This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/kqwgQwpaGv-qjbJtnBbAhvql_1M.roa File: kqwgQwpaGv-qjbJtnBbAhvql_1M.roa (raw, json) Hash identifier: IaMnuVL7JGmrqGqpSLQSd14hY/SD7WineiRtNHWYaGI= Subject key identifier: 92:AC:20:43:0A:5A:1A:FF:AA:8D:B2:6D:9C:16:C0:86:FA:A5:FF:53 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B94C3CDDE943EB88416EE95E9F7ABDF1F Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/kqwgQwpaGv-qjbJtnBbAhvql_1M.roa Signing time: Tue 06 Jan 2026 19:23:38 +0000 ROA not before: Tue 06 Jan 2026 19:23:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 45.154.157.0/24 maxlen: 24 188.209.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:c3:cd:de:94:3e:b8:84:16:ee:95:e9:f7:ab:df:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 6 19:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92ac20430a5a1affaa8db26d9c16c086faa5ff53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:1b:b3:75:e8:7b:e5:f4:e7:1e:af:60:63: 01:22:ee:31:c4:ff:fe:9c:a7:36:5c:2f:00:24:ab: ff:67:dd:7c:fd:30:32:54:fc:db:be:19:88:0b:9b: 62:38:5e:6e:d2:f2:52:24:24:f2:dd:1a:9d:67:d2: f4:36:16:20:b1:93:5d:a8:d3:a7:8a:fe:19:5f:16: 78:c9:cc:f4:a0:46:dd:33:a5:9e:5c:e6:13:b2:ec: 3b:73:c4:c2:d0:bf:5e:bf:eb:36:4a:de:5f:26:99: 6b:7c:fc:0a:52:75:67:76:d6:99:7e:85:90:32:36: d7:50:b6:31:5d:d0:2d:01:d9:4f:39:18:30:2a:df: e2:5c:22:e2:ef:c2:e7:b0:1c:48:05:f0:fc:d6:f7: 52:04:08:c8:72:ec:9b:c6:57:18:29:59:28:a1:43: 0e:e5:9e:f0:d0:4b:75:1d:de:09:dd:7d:11:ec:de: dd:e4:c1:a7:a4:08:61:33:5a:07:39:d1:3c:01:45: 54:20:5d:08:61:ed:dc:4f:ff:44:cc:64:af:1e:50: 99:14:7b:db:e9:ca:47:a2:fc:7a:61:0e:b4:59:12: 30:69:0b:f0:28:e2:9d:2f:27:70:f6:2d:ba:bd:f7: 56:88:16:61:0f:e5:5a:12:e9:0e:81:ce:cd:57:d3: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AC:20:43:0A:5A:1A:FF:AA:8D:B2:6D:9C:16:C0:86:FA:A5:FF:53 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/kqwgQwpaGv-qjbJtnBbAhvql_1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.157.0/24 188.209.140.0/24 Signature Algorithm: sha256WithRSAEncryption 39:a5:a3:2e:47:05:c7:e9:48:3b:1a:b6:52:b6:d4:b8:51:8a: 5f:2d:41:1e:35:53:3a:11:c3:f7:16:b7:22:30:c0:ca:b0:f5: 8e:63:89:35:ea:70:72:76:cd:74:bc:21:2f:1a:04:dd:9b:af: 6b:99:fe:54:2d:4c:72:c8:ad:69:b7:28:6e:02:9d:c8:ec:8d: f8:fb:ce:be:b7:e9:9f:0a:e7:0a:3d:bf:d6:27:5d:b4:8e:25: ad:fc:ea:8d:aa:2d:46:60:f3:3e:55:56:8d:74:6f:34:da:24: 5a:db:69:c0:e1:d3:3e:2a:4f:bc:90:59:8c:b2:4b:a7:c6:05: 9e:52:62:48:bd:30:d8:3d:51:e8:60:aa:ba:f3:29:f0:bd:8e: 76:44:76:20:b7:ec:43:fd:4a:bd:9f:8c:09:31:60:fb:7b:e6: 47:0d:40:2e:df:e3:3d:3b:4f:ba:6c:29:7d:2f:02:2e:dc:2f: 89:8b:6a:f7:c9:43:ae:48:68:c1:87:ea:c1:41:2e:dd:10:83: 8b:b8:bd:90:66:da:9b:de:b0:b2:2c:6a:7e:08:ee:31:9a:35: de:b8:9f:44:6c:9e:db:22:3c:17:12:95:94:ec:c2:54:a2:a5: 85:ab:19:7e:2f:a1:5d:50:27:98:3b:ee:10:35:9a:5f:0e:2f: be:6a:01:ca -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuUw83elD64hBbulen3q98fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTA2MTkyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmFjMjA0MzBhNWExYWZmYWE4ZGIyNmQ5YzE2YzA4NmZhYTVmZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxobs3Xoe+X05x6vYGMBIu4xxP/+ nKc2XC8AJKv/Z918/TAyVPzbvhmIC5tiOF5u0vJSJCTy3RqdZ9L0NhYgsZNdqNOn iv4ZXxZ4ycz0oEbdM6WeXOYTsuw7c8TC0L9ev+s2St5fJplrfPwKUnVndtaZfoWQ MjbXULYxXdAtAdlPORgwKt/iXCLi78LnsBxIBfD81vdSBAjIcuybxlcYKVkooUMO 5Z7w0Et1Hd4J3X0R7N7d5MGnpAhhM1oHOdE8AUVUIF0IYe3cT/9EzGSvHlCZFHvb 6cpHovx6YQ60WRIwaQvwKOKdLydw9i26vfdWiBZhD+VaEukOgc7NV9OzuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJKsIEMKWhr/qo2ybZwWwIb6pf9TMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEva3F3Z1F3cGFHdi1xamJKdG5CYkFodnFsXzFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZqdAwQA vNGMMA0GCSqGSIb3DQEBCwUAA4IBAQA5paMuRwXH6Ug7GrZSttS4UYpfLUEeNVM6 EcP3FrciMMDKsPWOY4k16nByds10vCEvGgTdm69rmf5ULUxyyK1ptyhuAp3I7I34 +86+t+mfCucKPb/WJ120jiWt/OqNqi1GYPM+VVaNdG802iRa22nA4dM+Kk+8kFmM skunxgWeUmJIvTDYPVHoYKq68ynwvY52RHYgt+xD/Uq9n4wJMWD7e+ZHDUAu3+M9 O0+6bCl9LwIu3C+Ji2r3yUOuSGjBh+rBQS7dEIOLuL2QZtqb3rCyLGp+CO4xmjXe uJ9EbJ7bIjwXEpWU7MJUoqWFqxl+L6FdUCeYO+4QNZpfDi++agHK -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:58 2026 by rpki-client