This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/QAWM0Lol009j6uKq6lsWaoRBKH0.roa File: QAWM0Lol009j6uKq6lsWaoRBKH0.roa (raw, json) Hash identifier: lK/TjxV7zjq43eORaaonfTSL2oVI9tSkgfqFQO6a0ug= Subject key identifier: 40:05:8C:D0:BA:25:D3:4F:63:EA:E2:AA:EA:5B:16:6A:84:41:28:7D Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e Certificate serial: 019B7EA72D58A0AEB1E0A11B139148FBCE59 Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/QAWM0Lol009j6uKq6lsWaoRBKH0.roa Signing time: Fri 02 Jan 2026 12:20:43 +0000 ROA not before: Fri 02 Jan 2026 12:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15967 IP address blocks: 45.141.32.0/22 maxlen: 22 45.141.32.0/24 maxlen: 24 45.141.33.0/24 maxlen: 24 45.141.34.0/24 maxlen: 24 45.141.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2d:58:a0:ae:b1:e0:a1:1b:13:91:48:fb:ce:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40058cd0ba25d34f63eae2aaea5b166a8441287d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:a5:fc:ff:32:bf:8b:48:92:68:f5:8b:80: e0:e6:85:a1:5f:1b:93:e9:21:dd:d4:c9:ad:be:34: 7f:b2:f8:f0:60:12:ef:55:8c:11:ed:bf:d0:89:54: b3:82:00:6d:a2:0a:cd:8e:a4:58:95:78:74:d3:bc: 9e:63:4b:30:b0:48:1a:a4:e3:ea:68:5d:e6:5a:4c: 77:ac:c7:28:ab:06:e1:f9:07:d5:a1:0e:d7:17:7f: af:ce:d1:79:98:ee:6f:70:1e:06:76:33:21:15:fc: 6a:46:d2:4b:de:87:3e:8d:04:de:53:29:da:6e:6f: 46:17:00:6a:29:69:1c:b8:9d:8a:fd:a4:e2:7d:1b: 19:b5:15:89:ca:92:b2:ba:81:a1:4c:df:15:aa:9d: 12:d9:4a:1d:cf:83:81:23:aa:da:86:66:c3:8d:8b: 28:22:65:b7:60:0f:00:5c:39:2c:5c:70:7c:94:40: 79:3d:29:df:a7:6a:49:eb:6c:2d:66:d9:16:ea:1e: 45:c0:33:5c:fa:f0:67:c9:7b:99:02:59:18:0a:dc: 05:8e:15:2b:92:4b:76:27:c7:39:c2:ba:70:eb:14: e1:35:56:22:ac:a4:b1:02:0e:c8:73:25:8b:b3:bf: 41:7a:76:1d:bf:e1:4d:7a:25:33:d4:56:a9:fd:d0: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:05:8C:D0:BA:25:D3:4F:63:EA:E2:AA:EA:5B:16:6A:84:41:28:7D X509v3 Authority Key Identifier: keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/QAWM0Lol009j6uKq6lsWaoRBKH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.32.0/22 Signature Algorithm: sha256WithRSAEncryption 29:4f:66:94:0f:36:47:c4:10:d5:d2:6f:63:08:c0:a1:94:28: c4:32:e3:9c:3b:fd:1c:50:0c:d3:b4:3c:99:26:fd:a7:42:21: d9:2b:c6:d6:4d:f0:eb:25:2d:22:3f:fd:34:31:e0:04:4a:76: ce:3e:bc:39:d6:49:bc:ac:cc:4d:21:9c:14:f6:c2:04:50:92: a6:21:ab:36:ec:80:98:29:0f:e6:08:31:52:fe:9c:ef:e3:e7: cf:fa:f3:81:25:14:3f:92:f9:1d:da:23:4a:fe:f5:7d:37:09: 6b:7b:1c:95:24:c5:b1:c9:d7:29:4d:6c:90:73:c6:83:5d:0e: 3f:e7:09:cb:93:9d:9a:02:30:b6:06:10:0d:06:f3:93:42:d6: 98:58:cb:bd:a9:b3:10:37:f4:42:05:dd:00:03:5a:21:df:aa: d0:2a:c0:02:a0:05:06:a4:d1:43:bd:f6:e3:aa:ad:ae:d7:8b: 0e:34:15:7b:34:76:59:eb:bc:d5:db:18:09:91:55:4a:de:c0: 39:1a:fd:f2:11:1b:f0:46:43:10:92:20:85:01:dd:fc:a9:9c: 59:00:bf:2d:7a:03:05:9d:25:af:b9:8f:37:bb:6b:5c:23:be: 9d:2c:1a:55:d1:b2:37:ad:e8:e4:71:8f:d0:a3:21:43:54:6a: 30:b2:93:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+py1YoK6x4KEbE5FI+85ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYjdiMDAxOWUxOWYxMTJmNGQyYmNmZDZlYTEyZDkwODFm YzU4N2UwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDA1OGNkMGJhMjVkMzRmNjNlYWUyYWFlYTViMTY2YTg0NDEyODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Gl/P8yv4tIkmj1i4Dg5oWhXxuT 6SHd1MmtvjR/svjwYBLvVYwR7b/QiVSzggBtogrNjqRYlXh007yeY0swsEgapOPq aF3mWkx3rMcoqwbh+QfVoQ7XF3+vztF5mO5vcB4GdjMhFfxqRtJL3oc+jQTeUyna bm9GFwBqKWkcuJ2K/aTifRsZtRWJypKyuoGhTN8Vqp0S2Uodz4OBI6rahmbDjYso ImW3YA8AXDksXHB8lEB5PSnfp2pJ62wtZtkW6h5FwDNc+vBnyXuZAlkYCtwFjhUr kkt2J8c5wrpw6xThNVYirKSxAg7IcyWLs79BenYdv+FNeiUz1Fap/dBsfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEAFjNC6JdNPY+riqupbFmqEQSh9MB8GA1UdIwQY MBaAFN23sAGeGfES9NK8/W6hLZCB/Fh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lZmEzZjEtNzY3MS00Y2UzLTlmZTEt YTg2ZGY5ODNhNzRjLzEvUUFXTTBMb2wwMDlqNnVLcTZsc1dhb1JCS0gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lZmEzZjEtNzY3MS00Y2UzLTlmZTEtYTg2ZGY5ODNhNzRj LzEvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY0gMA0G CSqGSIb3DQEBCwUAA4IBAQApT2aUDzZHxBDV0m9jCMChlCjEMuOcO/0cUAzTtDyZ Jv2nQiHZK8bWTfDrJS0iP/00MeAESnbOPrw51km8rMxNIZwU9sIEUJKmIas27ICY KQ/mCDFS/pzv4+fP+vOBJRQ/kvkd2iNK/vV9NwlrexyVJMWxydcpTWyQc8aDXQ4/ 5wnLk52aAjC2BhANBvOTQtaYWMu9qbMQN/RCBd0AA1oh36rQKsACoAUGpNFDvfbj qq2u14sONBV7NHZZ67zV2xgJkVVK3sA5Gv3yERvwRkMQkiCFAd38qZxZAL8tegMF nSWvuY83u2tcI76dLBpV0bI3rejkcY/QoyFDVGowspO7 -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:09 2026 by rpki-client