This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/PQBF4mCa3EW8hiGZFACvo7VeAB0.roa File: PQBF4mCa3EW8hiGZFACvo7VeAB0.roa (raw, json) Hash identifier: 3SzioKnDZBjphhsMENR4RFeejxxcRYepmgMK0cqKv/c= Subject key identifier: 3D:00:45:E2:60:9A:DC:45:BC:86:21:99:14:00:AF:A3:B5:5E:00:1D Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Certificate serial: 019BA90018015388E826798B50BA52485552 Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/PQBF4mCa3EW8hiGZFACvo7VeAB0.roa Signing time: Sat 10 Jan 2026 17:41:54 +0000 ROA not before: Sat 10 Jan 2026 17:41:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212123 IP address blocks: 45.129.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a9:00:18:01:53:88:e8:26:79:8b:50:ba:52:48:55:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Validity Not Before: Jan 10 17:41:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d0045e2609adc45bc8621991400afa3b55e001d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:6e:18:3b:ad:66:86:8a:bb:1d:85:e5:9b: af:c5:bc:a4:8f:6d:80:b5:08:66:3e:2b:0d:b5:db: fd:a3:b2:be:db:ef:ce:fc:17:66:db:7e:9c:45:d5: 82:c4:6c:9e:3c:c6:f2:04:e8:97:33:d1:b6:30:e9: ff:4f:27:1f:77:21:71:cc:4d:da:69:60:7d:bd:0e: bb:cf:22:65:97:58:7d:54:06:70:03:10:79:de:b6: 95:a5:62:57:d2:12:13:b6:9b:f1:55:e7:15:0a:3d: 49:72:f5:97:b0:bf:cf:c2:c1:54:0c:1e:de:d3:53: dd:73:9a:fa:12:1b:bf:a3:e6:57:0a:72:69:03:ab: 53:91:a3:4c:47:66:9b:97:13:0e:d4:85:94:6a:f5: 43:9d:d4:99:ff:d5:c4:dc:9f:9d:70:13:fb:b0:99: c3:d5:f8:fa:d4:47:a3:5e:fc:cd:70:0d:f9:98:41: 38:ba:d2:69:95:f1:61:75:6a:d2:4f:c4:54:72:36: ea:0c:79:c1:91:45:8c:6b:d7:61:a6:3d:ac:15:8d: 14:93:03:12:23:a6:a6:89:ad:83:a3:01:97:b4:4e: 64:92:86:b0:60:0c:2c:f8:08:5c:48:5e:6c:c9:9f: a6:83:8f:7e:a4:85:36:23:8e:cd:a2:7b:79:f8:7d: a5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:00:45:E2:60:9A:DC:45:BC:86:21:99:14:00:AF:A3:B5:5E:00:1D X509v3 Authority Key Identifier: keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/PQBF4mCa3EW8hiGZFACvo7VeAB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.94.0/24 Signature Algorithm: sha256WithRSAEncryption 40:bb:85:7c:60:e0:ed:bb:bc:cd:cc:1e:19:fa:3f:be:6c:a3: c3:be:41:01:71:54:67:f2:fc:1d:ce:e7:cb:dc:ef:eb:b4:bd: 2f:e2:c2:27:dd:3f:e9:90:3b:9a:ac:e8:77:93:80:d1:f5:33: 3d:ea:1e:81:c4:6c:d4:a9:ac:5f:08:07:12:74:49:a9:76:1c: c4:84:68:d7:3f:b8:e5:1a:86:56:e1:be:63:9d:93:8f:98:3f: 82:19:63:60:12:aa:12:27:fa:38:c1:bd:52:18:9e:78:b1:da: ff:67:d4:48:a2:05:2c:68:2b:cd:61:64:4d:5f:80:56:73:34: 3e:3d:1a:8f:06:30:40:83:6a:c0:15:3d:09:bb:a3:43:d8:81: fb:72:3d:d9:36:d5:07:db:f9:9b:37:3d:da:53:ec:70:47:0a: 73:05:58:f1:36:5e:f9:20:2e:26:08:8a:e9:24:7c:d1:3f:b0: 86:6e:c4:6b:f0:e4:4a:b7:3d:3d:06:22:ee:b1:c2:28:51:7a: 22:14:6f:f5:57:5b:4e:fb:31:42:b9:07:9b:56:1e:e9:34:60: cd:c9:59:40:79:67:78:d9:de:5d:0b:e4:dc:30:0e:bc:5f:eb: b8:3c:fb:0e:dc:96:6b:e4:45:1a:3b:14:3e:36:a6:73:5e:72: 0c:81:d0:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZupABgBU4joJnmLULpSSFVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2 ZjVlM2QwHhcNMjYwMTEwMTc0MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDAwNDVlMjYwOWFkYzQ1YmM4NjIxOTkxNDAwYWZhM2I1NWUwMDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eluGDutZoaKux2F5Zuvxbykj22A tQhmPisNtdv9o7K+2+/O/Bdm236cRdWCxGyePMbyBOiXM9G2MOn/TycfdyFxzE3a aWB9vQ67zyJll1h9VAZwAxB53raVpWJX0hITtpvxVecVCj1JcvWXsL/PwsFUDB7e 01Pdc5r6Ehu/o+ZXCnJpA6tTkaNMR2ablxMO1IWUavVDndSZ/9XE3J+dcBP7sJnD 1fj61EejXvzNcA35mEE4utJplfFhdWrST8RUcjbqDHnBkUWMa9dhpj2sFY0UkwMS I6amia2DowGXtE5kkoawYAws+AhcSF5syZ+mg49+pIU2I47Nont5+H2l0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD0AReJgmtxFvIYhmRQAr6O1XgAdMB8GA1UdIwQY MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt YzUxOTUxNjJlM2JlLzEvUFFCRjRtQ2EzRVc4aGlHWkZBQ3ZvN1ZlQUIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYFeMA0G CSqGSIb3DQEBCwUAA4IBAQBAu4V8YODtu7zNzB4Z+j++bKPDvkEBcVRn8vwdzufL 3O/rtL0v4sIn3T/pkDuarOh3k4DR9TM96h6BxGzUqaxfCAcSdEmpdhzEhGjXP7jl GoZW4b5jnZOPmD+CGWNgEqoSJ/o4wb1SGJ54sdr/Z9RIogUsaCvNYWRNX4BWczQ+ PRqPBjBAg2rAFT0Ju6ND2IH7cj3ZNtUH2/mbNz3aU+xwRwpzBVjxNl75IC4mCIrp JHzRP7CGbsRr8ORKtz09BiLuscIoUXoiFG/1V1tO+zFCuQebVh7pNGDNyVlAeWd4 2d5dC+TcMA68X+u4PPsO3JZr5EUaOxQ+NqZzXnIMgdCT -----END CERTIFICATE-----Generated at Mon Jan 26 21:16:58 2026 by rpki-client