This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/qGBR2sUTRayD8K-_HjOzHIrBN14.roa File: qGBR2sUTRayD8K-_HjOzHIrBN14.roa (raw, json) Hash identifier: +QFBxlPRW6YN96YBrNRPtMUp5MujXOppkGcrbKI0dH8= Subject key identifier: A8:60:51:DA:C5:13:45:AC:83:F0:AF:BF:1E:33:B3:1C:8A:C1:37:5E Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c Certificate serial: 019B7C127FFADDD9A519A796B0A86E954B99 Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/qGBR2sUTRayD8K-_HjOzHIrBN14.roa Signing time: Fri 02 Jan 2026 00:19:05 +0000 ROA not before: Fri 02 Jan 2026 00:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 164.153.132.0/24 maxlen: 24 164.153.133.0/24 maxlen: 24 164.153.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7f:fa:dd:d9:a5:19:a7:96:b0:a8:6e:95:4b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a86051dac51345ac83f0afbf1e33b31c8ac1375e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:79:ed:3e:8d:4e:ab:f2:f2:a6:74:aa:95:d1: 28:f5:28:ae:2d:46:b4:6d:d3:cb:15:53:21:13:ba: 4d:0c:fb:dc:5c:56:84:d6:72:fd:3e:b0:a6:43:17: 93:85:ca:08:44:fe:c7:c7:47:9d:67:46:ae:74:5c: b8:0a:96:a2:48:ec:84:cf:f3:f6:13:1e:20:bb:ed: 38:72:c9:d4:90:b3:98:a5:f8:3f:ce:39:74:e7:35: 27:3c:f8:25:63:c3:5c:de:e0:36:dd:31:87:e7:34: 65:32:6e:74:90:2a:ac:54:f0:eb:48:4c:35:d4:74: ab:b4:87:23:42:58:aa:b1:db:f7:d2:aa:84:74:a2: 08:1a:9f:dd:97:7a:9e:97:ef:97:80:e3:28:7c:5d: 7a:5b:f9:6b:a5:00:5a:40:75:07:2e:75:87:c5:3a: 94:51:ca:ef:e8:02:77:bd:7d:e2:0f:fc:f6:e3:6b: cc:de:8a:c0:9c:58:d7:0a:a6:9c:26:50:06:dc:29: b1:56:79:19:0e:c0:4a:89:af:d0:16:c7:9f:31:b3: bb:0e:7c:33:e0:ef:9e:b2:30:01:41:da:6a:e3:a7: 3c:71:12:c3:8d:6f:8d:09:99:51:0c:ed:d7:59:94: 91:7c:5f:db:51:61:b7:53:04:fc:3e:5d:98:9e:98: 33:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:51:DA:C5:13:45:AC:83:F0:AF:BF:1E:33:B3:1C:8A:C1:37:5E X509v3 Authority Key Identifier: keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/qGBR2sUTRayD8K-_HjOzHIrBN14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.153.132.0-164.153.134.255 Signature Algorithm: sha256WithRSAEncryption 60:6e:5b:df:10:0f:7d:c8:ea:30:19:cc:d6:95:d5:ec:a6:a9: e0:4f:bd:39:e5:1b:a5:84:e0:8d:68:ea:07:8f:0c:0e:97:f2: 36:ba:6e:c6:57:ae:60:f7:4c:42:86:73:6c:cd:00:75:0c:60: a2:d8:33:ca:be:30:eb:c9:90:37:a4:bc:5e:0d:2f:b8:cd:7d: 01:f7:6c:91:20:bd:76:c0:dc:a6:7d:2c:1a:ae:4a:d1:aa:a5: e6:39:ee:e0:da:2a:af:4f:12:8d:ea:53:b1:2d:8a:73:51:b7: c5:0e:70:af:2b:3b:c1:00:39:0a:24:c5:c7:86:f1:46:86:83: a0:26:fa:27:27:02:8d:ec:2f:22:65:3c:fe:0d:18:d7:67:1f: 18:31:36:53:83:60:a1:81:c4:7d:9c:f4:43:4a:c9:c2:4d:92: aa:84:87:e3:8d:a7:ac:f3:ff:d7:3f:bb:82:49:0e:85:96:ba: e6:1d:ce:b4:e2:05:49:a1:19:6e:e5:e5:29:72:63:6c:58:eb: d6:16:d9:ef:b3:e8:ad:90:77:71:cc:00:48:1e:b0:b8:49:5e: 1f:ea:ff:cd:f9:5f:cf:d4:64:1c:83:e1:12:94:9e:fc:73:ac: 1f:ae:83:a1:8a:93:ed:8a:fd:5b:8b:7e:62:b2:93:cf:8c:76: 91:23:7f:ac -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8En/63dmlGaeWsKhulUuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNzU5ZWM5ZmY1NGRlMDNhN2ZmM2E2NWVkYmIyZTA3NThl Njg3OGMwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODYwNTFkYWM1MTM0NWFjODNmMGFmYmYxZTMzYjMxYzhhYzEzNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXntPo1Oq/LypnSqldEo9SiuLUa0 bdPLFVMhE7pNDPvcXFaE1nL9PrCmQxeThcoIRP7Hx0edZ0audFy4CpaiSOyEz/P2 Ex4gu+04csnUkLOYpfg/zjl05zUnPPglY8Nc3uA23TGH5zRlMm50kCqsVPDrSEw1 1HSrtIcjQliqsdv30qqEdKIIGp/dl3qel++XgOMofF16W/lrpQBaQHUHLnWHxTqU Ucrv6AJ3vX3iD/z242vM3orAnFjXCqacJlAG3CmxVnkZDsBKia/QFsefMbO7Dnwz 4O+esjABQdpq46c8cRLDjW+NCZlRDO3XWZSRfF/bUWG3UwT8Pl2Ynpgz0wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKhgUdrFE0Wsg/Cvvx4zsxyKwTdeMB8GA1UdIwQY MBaAFJt1nsn/VN4Dp/86Ze27LgdY5oeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS81YWQ3M2ItZGIxNy00MzIyLWFkZTUt YjlhOWQ4YWU5NDIxLzEvcUdCUjJzVVRSYXlEOEstX0hqT3pISXJCTjE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS81YWQ3M2ItZGIxNy00MzIyLWFkZTUtYjlhOWQ4YWU5NDIx LzEvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKkmYQD BACkmYYwDQYJKoZIhvcNAQELBQADggEBAGBuW98QD33I6jAZzNaV1eymqeBPvTnl G6WE4I1o6gePDA6X8ja6bsZXrmD3TEKGc2zNAHUMYKLYM8q+MOvJkDekvF4NL7jN fQH3bJEgvXbA3KZ9LBquStGqpeY57uDaKq9PEo3qU7EtinNRt8UOcK8rO8EAOQok xceG8UaGg6Am+icnAo3sLyJlPP4NGNdnHxgxNlODYKGBxH2c9ENKycJNkqqEh+ON p6zz/9c/u4JJDoWWuuYdzrTiBUmhGW7l5SlyY2xY69YW2e+z6K2Qd3HMAEgesLhJ Xh/q/835X8/UZByD4RKUnvxzrB+ug6GKk+2K/VuLfmKyk8+MdpEjf6w= -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:03 2026 by rpki-client