This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/ql3vqr1zYIaiPZLR54AHsL7ukAE.roa File: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (raw, json) Hash identifier: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c= Subject key identifier: AA:5D:EF:AA:BD:73:60:86:A2:3D:92:D1:E7:80:07:B0:BE:EE:90:01 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 019B7C11EF3C50BCB2FB5A660B23C0D5384E Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/ql3vqr1zYIaiPZLR54AHsL7ukAE.roa Signing time: Fri 02 Jan 2026 00:18:28 +0000 ROA not before: Fri 02 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29399 IP address blocks: 159.146.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ef:3c:50:bc:b2:fb:5a:66:0b:23:c0:d5:38:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Jan 2 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa5defaabd736086a23d92d1e78007b0beee9001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8d:43:2e:67:d9:ab:5b:a5:27:3c:e6:6d:e3: c1:45:5d:b5:75:36:92:6e:69:ce:92:31:c2:02:e2: 0d:9c:b5:6c:ed:c7:0b:2b:91:0c:29:7a:a0:c8:6b: b6:d4:a9:50:71:d9:9a:81:be:5e:eb:3b:22:17:02: e2:fe:67:01:3f:84:ec:bb:5b:2f:87:3b:c5:d5:07: b7:71:08:e1:80:78:f6:cf:f7:dd:f1:15:c5:05:cc: 42:37:a2:11:9d:ee:61:17:d4:70:0d:e7:d7:2c:26: 2e:46:90:c4:f9:93:ab:2f:f6:23:6c:4a:1f:33:a9: 43:83:c5:31:93:86:72:91:57:f0:cf:b8:f1:ef:72: 2f:bf:83:ea:e4:16:69:51:2f:7b:a1:1a:4c:4c:a5: a0:cb:75:7d:33:6c:3e:d8:a8:f8:f3:d5:34:6c:4a: 44:51:03:49:d4:aa:02:ab:7c:ad:85:fe:07:e7:71: 80:e2:04:61:80:e7:49:95:75:b0:5b:bc:8e:03:c3: ce:4d:da:f1:42:89:b7:d5:49:f9:ae:e7:9e:49:2e: 98:7d:ea:bb:bb:ed:a1:1e:47:f6:02:fb:a0:14:58: bd:37:f2:3c:5a:1b:f8:b3:04:a6:22:84:d7:27:61: d5:53:22:3c:dc:ef:ab:ef:d2:8e:ce:6c:fe:a3:22: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5D:EF:AA:BD:73:60:86:A2:3D:92:D1:E7:80:07:B0:BE:EE:90:01 X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/ql3vqr1zYIaiPZLR54AHsL7ukAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.146.59.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:ec:e3:57:87:fa:89:d9:16:f7:58:53:c7:ba:f8:0b:c9:64: 19:54:89:ab:d6:7f:e3:97:8b:4c:fd:2c:76:c7:a2:f2:9a:54: e6:23:22:22:a6:6f:31:87:c2:05:85:30:29:81:98:d1:d2:3c: 3b:b8:6d:59:ab:ba:a6:f6:47:36:6f:91:a7:6b:35:88:7f:c5: 32:04:2e:1e:b7:0b:24:e7:45:f9:21:6c:cd:64:ee:29:72:e6: 25:43:e0:0b:8a:06:bc:1b:21:bb:da:51:27:9d:fb:70:cf:3f: 1e:80:e2:36:2c:0f:a8:5b:35:67:d3:d5:86:76:e6:e6:af:28: be:95:e6:b5:10:38:70:37:8b:2c:b5:7b:80:f8:3c:05:c1:b7: 41:50:3f:14:b2:61:99:28:14:07:97:08:f2:58:6f:81:a5:30: d6:25:48:db:e8:34:29:06:d1:d8:64:6f:63:67:98:c8:47:4d: a2:e6:b0:f6:2f:69:cd:8d:be:d4:4e:29:1f:f9:c0:a0:fc:c1: 8a:bf:bd:17:c9:71:9e:a8:27:2a:00:c9:91:c5:e3:66:07:f5: 11:15:1e:12:70:f9:92:3a:ad:fc:d6:a9:d3:f4:d6:ee:11:ba: de:6d:ae:db:df:14:76:3b:a5:1b:a9:9d:6c:81:e4:e2:fa:61: ec:54:0c:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ee88ULyy+1pmCyPA1ThOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjYwMTAyMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTVkZWZhYWJkNzM2MDg2YTIzZDkyZDFlNzgwMDdiMGJlZWU5MDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY1DLmfZq1ulJzzmbePBRV21dTaS bmnOkjHCAuINnLVs7ccLK5EMKXqgyGu21KlQcdmagb5e6zsiFwLi/mcBP4Tsu1sv hzvF1Qe3cQjhgHj2z/fd8RXFBcxCN6IRne5hF9RwDefXLCYuRpDE+ZOrL/YjbEof M6lDg8Uxk4ZykVfwz7jx73Ivv4Pq5BZpUS97oRpMTKWgy3V9M2w+2Kj489U0bEpE UQNJ1KoCq3ythf4H53GA4gRhgOdJlXWwW7yOA8POTdrxQom31Un5rueeSS6Yfeq7 u+2hHkf2AvugFFi9N/I8Whv4swSmIoTXJ2HVUyI83O+r79KOzmz+oyLM6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKpd76q9c2CGoj2S0eeAB7C+7pABMB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvcWwzdnFyMXpZSWFpUFpMUjU0QUhzTDd1a0FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5I7MA0G CSqGSIb3DQEBCwUAA4IBAQBd7ONXh/qJ2Rb3WFPHuvgLyWQZVImr1n/jl4tM/Sx2 x6LymlTmIyIipm8xh8IFhTApgZjR0jw7uG1Zq7qm9kc2b5GnazWIf8UyBC4etwsk 50X5IWzNZO4pcuYlQ+ALiga8GyG72lEnnftwzz8egOI2LA+oWzVn09WGdubmryi+ lea1EDhwN4sstXuA+DwFwbdBUD8UsmGZKBQHlwjyWG+BpTDWJUjb6DQpBtHYZG9j Z5jIR02i5rD2L2nNjb7UTikf+cCg/MGKv70XyXGeqCcqAMmRxeNmB/URFR4ScPmS Oq381qnT9NbuEbreba7b3xR2O6UbqZ1sgeTi+mHsVAzh -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:47 2026 by rpki-client