This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/qw9D7rMN2NZTDb-0Us5jWgNJ6yM.roa File: qw9D7rMN2NZTDb-0Us5jWgNJ6yM.roa (raw, json) Hash identifier: 1etgiesCIDnmF4D/vGGoSf8zJOp8X0mJoxZw4HvWNUU= Subject key identifier: AB:0F:43:EE:B3:0D:D8:D6:53:0D:BF:B4:52:CE:63:5A:03:49:EB:23 Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a Certificate serial: 019B797F3877519DC58189FECD9B9D97AE34 Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/qw9D7rMN2NZTDb-0Us5jWgNJ6yM.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208516 IP address blocks: 45.131.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:38:77:51:9d:c5:81:89:fe:cd:9b:9d:97:ae:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab0f43eeb30dd8d6530dbfb452ce635a0349eb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:b5:d9:a0:be:79:e1:78:99:64:be:68:d7: be:32:64:9a:8d:59:2a:89:b0:be:90:c2:53:77:7d: 77:47:55:6d:24:9a:06:f9:d9:85:aa:2c:5b:94:de: 53:a7:ab:65:1a:f1:67:15:db:11:fa:d5:68:7f:8c: f5:bc:2b:5b:87:c1:33:b1:68:76:c3:c9:42:cd:04: a4:1f:30:a4:fa:33:ae:5e:38:8f:ba:00:cf:a4:19: 52:68:26:90:b8:9c:44:8e:8b:e1:14:4e:6b:37:c9: 1c:a6:b3:64:70:16:0c:7b:48:46:3a:b9:33:1d:fd: e9:59:f1:20:42:35:46:07:48:58:04:2d:7e:59:8f: 00:35:1d:53:6b:45:69:9e:be:9f:fc:72:f7:b0:44: 24:1e:c9:02:86:a5:08:32:c9:43:26:a2:56:f0:8a: 1d:ca:a7:83:f8:34:2c:f7:51:7a:76:71:2b:18:44: 11:77:0c:2f:3c:27:23:1f:4f:91:05:ac:d3:c3:17: b2:fe:47:eb:e0:0c:ca:d9:c7:46:60:1d:c6:06:6a: 3a:8f:28:c8:bb:9b:4f:4b:ce:2a:11:39:9e:12:bc: 7f:4c:f0:9a:a9:24:bc:fe:36:ca:40:a6:d7:9c:e7: 9b:b9:9e:d7:ee:d6:8b:ec:bc:78:bd:6c:ec:e7:d2: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0F:43:EE:B3:0D:D8:D6:53:0D:BF:B4:52:CE:63:5A:03:49:EB:23 X509v3 Authority Key Identifier: keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/qw9D7rMN2NZTDb-0Us5jWgNJ6yM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.236.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:93:22:59:08:2c:59:9c:f7:94:a9:53:e8:14:78:24:2e:05: 6f:20:3a:e5:62:17:5d:54:df:47:56:73:fc:64:c5:4c:9a:0b: 6a:ad:6f:fc:ac:cb:bf:65:8e:e2:49:3c:48:2c:4f:9b:cc:54: d0:d6:b6:18:db:25:74:0c:5e:2f:d1:c5:a9:8e:a8:29:43:3d: dd:86:71:c4:48:bc:40:00:7b:ad:47:ce:7c:8e:33:e5:08:68: 45:04:c1:20:ac:d3:36:f0:fa:db:b3:3c:2f:40:b0:25:58:23: c0:87:b4:b8:82:96:aa:9d:83:17:19:d2:70:10:70:29:c9:b5: 42:a7:5f:86:7b:79:f2:d8:ef:9b:b7:99:7c:50:5c:f3:39:00: 3c:68:bb:e1:b6:51:56:b1:40:a6:c6:12:eb:71:12:a0:6f:e4: 30:8b:59:5c:8b:89:7e:be:a7:b3:93:b5:4e:fe:0e:48:56:60: 78:c9:4d:75:37:bc:ec:ad:33:ac:ad:d8:ee:4a:86:d7:98:71: 4c:78:4e:85:a3:9a:ba:1e:0a:cd:54:b5:aa:61:22:8b:19:76: 9c:f4:b7:91:c2:a6:89:57:41:4a:59:46:94:1b:ad:94:21:09: a6:04:e5:a3:d7:55:e3:a9:0e:a8:f3:06:3c:c3:81:47:a3:73: 31:1e:55:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzh3UZ3FgYn+zZudl640MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTNiZGY0ZGM3NDM1ZmFmNTFiYTkzNGQ2NTU3MGY3MWMy MTczMWEwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjBmNDNlZWIzMGRkOGQ2NTMwZGJmYjQ1MmNlNjM1YTAzNDllYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgG12aC+eeF4mWS+aNe+MmSajVkq ibC+kMJTd313R1VtJJoG+dmFqixblN5Tp6tlGvFnFdsR+tVof4z1vCtbh8EzsWh2 w8lCzQSkHzCk+jOuXjiPugDPpBlSaCaQuJxEjovhFE5rN8kcprNkcBYMe0hGOrkz Hf3pWfEgQjVGB0hYBC1+WY8ANR1Ta0Vpnr6f/HL3sEQkHskChqUIMslDJqJW8Iod yqeD+DQs91F6dnErGEQRdwwvPCcjH0+RBazTwxey/kfr4AzK2cdGYB3GBmo6jyjI u5tPS84qETmeErx/TPCaqSS8/jbKQKbXnOebuZ7X7taL7Lx4vWzs59JP0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKsPQ+6zDdjWUw2/tFLOY1oDSesjMB8GA1UdIwQY MBaAFEQTvfTcdDX69RupNNZVcPccIXMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80N2FhMmYtNmI2Zi00ZWY1LTliOTkt YmM5ZWNjMmFkYjQzLzEvcXc5RDdyTU4yTlpURGItMFVzNWpXZ05KNnlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80N2FhMmYtNmI2Zi00ZWY1LTliOTktYmM5ZWNjMmFkYjQz LzEvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYPsMA0G CSqGSIb3DQEBCwUAA4IBAQA9kyJZCCxZnPeUqVPoFHgkLgVvIDrlYhddVN9HVnP8 ZMVMmgtqrW/8rMu/ZY7iSTxILE+bzFTQ1rYY2yV0DF4v0cWpjqgpQz3dhnHESLxA AHutR858jjPlCGhFBMEgrNM28PrbszwvQLAlWCPAh7S4gpaqnYMXGdJwEHApybVC p1+Ge3ny2O+bt5l8UFzzOQA8aLvhtlFWsUCmxhLrcRKgb+Qwi1lci4l+vqezk7VO /g5IVmB4yU11N7zsrTOsrdjuSobXmHFMeE6Fo5q6HgrNVLWqYSKLGXac9LeRwqaJ V0FKWUaUG62UIQmmBOWj11XjqQ6o8wY8w4FHo3MxHlUp -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:27 2026 by rpki-client