This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/QKmzUyds9bz2AmR1UGfH6B7BfJ4.roa File: QKmzUyds9bz2AmR1UGfH6B7BfJ4.roa (raw, json) Hash identifier: SJPiROV/pjb1Jiz7cpZtz0GcfTCblnKsiIbFiRWwTTg= Subject key identifier: 40:A9:B3:53:27:6C:F5:BC:F6:02:64:75:50:67:C7:E8:1E:C1:7C:9E Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA4049B76F77FED129EEFDC97F5F62E Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/QKmzUyds9bz2AmR1UGfH6B7BfJ4.roa Signing time: Thu 01 Jan 2026 22:18:25 +0000 ROA not before: Thu 01 Jan 2026 22:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61435 IP address blocks: 45.137.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:04:9b:76:f7:7f:ed:12:9e:ef:dc:97:f5:f6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40a9b353276cf5bcf60264755067c7e81ec17c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:a2:d1:ba:93:d3:ba:c1:3d:21:25:d6:90: 86:2b:db:55:38:39:3d:1f:94:da:1e:bc:11:cc:5d: d4:4d:dd:0f:08:0d:35:05:30:ce:d3:d1:dc:11:29: d3:5d:c3:88:ac:1c:1a:a0:37:51:12:d4:e1:00:af: 82:c7:58:16:01:b0:cf:95:31:d6:e8:c6:18:15:90: 6f:28:a9:b5:e9:c1:6a:cd:9e:a5:cc:2e:3d:bf:56: 5c:fb:b2:54:4e:b3:28:d8:41:37:db:07:6c:54:93: f7:ad:52:56:55:cb:6d:1d:6b:b6:a3:c6:9c:52:dd: a1:24:2c:54:f4:4a:7b:91:07:8c:15:65:86:85:ea: 12:f1:0c:d1:c5:df:9c:cb:a6:1c:16:21:ec:bf:13: 18:6d:cd:ee:3c:d5:ea:ea:d9:3a:5b:fd:81:c2:5b: 87:46:b9:20:c5:e2:da:2f:b4:ed:58:14:64:85:fa: fe:0f:f8:c5:9c:fd:09:8d:75:58:be:f4:16:a3:e7: 84:36:c9:d4:21:ea:81:16:8e:89:09:73:4d:13:60: cd:d4:af:56:7c:0e:a7:db:f9:9f:53:d8:89:3a:bd: a9:34:b3:24:58:aa:78:e8:75:f9:2d:44:c2:dd:5e: cd:3e:9e:bd:bd:84:ba:a4:63:10:b4:17:2d:29:65: 03:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A9:B3:53:27:6C:F5:BC:F6:02:64:75:50:67:C7:E8:1E:C1:7C:9E X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/QKmzUyds9bz2AmR1UGfH6B7BfJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.104.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:89:52:2b:37:41:69:1f:43:a2:a9:9e:46:7b:a0:39:9e:6e: af:02:c3:ac:1f:c9:20:a0:93:e5:c5:79:3d:11:4d:5b:29:fa: 03:de:61:f5:13:c6:6e:71:d4:e3:bb:23:65:0c:23:73:18:22: 49:77:7b:fe:03:f1:96:a9:71:21:58:00:00:e6:08:5f:3f:2d: 0d:99:0e:8a:dc:49:ba:60:80:55:25:c8:bd:2b:8a:56:9e:ba: 93:62:b5:f0:b8:8b:9f:77:e9:cd:72:1b:65:bc:c8:ef:f0:6d: c6:f4:9a:b5:70:81:a2:8a:a8:0c:b2:38:c7:04:d5:44:86:92: e2:13:42:78:a6:69:d1:dc:7f:e3:19:e2:af:30:a5:4b:e9:9f: b3:ac:6a:a5:18:25:25:4d:51:3c:40:d1:da:6c:da:23:28:6b: 5c:21:ec:04:7c:18:6b:ed:82:39:de:3d:fa:a5:5e:c2:52:61: 3b:01:8f:e1:84:b0:32:67:31:71:83:f2:80:fd:c1:bb:fd:b1: 28:17:f1:1d:5f:74:e9:6c:6d:f5:01:44:51:36:92:a2:42:91: db:a5:d9:0f:a4:d1:e0:fa:6b:8b:a3:19:e6:50:9b:c0:dc:53: da:e4:09:4d:3b:6b:af:fc:fa:3c:3e:77:3b:20:2d:72:82:91: 2e:67:57:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pASbdvd/7RKe79yX9fYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGE5YjM1MzI3NmNmNWJjZjYwMjY0NzU1MDY3YzdlODFlYzE3YzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm+i0bqT07rBPSEl1pCGK9tVODk9 H5TaHrwRzF3UTd0PCA01BTDO09HcESnTXcOIrBwaoDdREtThAK+Cx1gWAbDPlTHW 6MYYFZBvKKm16cFqzZ6lzC49v1Zc+7JUTrMo2EE32wdsVJP3rVJWVcttHWu2o8ac Ut2hJCxU9Ep7kQeMFWWGheoS8QzRxd+cy6YcFiHsvxMYbc3uPNXq6tk6W/2BwluH RrkgxeLaL7TtWBRkhfr+D/jFnP0JjXVYvvQWo+eENsnUIeqBFo6JCXNNE2DN1K9W fA6n2/mfU9iJOr2pNLMkWKp46HX5LUTC3V7NPp69vYS6pGMQtBctKWUDtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFECps1MnbPW89gJkdVBnx+gewXyeMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvUUttelV5ZHM5YnoyQW1SMVVHZkg2QjdCZko0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYloMA0G CSqGSIb3DQEBCwUAA4IBAQBNiVIrN0FpH0OiqZ5Ge6A5nm6vAsOsH8kgoJPlxXk9 EU1bKfoD3mH1E8ZucdTjuyNlDCNzGCJJd3v+A/GWqXEhWAAA5ghfPy0NmQ6K3Em6 YIBVJci9K4pWnrqTYrXwuIufd+nNchtlvMjv8G3G9Jq1cIGiiqgMsjjHBNVEhpLi E0J4pmnR3H/jGeKvMKVL6Z+zrGqlGCUlTVE8QNHabNojKGtcIewEfBhr7YI53j36 pV7CUmE7AY/hhLAyZzFxg/KA/cG7/bEoF/EdX3TpbG31AURRNpKiQpHbpdkPpNHg +muLoxnmUJvA3FPa5AlNO2uv/Po8Pnc7IC1ygpEuZ1cV -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:54 2026 by rpki-client