This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/QVqjoZxOanPkSrpEE0sDBKehWCQ.roa File: QVqjoZxOanPkSrpEE0sDBKehWCQ.roa (raw, json) Hash identifier: k/xCn5DILtdCdVds1aCxyFqhcnoj9r7lODhjJ0bo6sk= Subject key identifier: 41:5A:A3:A1:9C:4E:6A:73:E4:4A:BA:44:13:4B:03:04:A7:A1:58:24 Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce Certificate serial: 019B7C7FE63E0EDDDA5F0C3BCAD31EFC386A Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/QVqjoZxOanPkSrpEE0sDBKehWCQ.roa Signing time: Fri 02 Jan 2026 02:18:35 +0000 ROA not before: Fri 02 Jan 2026 02:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208313 IP address blocks: 45.146.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e6:3e:0e:dd:da:5f:0c:3b:ca:d3:1e:fc:38:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce Validity Not Before: Jan 2 02:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=415aa3a19c4e6a73e44aba44134b0304a7a15824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:de:29:cd:76:d4:fd:4e:11:81:23:a2:e5: 39:ae:75:ee:a9:8b:e9:e1:ed:98:ca:9c:46:db:d9: 3e:f0:91:f3:47:df:45:08:9a:55:1e:ec:f4:d3:ba: 20:45:13:fa:a6:e8:73:2a:a7:05:72:21:f4:71:8a: 75:fd:0a:62:60:3b:a3:46:b2:75:4e:96:95:90:0c: 1d:34:04:3a:7b:3b:46:26:01:23:7c:6f:e8:00:32: b4:45:02:d3:69:37:98:5e:65:cc:00:17:b1:19:6e: 66:7a:5c:c8:ef:48:85:3d:fc:3a:eb:34:60:e2:b3: df:66:91:6b:cc:03:16:99:d9:7c:54:dc:8b:3c:d1: 6b:eb:94:e2:37:24:09:0f:e9:5c:87:60:5d:8e:8a: 76:20:2d:1f:52:5a:2b:73:e8:e1:1d:62:aa:8f:ab: dd:61:9d:ae:f1:33:dc:27:5e:e2:7d:51:dc:e0:9f: 3d:b2:23:9e:96:34:02:e5:1c:8b:a5:43:36:42:c6: fa:8a:53:27:bd:01:36:13:07:3c:b7:86:76:b1:d1: 60:78:c9:d2:09:85:dd:c7:fd:23:b9:d6:81:b2:c7: 47:fb:3a:1a:e5:0f:bd:4b:01:8b:f5:fc:a0:b6:37: 0f:44:90:08:c9:0d:12:c3:a8:19:8d:0c:8d:ec:51: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5A:A3:A1:9C:4E:6A:73:E4:4A:BA:44:13:4B:03:04:A7:A1:58:24 X509v3 Authority Key Identifier: keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/QVqjoZxOanPkSrpEE0sDBKehWCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.148.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:4d:2d:34:e5:77:bc:55:45:9b:26:8a:e3:cd:a2:74:e0:9b: ad:1a:67:2c:d5:53:e3:4e:01:1e:81:e3:0a:1d:c9:f3:97:57: 75:5e:ae:a1:ff:17:6e:3a:7b:aa:20:73:58:74:7d:94:c4:e4: e8:81:9f:19:2a:90:56:86:44:fe:cd:32:d0:9a:24:c5:31:ba: c2:97:c8:51:b8:d3:b2:23:41:d5:51:5b:cb:da:92:80:73:7e: ec:be:7a:f1:02:db:9f:7b:94:b0:31:be:0b:49:74:24:71:55: 6e:d3:5c:53:06:0e:92:45:91:01:f7:92:5c:32:8d:66:02:c8: 4f:a1:04:fa:fd:c7:d7:c7:07:4e:27:6a:cc:f0:0a:48:9f:23: 4f:78:63:34:2c:5f:05:3a:3f:02:f3:66:ce:0d:d8:9c:ab:c2: 56:ae:ba:8d:9d:3f:ac:58:be:fa:c2:fd:29:17:aa:d3:1e:27: 91:df:e1:59:89:56:b2:39:28:27:8d:a5:bb:97:8e:3a:ff:f6: 11:57:fd:6a:6a:ff:12:1a:3f:fd:3a:a3:1e:a4:b3:35:b0:a9: e4:0c:94:9b:28:84:d5:11:6f:6a:e5:5d:3e:83:34:f4:90:32: e4:35:2c:f0:9a:6b:40:f4:1b:da:6f:e5:86:50:2d:a6:c6:83: da:65:d1:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f+Y+Dt3aXww7ytMe/DhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZGU0YTA3MmE1YmNiNzRkMjBlOTJkZGJiZDdmNjQ3N2Mz YzhmY2UwHhcNMjYwMTAyMDIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTVhYTNhMTljNGU2YTczZTQ0YWJhNDQxMzRiMDMwNGE3YTE1ODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0jeKc121P1OEYEjouU5rnXuqYvp 4e2YypxG29k+8JHzR99FCJpVHuz007ogRRP6puhzKqcFciH0cYp1/QpiYDujRrJ1 TpaVkAwdNAQ6eztGJgEjfG/oADK0RQLTaTeYXmXMABexGW5melzI70iFPfw66zRg 4rPfZpFrzAMWmdl8VNyLPNFr65TiNyQJD+lch2Bdjop2IC0fUlorc+jhHWKqj6vd YZ2u8TPcJ17ifVHc4J89siOeljQC5RyLpUM2Qsb6ilMnvQE2Ewc8t4Z2sdFgeMnS CYXdx/0judaBssdH+zoa5Q+9SwGL9fygtjcPRJAIyQ0Sw6gZjQyN7FF3MQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEFao6GcTmpz5Eq6RBNLAwSnoVgkMB8GA1UdIwQY MBaAFKLeSgcqW8t00g6S3bvX9kd8PI/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMDVhM2EtMTMwNy00MWNiLWI0YzEt NjRhNTYwNDZiY2E3LzEvUVZxam9aeE9hblBrU3JwRUUwc0RCS2VoV0NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lMDVhM2EtMTMwNy00MWNiLWI0YzEtNjRhNTYwNDZiY2E3 LzEvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZKUMA0G CSqGSIb3DQEBCwUAA4IBAQAcTS005Xe8VUWbJorjzaJ04JutGmcs1VPjTgEegeMK Hcnzl1d1Xq6h/xduOnuqIHNYdH2UxOTogZ8ZKpBWhkT+zTLQmiTFMbrCl8hRuNOy I0HVUVvL2pKAc37svnrxAtufe5SwMb4LSXQkcVVu01xTBg6SRZEB95JcMo1mAshP oQT6/cfXxwdOJ2rM8ApInyNPeGM0LF8FOj8C82bODdicq8JWrrqNnT+sWL76wv0p F6rTHieR3+FZiVayOSgnjaW7l446//YRV/1qav8SGj/9OqMepLM1sKnkDJSbKITV EW9q5V0+gzT0kDLkNSzwmmtA9Bvab+WGUC2mxoPaZdH5 -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:28 2026 by rpki-client