This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1Q6OqS-6YuRINNv-65QNNhQLU3Y.roa File: 1Q6OqS-6YuRINNv-65QNNhQLU3Y.roa (raw, json) Hash identifier: JFJdDG09HhIQlRjCdBLLtrWpqxTGLvUTekEfM8RTT/M= Subject key identifier: D5:0E:8E:A9:2F:BA:62:E4:48:34:DB:FE:EB:94:0D:36:14:0B:53:76 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7DD8D8B44BA580DDD26D355C4CA60 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1Q6OqS-6YuRINNv-65QNNhQLU3Y.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207485 IP address blocks: 159.148.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:dd:8d:8b:44:ba:58:0d:dd:26:d3:55:c4:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d50e8ea92fba62e44834dbfeeb940d36140b5376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:2c:5f:aa:aa:c7:d0:d7:0f:34:36:84:68: e9:cb:51:90:b7:f5:17:9c:79:1c:54:85:16:94:59: 99:b8:4d:17:9a:1a:d2:e1:1b:3c:a2:70:82:25:26: d1:dd:d7:12:17:49:14:4b:23:7a:d9:44:b5:10:75: 76:19:18:4d:76:79:45:6a:46:4e:6f:4f:49:f1:70: 1b:36:ed:5b:64:2f:9c:19:27:b0:ea:21:ca:94:e8: ec:ce:3c:cf:e5:80:77:e0:5b:f6:d9:94:d7:7f:0e: ff:8c:f4:8e:ee:1f:33:50:0a:91:0e:6e:c9:53:f5: df:6a:cd:93:98:fd:40:53:10:a1:6d:0f:86:c1:97: 05:57:e8:92:fa:6b:8e:7b:9d:59:b2:0e:a3:cb:78: 27:2c:f1:dd:5a:1f:42:46:29:37:18:a0:eb:cb:36: ea:73:b9:4f:ce:3d:cf:02:5e:f6:5b:cf:a8:67:6e: 85:9b:9e:9b:05:ed:da:43:52:7c:05:44:c6:b0:2e: 4b:e7:20:e3:a8:e5:d9:d2:fd:dd:42:75:a9:31:1e: 8e:8e:2c:42:fc:a0:2d:cc:fc:8c:bb:df:43:49:ae: 0d:46:e2:b1:ae:c9:d0:2b:af:00:fb:b4:47:26:3d: 59:e8:ee:ad:64:5b:88:4f:1f:82:c3:92:b2:65:34: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0E:8E:A9:2F:BA:62:E4:48:34:DB:FE:EB:94:0D:36:14:0B:53:76 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1Q6OqS-6YuRINNv-65QNNhQLU3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.50.0/24 Signature Algorithm: sha256WithRSAEncryption 79:f3:33:4d:60:50:82:07:fc:3f:24:d2:85:ae:5e:97:e8:50: 7c:b5:8d:cc:3f:21:a2:4d:6e:e4:62:9a:85:25:69:58:3b:9d: 6b:2e:46:b3:0e:74:e2:1a:17:a0:ba:5c:0c:b4:ca:8b:16:2c: 21:e0:7f:44:7e:42:57:f9:b9:ad:65:9f:c8:d5:ed:bc:f7:13: df:1b:5c:60:15:86:44:ec:20:97:3a:da:42:71:da:0c:59:28: f1:e9:4c:c1:8e:09:b0:2e:c5:17:c9:c2:be:64:7b:f8:10:5d: d4:2a:d0:43:1a:1d:87:c2:7d:09:06:ec:b0:92:76:80:c5:c1: bf:c1:89:42:19:6c:2e:a1:bf:21:bb:29:10:fe:c4:5a:90:35: 39:cd:eb:be:a2:56:f1:31:f3:5a:1e:fe:34:3b:98:e5:6a:7e: 93:c3:e7:7e:e4:7e:2e:44:79:5c:7f:79:7a:9f:7f:99:a1:c3: 97:22:5f:17:98:c9:a3:88:4e:74:74:40:fb:ca:58:80:d7:05: 7c:8f:a3:94:5b:2c:ce:88:2d:c7:36:b8:d1:aa:bc:87:2a:fe: 40:55:b6:2d:96:38:7b:d4:6f:b3:e7:8b:4e:13:ee:89:d0:fa: 3e:9b:40:b7:36:00:df:85:bb:d9:a0:45:3f:2f:f3:6c:b5:31: 1d:76:fb:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x92Ni0S6WA3dJtNVxMpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTBlOGVhOTJmYmE2MmU0NDgzNGRiZmVlYjk0MGQzNjE0MGI1Mzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRQsX6qqx9DXDzQ2hGjpy1GQt/UX nHkcVIUWlFmZuE0XmhrS4Rs8onCCJSbR3dcSF0kUSyN62US1EHV2GRhNdnlFakZO b09J8XAbNu1bZC+cGSew6iHKlOjszjzP5YB34Fv22ZTXfw7/jPSO7h8zUAqRDm7J U/Xfas2TmP1AUxChbQ+GwZcFV+iS+muOe51Zsg6jy3gnLPHdWh9CRik3GKDryzbq c7lPzj3PAl72W8+oZ26Fm56bBe3aQ1J8BUTGsC5L5yDjqOXZ0v3dQnWpMR6OjixC /KAtzPyMu99DSa4NRuKxrsnQK68A+7RHJj1Z6O6tZFuITx+Cw5KyZTQftQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNUOjqkvumLkSDTb/uuUDTYUC1N2MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvMVE2T3FTLTZZdVJJTk52LTY1UU5OaFFMVTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5QyMA0G CSqGSIb3DQEBCwUAA4IBAQB58zNNYFCCB/w/JNKFrl6X6FB8tY3MPyGiTW7kYpqF JWlYO51rLkazDnTiGhegulwMtMqLFiwh4H9EfkJX+bmtZZ/I1e289xPfG1xgFYZE 7CCXOtpCcdoMWSjx6UzBjgmwLsUXycK+ZHv4EF3UKtBDGh2Hwn0JBuywknaAxcG/ wYlCGWwuob8huykQ/sRakDU5zeu+olbxMfNaHv40O5jlan6Tw+d+5H4uRHlcf3l6 n3+ZocOXIl8XmMmjiE50dED7yliA1wV8j6OUWyzOiC3HNrjRqryHKv5AVbYtljh7 1G+z54tOE+6J0Po+m0C3NgDfhbvZoEU/L/NstTEddvt+ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:28 2026 by rpki-client