUaUVSNnF1YlpyendnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQtZTM0MDcxNzQ2NjNi LzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSJbMA0G CSqGSIb3DQEBCwUAA4IBAQCDb+Ok6uk3wiH3DLy9SUnPsrolTLBE3bDO4ioFXCqY xHt92moYTHzT6DYAmOoeSxrMMKRQYWYLyjEcihJSzMtWWvLsDWRG6t3axlf4uCUw 3ntK4d/VgNCxoKwQrO9L1/IoWT3Lje2tBhoHXs8rsMrDRHuObjmfQOqls6Xbf3Cd S7O2FGjo9kqrhUzV/EazWnCkGYe9qSuPqVYzWeVKP0tj+ai0H4q7Z5XBKbSNGTvc rSW4mtT1XQWwojOdjutCtX8U9tagiovwbwpKAE4FMxSABEp9wICppDZk/1OShjqK GZVUiKAL/GmTrLMJO26jN6SRvTvMCx6qYKwwJ0UCtGZw -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:16 2026 by rpki-client