This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QXwQV2-gLsxssmHsgiieRX9MPFk.roa File: QXwQV2-gLsxssmHsgiieRX9MPFk.roa (raw, json) Hash identifier: MZacw3BMFFjfpb20k/UftD0Fe+GL9ryg2YLKquGE8BI= Subject key identifier: 41:7C:10:57:6F:A0:2E:CC:6C:B2:61:EC:82:28:9E:45:7F:4C:3C:59 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39284BD3157DC1CFF43B8CDB9EDEAA Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QXwQV2-gLsxssmHsgiieRX9MPFk.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60790 IP address blocks: 163.5.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:28:4b:d3:15:7d:c1:cf:f4:3b:8c:db:9e:de:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=417c10576fa02ecc6cb261ec82289e457f4c3c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:50:a5:7f:2c:5b:9b:e0:92:3f:bd:1e:e8: e3:f1:44:02:99:08:ff:37:98:c2:5d:ae:05:7b:dc: 26:4a:a7:89:7b:dd:d3:a2:bd:7e:8a:39:c1:7b:eb: 54:0d:cd:40:b7:06:bb:2d:4f:bd:d9:fe:01:c7:c2: a8:0f:1f:ab:c6:7f:2c:31:62:eb:4c:ad:f5:6c:5f: c9:c5:ed:89:eb:9e:c3:53:91:80:e8:35:a8:39:44: 03:b2:b6:47:7a:d7:de:97:5a:59:fd:05:49:fd:64: 9d:d9:3b:c0:cf:4c:14:18:d9:b0:5d:17:5e:9a:1f: 94:8d:f9:5f:cd:04:c5:cf:54:64:5a:62:6b:bf:c2: 43:27:0c:6c:36:d3:dc:98:65:95:d7:c6:ed:a8:f0: a5:05:35:76:98:25:bd:0b:17:bd:52:98:f3:4f:1d: 8f:38:b1:4a:b8:08:85:90:e5:a6:0a:71:9c:15:c9: 3f:de:fc:2e:e8:87:c4:46:ef:3e:bd:68:77:4f:c8: 1b:55:d7:b6:04:5f:30:4f:aa:17:7c:8a:03:a0:ec: dd:19:67:6d:07:35:3e:a3:90:0f:2d:6b:83:14:e1: e1:e5:8b:ef:25:f7:5b:bb:e2:88:8a:e6:57:99:ae: 6d:5a:24:58:f0:5c:8e:a9:73:8c:a2:72:c8:bd:41: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7C:10:57:6F:A0:2E:CC:6C:B2:61:EC:82:28:9E:45:7F:4C:3C:59 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QXwQV2-gLsxssmHsgiieRX9MPFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.135.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:5f:9a:dc:f6:e7:07:43:e8:17:0a:9c:d5:95:34:00:72:1f: 34:7f:dc:94:60:07:29:cb:d7:3e:c5:0b:3a:12:91:19:06:98: 91:8e:3b:ba:21:1d:56:78:ae:ab:f9:22:9f:60:89:14:4d:08: 17:38:43:99:0a:de:0f:d9:48:bc:03:c5:8d:2b:96:4f:98:da: d8:34:07:90:e9:e1:16:7b:66:c8:f2:4f:4d:60:5e:bd:c7:8e: fc:34:de:13:7c:94:17:0f:0c:74:77:17:fe:8a:ec:b7:c2:75: 2f:ee:d7:dc:b9:73:d0:1a:43:bf:9c:c3:38:00:19:e6:9c:6e: 5c:22:21:5e:ee:fd:c0:ee:ee:d3:e2:14:3f:f1:bf:65:65:78: fb:53:c2:98:f7:af:0c:26:c5:55:d4:fa:21:11:3b:a9:47:2d: e5:5b:7b:59:23:af:3f:99:b4:0f:c2:47:44:72:cf:aa:15:3a: a3:bb:34:90:84:0f:c7:53:71:8f:e0:c4:e7:e6:46:fa:f2:60: 59:7e:f2:01:36:cf:72:a2:29:5f:6f:82:98:1e:68:88:eb:55: 49:a3:d9:78:c1:2d:f9:20:1f:9a:1a:05:d1:e4:8c:3d:ae:2c: 15:c8:05:5d:f0:25:12:6b:29:57:b6:7c:72:3a:4d:c3:2b:62: 02:78:21:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OShL0xV9wc/0O4zbnt6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTdjMTA1NzZmYTAyZWNjNmNiMjYxZWM4MjI4OWU0NTdmNGMzYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwJQpX8sW5vgkj+9Hujj8UQCmQj/ N5jCXa4Fe9wmSqeJe93Tor1+ijnBe+tUDc1Atwa7LU+92f4Bx8KoDx+rxn8sMWLr TK31bF/Jxe2J657DU5GA6DWoOUQDsrZHetfel1pZ/QVJ/WSd2TvAz0wUGNmwXRde mh+UjflfzQTFz1RkWmJrv8JDJwxsNtPcmGWV18btqPClBTV2mCW9Cxe9UpjzTx2P OLFKuAiFkOWmCnGcFck/3vwu6IfERu8+vWh3T8gbVde2BF8wT6oXfIoDoOzdGWdt BzU+o5APLWuDFOHh5YvvJfdbu+KIiuZXma5tWiRY8FyOqXOMonLIvUFvRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEF8EFdvoC7MbLJh7IIonkV/TDxZMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvUVh3UVYyLWdMc3hzc21Ic2dpaWVSWDlNUEZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWHMA0G CSqGSIb3DQEBCwUAA4IBAQAcX5rc9ucHQ+gXCpzVlTQAch80f9yUYAcpy9c+xQs6 EpEZBpiRjju6IR1WeK6r+SKfYIkUTQgXOEOZCt4P2Ui8A8WNK5ZPmNrYNAeQ6eEW e2bI8k9NYF69x478NN4TfJQXDwx0dxf+iuy3wnUv7tfcuXPQGkO/nMM4ABnmnG5c IiFe7v3A7u7T4hQ/8b9lZXj7U8KY968MJsVV1PohETupRy3lW3tZI68/mbQPwkdE cs+qFTqjuzSQhA/HU3GP4MTn5kb68mBZfvIBNs9yoilfb4KYHmiI61VJo9l4wS35 IB+aGgXR5Iw9riwVyAVd8CUSaylXtnxyOk3DK2ICeCHf -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:01 2026 by rpki-client