This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa File: qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa (raw, json) Hash identifier: 0tYF9Di3RzSdAEBuoe5eZNTFe26hShHua++9kxuQMYo= Subject key identifier: A9:07:14:75:51:8D:8D:3F:F7:57:42:99:BD:40:AE:AE:93:BD:0B:76 Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e Certificate serial: 019B7C123FE3F14BB6C10E1B948B130160A2 Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa Signing time: Fri 02 Jan 2026 00:18:49 +0000 ROA not before: Fri 02 Jan 2026 00:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43328 IP address blocks: 91.201.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3f:e3:f1:4b:b6:c1:0e:1b:94:8b:13:01:60:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e Validity Not Before: Jan 2 00:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9071475518d8d3ff7574299bd40aeae93bd0b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:c7:54:63:d5:37:81:0b:6d:61:94:8f:02: 5a:84:c6:6d:17:ef:98:1f:09:56:b7:43:be:32:1e: 29:b8:77:2c:fa:d5:52:99:09:5b:be:f5:6b:e1:8c: 00:28:d7:2c:2f:49:45:72:f7:7f:f8:ae:4f:01:4f: 46:b0:85:54:a4:06:7a:8b:e5:0b:6c:f7:44:cf:8a: 28:34:63:ec:b1:00:cb:76:4a:1f:a4:05:ed:23:90: b5:64:11:1f:f9:46:27:30:7c:cc:f0:60:fb:ea:e2: 75:8f:12:d7:33:12:32:d5:e4:9b:6b:94:60:2f:0b: 62:a5:49:0b:4a:e5:45:47:ee:45:50:f7:f8:cb:24: b5:6f:6c:3a:88:37:d3:df:a3:ed:6a:58:96:bf:5a: 3d:40:e3:45:38:92:4c:9b:ed:f2:01:c2:a1:dd:52: 5c:1c:8e:61:ae:d6:15:b8:f8:d1:22:30:34:c2:3c: 94:5b:0d:53:f6:5e:b5:ad:2b:38:38:a9:db:90:2c: eb:fb:e6:21:bb:d2:d2:d6:82:69:da:ea:5c:5f:23: a4:e4:99:2c:96:e1:65:bb:2d:b4:71:73:af:ff:96: 7a:10:91:5f:31:a4:a3:fb:71:a6:88:62:dd:35:a6: ca:aa:12:b0:72:27:70:75:41:bb:71:29:23:59:cf: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:07:14:75:51:8D:8D:3F:F7:57:42:99:BD:40:AE:AE:93:BD:0B:76 X509v3 Authority Key Identifier: keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/qQcUdVGNjT_3V0KZvUCurpO9C3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.236.0/24 Signature Algorithm: sha256WithRSAEncryption 70:b6:a6:e5:d5:9f:2f:72:71:ed:3f:60:e7:a4:af:f7:d7:e9: 26:36:1a:83:66:3d:61:55:ee:99:31:f9:4c:ef:5b:3c:b9:c2: 5c:65:6e:4b:9c:ad:fe:4a:23:8b:16:55:7f:4d:39:c9:eb:4c: f6:ce:48:de:90:b4:87:3e:c9:d6:2f:87:a8:ac:ae:b0:ff:59: 4e:00:e0:cc:52:01:7f:0a:bf:2e:e6:32:89:cf:5d:29:f8:25: 11:06:17:46:2b:f4:6c:eb:a6:e6:a5:8c:b3:b1:9b:6f:28:1e: cc:d3:ac:d6:6e:33:e4:d0:51:bd:ac:49:33:c5:c9:74:ba:87: b9:92:b9:15:09:fa:b3:7c:80:e0:d7:7c:52:05:3a:b8:a2:ed: 74:bd:ae:8c:a1:7c:2f:ae:7e:51:13:e8:19:b3:a3:7b:ee:54: 7d:f5:03:32:0d:b3:77:b6:8e:0b:12:21:ef:96:14:52:49:37: 99:e7:68:6f:94:c9:11:a8:bf:6e:02:7e:70:61:bd:53:da:86: 95:80:3b:4c:94:cd:f9:b1:e4:7d:63:72:b0:41:b8:94:7a:ab: 93:a3:ea:a9:47:38:97:73:68:7a:1e:8c:20:a6:54:91:fb:44: d3:84:90:20:52:82:5b:b6:4a:f1:08:29:18:66:2a:2a:e1:16: b4:8e:2a:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ej/j8Uu2wQ4blIsTAWCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1 YjJlMGUwHhcNMjYwMTAyMDAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTA3MTQ3NTUxOGQ4ZDNmZjc1NzQyOTliZDQwYWVhZTkzYmQwYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG/HVGPVN4ELbWGUjwJahMZtF++Y HwlWt0O+Mh4puHcs+tVSmQlbvvVr4YwAKNcsL0lFcvd/+K5PAU9GsIVUpAZ6i+UL bPdEz4ooNGPssQDLdkofpAXtI5C1ZBEf+UYnMHzM8GD76uJ1jxLXMxIy1eSba5Rg LwtipUkLSuVFR+5FUPf4yyS1b2w6iDfT36PtaliWv1o9QONFOJJMm+3yAcKh3VJc HI5hrtYVuPjRIjA0wjyUWw1T9l61rSs4OKnbkCzr++Yhu9LS1oJp2upcXyOk5Jks luFluy20cXOv/5Z6EJFfMaSj+3GmiGLdNabKqhKwcidwdUG7cSkjWc8iJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKkHFHVRjY0/91dCmb1Arq6TvQt2MB8GA1UdIwQY MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt MTI2YzdiNDhiODQ3LzEvcVFjVWRWR05qVF8zVjBLWnZVQ3VycE85QzNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3 LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8nsMA0G CSqGSIb3DQEBCwUAA4IBAQBwtqbl1Z8vcnHtP2DnpK/31+kmNhqDZj1hVe6ZMflM 71s8ucJcZW5LnK3+SiOLFlV/TTnJ60z2zkjekLSHPsnWL4eorK6w/1lOAODMUgF/ Cr8u5jKJz10p+CURBhdGK/Rs66bmpYyzsZtvKB7M06zWbjPk0FG9rEkzxcl0uoe5 krkVCfqzfIDg13xSBTq4ou10va6MoXwvrn5RE+gZs6N77lR99QMyDbN3to4LEiHv lhRSSTeZ52hvlMkRqL9uAn5wYb1T2oaVgDtMlM35seR9Y3KwQbiUequTo+qpRziX c2h6HowgplSR+0TThJAgUoJbtkrxCCkYZioq4Ra0jirf -----END CERTIFICATE-----Generated at Mon Jan 26 12:18:28 2026 by rpki-client