This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/qrNedstwu-9btv-AnuWOd6j8Mns.roa File: qrNedstwu-9btv-AnuWOd6j8Mns.roa (raw, json) Hash identifier: lwTnb4E9IqtnHkWGkqB1+YJE5eYkARZVgIhD3HGojr0= Subject key identifier: AA:B3:5E:76:CB:70:BB:EF:5B:B6:FF:80:9E:E5:8E:77:A8:FC:32:7B Certificate issuer: /CN=323e300a7b63ad4fefbae671f51abc24f1128719 Certificate serial: 019B7F1600B11228150AAE3BF2E52BAA8EF5 Authority key identifier: 32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/qrNedstwu-9btv-AnuWOd6j8Mns.roa Signing time: Fri 02 Jan 2026 14:21:46 +0000 ROA not before: Fri 02 Jan 2026 14:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208418 IP address blocks: 45.81.52.0/22 maxlen: 22 45.81.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:00:b1:12:28:15:0a:ae:3b:f2:e5:2b:aa:8e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=323e300a7b63ad4fefbae671f51abc24f1128719 Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aab35e76cb70bbef5bb6ff809ee58e77a8fc327b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:b3:2c:ac:70:05:02:c4:d0:f7:84:9a:df: 92:6e:48:55:32:82:51:e4:de:22:f1:a0:a1:65:33: 6b:47:17:01:27:6c:75:d8:7b:ec:e7:b1:57:9b:06: 47:1d:bb:91:f0:ca:e6:97:38:1d:bc:ca:99:bb:05: 1f:e6:9f:a4:1c:39:a5:d0:e9:14:8b:72:a1:98:de: e9:05:71:dd:dc:be:c4:7d:b5:86:42:7b:79:44:03: eb:b5:b6:f5:d6:b8:e0:57:9c:a9:6f:1c:06:a6:c8: 0d:0f:ba:ca:31:be:d0:dd:59:51:6c:a4:b5:d3:cd: 75:46:bb:45:11:3a:d4:10:6f:dd:d1:d6:f8:31:26: ff:6f:38:b2:3a:93:02:41:9b:96:65:2a:d3:bd:28: 67:88:8c:29:80:31:35:53:86:ea:e7:c7:f5:f8:8e: 01:f4:05:80:6c:a1:f3:1c:dd:60:f2:36:0e:2e:8c: cc:4d:90:77:7b:7c:84:0c:73:80:9b:a6:e8:a4:7f: f9:12:ca:a9:ac:4d:8f:2f:54:da:ba:41:7e:6f:8c: f6:50:87:44:5b:f4:6d:f0:a5:b9:2e:7f:9c:11:ab: 0f:d3:34:06:84:78:f7:28:8b:4a:4f:82:62:c3:69: cc:0e:9f:17:54:75:41:ab:57:c0:2b:e9:2a:30:45: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B3:5E:76:CB:70:BB:EF:5B:B6:FF:80:9E:E5:8E:77:A8:FC:32:7B X509v3 Authority Key Identifier: keyid:32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/qrNedstwu-9btv-AnuWOd6j8Mns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.52.0/22 Signature Algorithm: sha256WithRSAEncryption 42:ff:cb:36:6a:28:85:79:93:7e:97:2e:fc:3f:81:e4:30:e8: a3:65:04:af:67:01:8e:86:e4:c1:48:ba:67:1a:5e:2b:23:b9: 5a:38:e1:85:95:c5:a6:2c:1b:89:2e:e4:a7:4b:91:ff:21:47: 5c:4c:36:28:aa:e5:19:80:83:e3:9c:23:c5:ac:d9:b3:ad:97: 57:2f:04:1d:f9:ac:7a:df:ca:b8:0e:9a:68:d6:e9:ea:ed:84: b0:02:27:c4:0b:af:cc:a1:cf:a4:98:44:ce:48:65:0c:b3:fc: 7e:ee:b0:1e:1b:60:ed:21:2e:8c:f6:f9:65:9e:ac:cb:06:e1: 73:39:76:5e:00:8a:46:51:0f:5a:ae:5f:4c:14:30:61:08:71: 82:78:d2:31:e8:b8:f0:3a:28:3d:79:d7:5d:91:6b:80:64:28: 0e:be:c2:66:22:f2:9b:25:78:d1:58:ae:6b:6b:8c:d9:24:76: e3:1f:8d:b1:9c:5a:f0:9b:21:07:b4:e8:e7:e2:91:89:cc:c5: bb:ef:da:37:ca:f2:73:1a:35:80:19:a9:15:b5:04:a4:5e:f3: bb:6a:a5:89:e9:56:26:4f:09:65:30:e6:95:4c:8c:84:27:bd: ba:10:81:1d:f4:4a:f8:27:dc:a0:8b:7f:aa:71:8e:e6:8a:be: b4:d2:2e:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FgCxEigVCq478uUrqo71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyM2UzMDBhN2I2M2FkNGZlZmJhZTY3MWY1MWFiYzI0ZjEx Mjg3MTkwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWIzNWU3NmNiNzBiYmVmNWJiNmZmODA5ZWU1OGU3N2E4ZmMzMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/WzLKxwBQLE0PeEmt+SbkhVMoJR 5N4i8aChZTNrRxcBJ2x12Hvs57FXmwZHHbuR8MrmlzgdvMqZuwUf5p+kHDml0OkU i3KhmN7pBXHd3L7EfbWGQnt5RAPrtbb11rjgV5ypbxwGpsgND7rKMb7Q3VlRbKS1 0811RrtFETrUEG/d0db4MSb/bziyOpMCQZuWZSrTvShniIwpgDE1U4bq58f1+I4B 9AWAbKHzHN1g8jYOLozMTZB3e3yEDHOAm6bopH/5EsqprE2PL1TaukF+b4z2UIdE W/Rt8KW5Ln+cEasP0zQGhHj3KItKT4Jiw2nMDp8XVHVBq1fAK+kqMEVykwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKqzXnbLcLvvW7b/gJ7ljneo/DJ7MB8GA1UdIwQY MBaAFDI+MAp7Y61P77rmcfUavCTxEocZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWo0d0NudGpyVV92dXVaeDlScThKUEVTaHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84YWI5NzYtZTUzYS00YzQzLWE4ZTgt MjAxNGZlMGExNjExLzEvcXJOZWRzdHd1LTlidHYtQW51V09kNmo4TW5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC84YWI5NzYtZTUzYS00YzQzLWE4ZTgtMjAxNGZlMGExNjEx LzEvTWo0d0NudGpyVV92dXVaeDlScThKUEVTaHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVE0MA0G CSqGSIb3DQEBCwUAA4IBAQBC/8s2aiiFeZN+ly78P4HkMOijZQSvZwGOhuTBSLpn Gl4rI7laOOGFlcWmLBuJLuSnS5H/IUdcTDYoquUZgIPjnCPFrNmzrZdXLwQd+ax6 38q4Dppo1unq7YSwAifEC6/Moc+kmETOSGUMs/x+7rAeG2DtIS6M9vllnqzLBuFz OXZeAIpGUQ9arl9MFDBhCHGCeNIx6LjwOig9edddkWuAZCgOvsJmIvKbJXjRWK5r a4zZJHbjH42xnFrwmyEHtOjn4pGJzMW779o3yvJzGjWAGakVtQSkXvO7aqWJ6VYm TwllMOaVTIyEJ726EIEd9Er4J9ygi3+qcY7mir600i7A -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:31 2026 by rpki-client