This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/QpTGyhEqHx6901xnQ91Zzt7qUHE.roa File: QpTGyhEqHx6901xnQ91Zzt7qUHE.roa (raw, json) Hash identifier: YchmT807E93vtUCwowps9RxjRDg1qTobGuNKmeL1H4g= Subject key identifier: 42:94:C6:CA:11:2A:1F:1E:BD:D3:5C:67:43:DD:59:CE:DE:EA:50:71 Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Certificate serial: 019B7D5C5A42C0054FC062B71EC664211E62 Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/QpTGyhEqHx6901xnQ91Zzt7qUHE.roa Signing time: Fri 02 Jan 2026 06:19:23 +0000 ROA not before: Fri 02 Jan 2026 06:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 91.212.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5a:42:c0:05:4f:c0:62:b7:1e:c6:64:21:1e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0 Validity Not Before: Jan 2 06:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4294c6ca112a1f1ebdd35c6743dd59cedeea5071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:49:bd:47:9b:1b:5b:59:cf:60:eb:65:8d: 8c:8f:86:65:1e:63:59:1d:64:1a:05:27:5a:03:8b: 41:c0:cb:8e:46:a6:0e:c1:ce:fa:cd:61:a3:42:8f: d3:b0:24:6f:69:a2:b9:6f:93:31:43:c9:32:1f:e0: 92:a7:5f:43:01:7b:df:fc:57:9e:c1:d6:ba:3a:f9: 84:89:0e:82:45:e5:b9:99:b7:c4:de:0e:78:8b:7b: b0:ac:33:d7:8f:32:f9:ee:c7:73:f2:47:ec:00:12: 04:f4:ee:9c:aa:85:20:7f:78:66:3b:94:c0:b5:d2: 81:de:5f:5f:93:31:dc:4b:a9:25:db:59:cf:c2:33: 8d:4c:63:3a:d5:7e:c9:86:e8:96:24:b2:96:4d:27: b0:c9:16:b3:5f:6d:78:9b:ff:ef:bb:e9:f4:ad:2a: 80:52:92:9b:07:9e:ee:bd:fd:be:8f:cb:44:c5:51: 45:b5:9e:b7:63:60:65:eb:b6:62:32:4f:08:ac:2c: 92:fb:b8:af:87:c0:4f:e5:9e:01:c8:e0:f6:ee:a7: 69:c3:2e:fa:7f:d4:57:17:3c:28:ad:93:f3:0b:02: 78:68:4c:99:f5:ba:45:67:5e:ed:d1:e3:7c:ec:7f: 96:4e:84:83:c6:e4:24:55:24:bb:ba:26:4d:c6:ea: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:94:C6:CA:11:2A:1F:1E:BD:D3:5C:67:43:DD:59:CE:DE:EA:50:71 X509v3 Authority Key Identifier: keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/QpTGyhEqHx6901xnQ91Zzt7qUHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.117.0/24 Signature Algorithm: sha256WithRSAEncryption 67:b7:5e:02:54:91:13:22:fe:72:a6:30:32:ad:71:4d:02:4a: 08:53:78:5c:ab:e9:72:8b:d6:bb:d7:2d:32:04:34:14:93:1f: 57:ad:08:e2:ae:c3:20:19:52:63:4e:f3:d7:65:b5:32:43:e9: be:23:a2:23:51:55:26:1d:02:01:2c:0d:f2:52:ec:e5:bb:52: fd:12:b5:99:3c:9f:9e:e6:43:02:3e:96:ce:0a:15:ff:d4:47: 69:9a:f1:a5:b8:a5:5c:ed:9b:83:77:64:eb:f5:99:42:5c:5c: c6:20:03:54:32:4d:0e:b8:30:57:66:2b:8d:4b:90:18:bc:b0: 71:10:ca:38:4a:13:d5:9b:ef:46:ef:98:bc:5e:2b:61:57:4d: 0b:c6:12:3e:c9:bc:59:a3:b0:5d:df:c2:48:94:86:d8:d2:8a: 58:e8:82:57:bf:33:e2:e4:60:f4:a6:8f:34:6e:0c:35:c8:06: a0:22:17:8b:0a:e1:59:01:8d:fb:94:2b:2f:d0:33:88:81:e1: 4f:94:9d:3d:d5:93:62:1e:1a:15:6b:ec:47:0e:52:c5:55:9f: 92:4c:17:49:68:41:eb:4a:23:85:4e:23:27:0f:44:6c:6b:33: 57:c5:4c:fe:64:b0:11:f3:da:3a:03:f8:83:7a:49:17:f7:ea: d3:f2:53:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XFpCwAVPwGK3HsZkIR5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMDg3ZTJmMGRmMjk2ZmUxMWU3NmVlNGMxMDE3YmNmMTIw NWIyZjAwHhcNMjYwMTAyMDYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mjk0YzZjYTExMmExZjFlYmRkMzVjNjc0M2RkNTljZWRlZWE1MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEBJvUebG1tZz2DrZY2Mj4ZlHmNZ HWQaBSdaA4tBwMuORqYOwc76zWGjQo/TsCRvaaK5b5MxQ8kyH+CSp19DAXvf/Fee wda6OvmEiQ6CReW5mbfE3g54i3uwrDPXjzL57sdz8kfsABIE9O6cqoUgf3hmO5TA tdKB3l9fkzHcS6kl21nPwjONTGM61X7JhuiWJLKWTSewyRazX214m//vu+n0rSqA UpKbB57uvf2+j8tExVFFtZ63Y2Bl67ZiMk8IrCyS+7ivh8BP5Z4ByOD27qdpwy76 f9RXFzworZPzCwJ4aEyZ9bpFZ17t0eN87H+WToSDxuQkVSS7uiZNxupLnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEKUxsoRKh8evdNcZ0PdWc7e6lBxMB8GA1UdIwQY MBaAFOEIfi8N8pb+Eedu5MEBe88SBbLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQt YTUwYTg4MGFhN2ZjLzEvUXBUR3loRXFIeDY5MDF4blE5MVp6dDdxVUhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQtYTUwYTg4MGFhN2Zj LzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9R1MA0G CSqGSIb3DQEBCwUAA4IBAQBnt14CVJETIv5ypjAyrXFNAkoIU3hcq+lyi9a71y0y BDQUkx9XrQjirsMgGVJjTvPXZbUyQ+m+I6IjUVUmHQIBLA3yUuzlu1L9ErWZPJ+e 5kMCPpbOChX/1EdpmvGluKVc7ZuDd2Tr9ZlCXFzGIANUMk0OuDBXZiuNS5AYvLBx EMo4ShPVm+9G75i8XithV00LxhI+ybxZo7Bd38JIlIbY0opY6IJXvzPi5GD0po80 bgw1yAagIheLCuFZAY37lCsv0DOIgeFPlJ091ZNiHhoVa+xHDlLFVZ+STBdJaEHr SiOFTiMnD0RsazNXxUz+ZLAR89o6A/iDekkX9+rT8lNX -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:11 2026 by rpki-client