This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/QeaLiE9j4ankS_phkxa_qrN9g1Q.roa File: QeaLiE9j4ankS_phkxa_qrN9g1Q.roa (raw, json) Hash identifier: aTNhEv7p3O+ErWEZXlpo2u9L43e8YHpY2vq29krIAK4= Subject key identifier: 41:E6:8B:88:4F:63:E1:A9:E4:4B:FA:61:93:16:BF:AA:B3:7D:83:54 Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0 Certificate serial: 019B7758DD53E5EFD1ADCA75268EF12F0888 Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/QeaLiE9j4ankS_phkxa_qrN9g1Q.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48435 IP address blocks: 91.198.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dd:53:e5:ef:d1:ad:ca:75:26:8e:f1:2f:08:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41e68b884f63e1a9e44bfa619316bfaab37d8354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:80:83:2f:5d:a4:93:00:22:c3:e9:62:d8: 4d:ae:b9:64:9d:15:c9:68:90:af:ad:d4:51:d6:2f: 03:38:83:9e:d7:8f:4e:dd:58:85:a5:eb:17:f9:bd: c8:31:22:a5:3b:8c:ca:51:8c:3b:bf:b9:61:42:a1: 62:0c:bd:8b:da:b2:33:4b:94:ed:8e:d4:04:43:f9: 74:11:97:b5:4c:48:df:ba:f8:8e:c4:38:ad:3b:c1: 7f:9d:6a:ad:59:68:83:5a:5a:15:b4:3f:f6:25:79: a5:65:09:0e:77:e8:ad:00:49:72:73:50:bd:f1:9b: 88:d9:1e:c2:4f:f2:de:78:60:f5:0e:c6:a8:24:d9: 80:b5:43:8c:3d:01:41:48:9b:c5:5b:46:c0:23:26: 51:34:1c:5a:e2:29:5e:8a:d2:79:2d:2c:48:c9:4c: 20:2d:17:00:df:75:cb:94:2e:b1:17:13:f2:c1:ce: ed:cb:d3:5a:fe:af:3c:1d:21:3b:5e:8e:d5:60:bb: e3:39:2c:62:a0:85:0f:90:70:79:3a:78:ea:7c:60: 7c:e1:94:6e:d8:8b:31:7a:49:5e:9d:a5:88:42:a7: f6:b8:b8:49:42:dd:f4:a3:96:fe:49:e9:4e:5c:32: f5:06:1b:d9:ad:3c:78:a3:55:98:bb:10:ec:df:32: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E6:8B:88:4F:63:E1:A9:E4:4B:FA:61:93:16:BF:AA:B3:7D:83:54 X509v3 Authority Key Identifier: keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/QeaLiE9j4ankS_phkxa_qrN9g1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.55.0/24 Signature Algorithm: sha256WithRSAEncryption 47:db:84:55:81:95:ba:33:31:8d:d0:64:e1:2e:5e:86:1d:5e: c7:37:88:bc:03:3d:91:51:1f:73:35:4d:30:3e:24:e9:82:75: dd:b8:52:bd:c1:99:63:c7:7c:9a:97:19:7b:bb:4d:fc:d6:86: 96:4c:99:40:01:94:2b:fe:02:5c:75:65:f2:f0:77:d0:a6:a1: c2:47:06:93:af:db:27:9c:2c:28:75:29:3c:46:49:68:bd:06: 43:f4:eb:25:b1:c7:df:d4:1e:24:9f:e5:6b:a3:e2:b1:93:09: d7:3f:ea:0e:ca:87:83:ab:50:26:fd:2e:9c:fe:34:b7:dc:a2: ec:2c:36:24:03:bf:62:ba:c2:b3:57:43:f1:95:b1:a0:99:5d: a6:80:f5:1f:0a:1f:1d:3d:ae:c0:ef:6f:6c:6f:14:fb:7f:80: 9f:91:d8:71:97:a3:61:7a:fc:2f:8d:2e:1d:8a:50:9d:54:2f: 5a:ae:8d:f2:de:74:43:eb:52:2a:22:17:94:68:9c:3a:eb:7b: d2:8c:ef:a3:c2:c5:41:ef:fd:45:18:cd:7d:9f:0b:b4:97:f8: 56:85:f3:15:28:2d:86:92:9b:b2:6b:3d:9f:67:97:75:bf:ad: e9:43:85:9e:30:28:0f:60:02:6a:e3:97:c5:e9:8c:e9:49:48: cf:71:83:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WN1T5e/Rrcp1Jo7xLwiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk NDIzZTAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWU2OGI4ODRmNjNlMWE5ZTQ0YmZhNjE5MzE2YmZhYWIzN2Q4MzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI2Agy9dpJMAIsPpYthNrrlknRXJ aJCvrdRR1i8DOIOe149O3ViFpesX+b3IMSKlO4zKUYw7v7lhQqFiDL2L2rIzS5Tt jtQEQ/l0EZe1TEjfuviOxDitO8F/nWqtWWiDWloVtD/2JXmlZQkOd+itAElyc1C9 8ZuI2R7CT/LeeGD1DsaoJNmAtUOMPQFBSJvFW0bAIyZRNBxa4ileitJ5LSxIyUwg LRcA33XLlC6xFxPywc7ty9Na/q88HSE7Xo7VYLvjOSxioIUPkHB5OnjqfGB84ZRu 2IsxeklenaWIQqf2uLhJQt30o5b+SelOXDL1BhvZrTx4o1WYuxDs3zKrPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEHmi4hPY+Gp5Ev6YZMWv6qzfYNUMB8GA1UdIwQY MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt NjQwYzc0YTk0Y2M2LzEvUWVhTGlFOWo0YW5rU19waGt4YV9xck45ZzFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2 LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8Y3MA0G CSqGSIb3DQEBCwUAA4IBAQBH24RVgZW6MzGN0GThLl6GHV7HN4i8Az2RUR9zNU0w PiTpgnXduFK9wZljx3yalxl7u0381oaWTJlAAZQr/gJcdWXy8HfQpqHCRwaTr9sn nCwodSk8RklovQZD9Oslscff1B4kn+Vro+KxkwnXP+oOyoeDq1Am/S6c/jS33KLs LDYkA79iusKzV0PxlbGgmV2mgPUfCh8dPa7A729sbxT7f4Cfkdhxl6NhevwvjS4d ilCdVC9aro3y3nRD61IqIheUaJw663vSjO+jwsVB7/1FGM19nwu0l/hWhfMVKC2G kpuyaz2fZ5d1v63pQ4WeMCgPYAJq45fF6YzpSUjPcYMg -----END CERTIFICATE-----Generated at Mon Jan 26 03:08:07 2026 by rpki-client