This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/q1ZdG5coyImHf6ftDV_fJN05zN0.roa File: q1ZdG5coyImHf6ftDV_fJN05zN0.roa (raw, json) Hash identifier: /FMVwyaiBz1KIIrw5ZuZxGbjVJzRieiWH5j+l/QSUDc= Subject key identifier: AB:56:5D:1B:97:28:C8:89:87:7F:A7:ED:0D:5F:DF:24:DD:39:CC:DD Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA20B601907E74B4A3A480723BA75D Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/q1ZdG5coyImHf6ftDV_fJN05zN0.roa Signing time: Fri 02 Jan 2026 08:19:17 +0000 ROA not before: Fri 02 Jan 2026 08:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17098 IP address blocks: 45.141.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:20:b6:01:90:7e:74:b4:a3:a4:80:72:3b:a7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab565d1b9728c889877fa7ed0d5fdf24dd39ccdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:ed:a8:df:cf:95:4c:d5:ff:d7:52:90:06: a5:97:07:3b:b2:74:ec:9d:18:eb:73:95:cd:96:e5: 90:b2:a1:1c:ef:a1:44:b8:85:59:df:fd:64:c5:a6: a2:41:a4:c8:6c:17:0f:96:93:fd:6e:a9:85:0f:45: d1:c6:f2:29:80:5b:1b:f8:f3:31:6e:37:32:ae:62: 78:77:d3:9b:aa:64:87:21:a1:10:56:a4:1e:f6:99: 51:aa:e1:c6:f5:cd:23:e6:40:aa:93:49:72:a0:cc: bf:98:5e:4c:07:90:9d:9f:dd:d5:12:00:e2:e3:af: 05:a6:c1:1a:7c:cb:22:d8:1f:6a:d1:b9:c8:e0:d0: a1:9c:69:b6:3a:7d:47:a2:56:c2:df:3a:fe:a5:9a: 14:d8:d1:f9:a3:bf:84:7a:99:6d:84:f8:64:68:42: df:d7:4c:92:b3:ce:d6:24:08:c9:f2:8b:f6:80:33: fd:65:9d:bc:0c:fe:f4:0a:dc:3c:76:d1:87:83:39: 08:41:66:bb:2e:79:67:6f:56:5d:9f:fb:e5:87:81: b2:6b:cd:d2:dc:70:90:fd:5b:76:25:c7:8b:b6:5a: bd:a4:27:8c:01:f5:99:6d:6d:07:a3:e8:d2:d2:ff: cb:3a:cc:2c:fc:68:42:fa:e9:07:94:b9:60:14:fa: 89:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:56:5D:1B:97:28:C8:89:87:7F:A7:ED:0D:5F:DF:24:DD:39:CC:DD X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/q1ZdG5coyImHf6ftDV_fJN05zN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.129.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:34:cd:95:33:c1:b5:fa:2b:94:f9:00:88:79:44:e9:b4:d6: 96:b0:b7:52:e0:f4:39:97:ed:99:8e:d8:e4:2c:fd:f9:f8:65: fc:a4:0d:99:bd:1c:5a:70:14:da:ce:43:85:f9:d1:7d:e7:c5: 7a:a9:ba:61:ef:a4:1e:d5:71:15:79:fd:ec:d9:e6:8f:25:c5: e2:31:91:2b:3e:c5:b7:fd:4b:da:d7:84:3e:54:3f:c1:2e:e6: 94:bb:74:c1:4a:99:41:c8:68:7b:ac:95:f2:1f:55:02:b9:48: 0c:f5:4b:b4:c9:a1:6b:6e:9c:cb:df:3d:1c:aa:86:0c:0b:60: b0:07:27:e4:40:e9:25:6f:fb:7a:76:b4:85:03:88:e9:8a:14: 40:f4:e1:7c:5b:c4:56:57:83:ee:8c:32:7d:4d:d8:c3:92:60: 24:7b:4a:fa:ec:55:e4:75:7d:13:13:25:41:02:e0:91:4d:7b: 31:b8:75:4b:53:67:5a:a9:15:7e:d7:74:d2:2b:19:63:9d:62: 99:2f:02:4c:52:21:90:03:03:2a:9b:35:2d:d2:27:1d:6f:77: 84:03:00:42:b2:83:4c:ce:c2:ce:ae:57:5c:0f:de:9a:32:b2: 90:4a:00:00:d0:96:f9:56:d6:d8:7d:89:85:c6:04:4b:0b:4f: be:a4:6a:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yiC2AZB+dLSjpIByO6ddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjU2NWQxYjk3MjhjODg5ODc3ZmE3ZWQwZDVmZGYyNGRkMzljY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OvtqN/PlUzV/9dSkAallwc7snTs nRjrc5XNluWQsqEc76FEuIVZ3/1kxaaiQaTIbBcPlpP9bqmFD0XRxvIpgFsb+PMx bjcyrmJ4d9ObqmSHIaEQVqQe9plRquHG9c0j5kCqk0lyoMy/mF5MB5Cdn93VEgDi 468FpsEafMsi2B9q0bnI4NChnGm2On1HolbC3zr+pZoU2NH5o7+EeplthPhkaELf 10ySs87WJAjJ8ov2gDP9ZZ28DP70Ctw8dtGHgzkIQWa7Lnlnb1Zdn/vlh4Gya83S 3HCQ/Vt2JceLtlq9pCeMAfWZbW0Ho+jS0v/LOsws/GhC+ukHlLlgFPqJJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtWXRuXKMiJh3+n7Q1f3yTdOczdMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvcTFaZEc1Y295SW1IZjZmdERWX2ZKTjA1ek4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY2BMA0G CSqGSIb3DQEBCwUAA4IBAQAsNM2VM8G1+iuU+QCIeUTptNaWsLdS4PQ5l+2Zjtjk LP35+GX8pA2ZvRxacBTazkOF+dF958V6qbph76Qe1XEVef3s2eaPJcXiMZErPsW3 /Uva14Q+VD/BLuaUu3TBSplByGh7rJXyH1UCuUgM9Uu0yaFrbpzL3z0cqoYMC2Cw ByfkQOklb/t6drSFA4jpihRA9OF8W8RWV4PujDJ9TdjDkmAke0r67FXkdX0TEyVB AuCRTXsxuHVLU2daqRV+13TSKxljnWKZLwJMUiGQAwMqmzUt0icdb3eEAwBCsoNM zsLOrldcD96aMrKQSgAA0Jb5VtbYfYmFxgRLC0++pGpt -----END CERTIFICATE-----Generated at Mon Jan 19 21:26:20 2026 by rpki-client