This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/QSJvaQBA6nQ5JRQZsWLWGSneNlA.roa File: QSJvaQBA6nQ5JRQZsWLWGSneNlA.roa (raw, json) Hash identifier: WK7d9wRn5gj7wlNHOOBd4YmwpJ9PcoflyUoAY4KCUQA= Subject key identifier: 41:22:6F:69:00:40:EA:74:39:25:14:19:B1:62:D6:19:29:DE:36:50 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F144FD0AA0492552E64792F82BF1955 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/QSJvaQBA6nQ5JRQZsWLWGSneNlA.roa Signing time: Fri 02 Jan 2026 14:19:56 +0000 ROA not before: Fri 02 Jan 2026 14:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57494 IP address blocks: 147.45.102.0/24 maxlen: 24 147.45.147.0/24 maxlen: 24 147.45.158.0/24 maxlen: 24 147.45.161.0/24 maxlen: 24 147.45.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4f:d0:aa:04:92:55:2e:64:79:2f:82:bf:19:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41226f690040ea7439251419b162d61929de3650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:e5:f4:f1:0d:b1:ab:1d:94:50:74:67:36: 75:e9:12:d6:23:55:66:c1:29:81:b3:cc:10:0e:aa: 3e:49:71:e7:d7:9a:5e:3c:4d:7d:9f:bd:c9:a3:f2: b6:a7:31:49:37:67:2f:3c:a9:6a:e2:46:20:d5:1f: b1:18:cd:d0:b2:8e:d3:73:f6:51:94:98:4c:a6:aa: 4a:d9:2e:07:63:41:d0:ed:7c:3a:f0:19:5a:92:91: b2:9d:d2:77:4f:c3:ac:d6:11:0c:b3:d4:88:67:ee: 4c:ab:de:44:d7:fd:27:ac:61:66:34:ed:35:70:5d: 2a:ed:b9:a1:b3:53:7e:7d:94:f9:be:4d:4d:be:3a: 70:f4:46:7b:b3:61:3f:13:76:bf:fe:12:7b:2c:1f: b7:f7:1f:30:87:6c:6c:b2:4f:87:05:a2:cc:56:da: 6c:83:96:c6:82:76:78:bb:19:cc:f1:6a:7c:26:ee: 09:cd:70:b8:8e:68:b0:9d:f5:19:c9:2a:ed:86:d6: 89:c6:91:27:ef:c5:c5:de:0f:30:b0:84:44:3e:ef: 99:58:fe:8a:59:3c:3a:89:43:4d:3a:e1:a2:67:53: fb:0b:8b:e6:6d:85:14:ca:03:73:a6:10:17:8c:47: bb:fe:5b:0e:63:57:6b:82:cd:d1:56:86:a3:e5:04: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:22:6F:69:00:40:EA:74:39:25:14:19:B1:62:D6:19:29:DE:36:50 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/QSJvaQBA6nQ5JRQZsWLWGSneNlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.102.0/24 147.45.147.0/24 147.45.158.0/24 147.45.161.0/24 147.45.215.0/24 Signature Algorithm: sha256WithRSAEncryption 35:98:a2:9b:86:92:ff:f5:50:be:ab:91:b3:18:f5:ca:5d:5e: a0:b2:76:7c:4e:ec:d5:04:f0:c4:26:ec:c3:6b:c5:f1:e7:9b: a8:94:08:0b:8d:98:c3:dc:f3:f9:5c:89:3c:57:21:10:c8:d3: ed:a6:3b:b3:e3:54:ef:07:74:7c:a0:d6:bf:63:8f:d5:f2:55: 5e:07:ed:6a:1e:bf:f0:36:28:eb:d0:ba:40:86:84:0f:98:29: 87:aa:40:07:b0:f0:11:7b:40:54:f0:36:01:8a:a0:b2:36:2a: 99:4b:53:c1:a9:20:10:af:95:5a:f3:4a:3b:46:9a:d3:b8:83: 9d:33:4b:e3:e9:dc:bb:99:79:0c:9e:a1:72:72:7b:5a:0b:73: cc:7c:d3:53:6a:24:98:e4:e6:82:4a:bd:b0:7b:19:2e:06:d7: 01:8a:5c:79:69:90:50:89:67:7a:a2:88:62:d9:88:26:96:d6: bc:bb:14:f2:20:05:86:8f:80:95:22:e3:f7:6e:46:54:67:34: 29:2a:fe:7d:42:f1:22:21:0a:02:01:4f:c4:20:48:59:a0:d6: 02:fe:28:8b:c4:86:8a:36:f2:be:f8:72:42:c8:34:86:e2:5a: ff:eb:7c:9f:7d:4d:ab:96:00:f5:92:1d:6c:de:d7:95:ff:05: e2:0c:26:14 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/FE/QqgSSVS5keS+CvxlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTIyNmY2OTAwNDBlYTc0MzkyNTE0MTliMTYyZDYxOTI5ZGUzNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiLl9PENsasdlFB0ZzZ16RLWI1Vm wSmBs8wQDqo+SXHn15pePE19n73Jo/K2pzFJN2cvPKlq4kYg1R+xGM3Qso7Tc/ZR lJhMpqpK2S4HY0HQ7Xw68BlakpGyndJ3T8Os1hEMs9SIZ+5Mq95E1/0nrGFmNO01 cF0q7bmhs1N+fZT5vk1Nvjpw9EZ7s2E/E3a//hJ7LB+39x8wh2xssk+HBaLMVtps g5bGgnZ4uxnM8Wp8Ju4JzXC4jmiwnfUZySrthtaJxpEn78XF3g8wsIREPu+ZWP6K WTw6iUNNOuGiZ1P7C4vmbYUUygNzphAXjEe7/lsOY1drgs3RVoaj5QTjyQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEEib2kAQOp0OSUUGbFi1hkp3jZQMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvUVNKdmFRQkE2blE1SlJRWnNXTFdHU25lTmxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAky1mAwQA ky2TAwQAky2eAwQAky2hAwQAky3XMA0GCSqGSIb3DQEBCwUAA4IBAQA1mKKbhpL/ 9VC+q5GzGPXKXV6gsnZ8TuzVBPDEJuzDa8Xx55uolAgLjZjD3PP5XIk8VyEQyNPt pjuz41TvB3R8oNa/Y4/V8lVeB+1qHr/wNijr0LpAhoQPmCmHqkAHsPARe0BU8DYB iqCyNiqZS1PBqSAQr5Va80o7RprTuIOdM0vj6dy7mXkMnqFycntaC3PMfNNTaiSY 5OaCSr2wexkuBtcBilx5aZBQiWd6oohi2Ygmlta8uxTyIAWGj4CVIuP3bkZUZzQp Kv59QvEiIQoCAU/EIEhZoNYC/iiLxIaKNvK++HJCyDSG4lr/63yffU2rlgD1kh1s 3teV/wXiDCYU -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:47 2026 by rpki-client