This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QT1mCRCrqhWu-kvoAmT-0EOq03M.roa File: QT1mCRCrqhWu-kvoAmT-0EOq03M.roa (raw, json) Hash identifier: FiduHJ8vIZbU/fNWBtbZXhcoT383+ckRgBxHMgbrUco= Subject key identifier: 41:3D:66:09:10:AB:AA:15:AE:FA:4B:E8:02:64:FE:D0:43:AA:D3:73 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB6D26B15609868C712641D8D0A7E5 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QT1mCRCrqhWu-kvoAmT-0EOq03M.roa Signing time: Fri 02 Jan 2026 08:20:42 +0000 ROA not before: Fri 02 Jan 2026 08:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57271 IP address blocks: 31.24.251.0/24 maxlen: 24 45.90.46.0/24 maxlen: 24 2a0d:e242::/32 maxlen: 32 2a0e:19c6::/32 maxlen: 32 2a11:ec6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:6d:26:b1:56:09:86:8c:71:26:41:d8:d0:a7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=413d660910abaa15aefa4be80264fed043aad373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:cb:b4:60:c9:36:a4:ce:c8:2a:8a:58:ed: 43:72:3b:3a:54:65:47:e7:79:06:72:9c:96:d6:59: 31:57:16:2c:86:5e:96:d1:88:c0:7f:42:5a:5d:d0: 13:88:73:8f:94:50:0a:b3:ed:16:6b:4f:f2:0e:b3: 2b:f4:e2:f3:5e:62:b9:c7:6f:34:3b:c8:da:a7:e7: 29:81:fb:05:4e:fb:c5:34:8d:3d:83:ac:51:25:73: 8b:d1:40:f4:1e:dd:5d:d3:bb:c6:6c:35:aa:c2:45: 06:8e:45:31:b5:8d:52:86:e7:70:81:9d:13:fd:4b: 66:82:2f:7d:82:ef:e5:eb:9d:ac:8a:11:1c:45:9c: a7:01:9c:cc:f5:f8:b3:93:9c:1e:1c:8b:92:51:e7: d0:7c:42:93:4d:81:ae:bd:bb:6b:80:e9:4c:89:fc: 65:e1:d5:ef:44:d6:78:d5:2f:4b:64:92:1f:99:cd: 78:af:d1:2e:26:01:6d:35:64:90:52:e9:89:e8:5f: 75:93:30:2e:a1:20:a8:53:06:a2:35:63:63:ff:61: dc:f9:eb:04:79:24:e6:26:f5:af:4b:16:e4:2b:71: 55:bb:df:0b:f7:2f:ba:45:3e:05:fd:b3:70:e6:20: 73:c0:a8:e5:27:e6:33:6f:0f:fb:84:a3:bc:66:e5: 81:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3D:66:09:10:AB:AA:15:AE:FA:4B:E8:02:64:FE:D0:43:AA:D3:73 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QT1mCRCrqhWu-kvoAmT-0EOq03M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.251.0/24 45.90.46.0/24 IPv6: 2a0d:e242::/32 2a0e:19c6::/32 2a11:ec6::/32 Signature Algorithm: sha256WithRSAEncryption 9d:a1:b0:4b:5f:b3:57:8e:0e:68:b4:df:7a:d7:2b:95:ce:88: 6f:9e:7c:cd:30:f7:a6:74:ae:eb:df:86:83:23:70:67:c8:72: 14:7f:11:92:d6:df:cf:46:d2:87:87:f1:2f:62:0b:02:0a:09: e4:6a:25:8c:cf:30:cb:69:80:a0:99:c8:3e:16:4b:d3:60:bf: 61:81:53:d5:c5:8b:78:f7:3d:34:5e:71:b9:2b:80:5f:58:39: 31:4d:1c:ee:fd:ff:93:f4:e0:03:3f:82:a0:12:e6:60:6f:72: de:cd:39:48:aa:1f:6f:e0:b4:59:87:4f:b6:f8:a4:8a:dd:3f: b3:8f:be:c7:47:f7:bc:24:be:76:61:f2:1e:a4:05:ef:fc:17: 9e:87:7b:12:93:0f:a0:7c:31:a8:df:b0:8b:62:ab:88:be:75: f7:4c:6e:25:4e:b5:16:12:4b:3e:74:8c:cc:7b:1d:41:64:fc: 8d:e0:61:93:8a:4a:22:f1:c0:7a:85:4d:d9:2f:a2:2a:a7:77: ab:6d:84:cd:96:cd:35:9c:56:eb:42:bb:cc:8c:17:f7:eb:77: e1:e5:02:ef:95:af:de:d9:9e:82:10:44:ba:e6:cf:a1:b6:e4: 46:e9:14:45:e1:0a:26:a9:f0:1d:b1:e7:a8:00:dd:e4:59:00: 1a:ce:cb:5e -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt9y20msVYJhoxxJkHY0KflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTNkNjYwOTEwYWJhYTE1YWVmYTRiZTgwMjY0ZmVkMDQzYWFkMzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMXLtGDJNqTOyCqKWO1Dcjs6VGVH 53kGcpyW1lkxVxYshl6W0YjAf0JaXdATiHOPlFAKs+0Wa0/yDrMr9OLzXmK5x280 O8jap+cpgfsFTvvFNI09g6xRJXOL0UD0Ht1d07vGbDWqwkUGjkUxtY1ShudwgZ0T /Utmgi99gu/l652sihEcRZynAZzM9fizk5weHIuSUefQfEKTTYGuvbtrgOlMifxl 4dXvRNZ41S9LZJIfmc14r9EuJgFtNWSQUumJ6F91kzAuoSCoUwaiNWNj/2Hc+esE eSTmJvWvSxbkK3FVu98L9y+6RT4F/bNw5iBzwKjlJ+Yzbw/7hKO8ZuWB+QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFEE9ZgkQq6oVrvpL6AJk/tBDqtNzMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvUVQxbUNSQ3JxaFd1LWt2b0FtVC0wRU9xMDNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTASBAIAATAMAwQAHxj7AwQA LVouMBsEAgACMBUDBQAqDeJCAwUAKg4ZxgMFACoRDsYwDQYJKoZIhvcNAQELBQAD ggEBAJ2hsEtfs1eODmi033rXK5XOiG+efM0w96Z0ruvfhoMjcGfIchR/EZLW389G 0oeH8S9iCwIKCeRqJYzPMMtpgKCZyD4WS9Ngv2GBU9XFi3j3PTRecbkrgF9YOTFN HO79/5P04AM/gqAS5mBvct7NOUiqH2/gtFmHT7b4pIrdP7OPvsdH97wkvnZh8h6k Be/8F56HexKTD6B8MajfsItiq4i+dfdMbiVOtRYSSz50jMx7HUFk/I3gYZOKSiLx wHqFTdkvoiqnd6tthM2WzTWcVutCu8yMF/frd+HlAu+Vr97ZnoIQRLrmz6G25Ebp FEXhCiap8B2x56gA3eRZABrOy14= -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:10 2026 by rpki-client