This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/q1obh1GvgV5InrVDxZseNCOaZAQ.roa File: q1obh1GvgV5InrVDxZseNCOaZAQ.roa (raw, json) Hash identifier: C+k/s/0qrF9tycbA7ZFSjIl8vgKrVXSCbw1SiJhE0+o= Subject key identifier: AB:5A:1B:87:51:AF:81:5E:48:9E:B5:43:C5:9B:1E:34:23:9A:64:04 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B7834A0D7C51BFCF6B4D0498E1ACD071B Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/q1obh1GvgV5InrVDxZseNCOaZAQ.roa Signing time: Thu 01 Jan 2026 06:17:53 +0000 ROA not before: Thu 01 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133296 IP address blocks: 91.108.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a0:d7:c5:1b:fc:f6:b4:d0:49:8e:1a:cd:07:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab5a1b8751af815e489eb543c59b1e34239a6404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:08:2a:bb:74:d7:e5:de:f7:dd:66:d0:98: 27:8a:5d:02:bd:d9:cb:0a:0c:ad:31:5a:91:23:e3: ed:6d:47:41:57:96:d2:9d:0d:38:95:f0:11:e6:e3: a6:09:f3:99:4b:5d:19:c8:78:59:13:1c:50:51:31: 84:90:ab:d1:a3:6b:4a:f0:3d:d2:46:3d:32:ba:ff: 4e:ae:0c:5d:17:16:d3:f8:86:76:03:5a:f4:66:1b: 63:14:35:23:50:42:08:6f:96:86:94:1e:63:13:4f: ec:07:6f:47:07:e2:f6:94:3f:26:9b:64:1a:5f:94: 5a:42:b1:68:e4:00:3b:ea:b8:5e:1d:75:70:be:58: 42:c3:a4:2c:a2:ff:d6:4b:7a:22:97:34:2e:34:75: cb:88:76:1b:8d:f9:1b:08:be:19:e1:a3:8f:fa:c6: fd:3f:45:51:d8:9f:80:1b:7e:94:77:87:83:54:58: 6f:5b:2b:7a:f8:f9:dc:c2:d1:27:34:c5:b6:41:68: 04:0a:d3:c0:7c:cb:fd:d3:66:9d:af:e0:d1:12:27: 6b:22:0c:df:ec:c5:e5:8b:82:f2:11:81:c1:cb:6e: 1d:d9:36:87:83:98:e9:f0:11:9a:ef:39:39:1c:d2: 09:c9:4b:2d:0a:b3:d3:8f:c1:e1:fe:db:f9:c9:fa: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5A:1B:87:51:AF:81:5E:48:9E:B5:43:C5:9B:1E:34:23:9A:64:04 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/q1obh1GvgV5InrVDxZseNCOaZAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.64.0/21 Signature Algorithm: sha256WithRSAEncryption 07:6b:a3:56:46:d3:78:f6:ee:f5:d5:6f:50:d9:ee:c9:5d:74: 86:27:db:9c:82:ac:b7:ec:67:4f:8a:85:99:8a:d5:f2:d2:41: ed:7d:3d:83:42:0c:18:a5:90:7b:95:9d:1c:ce:e4:ee:ca:9c: a0:e8:33:3c:d2:7f:3d:40:71:d5:68:04:d0:30:64:a0:fc:b4: 4a:94:14:9c:ba:99:72:6d:49:6d:5f:85:ec:80:b8:f4:11:bc: 7c:25:82:ae:ab:ce:0a:3d:94:5c:d8:d4:bf:24:e1:e4:19:52: e9:e8:0b:c7:af:cf:75:e9:8d:68:c9:75:f2:17:2d:bd:4c:95: b8:4e:ed:c3:05:83:d4:da:6b:ec:9d:94:07:f0:13:3b:e7:9c: fe:2d:a9:0f:aa:5d:98:69:26:b7:e2:a6:90:f4:c5:6a:ac:f3: 08:02:f7:91:58:56:9a:63:e9:38:f3:48:f9:a0:eb:b1:63:35: ab:b2:42:6c:a8:3c:b6:cd:ec:df:88:63:1d:bd:27:38:8a:b7: 0e:f1:f3:6a:6c:d9:d4:41:b5:29:4e:d5:5d:4c:2e:fe:8b:42: 1b:70:3f:71:a5:38:2f:1a:cb:45:c2:b7:29:1d:7c:8e:e5:0f: 84:ac:d2:4b:89:75:8e:bd:99:1d:1b:8d:b3:2b:ee:13:77:87: 11:05:5e:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKDXxRv89rTQSY4azQcbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjVhMWI4NzUxYWY4MTVlNDg5ZWI1NDNjNTliMWUzNDIzOWE2NDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZkIKrt01+Xe991m0Jgnil0CvdnL CgytMVqRI+PtbUdBV5bSnQ04lfAR5uOmCfOZS10ZyHhZExxQUTGEkKvRo2tK8D3S Rj0yuv9OrgxdFxbT+IZ2A1r0ZhtjFDUjUEIIb5aGlB5jE0/sB29HB+L2lD8mm2Qa X5RaQrFo5AA76rheHXVwvlhCw6Qsov/WS3oilzQuNHXLiHYbjfkbCL4Z4aOP+sb9 P0VR2J+AG36Ud4eDVFhvWyt6+PncwtEnNMW2QWgECtPAfMv902adr+DREidrIgzf 7MXli4LyEYHBy24d2TaHg5jp8BGa7zk5HNIJyUstCrPTj8Hh/tv5yfpSJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtaG4dRr4FeSJ61Q8WbHjQjmmQEMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvcTFvYmgxR3ZnVjVJbnJWRHhac2VOQ09hWkFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW2xAMA0G CSqGSIb3DQEBCwUAA4IBAQAHa6NWRtN49u711W9Q2e7JXXSGJ9ucgqy37GdPioWZ itXy0kHtfT2DQgwYpZB7lZ0czuTuypyg6DM80n89QHHVaATQMGSg/LRKlBScuply bUltX4XsgLj0Ebx8JYKuq84KPZRc2NS/JOHkGVLp6AvHr8916Y1oyXXyFy29TJW4 Tu3DBYPU2mvsnZQH8BM755z+LakPql2YaSa34qaQ9MVqrPMIAveRWFaaY+k480j5 oOuxYzWrskJsqDy2zezfiGMdvSc4ircO8fNqbNnUQbUpTtVdTC7+i0IbcD9xpTgv GstFwrcpHXyO5Q+ErNJLiXWOvZkdG42zK+4Td4cRBV4o -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:59 2026 by rpki-client