This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/qQzg1fbUt0e37N5r1mLAOraSxBY.roa File: qQzg1fbUt0e37N5r1mLAOraSxBY.roa (raw, json) Hash identifier: 8IeAzn3PZFb5uClCqgs5/Ha3rorSlMUXeb0ZYKF1ZXs= Subject key identifier: A9:0C:E0:D5:F6:D4:B7:47:B7:EC:DE:6B:D6:62:C0:3A:B6:92:C4:16 Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151 Certificate serial: 019B79ECFB5885F6A5442F8DE3C324560A1B Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/qQzg1fbUt0e37N5r1mLAOraSxBY.roa Signing time: Thu 01 Jan 2026 14:18:52 +0000 ROA not before: Thu 01 Jan 2026 14:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212256 IP address blocks: 45.132.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fb:58:85:f6:a5:44:2f:8d:e3:c3:24:56:0a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151 Validity Not Before: Jan 1 14:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a90ce0d5f6d4b747b7ecde6bd662c03ab692c416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:23:9c:19:33:b0:02:d5:d3:f3:64:f8:27: c4:d0:44:80:96:9f:c7:c1:c8:f0:49:eb:be:52:4c: cd:fe:be:c2:df:f9:fd:ad:29:a2:dd:a1:67:5a:e4: 88:01:53:db:43:93:c3:f7:98:64:bf:07:3d:0f:bd: cc:5c:fa:8a:74:4c:fe:16:4a:a3:84:f4:cf:36:43: bb:95:76:61:36:cb:8a:91:2b:49:ea:c0:48:aa:21: 3b:ac:54:4a:98:59:95:7c:da:30:0f:88:02:36:cf: f7:04:bf:d4:87:bf:55:55:36:fb:a9:2d:10:5b:a2: e0:40:21:a7:8f:1e:7e:b6:22:7d:c5:bc:05:ed:43: 1c:c3:e1:30:c6:84:5e:f1:a9:79:8d:7e:e0:f9:68: f4:b5:69:d3:a5:d0:8a:5b:28:3e:dc:23:7f:82:de: 59:e5:8a:e3:f6:6a:75:bf:2e:b1:0a:31:db:0b:c1: f9:d3:d9:ae:24:ea:e6:d6:e6:37:a8:ef:3c:fe:ee: 4b:59:5f:20:8d:52:04:cc:18:cb:a3:98:b9:af:ab: e1:d6:2b:69:59:6c:56:a8:09:33:9c:85:f5:16:7e: b9:51:08:dc:95:9e:dd:1a:6d:c4:30:f2:c3:62:53: f0:38:0f:5e:2b:1b:21:8f:3e:df:96:49:2b:5f:2e: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0C:E0:D5:F6:D4:B7:47:B7:EC:DE:6B:D6:62:C0:3A:B6:92:C4:16 X509v3 Authority Key Identifier: keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/qQzg1fbUt0e37N5r1mLAOraSxBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.212.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:ea:b5:1a:d9:6d:63:4a:2c:d7:d0:68:0c:f0:33:e7:b0:18: ff:b2:db:38:15:2c:10:5b:87:34:51:37:01:f7:74:81:67:55: c0:ea:f7:c3:7b:b0:34:29:cb:37:e4:57:fb:87:f3:2c:d9:eb: c2:aa:93:e0:fc:1c:9a:eb:89:59:4e:57:b6:39:71:fe:1a:14: d4:86:89:92:a0:66:86:42:a6:ca:d2:fc:45:e2:c7:3f:3c:d1: 9b:33:21:c4:60:d9:f6:82:ab:8a:a9:53:a2:6e:14:d2:6e:b3: 9c:92:4f:13:ed:f9:6d:09:91:f4:fe:13:de:25:c3:80:e1:30: f0:22:ab:4c:1d:20:62:6a:11:b2:55:b3:3c:64:62:68:bc:ba: d3:84:e8:83:28:a1:6b:43:e3:63:cd:14:d3:76:b3:0f:33:f0: ee:1f:a5:8e:60:92:6e:d1:e6:d8:d8:29:62:00:8c:89:f2:a0: fd:58:62:ef:cd:31:54:05:84:d5:64:2a:82:0c:34:52:b3:1b: 40:0c:64:c6:5f:8d:25:f9:67:1a:30:05:bb:b4:b6:f6:22:bb: 9d:53:d7:bd:7b:7c:5d:2b:42:9b:3f:ae:fb:a9:ae:d4:79:ce: 1d:b0:b0:d4:36:f3:92:ed:2f:8b:30:98:d4:44:98:80:23:f1: 80:43:f9:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57PtYhfalRC+N48MkVgobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTA0MjRjNjg4ZmY1MTlmYjllMjA0ZDhmMTU4ODU1MzQ1 NWIxNTEwHhcNMjYwMTAxMTQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTBjZTBkNWY2ZDRiNzQ3YjdlY2RlNmJkNjYyYzAzYWI2OTJjNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8ojnBkzsALV0/Nk+CfE0ESAlp/H wcjwSeu+UkzN/r7C3/n9rSmi3aFnWuSIAVPbQ5PD95hkvwc9D73MXPqKdEz+Fkqj hPTPNkO7lXZhNsuKkStJ6sBIqiE7rFRKmFmVfNowD4gCNs/3BL/Uh79VVTb7qS0Q W6LgQCGnjx5+tiJ9xbwF7UMcw+EwxoRe8al5jX7g+Wj0tWnTpdCKWyg+3CN/gt5Z 5Yrj9mp1vy6xCjHbC8H509muJOrm1uY3qO88/u5LWV8gjVIEzBjLo5i5r6vh1itp WWxWqAkznIX1Fn65UQjclZ7dGm3EMPLDYlPwOA9eKxshjz7flkkrXy5KGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKkM4NX21LdHt+zea9ZiwDq2ksQWMB8GA1UdIwQY MBaAFDSQQkxoj/UZ+54gTY8ViFU0VbFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lZTJkMTAtZWJiMC00MWJhLTk5ODEt M2YwNjgyOWUwZjVjLzEvcVF6ZzFmYlV0MGUzN041cjFtTEFPcmFTeEJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lZTJkMTAtZWJiMC00MWJhLTk5ODEtM2YwNjgyOWUwZjVj LzEvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYTUMA0G CSqGSIb3DQEBCwUAA4IBAQB66rUa2W1jSizX0GgM8DPnsBj/sts4FSwQW4c0UTcB 93SBZ1XA6vfDe7A0Kcs35Ff7h/Ms2evCqpPg/Bya64lZTle2OXH+GhTUhomSoGaG QqbK0vxF4sc/PNGbMyHEYNn2gquKqVOibhTSbrOckk8T7fltCZH0/hPeJcOA4TDw IqtMHSBiahGyVbM8ZGJovLrThOiDKKFrQ+NjzRTTdrMPM/DuH6WOYJJu0ebY2Cli AIyJ8qD9WGLvzTFUBYTVZCqCDDRSsxtADGTGX40l+WcaMAW7tLb2IrudU9e9e3xd K0KbP677qa7Uec4dsLDUNvOS7S+LMJjURJiAI/GAQ/l8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:00:12 2026 by rpki-client