This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/gqQ4t9K7Woy1GxUGG1hexNLdt3Q.roa File: gqQ4t9K7Woy1GxUGG1hexNLdt3Q.roa (raw, json) Hash identifier: M/QSynOO9yMEtpC0jJjvRUrMUkRrfua7Bs0F5lyd2Z8= Subject key identifier: 82:A4:38:B7:D2:BB:5A:8C:B5:1B:15:06:1B:58:5E:C4:D2:DD:B7:74 Certificate issuer: /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253 Certificate serial: 019B77C6AFAACE6A40A15D9014AE34729013 Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/gqQ4t9K7Woy1GxUGG1hexNLdt3Q.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61323 IP address blocks: 45.152.252.0/24 maxlen: 24 45.152.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:af:aa:ce:6a:40:a1:5d:90:14:ae:34:72:90:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82a438b7d2bb5a8cb51b15061b585ec4d2ddb774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1c:ec:5c:f1:6f:b5:b9:b1:d8:29:cc:3f:39: 8b:0d:2f:5c:58:91:da:bd:be:e2:62:b2:2f:84:bc: 75:63:3e:00:5b:fe:3d:6a:e6:14:8a:50:46:3f:3b: e4:42:38:1d:65:17:06:d8:63:1e:a5:61:1b:6b:88: 24:27:d1:5e:76:b6:98:ef:e6:85:0e:26:5b:d1:66: 8a:a1:1e:ac:bd:c8:2c:d5:c7:13:96:94:b4:ac:df: b7:6b:e4:fc:de:5e:85:91:2b:40:61:8b:aa:29:52: 9e:3c:03:08:23:06:94:a1:30:6b:ee:04:b7:2a:59: c1:94:d9:94:c9:d5:2a:38:3c:6e:4b:40:55:d4:77: 59:66:c7:c4:79:99:db:35:4b:ac:85:25:99:aa:3d: 02:ed:72:78:73:7d:ff:8d:df:83:c3:33:f0:51:73: 3f:b8:70:37:50:a6:94:ee:de:69:0e:aa:77:80:70: 6a:e0:20:ec:22:de:6c:8e:a6:dc:2c:b0:ba:c4:61: 21:cf:1f:0f:33:ae:1b:19:cd:0f:90:7b:99:1a:14: ac:c7:39:ef:a9:c3:60:23:8d:b5:6f:69:96:be:8b: 96:df:3b:af:69:fe:93:c0:43:f9:85:0d:9c:98:59: 0c:8f:06:e5:54:ff:35:70:3f:34:16:d1:53:43:f4: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A4:38:B7:D2:BB:5A:8C:B5:1B:15:06:1B:58:5E:C4:D2:DD:B7:74 X509v3 Authority Key Identifier: keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/gqQ4t9K7Woy1GxUGG1hexNLdt3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.252.0/24 45.152.255.0/24 Signature Algorithm: sha256WithRSAEncryption 18:0b:83:19:da:b7:9d:f3:5c:a6:8f:33:d2:6e:e6:d3:2d:3a: a6:e4:77:bc:6c:73:19:89:93:f3:09:0b:18:90:02:ec:ea:74: a4:6d:7e:93:ed:cc:51:ca:4d:1c:b5:0b:fa:66:95:48:e3:e5: cf:05:ee:10:0c:ef:73:c5:4f:56:ee:a9:35:2b:2a:57:2f:50: 13:58:a4:48:36:2b:b9:6c:b1:e6:5b:8d:b8:64:9e:ba:09:cf: 99:1b:4a:3a:1c:82:15:09:0f:84:51:f4:5a:13:ff:77:d9:12: 7f:a4:4e:d8:cd:25:26:18:bc:19:54:80:65:0f:de:d3:fb:34: 2f:66:de:8a:d2:7e:9a:a0:31:d6:a2:92:29:73:d8:43:f5:21: 01:65:75:31:80:a9:ae:47:df:03:6e:5a:3d:25:30:ad:ef:cf: a0:69:cf:ff:ba:ab:63:da:2f:94:ac:c5:a8:d9:9a:a2:90:66: e9:ab:70:c1:12:91:ec:9a:5f:cb:be:26:2a:28:03:19:e0:9a: aa:0a:bd:fe:18:b6:c9:2f:c4:7a:4c:e8:7a:7e:b8:14:09:9c: e1:00:c2:6e:07:96:db:03:02:4e:f6:6f:f5:3f:2a:86:3d:78: e4:31:4d:0f:f6:6f:2e:06:dd:22:f0:d9:e7:b7:41:fd:c2:56: b3:e5:b4:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xq+qzmpAoV2QFK40cpATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODZhN2MwZGVhNzNkZDBmOTRlMmU5ZmUxYWM5YWI2NzAx YjIyNTMwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmE0MzhiN2QyYmI1YThjYjUxYjE1MDYxYjU4NWVjNGQyZGRiNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BzsXPFvtbmx2CnMPzmLDS9cWJHa vb7iYrIvhLx1Yz4AW/49auYUilBGPzvkQjgdZRcG2GMepWEba4gkJ9FedraY7+aF DiZb0WaKoR6svcgs1ccTlpS0rN+3a+T83l6FkStAYYuqKVKePAMIIwaUoTBr7gS3 KlnBlNmUydUqODxuS0BV1HdZZsfEeZnbNUushSWZqj0C7XJ4c33/jd+DwzPwUXM/ uHA3UKaU7t5pDqp3gHBq4CDsIt5sjqbcLLC6xGEhzx8PM64bGc0PkHuZGhSsxznv qcNgI421b2mWvouW3zuvaf6TwEP5hQ2cmFkMjwblVP81cD80FtFTQ/Tl7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIKkOLfSu1qMtRsVBhtYXsTS3bd0MB8GA1UdIwQY MBaAFBCGp8Depz3Q+U4un+GsmrZwGyJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUlhbndONm5QZEQ1VGk2ZjRheWF0bkFiSWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NjkwZDAtYTJhYi00Yjc0LWIxMDQt ZDllMWI4MWRkMWM3LzEvZ3FRNHQ5SzdXb3kxR3hVR0cxaGV4TkxkdDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85NjkwZDAtYTJhYi00Yjc0LWIxMDQtZDllMWI4MWRkMWM3 LzEvRUlhbndONm5QZEQ1VGk2ZjRheWF0bkFiSWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZj8AwQA LZj/MA0GCSqGSIb3DQEBCwUAA4IBAQAYC4MZ2red81ymjzPSbubTLTqm5He8bHMZ iZPzCQsYkALs6nSkbX6T7cxRyk0ctQv6ZpVI4+XPBe4QDO9zxU9W7qk1KypXL1AT WKRINiu5bLHmW424ZJ66Cc+ZG0o6HIIVCQ+EUfRaE/932RJ/pE7YzSUmGLwZVIBl D97T+zQvZt6K0n6aoDHWopIpc9hD9SEBZXUxgKmuR98Dblo9JTCt78+gac//uqtj 2i+UrMWo2ZqikGbpq3DBEpHsml/LviYqKAMZ4JqqCr3+GLbJL8R6TOh6frgUCZzh AMJuB5bbAwJO9m/1PyqGPXjkMU0P9m8uBt0i8Nnnt0H9wlaz5bRJ -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:19 2026 by rpki-client