This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Qu3Pum48VdyvamOYmyxpoA_xROI.roa File: Qu3Pum48VdyvamOYmyxpoA_xROI.roa (raw, json) Hash identifier: 6lyjY2Y6SP5zzn6hVW/axYG2De9/GlBczFh4kmbFhhk= Subject key identifier: 42:ED:CF:BA:6E:3C:55:DC:AF:6A:63:98:9B:2C:69:A0:0F:F1:44:E2 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA7583FA3CA80D1E324C42CAF6EBD43 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Qu3Pum48VdyvamOYmyxpoA_xROI.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20724 IP address blocks: 212.46.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:58:3f:a3:ca:80:d1:e3:24:c4:2c:af:6e:bd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42edcfba6e3c55dcaf6a63989b2c69a00ff144e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:b3:ae:93:2c:81:fd:cf:8c:7f:59:ea:8b: 99:5e:c4:21:4f:8c:b5:69:4e:a8:a9:86:ee:80:5f: b5:78:4a:48:f1:81:a8:60:84:32:1f:4e:33:66:85: 7e:45:4b:87:b5:b3:8d:c2:06:a3:c9:a1:5c:2b:ea: 76:45:dd:3a:26:2a:15:1d:e8:1e:d4:f2:a9:0d:5a: 66:6d:7a:c6:37:6f:8e:91:52:e8:09:4f:9c:70:ea: 63:1f:8b:e3:b5:fd:99:88:8c:50:c6:01:ec:e9:05: 9f:39:b8:f8:49:c3:f7:74:df:94:a2:35:c6:a4:77: a0:aa:32:3f:8e:61:7c:b1:9a:c5:8c:d4:fb:7c:0c: fa:03:e2:ef:87:9c:03:9d:97:04:2b:bc:5f:66:5b: 96:07:bd:55:b8:4c:64:0d:5c:91:a5:87:34:c4:a0: d9:f1:fb:f6:30:30:92:60:84:a3:ce:87:8e:3c:fe: 79:f2:1d:69:2c:dc:f7:63:a8:94:44:06:cc:68:ef: cd:f7:55:b8:de:1c:dd:e2:3a:3e:eb:c5:a6:8d:ce: 70:c6:32:dc:04:47:fa:7c:7e:8c:98:97:dc:d5:c2: d6:53:21:37:f5:23:a6:d2:16:42:9f:37:0d:67:bb: 74:d2:21:db:da:08:ee:66:da:ef:82:1d:ee:aa:4f: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:ED:CF:BA:6E:3C:55:DC:AF:6A:63:98:9B:2C:69:A0:0F:F1:44:E2 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Qu3Pum48VdyvamOYmyxpoA_xROI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.37.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:33:da:f4:a0:3e:e4:b8:5b:56:bf:73:0e:5c:9b:d2:9e:44: 31:a1:a6:1c:2d:3d:60:01:34:22:7d:84:8a:06:4f:02:ba:7a: d1:f2:49:6e:ca:1f:7b:7d:94:0c:d7:1c:5c:6c:eb:b5:0c:42: 73:04:52:50:cf:97:53:bf:55:57:c0:6f:0e:23:c5:11:31:54: 6f:e2:9a:1b:f9:9d:20:ad:83:ce:94:c0:86:9f:9b:67:0f:c5: 78:f7:87:f2:94:dd:c4:4a:39:ce:02:ef:46:b9:d2:46:0f:2c: 76:41:87:e0:4e:28:bb:a6:44:ae:a8:da:3c:d1:e0:87:f3:ba: cf:73:b5:f8:76:34:31:f4:76:03:54:e1:14:4f:57:65:02:27: 27:9c:fd:a0:93:2b:db:ed:3f:be:0e:66:15:e4:cc:6e:58:fe: f8:55:66:0e:10:8d:23:df:fe:af:6a:3d:c8:32:4b:b6:f2:3b: 9d:03:2c:45:0f:b1:37:3c:74:4e:70:c1:32:c8:9a:d5:23:ee: f2:eb:0b:39:be:e6:07:32:ad:4f:f5:65:e9:8e:b0:de:de:a7: e1:8f:eb:31:7f:76:6b:e4:19:5f:22:57:cb:80:db:d7:f6:46: 13:6b:0b:9f:b0:73:e6:e1:b6:c6:bf:2f:09:1c:f8:e4:ec:73: 00:23:dc:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1g/o8qA0eMkxCyvbr1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmVkY2ZiYTZlM2M1NWRjYWY2YTYzOTg5YjJjNjlhMDBmZjE0NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobizrpMsgf3PjH9Z6ouZXsQhT4y1 aU6oqYbugF+1eEpI8YGoYIQyH04zZoV+RUuHtbONwgajyaFcK+p2Rd06JioVHege 1PKpDVpmbXrGN2+OkVLoCU+ccOpjH4vjtf2ZiIxQxgHs6QWfObj4ScP3dN+UojXG pHegqjI/jmF8sZrFjNT7fAz6A+Lvh5wDnZcEK7xfZluWB71VuExkDVyRpYc0xKDZ 8fv2MDCSYISjzoeOPP558h1pLNz3Y6iURAbMaO/N91W43hzd4jo+68Wmjc5wxjLc BEf6fH6MmJfc1cLWUyE39SOm0hZCnzcNZ7t00iHb2gjuZtrvgh3uqk/eHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFELtz7puPFXcr2pjmJssaaAP8UTiMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvUXUzUHVtNDhWZHl2YW1PWW15eHBvQV94Uk9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4lMA0G CSqGSIb3DQEBCwUAA4IBAQAeM9r0oD7kuFtWv3MOXJvSnkQxoaYcLT1gATQifYSK Bk8CunrR8kluyh97fZQM1xxcbOu1DEJzBFJQz5dTv1VXwG8OI8URMVRv4pob+Z0g rYPOlMCGn5tnD8V494fylN3ESjnOAu9GudJGDyx2QYfgTii7pkSuqNo80eCH87rP c7X4djQx9HYDVOEUT1dlAicnnP2gkyvb7T++DmYV5MxuWP74VWYOEI0j3/6vaj3I Mku28judAyxFD7E3PHROcMEyyJrVI+7y6ws5vuYHMq1P9WXpjrDe3qfhj+sxf3Zr 5BlfIlfLgNvX9kYTawufsHPm4bbGvy8JHPjk7HMAI9yR -----END CERTIFICATE-----Generated at Sat Jan 3 18:58:50 2026 by rpki-client