This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa File: Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa (raw, json) Hash identifier: 6rtcBWZHj5iKfuxNemjzbQDA3WB3EhCTz3MwF017Ko8= Subject key identifier: 43:87:2C:24:1E:6F:FD:E5:91:46:A8:2F:CC:40:1E:68:54:0F:52:63 Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Certificate serial: 019B797E18C88CA490B3DF3BE1B82B5EDD76 Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa Signing time: Thu 01 Jan 2026 12:17:45 +0000 ROA not before: Thu 01 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 45.82.60.0/24 maxlen: 24 45.82.61.0/24 maxlen: 24 45.82.62.0/24 maxlen: 24 45.82.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:18:c8:8c:a4:90:b3:df:3b:e1:b8:2b:5e:dd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43872c241e6ffde59146a82fcc401e68540f5263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:cb:69:4f:fb:5f:46:d9:f8:b5:d6:6c:70: 27:93:97:c0:a0:37:3d:8a:5d:e3:57:0e:04:d4:19: 15:e6:6c:18:b4:74:f4:fc:af:55:be:dc:68:ff:b4: 27:79:77:c1:f3:cf:81:f6:b0:c3:9e:cb:a9:da:4b: 2a:f4:b2:b3:4c:58:bc:4c:6f:1b:0d:a4:bb:e9:cd: 7f:e9:af:99:62:80:62:34:13:f9:7f:e4:43:9b:0e: 53:1d:a4:62:a7:82:aa:c0:c6:04:a5:0b:3e:69:9e: c0:2d:56:a6:3b:f0:ee:23:2f:03:49:af:27:9e:e8: da:11:2c:4f:6f:aa:f1:95:4a:c0:fe:41:47:73:2b: b0:94:d3:f7:8d:fa:25:ee:32:93:b4:13:47:d8:8d: 03:9e:99:8c:ca:c5:ec:c8:b5:8c:48:4c:8c:f7:37: 08:69:83:65:1c:72:41:3e:3a:f1:48:07:df:63:6f: 63:ea:8d:9a:fa:30:af:d6:d8:d8:d9:b9:74:dc:2f: bb:a6:40:04:fc:bd:64:4d:fa:9a:20:6c:98:3d:ae: 6c:21:15:db:7f:79:67:df:3d:3a:e6:fc:b9:60:d3: 77:05:73:28:85:91:7e:26:22:36:68:5c:b0:01:0d: c7:c6:78:88:11:6a:13:57:34:67:81:7e:8f:a3:bd: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:87:2C:24:1E:6F:FD:E5:91:46:A8:2F:CC:40:1E:68:54:0F:52:63 X509v3 Authority Key Identifier: keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.60.0/22 Signature Algorithm: sha256WithRSAEncryption 69:8e:5f:22:9f:0d:03:fa:bd:1c:e4:2a:08:2c:a9:74:d9:bb: ed:7b:51:99:37:80:bb:ce:59:00:0b:97:91:14:b8:e7:ab:5a: 86:c4:bc:dd:90:8c:c4:f5:4f:2b:92:ab:35:a5:ff:67:46:c1: 0a:6a:4d:f1:20:27:80:9a:f5:dc:a4:89:95:ac:32:3b:b7:f9: aa:5f:0f:77:b6:fd:2f:3b:27:c7:c5:39:35:87:06:44:a5:e5: e3:44:37:7b:ab:f7:15:d6:7c:78:bb:5a:53:ff:64:c8:93:e2: 56:4f:d7:1d:a3:9d:27:5c:f9:cb:ba:39:1f:1d:e3:00:9a:4c: e6:48:a3:83:3f:64:42:75:ec:7c:0a:e5:d6:ff:c4:e1:de:ae: 0e:82:c8:2a:8f:5d:b0:8a:b4:b3:0f:4e:6b:db:82:b8:f5:75: f2:9e:9d:bc:50:83:8d:87:f6:45:6a:38:77:91:50:fb:22:6c: d0:86:7e:fd:56:2f:05:27:ec:19:bb:99:23:51:f8:9b:c8:2d: cf:d4:cd:14:c8:86:e2:82:2d:d8:66:1a:fd:f9:f2:cc:76:ab: 0f:5f:1c:49:4f:73:56:7b:10:4b:82:d7:16:65:ac:b2:cc:8d: fd:03:cf:a3:f0:f8:24:7d:45:db:d7:19:84:22:f0:9f:55:4f: a9:19:12:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fhjIjKSQs9874bgrXt12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4 NGZhNDEwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mzg3MmMyNDFlNmZmZGU1OTE0NmE4MmZjYzQwMWU2ODU0MGY1MjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLTLaU/7X0bZ+LXWbHAnk5fAoDc9 il3jVw4E1BkV5mwYtHT0/K9Vvtxo/7QneXfB88+B9rDDnsup2ksq9LKzTFi8TG8b DaS76c1/6a+ZYoBiNBP5f+RDmw5THaRip4KqwMYEpQs+aZ7ALVamO/DuIy8DSa8n nujaESxPb6rxlUrA/kFHcyuwlNP3jfol7jKTtBNH2I0DnpmMysXsyLWMSEyM9zcI aYNlHHJBPjrxSAffY29j6o2a+jCv1tjY2bl03C+7pkAE/L1kTfqaIGyYPa5sIRXb f3ln3z065vy5YNN3BXMohZF+JiI2aFywAQ3HxniIEWoTVzRngX6Po73JAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEOHLCQeb/3lkUaoL8xAHmhUD1JjMB8GA1UdIwQY MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt OGNjOTgzMzYxMWU2LzEvUTRjc0pCNXZfZVdSUnFndnpFQWVhRlFQVW1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2 LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVI8MA0G CSqGSIb3DQEBCwUAA4IBAQBpjl8inw0D+r0c5CoILKl02bvte1GZN4C7zlkAC5eR FLjnq1qGxLzdkIzE9U8rkqs1pf9nRsEKak3xICeAmvXcpImVrDI7t/mqXw93tv0v OyfHxTk1hwZEpeXjRDd7q/cV1nx4u1pT/2TIk+JWT9cdo50nXPnLujkfHeMAmkzm SKODP2RCdex8CuXW/8Th3q4Ogsgqj12wirSzD05r24K49XXynp28UIONh/ZFajh3 kVD7ImzQhn79Vi8FJ+wZu5kjUfibyC3P1M0UyIbigi3YZhr9+fLMdqsPXxxJT3NW exBLgtcWZayyzI39A8+j8PgkfUXb1xmEIvCfVU+pGRIA -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:51 2026 by rpki-client