This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/Q3UueKZyjYi29gEj3ysZPxLWX3M.roa File: Q3UueKZyjYi29gEj3ysZPxLWX3M.roa (raw, json) Hash identifier: YvgONnDTklvBlpA7XXp0pkT4GnAHE4zfdo+oxjb6uJs= Subject key identifier: 43:75:2E:78:A6:72:8D:88:B6:F6:01:23:DF:2B:19:3F:12:D6:5F:73 Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca Certificate serial: 019BC68710BE6EDEF8ACB39782D4C75DE4C9 Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/Q3UueKZyjYi29gEj3ysZPxLWX3M.roa Signing time: Fri 16 Jan 2026 11:18:18 +0000 ROA not before: Fri 16 Jan 2026 11:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272096 IP address blocks: 149.174.0.0/24 maxlen: 24 149.174.1.0/24 maxlen: 24 149.174.2.0/24 maxlen: 24 149.174.3.0/24 maxlen: 24 149.174.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:87:10:be:6e:de:f8:ac:b3:97:82:d4:c7:5d:e4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca Validity Not Before: Jan 16 11:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43752e78a6728d88b6f60123df2b193f12d65f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:6f:c9:ba:61:b1:7a:1d:92:f1:d0:ce:16: c6:13:0c:c6:4e:05:a3:d1:e3:a9:d0:6a:8d:ee:c8: 10:b3:91:e4:a6:16:80:50:5e:59:97:99:65:a0:6d: e2:8e:fb:dc:fa:f2:c4:ec:a5:c0:76:0e:3b:b3:59: 00:2f:a6:ca:73:fd:00:60:74:25:1a:2a:84:3e:66: 83:a4:1e:33:d2:12:12:c1:ec:db:a5:c5:c7:ae:78: 0d:f7:b4:92:68:9a:27:ba:be:45:e7:7c:d5:0a:b9: b7:c2:8e:4a:2d:78:5d:2e:76:ec:ba:00:04:b2:d3: d8:ea:de:57:13:bc:73:0c:20:b7:f6:bb:1c:f1:64: 8d:9b:46:0e:bb:6c:75:01:d1:a6:79:74:8a:d1:c6: cb:9a:9f:0d:4c:76:01:a8:03:a9:33:8a:ee:4c:86: 96:9e:8d:ba:8c:2f:c8:4a:73:18:4f:5e:7d:d6:41: 3f:fe:7e:43:d4:90:54:fc:e1:fa:15:df:3d:a7:57: dc:a6:c5:5f:77:b5:8c:35:77:c4:19:09:ac:7a:27: b7:8a:0a:0c:7b:40:c9:0a:18:be:bf:c5:64:8c:ef: 76:a0:d8:66:d3:5f:17:02:53:17:2d:13:37:af:fd: 56:95:ab:b4:25:57:94:9d:e8:17:71:56:96:5f:cd: 82:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:75:2E:78:A6:72:8D:88:B6:F6:01:23:DF:2B:19:3F:12:D6:5F:73 X509v3 Authority Key Identifier: keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/Q3UueKZyjYi29gEj3ysZPxLWX3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.174.0.0-149.174.4.255 Signature Algorithm: sha256WithRSAEncryption 8e:d2:0e:2f:52:6b:b6:f3:ac:d7:a1:19:a6:09:d5:2e:81:3d: a2:a2:e5:98:c2:90:4e:d6:61:a0:2f:9a:24:30:b4:b1:c8:9e: a6:83:dd:a1:3f:ef:e8:d6:eb:87:37:a4:7f:c4:f3:3b:07:bf: 4b:1c:4b:d0:6d:95:7e:3f:29:41:05:f7:0b:68:e1:e4:34:14: 0a:13:ee:ba:f1:29:40:cc:90:8c:1a:f3:68:ab:ff:af:d8:65: 6f:41:ac:1c:66:a9:15:dd:e3:b7:d3:26:40:7b:63:f9:48:7b: ff:41:88:1d:89:40:9f:9d:de:c1:86:b0:1d:a9:33:ca:f2:11: 88:4e:03:a3:06:76:ce:4f:b7:87:1a:e9:f5:54:4b:e9:e0:8d: 83:40:10:b3:1a:be:df:a8:39:5a:d5:93:42:35:99:02:0a:a2: 1c:78:4b:49:18:72:ac:1b:d1:10:7b:dd:e0:31:ef:19:76:12: 4c:40:31:0c:b4:7a:99:5f:b8:b0:6a:06:38:6d:98:88:d5:9d: 64:b2:2f:cb:b0:fa:3c:c2:5e:24:ee:99:cc:46:50:89:fe:ff: a0:c9:80:fb:59:2f:fc:7d:ea:a9:8e:13:50:ab:95:92:49:34: 07:4d:23:ca:11:c1:37:de:dd:0e:21:94:6c:e1:c1:41:8c:a0: 74:f2:1b:43 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZvGhxC+bt74rLOXgtTHXeTJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3 Mjk3Y2EwHhcNMjYwMTE2MTExODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mzc1MmU3OGE2NzI4ZDg4YjZmNjAxMjNkZjJiMTkzZjEyZDY1ZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEZvybphsXodkvHQzhbGEwzGTgWj 0eOp0GqN7sgQs5HkphaAUF5Zl5lloG3ijvvc+vLE7KXAdg47s1kAL6bKc/0AYHQl GiqEPmaDpB4z0hISwezbpcXHrngN97SSaJonur5F53zVCrm3wo5KLXhdLnbsugAE stPY6t5XE7xzDCC39rsc8WSNm0YOu2x1AdGmeXSK0cbLmp8NTHYBqAOpM4ruTIaW no26jC/ISnMYT1591kE//n5D1JBU/OH6Fd89p1fcpsVfd7WMNXfEGQmseie3igoM e0DJChi+v8VkjO92oNhm018XAlMXLRM3r/1Wlau0JVeUnegXcVaWX82CSQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFEN1Lnimco2ItvYBI98rGT8S1l9zMB8GA1UdIwQY MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt NTM1ODQwMWZiNzk2LzEvUTNVdWVLWnlqWWkyOWdFajN5c1pQeExXWDNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2 LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwGVrgME AJWuBDANBgkqhkiG9w0BAQsFAAOCAQEAjtIOL1JrtvOs16EZpgnVLoE9oqLlmMKQ TtZhoC+aJDC0sciepoPdoT/v6Nbrhzekf8TzOwe/SxxL0G2Vfj8pQQX3C2jh5DQU ChPuuvEpQMyQjBrzaKv/r9hlb0GsHGapFd3jt9MmQHtj+Uh7/0GIHYlAn53ewYaw HakzyvIRiE4DowZ2zk+3hxrp9VRL6eCNg0AQsxq+36g5WtWTQjWZAgqiHHhLSRhy rBvREHvd4DHvGXYSTEAxDLR6mV+4sGoGOG2YiNWdZLIvy7D6PMJeJO6ZzEZQif7/ oMmA+1kv/H3qqY4TUKuVkkk0B00jyhHBN97dDiGUbOHBQYygdPIbQw== -----END CERTIFICATE-----Generated at Mon Jan 19 17:34:11 2026 by rpki-client