This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qngv_trg1ruQn8CQ1l9gZF8Bue4.roa File: qngv_trg1ruQn8CQ1l9gZF8Bue4.roa (raw, json) Hash identifier: HggE1XakN3cDVW7J+yIeQ7YEb2x42M6fCc3ElZMjqiY= Subject key identifier: AA:78:2F:FE:DA:E0:D6:BB:90:9F:C0:90:D6:5F:60:64:5F:01:B9:EE Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA32D15486D29BE478B6DDDF05D8C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qngv_trg1ruQn8CQ1l9gZF8Bue4.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20326 IP address blocks: 45.148.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a3:2d:15:48:6d:29:be:47:8b:6d:dd:f0:5d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa782ffedae0d6bb909fc090d65f60645f01b9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:19:6e:8d:6d:60:e6:66:cc:c0:18:c1:5a: d0:4e:58:fe:1d:10:f8:4d:a3:35:5c:fb:89:b8:80: 34:69:9b:fc:82:17:0f:df:54:1e:ce:53:fe:d7:ca: 54:c3:97:3a:38:54:72:18:f4:3f:5e:53:cf:b4:0c: 7f:ab:74:3d:58:54:c1:e4:80:69:06:b1:66:96:3a: b6:56:94:6a:92:f4:bb:33:90:87:20:87:e9:0e:a4: 0c:77:b3:40:34:19:f6:d1:f1:68:df:ff:78:5c:f7: 06:7b:d6:37:65:d8:5a:c0:78:81:36:b9:38:d9:ab: a0:c2:ee:46:83:d2:4d:be:6c:83:f4:27:dc:e4:ec: 58:84:ed:3f:f9:0a:41:d4:e3:f9:b1:b9:0d:9e:29: 64:b4:01:78:2e:0a:47:fb:cd:03:6a:51:4d:ea:a6: b9:fc:f0:0d:96:39:0e:6c:a0:f4:ce:48:fc:01:10: aa:6e:14:1c:f1:4b:5c:a1:74:3c:3f:22:83:4a:2c: 03:46:f3:0c:8a:4c:9a:b6:ca:ec:dd:6b:b3:d8:25: 48:34:94:7e:40:15:2c:52:03:b7:cb:ac:38:06:a8: ad:1b:0f:a3:4d:28:7b:2f:e9:4e:00:d8:fc:8f:18: 80:76:0b:80:98:8a:63:a2:3e:1a:39:bf:17:d1:d4: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:78:2F:FE:DA:E0:D6:BB:90:9F:C0:90:D6:5F:60:64:5F:01:B9:EE X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qngv_trg1ruQn8CQ1l9gZF8Bue4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.116.0/24 Signature Algorithm: sha256WithRSAEncryption 80:22:b9:ca:61:a7:98:68:4b:ce:ae:7a:4c:57:5a:5a:5f:92: 04:c1:d6:9d:ab:f5:6c:1f:bc:90:28:de:87:46:51:17:b6:02: f6:49:5c:a0:48:c5:8d:a7:07:3f:02:e9:06:a6:3c:ef:57:96: dc:58:e0:73:a5:66:0b:49:b7:b5:5c:2e:2f:d6:55:d3:b5:82: b9:5c:96:62:cc:e0:0a:11:cd:df:35:bd:32:6e:69:45:26:b7: 32:02:be:f8:c4:61:8d:7d:ac:e2:bb:47:81:28:82:fd:f2:56: 2d:ed:e7:e1:d5:10:cf:4a:49:03:24:ae:c2:ec:4e:34:fa:89: 0d:8f:3e:27:dc:85:44:61:35:3a:41:95:86:19:52:59:82:f7: 5a:f5:7a:ea:eb:e7:16:1d:b1:da:1a:ca:ed:54:7c:2b:76:2b: 1c:e4:b6:2e:b3:dc:c5:76:99:33:d7:2c:a9:43:f0:ce:ad:06: 25:df:ff:ff:38:ef:b5:7f:39:a5:ed:cd:2c:e5:9f:8a:b9:9e: 65:fc:7e:c5:bd:1e:04:5d:c8:14:27:6c:8c:a1:c9:0a:70:c8: be:16:89:10:23:60:fc:c4:d1:13:02:0d:84:89:f9:01:4d:84: 79:5e:10:e9:60:2d:9b:25:c6:2a:60:15:31:fc:44:ad:11:98: cc:df:02:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKMtFUhtKb5Hi23d8F2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTc4MmZmZWRhZTBkNmJiOTA5ZmMwOTBkNjVmNjA2NDVmMDFiOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySUZbo1tYOZmzMAYwVrQTlj+HRD4 TaM1XPuJuIA0aZv8ghcP31QezlP+18pUw5c6OFRyGPQ/XlPPtAx/q3Q9WFTB5IBp BrFmljq2VpRqkvS7M5CHIIfpDqQMd7NANBn20fFo3/94XPcGe9Y3ZdhawHiBNrk4 2augwu5Gg9JNvmyD9Cfc5OxYhO0/+QpB1OP5sbkNnilktAF4LgpH+80DalFN6qa5 /PANljkObKD0zkj8ARCqbhQc8UtcoXQ8PyKDSiwDRvMMikyatsrs3Wuz2CVINJR+ QBUsUgO3y6w4BqitGw+jTSh7L+lOANj8jxiAdguAmIpjoj4aOb8X0dScvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKp4L/7a4Na7kJ/AkNZfYGRfAbnuMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcW5ndl90cmcxcnVRbjhDUTFsOWdaRjhCdWU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZR0MA0G CSqGSIb3DQEBCwUAA4IBAQCAIrnKYaeYaEvOrnpMV1paX5IEwdadq/VsH7yQKN6H RlEXtgL2SVygSMWNpwc/AukGpjzvV5bcWOBzpWYLSbe1XC4v1lXTtYK5XJZizOAK Ec3fNb0ybmlFJrcyAr74xGGNfaziu0eBKIL98lYt7efh1RDPSkkDJK7C7E40+okN jz4n3IVEYTU6QZWGGVJZgvda9Xrq6+cWHbHaGsrtVHwrdisc5LYus9zFdpkz1yyp Q/DOrQYl3///OO+1fzml7c0s5Z+KuZ5l/H7FvR4EXcgUJ2yMockKcMi+FokQI2D8 xNETAg2EifkBTYR5XhDpYC2bJcYqYBUx/EStEZjM3wIZ -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:48 2026 by rpki-client