This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WqdiOkhgfaBe8KYnTCMeYUtokn0.roa File: WqdiOkhgfaBe8KYnTCMeYUtokn0.roa (raw, json) Hash identifier: MGGi5nYlb55QFMVZGe/Cq2HPH/6AbJg5Zs1QdqnuIWM= Subject key identifier: 5A:A7:62:3A:48:60:7D:A0:5E:F0:A6:27:4C:23:1E:61:4B:68:92:7D Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C387EABE7992FAEE6DDC8157C7F2 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WqdiOkhgfaBe8KYnTCMeYUtokn0.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15818 IP address blocks: 159.148.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c3:87:ea:be:79:92:fa:ee:6d:dc:81:57:c7:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5aa7623a48607da05ef0a6274c231e614b68927d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d7:49:b9:5c:56:72:87:1a:bc:b0:d7:4a:da: d9:02:1c:e6:f6:fb:0f:67:de:55:1f:d9:b0:f6:e4: ee:2c:96:97:09:75:f8:eb:bf:79:de:6c:08:9b:18: ad:6a:ec:f7:71:6d:ad:d5:70:18:45:e7:5a:bf:bb: a3:1b:8f:87:16:07:ae:a8:c1:a6:b0:d5:c0:a6:8a: 7d:c1:80:6f:eb:67:cd:79:8e:92:0a:44:98:46:fa: 55:e9:d8:69:12:2c:c1:a9:53:94:53:a1:31:3f:34: 81:31:cb:fa:21:9e:f6:09:b2:a7:72:ca:37:8e:f9: 66:b1:0f:e7:2e:79:b5:70:80:0f:ab:49:af:30:54: 49:26:dd:c1:e2:aa:81:40:56:03:57:f3:1d:91:f3: c1:29:de:b4:f5:3c:26:78:b7:c3:cb:89:89:9b:dc: b4:a0:90:20:a7:12:ef:47:75:48:0f:7f:b9:16:5b: 45:dd:77:dd:19:00:ff:e7:0b:34:b2:02:1a:2e:d1: 4b:ea:7f:e6:6b:a4:e0:bc:92:51:55:f3:f5:01:13: 03:7f:24:62:db:2f:62:7f:d5:c5:db:b8:62:bc:a2: af:e4:7d:47:83:b3:e7:08:2e:1e:a8:36:96:f2:94: 6f:c7:c4:61:a9:f8:62:f0:32:a0:9e:1c:70:88:fa: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A7:62:3A:48:60:7D:A0:5E:F0:A6:27:4C:23:1E:61:4B:68:92:7D X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WqdiOkhgfaBe8KYnTCMeYUtokn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.90.0/24 Signature Algorithm: sha256WithRSAEncryption c2:f8:bd:8b:ae:d4:fa:70:ef:29:af:8d:d7:6a:73:80:05:f9: 80:ff:94:8b:20:4c:36:78:64:bc:2d:b9:f0:3d:34:52:3b:61: 96:51:cc:eb:c3:fb:08:9d:b0:73:15:4e:4f:2c:cf:a0:eb:12: 4e:9f:a7:6b:94:f3:de:8a:9e:9b:7e:14:a7:e1:65:a1:dc:f0: 8a:0b:28:89:f5:c6:0c:7d:e5:37:f4:3d:5e:79:9f:20:0d:59: b4:af:74:42:57:2d:2c:da:a7:1a:c9:67:4a:f7:34:6d:19:93: 33:3f:0f:65:64:87:3c:8a:9b:77:cf:2a:3b:63:e0:a5:4f:ce: b8:57:b9:ad:02:19:0c:75:94:c4:25:f7:74:70:5f:ca:7a:32: 8d:46:6c:0b:0f:e1:7e:a3:e0:2a:fb:8d:a2:19:7d:83:69:e1: f1:9e:23:63:04:49:b7:8b:28:d9:7c:8f:d3:5f:cb:d9:be:4b: 2f:41:74:e9:82:d1:52:c8:a3:a1:66:f2:7b:93:99:aa:06:ec: 2e:4d:a4:43:57:b7:23:d3:97:eb:86:59:f4:c7:5d:d6:82:b0: 0e:4a:30:d7:73:40:8d:8c:ef:2c:c6:c4:7f:05:12:a0:7c:e3: df:47:95:5f:6c:22:7a:28:b3:dc:c6:23:7e:f0:3e:84:e0:cd: 2b:8c:a5:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8OH6r55kvrubdyBV8fyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWE3NjIzYTQ4NjA3ZGEwNWVmMGE2Mjc0YzIzMWU2MTRiNjg5MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NdJuVxWcocavLDXStrZAhzm9vsP Z95VH9mw9uTuLJaXCXX467953mwImxitauz3cW2t1XAYRedav7ujG4+HFgeuqMGm sNXApop9wYBv62fNeY6SCkSYRvpV6dhpEizBqVOUU6ExPzSBMcv6IZ72CbKncso3 jvlmsQ/nLnm1cIAPq0mvMFRJJt3B4qqBQFYDV/MdkfPBKd609TwmeLfDy4mJm9y0 oJAgpxLvR3VID3+5FltF3XfdGQD/5ws0sgIaLtFL6n/ma6TgvJJRVfP1ARMDfyRi 2y9if9XF27hivKKv5H1Hg7PnCC4eqDaW8pRvx8Rhqfhi8DKgnhxwiPpUjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFqnYjpIYH2gXvCmJ0wjHmFLaJJ9MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvV3FkaU9raGdmYUJlOEtZblRDTWVZVXRva24wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5RaMA0G CSqGSIb3DQEBCwUAA4IBAQDC+L2LrtT6cO8pr43XanOABfmA/5SLIEw2eGS8Lbnw PTRSO2GWUczrw/sInbBzFU5PLM+g6xJOn6drlPPeip6bfhSn4WWh3PCKCyiJ9cYM feU39D1eeZ8gDVm0r3RCVy0s2qcayWdK9zRtGZMzPw9lZIc8ipt3zyo7Y+ClT864 V7mtAhkMdZTEJfd0cF/KejKNRmwLD+F+o+Aq+42iGX2DaeHxniNjBEm3iyjZfI/T X8vZvksvQXTpgtFSyKOhZvJ7k5mqBuwuTaRDV7cj05frhln0x13WgrAOSjDXc0CN jO8sxsR/BRKgfOPfR5VfbCJ6KLPcxiN+8D6E4M0rjKWC -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:17 2026 by rpki-client