This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/q19_s0i5IT2dybooIUZ7ijzcNXc.roa File: q19_s0i5IT2dybooIUZ7ijzcNXc.roa (raw, json) Hash identifier: mA9ozpHHNX60WKdi28wKCibVutGMEXZy4W8BO6NWgto= Subject key identifier: AB:5F:7F:B3:48:B9:21:3D:9D:C9:BA:28:21:46:7B:8A:3C:DC:35:77 Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94 Certificate serial: 019B7759567D98BC26F756B0FDA79BFCBC26 Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/q19_s0i5IT2dybooIUZ7ijzcNXc.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56534 IP address blocks: 45.140.76.0/23 maxlen: 23 45.140.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:56:7d:98:bc:26:f7:56:b0:fd:a7:9b:fc:bc:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab5f7fb348b9213d9dc9ba2821467b8a3cdc3577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:19:fc:22:ab:0e:cd:3a:bd:aa:c5:a8:d0: dd:d4:33:d7:35:c8:20:d0:a6:cb:1a:bd:f4:ed:ff: ad:33:64:26:4a:d6:42:5a:78:4e:47:f8:71:47:7e: 1c:2a:5d:14:32:c1:e6:17:6a:c9:96:d6:7d:88:96: a1:7d:39:84:dd:39:9e:aa:7d:84:b3:7a:f3:3f:54: 8c:7f:7e:66:c7:9a:c9:b1:cd:18:eb:94:81:55:86: 64:19:b5:55:9b:f1:15:20:03:14:8b:98:6d:cd:ad: c5:63:14:70:68:19:3e:9b:eb:2f:ed:fa:39:fe:51: 90:88:4c:2a:62:74:75:9e:47:87:7f:57:67:ef:b7: c0:e6:2a:6d:56:54:b4:e6:71:8c:cf:c1:92:0a:e2: 07:01:48:09:a2:04:a3:b8:02:64:ef:cd:f0:8e:b6: b7:fc:71:bc:9b:02:4f:e3:f3:dc:7d:0a:d3:e3:0f: 23:23:8b:89:ce:c5:53:84:8f:80:1a:cb:cc:79:91: df:06:b9:21:8b:1e:f1:96:c7:70:56:86:30:b8:85: 7b:51:bd:82:d5:23:bf:17:20:60:dc:74:8f:ae:26: c2:30:8e:76:aa:4e:9c:70:a0:58:26:68:dc:18:06: ce:08:7a:27:70:c2:01:be:c7:b7:74:b2:84:b5:7a: 50:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5F:7F:B3:48:B9:21:3D:9D:C9:BA:28:21:46:7B:8A:3C:DC:35:77 X509v3 Authority Key Identifier: keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/q19_s0i5IT2dybooIUZ7ijzcNXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.76.0/23 Signature Algorithm: sha256WithRSAEncryption 42:8c:a0:04:b1:bb:00:2d:8b:f1:fb:9f:c3:3e:a7:bb:57:39: 03:92:f3:b4:48:a4:cb:8a:03:b7:fd:c8:19:52:90:0d:9e:81: 76:05:54:2f:11:06:90:a4:ee:81:44:53:0a:ef:d5:cc:15:56: a3:c2:6b:e7:aa:4f:07:27:bb:99:ae:be:95:d3:ef:4b:42:a1: 3e:84:e2:77:0b:ad:52:61:07:a4:d1:8b:6a:45:29:ec:52:ab: e9:6e:40:5e:92:89:2c:14:a2:cf:21:54:af:f7:aa:ed:f9:fa: 51:10:db:de:9b:93:ed:b4:7f:80:c2:1f:5d:8c:96:cb:6a:ab: 1a:c8:56:24:4c:c0:a8:bf:68:46:5f:5b:2e:51:f5:ec:73:e1: cf:e0:bb:07:5b:ce:58:97:f7:39:95:ff:18:dd:2a:0d:6e:0c: e3:dc:87:d8:8b:01:c0:28:71:f1:1b:db:50:9a:e2:2d:a8:3f: 3a:10:f8:4d:33:ff:a2:5a:50:c8:39:e6:85:31:42:1f:e3:6f: 5a:32:26:f8:24:b4:bb:f1:46:9a:5a:04:08:fc:81:6f:08:da: c8:52:18:33:9e:a3:a6:21:b3:5b:c4:69:29:9d:29:0f:aa:60: 8c:21:bd:f1:c1:e8:da:c3:52:20:ee:3b:a2:71:37:9c:77:a7: 10:b6:94:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WVZ9mLwm91aw/aeb/LwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1 ZDViOTQwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjVmN2ZiMzQ4YjkyMTNkOWRjOWJhMjgyMTQ2N2I4YTNjZGMzNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EMZ/CKrDs06varFqNDd1DPXNcgg 0KbLGr307f+tM2QmStZCWnhOR/hxR34cKl0UMsHmF2rJltZ9iJahfTmE3Tmeqn2E s3rzP1SMf35mx5rJsc0Y65SBVYZkGbVVm/EVIAMUi5htza3FYxRwaBk+m+sv7fo5 /lGQiEwqYnR1nkeHf1dn77fA5iptVlS05nGMz8GSCuIHAUgJogSjuAJk783wjra3 /HG8mwJP4/PcfQrT4w8jI4uJzsVThI+AGsvMeZHfBrkhix7xlsdwVoYwuIV7Ub2C 1SO/FyBg3HSPribCMI52qk6ccKBYJmjcGAbOCHoncMIBvse3dLKEtXpQvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtff7NIuSE9ncm6KCFGe4o83DV3MB8GA1UdIwQY MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt ZDNkMzBlYmMzNmFjLzEvcTE5X3MwaTVJVDJkeWJvb0lVWjdpanpjTlhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYxMMA0G CSqGSIb3DQEBCwUAA4IBAQBCjKAEsbsALYvx+5/DPqe7VzkDkvO0SKTLigO3/cgZ UpANnoF2BVQvEQaQpO6BRFMK79XMFVajwmvnqk8HJ7uZrr6V0+9LQqE+hOJ3C61S YQek0YtqRSnsUqvpbkBekoksFKLPIVSv96rt+fpRENvem5PttH+Awh9djJbLaqsa yFYkTMCov2hGX1suUfXsc+HP4LsHW85Yl/c5lf8Y3SoNbgzj3IfYiwHAKHHxG9tQ muItqD86EPhNM/+iWlDIOeaFMUIf429aMib4JLS78UaaWgQI/IFvCNrIUhgznqOm IbNbxGkpnSkPqmCMIb3xwejaw1Ig7juicTecd6cQtpTy -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:23 2026 by rpki-client