This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/q1QNm1HPH9NPpYHxo6dOJxZ8CEg.roa File: q1QNm1HPH9NPpYHxo6dOJxZ8CEg.roa (raw, json) Hash identifier: T61Ks0RxaruCy37gdj+R+3mq9ALV4w5YaetmHDahPKQ= Subject key identifier: AB:54:0D:9B:51:CF:1F:D3:4F:A5:81:F1:A3:A7:4E:27:16:7C:08:48 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 019B8018A608D192EC6B384173AE5256013A Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/q1QNm1HPH9NPpYHxo6dOJxZ8CEg.roa Signing time: Fri 02 Jan 2026 19:04:17 +0000 ROA not before: Fri 02 Jan 2026 19:04:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211665 IP address blocks: 141.98.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:18:a6:08:d1:92:ec:6b:38:41:73:ae:52:56:01:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Jan 2 19:04:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab540d9b51cf1fd34fa581f1a3a74e27167c0848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:e6:d5:44:44:0a:e7:3a:34:44:57:56:7a: 43:de:c8:eb:db:b5:e6:12:2a:5f:e0:b3:e8:d0:d3: e4:e3:7e:18:b9:34:48:d4:7d:72:79:a0:dd:ef:6e: f0:63:69:19:ba:4d:46:6c:b7:cf:8c:1d:db:9a:aa: cd:87:b4:b3:da:c0:40:01:70:a7:81:99:cf:ec:41: ee:39:39:5b:c6:a1:7f:6c:70:4e:d2:7e:11:2d:7c: 9c:ed:b2:84:5b:6a:3a:57:05:20:16:98:08:89:fd: 01:57:2c:38:7a:0d:2f:11:01:e0:3a:24:d2:a7:55: cd:f6:7b:54:2e:78:66:8d:fa:07:3a:9e:dc:48:08: 46:d3:57:c7:20:c4:8d:8f:5c:b2:b0:28:7d:25:be: 62:61:3a:f0:57:7d:5b:32:84:f1:59:54:70:2d:9f: af:f9:fb:21:7d:8c:b9:22:09:5e:93:ed:34:5f:79: df:20:8e:83:1c:80:66:27:de:ba:a6:d3:ab:b6:9e: 69:cc:e1:e5:50:79:0a:66:49:13:be:94:56:db:52: 60:ed:2f:8a:c3:83:e2:71:4f:bb:b3:b9:fd:d3:69: 4a:d2:d6:ac:10:61:96:e8:99:02:29:43:c8:a7:d8: f6:a2:76:85:fe:78:ee:cb:ad:f2:b0:a4:2e:ac:c8: ae:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:54:0D:9B:51:CF:1F:D3:4F:A5:81:F1:A3:A7:4E:27:16:7C:08:48 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/q1QNm1HPH9NPpYHxo6dOJxZ8CEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.1.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:2a:92:2d:0a:c5:33:18:c4:c5:62:df:b5:6b:d6:84:4b:44: 42:48:c3:4a:2e:92:60:ba:b1:bb:c5:11:a7:6e:dd:88:0b:28: 0c:f3:de:87:a0:a7:d3:8e:38:b2:e5:aa:ed:61:ae:e4:4b:11: 5b:22:fd:4b:03:fd:86:36:0e:e7:df:03:78:9e:05:3a:13:09: e9:ec:b4:50:c9:7d:d8:a1:dd:ec:d4:f3:52:d6:a4:79:d2:be: 34:a8:00:29:35:4f:5b:7a:95:5a:9c:1a:ec:e2:90:55:7e:85: b6:a6:6e:b9:1f:d2:c4:e8:35:2e:0f:bd:f4:58:0f:a8:e4:60: 9b:66:ed:98:42:86:c5:9e:88:57:cc:df:af:ec:8c:1d:1b:5a: 17:f3:cf:a7:cf:fe:39:0c:82:c0:a0:2b:91:4a:1e:1d:ef:16: 5f:83:f2:4e:53:a9:17:2c:5f:a5:5b:f1:f6:0e:b8:db:3f:e6: 53:b5:13:5e:ea:95:56:e2:d6:f7:34:d6:45:23:67:b5:e3:81: 82:6d:7c:77:14:80:43:8d:7b:ac:59:ad:6e:0d:68:b4:88:37: 69:07:c9:79:4f:f6:16:fc:74:9f:57:57:78:8c:53:81:36:2e: 27:27:44:20:8c:8f:b1:6d:0d:f6:f5:5c:67:27:39:4e:1d:09: 46:db:21:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuAGKYI0ZLsazhBc65SVgE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjYwMTAyMTkwNDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjU0MGQ5YjUxY2YxZmQzNGZhNTgxZjFhM2E3NGUyNzE2N2MwODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx3m1URECuc6NERXVnpD3sjr27Xm Eipf4LPo0NPk434YuTRI1H1yeaDd727wY2kZuk1GbLfPjB3bmqrNh7Sz2sBAAXCn gZnP7EHuOTlbxqF/bHBO0n4RLXyc7bKEW2o6VwUgFpgIif0BVyw4eg0vEQHgOiTS p1XN9ntULnhmjfoHOp7cSAhG01fHIMSNj1yysCh9Jb5iYTrwV31bMoTxWVRwLZ+v +fshfYy5Iglek+00X3nfII6DHIBmJ966ptOrtp5pzOHlUHkKZkkTvpRW21Jg7S+K w4PicU+7s7n902lK0tasEGGW6JkCKUPIp9j2onaF/njuy63ysKQurMiuiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtUDZtRzx/TT6WB8aOnTicWfAhIMB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvcTFRTm0xSFBIOU5QcFlIeG82ZE9KeFo4Q0VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWIBMA0G CSqGSIb3DQEBCwUAA4IBAQArKpItCsUzGMTFYt+1a9aES0RCSMNKLpJgurG7xRGn bt2ICygM896HoKfTjjiy5artYa7kSxFbIv1LA/2GNg7n3wN4ngU6Ewnp7LRQyX3Y od3s1PNS1qR50r40qAApNU9bepVanBrs4pBVfoW2pm65H9LE6DUuD730WA+o5GCb Zu2YQobFnohXzN+v7IwdG1oX88+nz/45DILAoCuRSh4d7xZfg/JOU6kXLF+lW/H2 DrjbP+ZTtRNe6pVW4tb3NNZFI2e144GCbXx3FIBDjXusWa1uDWi0iDdpB8l5T/YW /HSfV1d4jFOBNi4nJ0QgjI+xbQ329VxnJzlOHQlG2yH1 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:49 2026 by rpki-client