This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/q_--4kminZxQx-8CqaEaNqwj4jE.roa File: q_--4kminZxQx-8CqaEaNqwj4jE.roa (raw, json) Hash identifier: ryH9qdfaBeMvb/1G2KPwMdilt+m41DaYZGZeqOGsiAo= Subject key identifier: AB:FF:BE:E2:49:A2:9D:9C:50:C7:EF:02:A9:A1:1A:36:AC:23:E2:31 Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Certificate serial: 019B797E19A2AEDD175A7A475DFA6301FB73 Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/q_--4kminZxQx-8CqaEaNqwj4jE.roa Signing time: Thu 01 Jan 2026 12:17:45 +0000 ROA not before: Thu 01 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208866 IP address blocks: 45.82.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:19:a2:ae:dd:17:5a:7a:47:5d:fa:63:01:fb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abffbee249a29d9c50c7ef02a9a11a36ac23e231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:d7:78:a2:5c:f0:1d:c8:73:24:13:3f:a8: 76:6c:2b:55:86:49:17:b7:9c:2a:7b:97:24:96:3c: 41:36:09:52:aa:da:b6:dd:c5:63:86:f3:04:b5:8f: 7c:e3:44:d5:ae:a4:63:dd:2b:7e:c4:f8:84:24:c7: ed:d9:2a:30:83:62:dc:e3:d9:83:db:fb:ed:1c:20: 50:c9:dc:76:74:3f:f0:96:5c:a5:83:d8:1e:36:f3: 97:f5:c2:96:ba:72:62:dc:b4:93:dd:fb:12:b9:a3: 68:2e:83:4e:6e:69:5e:00:45:16:c3:a6:ef:01:55: f6:ce:a4:76:80:29:5a:a5:c2:8f:a2:06:04:f4:ae: c9:59:19:1a:2c:5d:92:8e:ca:e1:67:1a:ed:f0:79: 70:8c:a8:ce:63:26:6a:5a:33:ea:05:54:a8:5d:b6: 17:c0:5d:90:82:3d:0c:e7:8c:73:a5:dc:91:d8:0e: 0c:86:ff:d2:a3:2d:ce:7c:18:a1:b5:eb:78:f7:c9: d9:bb:85:74:3d:a9:3f:58:17:39:f0:5a:ce:3a:b4: 4f:dc:f5:8d:dd:ca:aa:5e:41:87:23:1c:51:46:5c: 89:a8:8d:4b:ec:14:cb:64:7c:28:ad:a9:f9:f7:55: 8e:a1:73:f7:bb:57:51:52:a9:4c:de:17:a0:99:42: 42:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FF:BE:E2:49:A2:9D:9C:50:C7:EF:02:A9:A1:1A:36:AC:23:E2:31 X509v3 Authority Key Identifier: keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/q_--4kminZxQx-8CqaEaNqwj4jE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.63.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:e4:48:cc:08:ae:c0:05:4d:95:da:de:5b:fc:4d:5b:43:ee: 60:97:48:26:98:35:a4:a2:04:b1:6f:0d:34:f2:33:a4:01:b5: e2:ea:88:9f:f2:21:13:08:df:c0:87:48:18:57:5e:fd:75:98: 9a:65:7f:4b:1b:db:49:bd:a1:a5:dd:64:ab:f6:d4:0a:4a:7b: 3f:05:82:5b:6d:08:da:c8:32:96:d3:44:8d:0f:14:f1:98:a9: 50:ac:53:5d:ec:66:5e:7b:96:e9:9f:5c:e0:a9:85:21:09:99: 49:59:16:0e:75:7f:5c:e6:30:92:2d:17:b9:54:87:d3:83:bb: 85:a7:3e:54:b4:a2:b7:e8:47:dc:12:11:8f:22:4f:3e:08:81: 8a:cc:a3:c2:59:ac:14:bb:f3:64:86:8e:f0:6d:2b:2f:5c:1a: 8c:32:5d:96:b3:70:8b:48:3f:66:56:d3:29:01:98:1f:9e:3a: 76:e9:a5:4a:c0:f8:78:23:18:8c:73:b7:9b:d4:42:5b:f6:d5: 1d:09:5f:db:a6:52:78:cd:11:69:2b:09:14:a5:1a:27:65:ac: 3a:1b:7c:7a:23:3b:45:83:35:7b:6c:7e:b5:f0:1b:b0:91:bd: 19:9a:1e:71:9c:cc:d7:f8:26:d3:d0:5d:d7:d7:e0:ed:ad:67: 1c:5b:8a:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fhmirt0XWnpHXfpjAftzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4 NGZhNDEwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmZmYmVlMjQ5YTI5ZDljNTBjN2VmMDJhOWExMWEzNmFjMjNlMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20bXeKJc8B3IcyQTP6h2bCtVhkkX t5wqe5ckljxBNglSqtq23cVjhvMEtY9840TVrqRj3St+xPiEJMft2Sowg2Lc49mD 2/vtHCBQydx2dD/wllylg9geNvOX9cKWunJi3LST3fsSuaNoLoNObmleAEUWw6bv AVX2zqR2gClapcKPogYE9K7JWRkaLF2SjsrhZxrt8HlwjKjOYyZqWjPqBVSoXbYX wF2Qgj0M54xzpdyR2A4Mhv/Soy3OfBihtet498nZu4V0Pak/WBc58FrOOrRP3PWN 3cqqXkGHIxxRRlyJqI1L7BTLZHworan591WOoXP3u1dRUqlM3hegmUJCHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKv/vuJJop2cUMfvAqmhGjasI+IxMB8GA1UdIwQY MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt OGNjOTgzMzYxMWU2LzEvcV8tLTRrbWluWnhReC04Q3FhRWFOcXdqNGpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2 LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVI/MA0G CSqGSIb3DQEBCwUAA4IBAQCc5EjMCK7ABU2V2t5b/E1bQ+5gl0gmmDWkogSxbw00 8jOkAbXi6oif8iETCN/Ah0gYV179dZiaZX9LG9tJvaGl3WSr9tQKSns/BYJbbQja yDKW00SNDxTxmKlQrFNd7GZee5bpn1zgqYUhCZlJWRYOdX9c5jCSLRe5VIfTg7uF pz5UtKK36EfcEhGPIk8+CIGKzKPCWawUu/Nkho7wbSsvXBqMMl2Ws3CLSD9mVtMp AZgfnjp26aVKwPh4IxiMc7eb1EJb9tUdCV/bplJ4zRFpKwkUpRonZaw6G3x6IztF gzV7bH618Buwkb0Zmh5xnMzX+CbT0F3X1+DtrWccW4pG -----END CERTIFICATE-----Generated at Tue Jan 20 04:32:18 2026 by rpki-client