This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/qIXOSdQAmM-9W59tIvFrjCOacag.roa File: qIXOSdQAmM-9W59tIvFrjCOacag.roa (raw, json) Hash identifier: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g= Subject key identifier: A8:85:CE:49:D4:00:98:CF:BD:5B:9F:6D:22:F1:6B:8C:23:9A:71:A8 Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED5152267118FC40F38D6A88DE0226 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/qIXOSdQAmM-9W59tIvFrjCOacag.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207771 IP address blocks: 91.210.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:51:52:26:71:18:fc:40:f3:8d:6a:88:de:02:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a885ce49d40098cfbd5b9f6d22f16b8c239a71a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:11:18:22:97:1d:36:67:85:26:4c:5b:57: f2:f7:93:5f:59:25:5a:1d:56:95:6c:b4:19:ea:bf: fc:a5:56:cb:ef:d2:48:e0:89:db:20:d6:da:2c:5f: aa:cd:28:eb:50:06:3b:ef:b2:83:02:31:29:e5:20: fc:28:eb:92:e7:7a:b7:dd:28:fa:c4:32:41:e2:f8: 45:4f:51:a1:ae:80:7f:48:aa:7b:c6:dc:4f:8e:5a: 54:5e:b2:41:ea:f3:57:86:24:ac:14:09:1c:17:6b: d9:ae:09:c3:37:cc:fc:cc:aa:af:7c:f6:92:36:9c: b2:ee:75:52:3c:f7:6d:08:91:fe:e3:b0:48:29:e6: 24:8a:a1:b4:49:fd:1c:30:c6:71:85:66:42:eb:11: 99:29:5b:ba:44:63:53:69:58:37:ef:9f:bc:8a:3f: 72:9c:07:29:2f:ab:b5:0d:f6:48:5f:05:f3:64:fc: 74:87:28:27:6e:7a:99:2c:fc:a3:fd:83:53:02:0f: ab:55:b0:c4:68:2b:1f:5d:bf:86:a6:67:99:8e:fc: f1:7b:6f:aa:e9:3e:a8:32:05:3c:7d:de:48:1f:ae: cb:45:43:61:fb:e9:b6:cc:09:7c:c7:76:02:f2:13: c5:dc:fb:a6:5b:2f:78:30:76:e7:ec:df:d2:c3:b9: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:85:CE:49:D4:00:98:CF:BD:5B:9F:6D:22:F1:6B:8C:23:9A:71:A8 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/qIXOSdQAmM-9W59tIvFrjCOacag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.237.0/24 Signature Algorithm: sha256WithRSAEncryption 70:e2:7f:48:39:0c:f3:22:4b:5e:67:8a:fe:19:44:14:b1:2f: 51:05:9c:be:ac:68:57:11:9a:f1:f7:66:4a:67:7a:1a:da:9c: 57:f1:35:58:6d:ac:e3:2f:70:17:c1:9b:ea:52:65:3d:0a:95: 44:8f:05:e5:87:2e:d7:29:c3:75:49:a6:3e:20:c4:e1:42:f8: 2f:67:f4:37:a2:f5:2c:8f:d4:3a:e1:8e:d8:bf:c0:42:63:01: 21:25:50:85:0e:58:71:a8:5d:7f:c7:48:10:92:5b:ad:9b:9e: ab:58:95:8d:c3:5e:78:ab:e8:d6:11:02:c7:76:57:30:ad:d0: 3a:4d:1e:37:45:ff:e9:6f:d3:d6:eb:75:6e:29:19:c3:35:63: b0:f3:98:aa:86:a8:6e:0e:52:c7:31:75:0e:6c:0a:98:73:75: 62:6a:a9:0c:e5:0e:2a:43:39:47:c8:0f:10:5e:ca:ff:95:37: 2a:cd:6a:02:b8:82:06:17:0d:a0:a9:69:92:99:ca:7f:8b:dc: da:a5:dd:29:b1:de:9c:24:86:e5:f5:b3:19:99:b5:41:e3:b7: 03:38:0c:47:94:37:9a:c3:51:63:6d:10:67:77:9d:67:c3:82: e4:d1:5a:cf:6a:5b:bb:c5:23:a7:15:14:15:65:d9:d0:b4:37: dc:df:64:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VFSJnEY/EDzjWqI3gImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODg1Y2U0OWQ0MDA5OGNmYmQ1YjlmNmQyMmYxNmI4YzIzOWE3MWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZcRGCKXHTZnhSZMW1fy95NfWSVa HVaVbLQZ6r/8pVbL79JI4InbINbaLF+qzSjrUAY777KDAjEp5SD8KOuS53q33Sj6 xDJB4vhFT1GhroB/SKp7xtxPjlpUXrJB6vNXhiSsFAkcF2vZrgnDN8z8zKqvfPaS Npyy7nVSPPdtCJH+47BIKeYkiqG0Sf0cMMZxhWZC6xGZKVu6RGNTaVg375+8ij9y nAcpL6u1DfZIXwXzZPx0hygnbnqZLPyj/YNTAg+rVbDEaCsfXb+GpmeZjvzxe2+q 6T6oMgU8fd5IH67LRUNh++m2zAl8x3YC8hPF3PumWy94MHbn7N/Sw7nIvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKiFzknUAJjPvVufbSLxa4wjmnGoMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvcUlYT1NkUUFtTS05VzU5dEl2RnJqQ09hY2FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9LtMA0G CSqGSIb3DQEBCwUAA4IBAQBw4n9IOQzzIkteZ4r+GUQUsS9RBZy+rGhXEZrx92ZK Z3oa2pxX8TVYbazjL3AXwZvqUmU9CpVEjwXlhy7XKcN1SaY+IMThQvgvZ/Q3ovUs j9Q64Y7Yv8BCYwEhJVCFDlhxqF1/x0gQklutm56rWJWNw154q+jWEQLHdlcwrdA6 TR43Rf/pb9PW63VuKRnDNWOw85iqhqhuDlLHMXUObAqYc3ViaqkM5Q4qQzlHyA8Q Xsr/lTcqzWoCuIIGFw2gqWmSmcp/i9zapd0psd6cJIbl9bMZmbVB47cDOAxHlDea w1FjbRBnd51nw4Lk0VrPalu7xSOnFRQVZdnQtDfc32Qc -----END CERTIFICATE-----Generated at Mon Jan 26 05:00:22 2026 by rpki-client