This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/QgW7-mSWGp2A25udaZ5Dv9P--KM.roa File: QgW7-mSWGp2A25udaZ5Dv9P--KM.roa (raw, json) Hash identifier: KZKErYO/RTD++8XPhGtyaEC+q1+NRXww0j+/d4mY/SY= Subject key identifier: 42:05:BB:FA:64:96:1A:9D:80:DB:9B:9D:69:9E:43:BF:D3:FE:F8:A3 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019C33B7DC2853D905599C5817363FB00DE4 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/QgW7-mSWGp2A25udaZ5Dv9P--KM.roa Signing time: Fri 06 Feb 2026 16:10:13 +0000 ROA not before: Fri 06 Feb 2026 16:10:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 45.43.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:33:b7:dc:28:53:d9:05:59:9c:58:17:36:3f:b0:0d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Feb 6 16:10:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4205bbfa64961a9d80db9b9d699e43bfd3fef8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:83:4b:a1:75:3b:31:05:ba:cc:67:ae:7a: 3d:ef:61:09:f2:2e:93:15:00:68:38:f0:51:c4:c2: 86:db:cf:c6:13:04:6d:8e:cb:1b:53:be:62:54:3f: 35:fa:e8:0d:d9:7e:6b:16:5a:cd:42:dc:7d:5f:77: d1:f7:36:69:42:37:85:7b:b5:5a:ea:31:9d:11:a2: 08:f8:45:38:ed:52:f0:f8:c8:7f:3c:56:f6:ff:4c: 96:3c:a0:84:cd:19:f5:16:6e:43:74:a7:6c:e8:ef: 19:d9:8d:f0:ea:28:38:16:1b:b6:a2:1e:34:13:19: e6:20:79:05:37:ad:ea:49:12:df:c8:9c:a5:ac:60: 03:20:8e:21:73:a6:83:54:e8:50:a7:86:3f:59:c8: 62:d4:cd:e3:d8:a8:63:06:be:45:1e:e3:96:30:56: 5c:da:5e:dc:7a:52:74:fd:c3:41:b3:4a:1c:6e:91: 65:e9:8e:44:8f:9f:ef:59:f8:b7:63:1b:79:d0:e7: 69:78:49:a3:43:e1:8b:5a:d0:24:19:58:6e:12:4b: b9:4c:8f:35:cc:80:d0:9a:52:b9:81:2b:dd:6b:c1: c7:cc:75:1c:9b:64:32:80:d7:2a:b1:92:52:23:28: f0:8f:1c:2e:0f:4c:22:e9:5e:ee:b7:52:b9:34:55: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:05:BB:FA:64:96:1A:9D:80:DB:9B:9D:69:9E:43:BF:D3:FE:F8:A3 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/QgW7-mSWGp2A25udaZ5Dv9P--KM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.166.0/24 Signature Algorithm: sha256WithRSAEncryption 45:1b:4a:70:eb:f6:f9:e6:62:25:94:8f:e6:8e:fc:7d:ee:f7: ba:dc:f7:26:d7:e3:fb:8a:db:db:5f:35:b2:96:1d:ba:ef:34: a0:72:cf:69:14:c2:a5:f5:b6:28:07:77:a9:f5:d3:a9:af:a8: 58:b0:ad:e4:45:65:4f:56:a6:78:bf:f9:8e:52:6d:c4:a0:6a: c9:b4:91:b8:63:3d:f1:d1:4b:cb:79:15:3b:d8:75:b8:3c:0e: 28:40:eb:1a:77:9f:04:3b:5b:55:11:4e:0c:1d:b2:29:72:d8: 20:1d:4f:e8:d7:ec:3f:1a:0e:51:bb:b3:85:5a:4a:9a:46:6b: a6:d3:a9:5d:0d:f9:e8:bb:7d:91:8c:5d:f6:7b:f6:2c:d8:b4: 6f:39:9c:a7:6d:46:a1:cf:20:b1:95:90:1f:67:ef:71:3b:f9: 9d:c9:9a:ec:d3:d6:53:b6:d9:9d:80:e1:eb:c4:7e:bd:9f:37: a2:d7:20:6c:a0:f7:17:1c:cd:7d:f0:b9:53:32:f3:44:11:82: a0:cd:25:df:74:32:65:70:6a:de:62:18:0b:f7:22:39:7b:25: ab:82:75:c1:7f:98:f8:59:a1:b8:8a:0e:aa:75:2f:c7:8a:2b: 33:76:2f:84:4b:5b:34:b6:d8:40:ae:c6:08:36:6a:a1:e0:54: 17:b9:dd:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwzt9woU9kFWZxYFzY/sA3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMjA2MTYxMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjA1YmJmYTY0OTYxYTlkODBkYjliOWQ2OTllNDNiZmQzZmVmOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj+DS6F1OzEFusxnrno972EJ8i6T FQBoOPBRxMKG28/GEwRtjssbU75iVD81+ugN2X5rFlrNQtx9X3fR9zZpQjeFe7Va 6jGdEaII+EU47VLw+Mh/PFb2/0yWPKCEzRn1Fm5DdKds6O8Z2Y3w6ig4Fhu2oh40 ExnmIHkFN63qSRLfyJylrGADII4hc6aDVOhQp4Y/Wchi1M3j2KhjBr5FHuOWMFZc 2l7celJ0/cNBs0ocbpFl6Y5Ej5/vWfi3Yxt50OdpeEmjQ+GLWtAkGVhuEku5TI81 zIDQmlK5gSvda8HHzHUcm2QygNcqsZJSIyjwjxwuD0wi6V7ut1K5NFWT+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEIFu/pklhqdgNubnWmeQ7/T/vijMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvUWdXNy1tU1dHcDJBMjV1ZGFaNUR2OVAtLUtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSumMA0G CSqGSIb3DQEBCwUAA4IBAQBFG0pw6/b55mIllI/mjvx97ve63Pcm1+P7itvbXzWy lh267zSgcs9pFMKl9bYoB3ep9dOpr6hYsK3kRWVPVqZ4v/mOUm3EoGrJtJG4Yz3x 0UvLeRU72HW4PA4oQOsad58EO1tVEU4MHbIpctggHU/o1+w/Gg5Ru7OFWkqaRmum 06ldDfnou32RjF32e/Ys2LRvOZynbUahzyCxlZAfZ+9xO/mdyZrs09ZTttmdgOHr xH69nzei1yBsoPcXHM198LlTMvNEEYKgzSXfdDJlcGreYhgL9yI5eyWrgnXBf5j4 WaG4ig6qdS/Hiiszdi+ES1s0tthArsYINmqh4FQXud1s -----END CERTIFICATE-----Generated at Thu Feb 12 16:46:23 2026 by rpki-client