This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/gqRQBpLK3zXQTfzBnWEhQSsGto0.roa File: gqRQBpLK3zXQTfzBnWEhQSsGto0.roa (raw, json) Hash identifier: qD6m/RkAZJfynFeSG5lvjcc7zHJ2to6IwFe26TyaUJs= Subject key identifier: 82:A4:50:06:92:CA:DF:35:D0:4D:FC:C1:9D:61:21:41:2B:06:B6:8D Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070 Certificate serial: 019B7FF20F7EE4EBF300483CEA9A54CFCD1A Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/gqRQBpLK3zXQTfzBnWEhQSsGto0.roa Signing time: Fri 02 Jan 2026 18:22:08 +0000 ROA not before: Fri 02 Jan 2026 18:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 45.66.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:0f:7e:e4:eb:f3:00:48:3c:ea:9a:54:cf:cd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070 Validity Not Before: Jan 2 18:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82a4500692cadf35d04dfcc19d6121412b06b68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:c8:69:5f:10:29:d2:c2:d0:52:c9:11:61: 54:31:86:6d:70:e7:a0:28:0e:59:7e:f4:ea:7b:ed: c6:07:7e:0b:77:11:25:a1:ba:85:30:5f:2f:69:4e: 60:27:d0:e0:70:8b:b7:8f:0d:14:cc:88:9d:45:b1: f2:2d:7e:9b:4f:89:a6:41:4d:35:46:a1:e9:83:9b: 6b:8d:ed:3c:14:da:e1:02:f0:3b:50:ae:cf:39:6f: 71:ed:1d:a2:e9:68:c2:e2:a6:fb:03:8c:24:42:54: 88:cd:59:3b:0a:db:a4:96:18:fe:79:42:20:bc:01: 3b:57:34:df:95:35:a1:2e:2c:9e:a0:d3:f4:b5:f9: f8:7b:66:e6:6a:31:91:30:67:87:c6:50:8f:ca:3e: 29:45:de:2f:4d:56:f3:03:e6:e4:3a:6c:82:05:ea: e9:3a:87:b7:1b:ef:04:a2:39:f4:4d:6d:e1:05:60: a2:b8:04:30:59:1a:48:31:f8:0e:0c:44:50:ff:04: 02:e6:34:fb:75:ad:8e:9e:89:29:33:65:14:83:0e: eb:74:42:4a:e9:56:e6:ab:9a:65:40:40:70:69:32: 26:ce:28:05:32:00:32:8e:6b:34:19:d8:b0:f7:6b: cc:20:fe:82:36:f8:c4:82:f3:c4:21:21:96:ae:af: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A4:50:06:92:CA:DF:35:D0:4D:FC:C1:9D:61:21:41:2B:06:B6:8D X509v3 Authority Key Identifier: keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/gqRQBpLK3zXQTfzBnWEhQSsGto0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.80.0/24 Signature Algorithm: sha256WithRSAEncryption 91:7d:37:02:74:6c:ac:48:7b:f0:1d:ff:fb:2e:c3:36:2c:f8: 15:4d:8f:2e:d2:8f:99:e6:96:24:6c:7e:a2:25:56:b7:cb:e3: d3:ac:47:43:e7:b7:36:fb:ae:4c:70:9d:ae:a3:5d:bc:a3:c0: e3:65:f3:7d:aa:ae:ef:1d:d0:11:59:45:50:b7:04:65:e5:3c: 38:86:ad:60:ea:65:cc:a9:71:a8:79:fc:e4:e4:55:2e:69:18: 78:88:12:38:6e:18:07:50:17:56:ce:da:a7:75:e7:e8:4f:3d: 14:0e:39:a5:1e:df:56:8a:2f:e5:3a:ed:d3:75:b1:f8:d1:bb: 63:51:d1:05:4d:f4:f0:3d:a3:1b:6c:ff:b4:3c:f8:fc:73:64: 59:65:c5:21:00:45:dc:af:7e:42:bf:d2:70:86:5f:52:fb:18: 8c:10:3f:17:10:31:48:2a:be:6d:7e:c6:df:ad:ad:39:77:16: 6c:43:55:b5:40:dd:96:f9:95:80:0b:c3:3a:ed:eb:c5:31:48: e7:dd:ed:0a:c1:d6:4a:05:83:a2:07:d3:f2:09:d8:d5:92:d2: 83:24:27:36:76:65:69:ad:a8:e0:85:c4:d7:72:6f:1b:39:0c: 59:10:6c:f2:ad:56:24:54:55:b5:6f:1f:93:79:72:7a:8a:79: d1:3e:2a:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8g9+5OvzAEg86ppUz80aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4 MmEwNzAwHhcNMjYwMTAyMTgyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmE0NTAwNjkyY2FkZjM1ZDA0ZGZjYzE5ZDYxMjE0MTJiMDZiNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdfIaV8QKdLC0FLJEWFUMYZtcOeg KA5ZfvTqe+3GB34LdxElobqFMF8vaU5gJ9DgcIu3jw0UzIidRbHyLX6bT4mmQU01 RqHpg5trje08FNrhAvA7UK7POW9x7R2i6WjC4qb7A4wkQlSIzVk7Ctuklhj+eUIg vAE7VzTflTWhLiyeoNP0tfn4e2bmajGRMGeHxlCPyj4pRd4vTVbzA+bkOmyCBerp Ooe3G+8Eojn0TW3hBWCiuAQwWRpIMfgODERQ/wQC5jT7da2OnokpM2UUgw7rdEJK 6Vbmq5plQEBwaTImzigFMgAyjms0Gdiw92vMIP6CNvjEgvPEISGWrq+FGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIKkUAaSyt810E38wZ1hIUErBraNMB8GA1UdIwQY MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt ZDlhNTM5YjhiN2FkLzEvZ3FSUUJwTEszelhRVGZ6Qm5XRWhRU3NHdG8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUtZDlhNTM5YjhiN2Fk LzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUJQMA0G CSqGSIb3DQEBCwUAA4IBAQCRfTcCdGysSHvwHf/7LsM2LPgVTY8u0o+Z5pYkbH6i JVa3y+PTrEdD57c2+65McJ2uo128o8DjZfN9qq7vHdARWUVQtwRl5Tw4hq1g6mXM qXGoefzk5FUuaRh4iBI4bhgHUBdWztqndefoTz0UDjmlHt9Wii/lOu3TdbH40btj UdEFTfTwPaMbbP+0PPj8c2RZZcUhAEXcr35Cv9Jwhl9S+xiMED8XEDFIKr5tfsbf ra05dxZsQ1W1QN2W+ZWAC8M67evFMUjn3e0KwdZKBYOiB9PyCdjVktKDJCc2dmVp rajghcTXcm8bOQxZEGzyrVYkVFW1bx+TeXJ6innRPirr -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:00 2026 by rpki-client