This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/QJhOBBoD1YkchNAMDZQWMaJK0oM.roa File: QJhOBBoD1YkchNAMDZQWMaJK0oM.roa (raw, json) Hash identifier: mVJR0mI/cQZVEGpyMlyefAYNQixaiWUH4CEW0sMy7oM= Subject key identifier: 40:98:4E:04:1A:03:D5:89:1C:84:D0:0C:0D:94:16:31:A2:4A:D2:83 Certificate issuer: /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Certificate serial: 019B783439ABF5E6D6FE3ECCF5ECBD3F1220 Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/QJhOBBoD1YkchNAMDZQWMaJK0oM.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209604 IP address blocks: 46.229.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:39:ab:f5:e6:d6:fe:3e:cc:f5:ec:bd:3f:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40984e041a03d5891c84d00c0d941631a24ad283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:24:42:6a:00:27:50:e6:e9:4d:47:d3:d3: e9:46:27:90:aa:94:61:ee:87:09:43:33:fa:c9:1f: d7:9f:aa:40:f4:a3:a5:9c:8e:a2:0f:8d:53:ff:d2: 73:30:0e:b0:f5:b9:e0:de:f6:a3:9e:17:02:b0:69: ab:cb:d3:76:0c:64:0b:71:f1:b1:27:d0:7f:a1:79: 9c:79:3f:6b:0f:eb:01:ce:0c:e4:f7:ce:2a:8e:29: 89:d1:ed:a7:ce:24:d1:75:82:8a:86:46:12:9d:c1: 94:a7:e5:af:b4:5e:30:de:64:2f:0c:34:99:76:e6: 10:40:42:e2:d0:86:97:5b:f9:d0:31:3d:a4:ce:2b: 22:23:19:a3:64:2a:b8:72:f2:31:ee:27:70:9f:07: 4c:78:a7:da:f1:46:47:3e:e7:1c:f6:7b:24:95:d3: 6c:de:09:ae:e7:a3:2a:01:49:05:f1:74:85:b0:a7: 9c:8c:90:0a:f8:ef:b2:92:50:17:d1:57:d2:c4:e7: 4e:95:ce:47:4a:7f:d9:bd:b7:99:84:c4:1e:5b:c5: d2:58:da:c5:48:dd:d2:4b:a4:b0:70:45:6a:d6:84: cb:c6:a4:ef:06:f2:87:c8:93:ae:de:76:c3:12:a2: 18:44:33:09:95:79:1e:37:36:b5:cc:e5:6d:f0:3f: e6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:98:4E:04:1A:03:D5:89:1C:84:D0:0C:0D:94:16:31:A2:4A:D2:83 X509v3 Authority Key Identifier: keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/QJhOBBoD1YkchNAMDZQWMaJK0oM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.250.0/24 Signature Algorithm: sha256WithRSAEncryption 34:5a:d1:6c:79:e7:c7:e2:3f:08:e6:47:d4:f8:16:c3:9e:66: 3b:71:8b:3d:53:c9:ef:9c:49:db:ae:6a:d9:e2:ab:ab:9c:40: de:67:50:e2:07:25:28:24:3a:4e:3e:38:4d:08:8e:3d:a4:38: f0:0c:59:5a:f3:97:64:06:72:a5:f5:f2:26:d1:52:c8:c0:8c: e8:35:54:09:6d:a7:18:61:e0:09:fd:c4:c1:d7:76:da:cb:be: 10:20:bc:bb:5e:1b:f5:93:b5:ef:52:82:17:92:56:e7:57:b1: 55:53:bb:bb:c5:c9:a4:06:27:3b:0d:21:aa:48:8c:f0:96:34: a1:5f:4b:8a:17:5c:7d:0f:84:6f:e7:70:d9:4b:58:df:fd:a0: 93:0f:88:cb:8b:af:c8:25:ca:16:00:f2:33:be:bf:2c:f6:75: 10:46:95:8a:37:8d:f6:05:b7:0b:99:18:af:0d:f3:14:14:66: 27:19:d3:57:16:c8:5b:25:41:95:c5:29:dd:79:ef:a0:89:56: 25:e1:96:4e:91:d0:c5:9c:78:73:b2:fd:4f:d1:01:0d:88:a4: b0:48:cd:cb:8c:48:20:10:2b:1c:c0:50:ee:31:60:53:39:87: 93:2b:77:22:bd:26:b5:24:fd:9d:7b:84:eb:4a:f1:55:98:77: c2:5e:51:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NDmr9ebW/j7M9ey9PxIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODU2YzMwODJhYjJmYzhkZDFiMzU5YTdiMzk5MTM2ODUz OGI0ZDAwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDk4NGUwNDFhMDNkNTg5MWM4NGQwMGMwZDk0MTYzMWEyNGFkMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGYkQmoAJ1Dm6U1H09PpRieQqpRh 7ocJQzP6yR/Xn6pA9KOlnI6iD41T/9JzMA6w9bng3vajnhcCsGmry9N2DGQLcfGx J9B/oXmceT9rD+sBzgzk984qjimJ0e2nziTRdYKKhkYSncGUp+WvtF4w3mQvDDSZ duYQQELi0IaXW/nQMT2kzisiIxmjZCq4cvIx7idwnwdMeKfa8UZHPucc9nskldNs 3gmu56MqAUkF8XSFsKecjJAK+O+yklAX0VfSxOdOlc5HSn/ZvbeZhMQeW8XSWNrF SN3SS6SwcEVq1oTLxqTvBvKHyJOu3nbDEqIYRDMJlXkeNza1zOVt8D/mAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFECYTgQaA9WJHITQDA2UFjGiStKDMB8GA1UdIwQY MBaAFOGFbDCCqy/I3Rs1mns5kTaFOLTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmIt OGVhYTZiZjQwMzU3LzEvUUpoT0JCb0QxWWtjaE5BTURaUVdNYUpLMG9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmItOGVhYTZiZjQwMzU3 LzEvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuX6MA0G CSqGSIb3DQEBCwUAA4IBAQA0WtFseefH4j8I5kfU+BbDnmY7cYs9U8nvnEnbrmrZ 4qurnEDeZ1DiByUoJDpOPjhNCI49pDjwDFla85dkBnKl9fIm0VLIwIzoNVQJbacY YeAJ/cTB13bay74QILy7Xhv1k7XvUoIXklbnV7FVU7u7xcmkBic7DSGqSIzwljSh X0uKF1x9D4Rv53DZS1jf/aCTD4jLi6/IJcoWAPIzvr8s9nUQRpWKN432BbcLmRiv DfMUFGYnGdNXFshbJUGVxSndee+giVYl4ZZOkdDFnHhzsv1P0QENiKSwSM3LjEgg ECscwFDuMWBTOYeTK3civSa1JP2de4TrSvFVmHfCXlGK -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:48 2026 by rpki-client