This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/q1-RUpRuUBWbVUTXhumFkZMtJE0.roa File: q1-RUpRuUBWbVUTXhumFkZMtJE0.roa (raw, json) Hash identifier: 3qe5W+9kAiScEd0vW+cxVBghgrjhqeOcbbAjhxWvcx0= Subject key identifier: AB:5F:91:52:94:6E:50:15:9B:55:44:D7:86:E9:85:91:93:2D:24:4D Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a Certificate serial: 019B7B36831CC577E41064FF92473EA26893 Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/q1-RUpRuUBWbVUTXhumFkZMtJE0.roa Signing time: Thu 01 Jan 2026 20:18:48 +0000 ROA not before: Thu 01 Jan 2026 20:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199997 IP address blocks: 46.245.224.0/21 maxlen: 21 46.245.224.0/24 maxlen: 24 46.245.225.0/24 maxlen: 24 46.245.226.0/24 maxlen: 24 46.245.227.0/24 maxlen: 24 46.245.228.0/24 maxlen: 24 46.245.229.0/24 maxlen: 24 2a01:bfe0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:83:1c:c5:77:e4:10:64:ff:92:47:3e:a2:68:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab5f9152946e50159b5544d786e98591932d244d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:bb:07:76:47:66:82:0f:f8:28:2e:8f:23: 16:f2:e4:ae:dc:4c:86:c5:c9:ed:7d:d5:91:26:9d: 76:4a:34:3f:0a:b3:ee:67:3d:fe:c5:2b:6c:78:93: eb:7b:fd:f8:2f:00:e0:88:9f:58:ee:58:00:52:05: 3d:94:55:61:09:77:64:b5:67:ba:81:58:8e:c3:47: 8f:0c:43:cf:76:6e:a7:55:59:8d:87:3d:53:26:00: 96:3c:83:39:85:7f:08:94:75:d8:65:2d:90:c9:30: bf:48:7b:1e:be:ff:a6:60:0d:dd:15:83:ab:04:19: f6:6f:26:e1:f8:b3:ee:4f:f4:fe:9e:37:71:e5:12: f7:01:93:34:d0:ae:c1:f8:4c:ea:ca:3f:2c:5f:6e: 3e:a0:39:ff:d2:67:91:63:40:e2:f0:6f:c7:e2:18: 69:95:e7:fb:f5:92:ea:22:2c:cc:d7:e5:ca:9f:06: 96:59:95:56:9e:08:38:0b:32:f3:a9:fd:0c:d2:c9: 1f:90:aa:f9:81:be:ec:a2:b5:32:03:40:e9:05:bd: 2e:c8:84:94:2a:59:9f:a4:43:34:a4:e7:06:78:ea: fd:9a:79:11:4f:cb:c7:3d:04:5b:6c:29:d9:38:ef: b8:fe:28:b5:14:6d:4d:34:1d:89:56:a6:81:50:84: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5F:91:52:94:6E:50:15:9B:55:44:D7:86:E9:85:91:93:2D:24:4D X509v3 Authority Key Identifier: keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/q1-RUpRuUBWbVUTXhumFkZMtJE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.224.0/21 IPv6: 2a01:bfe0::/32 Signature Algorithm: sha256WithRSAEncryption 46:cb:79:73:b9:0b:07:d5:1d:0e:fe:41:78:d9:d6:b0:f2:e8: ed:05:bc:80:fb:8a:10:d7:ae:89:4e:20:d7:22:af:99:d1:e2: d0:4c:6e:59:5b:89:2e:e0:91:63:53:92:ae:bc:48:3e:86:1b: f6:44:3f:2c:0d:b6:95:7c:06:b2:58:c8:86:1b:e4:f4:d8:b4: 94:75:1b:5b:50:83:bb:88:f7:33:1b:4c:f9:af:51:85:a6:76: 34:41:0b:f1:a1:fa:99:78:b3:36:f3:af:40:39:00:12:0b:60: 8a:c5:11:d5:e2:13:48:74:c2:dc:ec:cf:7f:6f:11:e7:04:93: 6c:7e:bf:85:d8:ad:88:b9:4f:28:d1:57:93:e6:28:07:e4:ef: 64:27:e8:e9:ed:f3:53:23:85:9a:c2:df:ad:49:1d:bf:9e:7e: c9:21:3c:a0:36:c9:fa:61:b4:5f:47:c1:28:da:d8:0a:c5:cf: 5f:c6:73:f8:54:06:30:63:5a:1f:4d:15:9b:a7:a8:ba:7c:c5: 53:27:42:ff:63:0b:03:e9:d4:fa:04:90:27:0c:eb:fa:b1:9f: 31:9d:d0:5c:dd:86:1d:d1:c3:6d:76:14:15:3a:66:8d:6c:1f: bc:93:ef:82:7d:fc:18:87:21:2d:38:74:9a:fa:72:67:4e:f5: dd:f2:03:ac -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NoMcxXfkEGT/kkc+omiTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYTYyZmZjOTlmMjk0MTAyZGNjZTIzNWRjMWEzYzEzZGFi Y2Q2OWEwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjVmOTE1Mjk0NmU1MDE1OWI1NTQ0ZDc4NmU5ODU5MTkzMmQyNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysu7B3ZHZoIP+CgujyMW8uSu3EyG xcntfdWRJp12SjQ/CrPuZz3+xStseJPre/34LwDgiJ9Y7lgAUgU9lFVhCXdktWe6 gViOw0ePDEPPdm6nVVmNhz1TJgCWPIM5hX8IlHXYZS2QyTC/SHsevv+mYA3dFYOr BBn2bybh+LPuT/T+njdx5RL3AZM00K7B+Ezqyj8sX24+oDn/0meRY0Di8G/H4hhp lef79ZLqIizM1+XKnwaWWZVWngg4CzLzqf0M0skfkKr5gb7sorUyA0DpBb0uyISU KlmfpEM0pOcGeOr9mnkRT8vHPQRbbCnZOO+4/ii1FG1NNB2JVqaBUITM/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKtfkVKUblAVm1VE14bphZGTLSRNMB8GA1UdIwQY MBaAFEKmL/yZ8pQQLcziNdwaPBPavNaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQt MWMyMmRhNDRhMjJkLzEvcTEtUlVwUnVVQldiVlVUWGh1bUZrWk10SkUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQtMWMyMmRhNDRhMjJk LzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLvXgMA0E AgACMAcDBQAqAb/gMA0GCSqGSIb3DQEBCwUAA4IBAQBGy3lzuQsH1R0O/kF42daw 8ujtBbyA+4oQ166JTiDXIq+Z0eLQTG5ZW4ku4JFjU5KuvEg+hhv2RD8sDbaVfAay WMiGG+T02LSUdRtbUIO7iPczG0z5r1GFpnY0QQvxofqZeLM2869AOQASC2CKxRHV 4hNIdMLc7M9/bxHnBJNsfr+F2K2IuU8o0VeT5igH5O9kJ+jp7fNTI4Wawt+tSR2/ nn7JITygNsn6YbRfR8Eo2tgKxc9fxnP4VAYwY1ofTRWbp6i6fMVTJ0L/YwsD6dT6 BJAnDOv6sZ8xndBc3YYd0cNtdhQVOmaNbB+8k++CffwYhyEtOHSa+nJnTvXd8gOs -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:35 2026 by rpki-client