This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa File: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (raw, json) Hash identifier: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A= Subject key identifier: A9:A7:A8:FA:7B:28:27:D2:29:75:3E:CC:87:FE:1F:D0:EE:86:12:02 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F1611EAC5FE30B221CBBFA20E93ACBB Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa Signing time: Fri 02 Jan 2026 14:21:51 +0000 ROA not before: Fri 02 Jan 2026 14:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215703 IP address blocks: 92.62.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:11:ea:c5:fe:30:b2:21:cb:bf:a2:0e:93:ac:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9a7a8fa7b2827d229753ecc87fe1fd0ee861202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:38:0d:d4:d6:7f:c4:c9:ed:96:e1:ec:8e:4e: f1:bc:93:d8:1d:a1:d0:96:00:35:96:6d:53:aa:5e: d0:3f:f7:cd:1d:26:16:49:b1:e6:60:90:f8:63:70: 28:ac:38:9c:de:71:f0:3a:5a:eb:13:c1:37:e2:50: 15:ff:4d:4e:39:57:7a:79:8f:49:d0:52:78:56:af: 08:f8:89:72:d8:54:e1:df:77:b0:84:ac:48:36:0a: cd:7e:85:1e:71:59:4b:e6:16:de:26:35:72:58:47: 65:39:20:9d:22:4b:0c:d6:80:81:df:05:cd:e4:48: ed:50:63:4d:d6:c7:ef:bd:2a:e9:88:3c:2c:58:c9: 5d:24:da:64:18:66:8d:95:41:cb:e1:f6:71:e6:06: 98:15:da:20:5b:3b:49:57:94:18:63:a3:95:56:13: f3:74:78:cd:0b:f8:fc:e7:6d:56:6d:20:8a:57:4b: 1b:0b:51:72:40:d4:b1:61:6d:4b:cf:f7:0e:3e:d7: fa:d1:f1:56:a5:f7:74:ba:8d:05:bb:ce:c8:0d:5e: 60:26:05:82:57:6d:e8:99:82:97:3b:b1:cd:5d:b1: 25:2f:6a:28:f1:f7:50:9e:f7:82:0f:b6:0b:71:32: 27:da:af:15:f2:11:0b:3c:23:04:b0:36:a6:ac:be: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A7:A8:FA:7B:28:27:D2:29:75:3E:CC:87:FE:1F:D0:EE:86:12:02 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.251.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:20:94:e9:43:94:f5:3f:76:ee:a7:28:0e:e3:28:0f:8d:56: 14:5a:9e:09:60:dc:30:f5:c2:69:09:85:61:51:77:9d:9d:8f: 86:da:ad:e4:42:ad:c6:6c:70:a9:50:9e:a9:5c:dc:ac:fc:2f: e3:2a:d4:cf:2d:96:ac:b8:17:8c:e1:b1:ad:52:df:72:32:f6: cb:eb:ec:55:7f:24:ef:9f:3c:e6:7b:4c:75:5a:c5:63:b8:9a: 64:f1:cc:95:61:76:00:b6:45:4a:ab:5e:20:49:22:32:ec:52: fc:bb:ab:82:fe:71:01:8a:fc:9a:cd:9e:5e:9e:13:92:23:4a: a3:06:65:5f:83:56:a1:23:bc:05:77:29:0d:3c:cc:7b:c9:dc: d8:d4:e7:a6:83:b5:dd:75:ac:f6:95:2b:c4:fe:2a:bd:bb:f2: 71:13:70:19:6d:c9:bc:fa:39:cf:01:e9:49:7a:75:ea:c6:6f: 2c:0e:88:f5:d0:a4:74:7f:62:3f:5c:9d:07:4e:9b:40:f0:b0: af:38:61:18:c8:4a:ed:6c:75:cc:93:79:a3:b6:6b:52:90:19: c8:20:22:3c:87:94:ff:5e:e6:67:09:b7:86:35:7d:c2:d0:c2: 3d:1e:56:75:2d:ef:18:8a:01:ea:6d:46:58:7f:a1:86:98:3c: 27:c4:d4:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FhHqxf4wsiHLv6IOk6y7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWE3YThmYTdiMjgyN2QyMjk3NTNlY2M4N2ZlMWZkMGVlODYxMjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTgN1NZ/xMntluHsjk7xvJPYHaHQ lgA1lm1Tql7QP/fNHSYWSbHmYJD4Y3AorDic3nHwOlrrE8E34lAV/01OOVd6eY9J 0FJ4Vq8I+Ily2FTh33ewhKxINgrNfoUecVlL5hbeJjVyWEdlOSCdIksM1oCB3wXN 5EjtUGNN1sfvvSrpiDwsWMldJNpkGGaNlUHL4fZx5gaYFdogWztJV5QYY6OVVhPz dHjNC/j8521WbSCKV0sbC1FyQNSxYW1Lz/cOPtf60fFWpfd0uo0Fu87IDV5gJgWC V23omYKXO7HNXbElL2oo8fdQnveCD7YLcTIn2q8V8hELPCMEsDamrL7erQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKmnqPp7KCfSKXU+zIf+H9DuhhICMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvcWFlby1uc29KOUlwZFQ3TWhfNGYwTzZHRWdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD77MA0G CSqGSIb3DQEBCwUAA4IBAQCfIJTpQ5T1P3bupygO4ygPjVYUWp4JYNww9cJpCYVh UXednY+G2q3kQq3GbHCpUJ6pXNys/C/jKtTPLZasuBeM4bGtUt9yMvbL6+xVfyTv nzzme0x1WsVjuJpk8cyVYXYAtkVKq14gSSIy7FL8u6uC/nEBivyazZ5enhOSI0qj BmVfg1ahI7wFdykNPMx7ydzY1Oemg7Xddaz2lSvE/iq9u/JxE3AZbcm8+jnPAelJ enXqxm8sDoj10KR0f2I/XJ0HTptA8LCvOGEYyErtbHXMk3mjtmtSkBnIICI8h5T/ XuZnCbeGNX3C0MI9HlZ1Le8YigHqbUZYf6GGmDwnxNTM -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:29 2026 by rpki-client