This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/qZ7w8eltwpusgDZDYcyCDOLAgd4.roa File: qZ7w8eltwpusgDZDYcyCDOLAgd4.roa (raw, json) Hash identifier: tsflvwgXfYhAOmry/PKXKjcvkUzgCka5jl0JMjyOtdE= Subject key identifier: A9:9E:F0:F1:E9:6D:C2:9B:AC:80:36:43:61:CC:82:0C:E2:C0:81:DE Certificate issuer: /CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43 Certificate serial: 019B76EAADC52115B2309D7D2D0319496B36 Authority key identifier: AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/qZ7w8eltwpusgDZDYcyCDOLAgd4.roa Signing time: Thu 01 Jan 2026 00:17:29 +0000 ROA not before: Thu 01 Jan 2026 00:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56501 IP address blocks: 45.129.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ad:c5:21:15:b2:30:9d:7d:2d:03:19:49:6b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43 Validity Not Before: Jan 1 00:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a99ef0f1e96dc29bac80364361cc820ce2c081de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:10:c9:8d:1d:54:ca:7c:17:a0:9d:ad:9d: 72:5a:31:86:03:56:2b:02:8d:10:2e:3b:78:a5:76: d9:32:d2:a7:9a:e0:74:5d:3b:36:fb:b4:44:b5:e1: 1d:af:57:f7:32:7e:16:6f:99:2d:22:9b:07:15:85: bd:98:50:1c:79:71:4e:ac:81:cd:84:9f:ba:3e:bf: 10:52:78:a6:ec:f4:04:5f:4c:4d:bd:94:16:81:03: f8:26:4f:6c:2b:ca:e5:df:77:67:0e:d7:e6:74:1b: 42:28:5d:b7:47:d0:15:26:8c:bf:83:3b:ca:7b:86: 90:fb:52:7b:8c:5d:54:57:98:62:46:a4:0d:fe:c2: ba:d1:30:05:70:30:c9:bc:ce:de:c1:0a:59:64:15: 42:3b:d7:ff:20:d7:30:22:a6:64:35:ea:95:dd:fd: 02:f1:35:75:d1:a0:c7:0f:48:c0:ba:0c:86:22:91: 4f:25:b7:fc:8b:11:9f:de:cd:40:90:1e:59:08:27: 5f:09:e9:b7:46:dc:1e:ba:b8:ac:37:ab:11:88:09: 11:78:10:89:00:dd:1b:33:f9:f2:a9:f2:76:2f:55: e5:b7:a0:cb:f4:7f:81:a6:69:e3:2b:66:e1:c4:b2: 99:c0:e3:2d:f7:f8:8d:0c:96:22:ad:38:a7:77:b7: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9E:F0:F1:E9:6D:C2:9B:AC:80:36:43:61:CC:82:0C:E2:C0:81:DE X509v3 Authority Key Identifier: keyid:AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/qZ7w8eltwpusgDZDYcyCDOLAgd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.75.0/24 Signature Algorithm: sha256WithRSAEncryption 00:86:65:0f:4d:bc:0a:7f:83:c6:aa:0e:5c:e7:b3:18:00:ed: 75:b8:05:3e:8e:1f:29:89:02:7c:93:36:23:5b:5c:41:b2:15: 12:cb:69:5b:e0:be:88:1d:bb:3c:38:16:dc:30:de:81:31:47: b0:f2:8d:e0:f0:11:9c:c9:40:3a:4b:fc:d6:91:43:cc:d5:2d: 87:cd:4b:fc:a2:36:32:bd:28:90:e6:92:58:6f:c1:f6:7e:69: fa:17:3f:a3:6f:dd:d3:71:80:a2:36:1c:8e:74:0f:00:21:30: 8b:19:3a:41:fe:18:f2:ae:6d:32:36:8d:cd:23:c5:e9:10:96: 32:17:59:a4:77:00:7c:25:47:8d:a6:ac:75:00:5b:7c:1d:d4: 8c:b5:a3:34:e2:01:be:87:3e:9c:7c:0b:44:ab:6c:56:c1:d1: f5:7a:a6:bb:e5:b8:5b:db:45:d2:19:d2:67:86:4c:62:1f:3c: 86:5e:85:13:d8:5a:e2:b0:59:8f:6e:23:03:e2:d9:a6:34:7e: 96:2c:b2:97:f4:d5:42:7f:8b:22:ea:14:6d:f5:ea:d4:d3:df: ed:c8:ae:c5:3c:6e:64:d9:35:50:10:05:e6:a5:56:ab:b5:99: 6b:2e:ea:69:a3:20:cf:dd:e8:2b:68:de:6a:bd:50:67:dd:25: 49:ce:b4:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26q3FIRWyMJ19LQMZSWs2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjcwY2E3YmVjNTM5MDJmNWNmNTc5ZWI5M2VkYjBkOTJh MmZiNDMwHhcNMjYwMTAxMDAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTllZjBmMWU5NmRjMjliYWM4MDM2NDM2MWNjODIwY2UyYzA4MWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlcQyY0dVMp8F6CdrZ1yWjGGA1Yr Ao0QLjt4pXbZMtKnmuB0XTs2+7REteEdr1f3Mn4Wb5ktIpsHFYW9mFAceXFOrIHN hJ+6Pr8QUnim7PQEX0xNvZQWgQP4Jk9sK8rl33dnDtfmdBtCKF23R9AVJoy/gzvK e4aQ+1J7jF1UV5hiRqQN/sK60TAFcDDJvM7ewQpZZBVCO9f/INcwIqZkNeqV3f0C 8TV10aDHD0jAugyGIpFPJbf8ixGf3s1AkB5ZCCdfCem3RtweurisN6sRiAkReBCJ AN0bM/nyqfJ2L1Xlt6DL9H+BpmnjK2bhxLKZwOMt9/iNDJYirTind7forQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKme8PHpbcKbrIA2Q2HMggziwIHeMB8GA1UdIwQY MBaAFK63DKe+xTkC9c9Xnrk+2w2SovtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJjTXA3N0ZPUUwxejFlZXVUN2JEWktpLTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MTYzMjMtYTlhZi00M2Q1LTlhOGIt OTFkYjIzNDVmNDM2LzEvcVo3dzhlbHR3cHVzZ0RaRFljeUNET0xBZ2Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83MTYzMjMtYTlhZi00M2Q1LTlhOGItOTFkYjIzNDVmNDM2 LzEvcnJjTXA3N0ZPUUwxejFlZXVUN2JEWktpLTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYFLMA0G CSqGSIb3DQEBCwUAA4IBAQAAhmUPTbwKf4PGqg5c57MYAO11uAU+jh8piQJ8kzYj W1xBshUSy2lb4L6IHbs8OBbcMN6BMUew8o3g8BGcyUA6S/zWkUPM1S2HzUv8ojYy vSiQ5pJYb8H2fmn6Fz+jb93TcYCiNhyOdA8AITCLGTpB/hjyrm0yNo3NI8XpEJYy F1mkdwB8JUeNpqx1AFt8HdSMtaM04gG+hz6cfAtEq2xWwdH1eqa75bhb20XSGdJn hkxiHzyGXoUT2FrisFmPbiMD4tmmNH6WLLKX9NVCf4si6hRt9erU09/tyK7FPG5k 2TVQEAXmpVartZlrLuppoyDP3egraN5qvVBn3SVJzrSb -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:32 2026 by rpki-client