This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/QSEA24W-jJh0kwyMga3SDhfm0mU.roa File: QSEA24W-jJh0kwyMga3SDhfm0mU.roa (raw, json) Hash identifier: oB/S9QQ/OX6lPuAGVG5qR2duSEJnIXuFNYHPn1v0/Ps= Subject key identifier: 41:21:00:DB:85:BE:8C:98:74:93:0C:8C:81:AD:D2:0E:17:E6:D2:65 Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f Certificate serial: 019B7E374F2CDFB9A330850DFF3B20A7DD83 Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/QSEA24W-jJh0kwyMga3SDhfm0mU.roa Signing time: Fri 02 Jan 2026 10:18:32 +0000 ROA not before: Fri 02 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4766 IP address blocks: 45.145.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4f:2c:df:b9:a3:30:85:0d:ff:3b:20:a7:dd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f Validity Not Before: Jan 2 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=412100db85be8c9874930c8c81add20e17e6d265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:86:8c:9b:e9:2b:21:b9:6e:4d:49:f6:1e: 43:bd:3a:c2:92:19:17:71:e4:e6:81:b7:fe:92:c3: 40:61:a9:df:39:76:e2:32:ac:58:84:12:39:dd:1d: db:e5:fc:a8:87:a6:68:7e:19:e5:55:eb:92:47:05: 93:8a:e7:f7:d6:59:82:c0:8a:09:eb:10:2b:d1:93: e4:2c:1e:f8:50:33:9a:c9:bc:fe:e0:98:47:a9:a1: f1:d2:a3:82:2f:1a:6f:72:3b:8c:3d:c8:99:71:44: 91:f5:0c:73:98:57:bf:27:15:2b:69:8f:7a:67:73: f5:58:69:1b:a2:b9:a4:33:da:64:1e:84:68:75:48: fb:62:55:65:b9:7a:2e:9f:be:71:a0:c5:d8:17:34: c4:f6:62:82:3c:3c:31:d8:de:ff:83:0c:8a:b1:32: c7:8f:0b:15:94:52:b2:e9:c3:7c:93:d2:9c:0e:1c: df:bd:99:cb:b7:cb:48:bf:c3:9c:66:d0:da:7a:4c: cd:2b:b1:92:ce:32:c8:7b:b4:5b:73:ed:32:ca:45: 61:c1:d4:69:cc:73:82:49:e4:8a:ab:5e:f5:11:aa: e6:f9:cb:22:37:c6:17:a8:b0:19:91:f5:07:89:8e: 3f:09:e4:c7:24:ec:8e:7e:59:fe:2c:e1:c3:fd:91: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:21:00:DB:85:BE:8C:98:74:93:0C:8C:81:AD:D2:0E:17:E6:D2:65 X509v3 Authority Key Identifier: keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/QSEA24W-jJh0kwyMga3SDhfm0mU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.232.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:9b:1b:4c:d6:f1:0b:ba:87:62:d5:81:d6:95:12:5c:93:43: 81:28:0f:61:ac:dd:ed:39:8a:2c:5e:c1:4f:04:13:de:66:48: 24:6f:d3:f7:00:4d:87:42:a7:4c:ae:80:0c:aa:15:58:0c:e4: 79:06:ca:d7:a1:29:cc:3f:cf:8e:19:9b:32:02:3a:18:8f:dd: 02:74:b2:cf:43:0f:cb:e3:83:c9:ef:b0:46:03:c5:d4:e5:db: c0:c4:e2:46:ca:ea:e0:df:0e:16:58:15:54:a0:b0:7b:14:82: 43:93:30:f5:fa:a3:95:8d:e8:43:d5:cd:4d:09:42:1c:a5:65: 2e:ee:b5:48:1a:08:08:e6:7f:06:d3:a3:4d:ca:28:da:2d:92: 46:d6:f1:4b:ba:dc:2f:9d:57:28:75:e8:84:a8:9d:7c:ef:18: 9c:a7:6e:7f:48:0e:c8:6f:ba:60:18:b1:ba:66:2e:64:89:72: a0:af:d2:a3:68:2c:8d:75:50:f4:7f:22:9a:a1:27:72:ef:8d: 56:e9:83:56:93:e1:79:d5:9f:e7:c7:6c:c6:fd:bf:12:3f:d1: 87:d7:5f:6c:1c:3d:08:09:12:d9:69:05:b1:2a:b7:57:cf:25: 41:36:35:00:48:6c:4c:58:3c:8f:5e:b8:42:24:e8:b0:97:48: fd:c8:a6:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N08s37mjMIUN/zsgp92DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YzY4MDBkNzRiYzQxMDViNDBlNzdlYTA4NWJhMDI2ZGJl ZWMzNWYwHhcNMjYwMTAyMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTIxMDBkYjg1YmU4Yzk4NzQ5MzBjOGM4MWFkZDIwZTE3ZTZkMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXiGjJvpKyG5bk1J9h5DvTrCkhkX ceTmgbf+ksNAYanfOXbiMqxYhBI53R3b5fyoh6ZofhnlVeuSRwWTiuf31lmCwIoJ 6xAr0ZPkLB74UDOaybz+4JhHqaHx0qOCLxpvcjuMPciZcUSR9QxzmFe/JxUraY96 Z3P1WGkbormkM9pkHoRodUj7YlVluXoun75xoMXYFzTE9mKCPDwx2N7/gwyKsTLH jwsVlFKy6cN8k9KcDhzfvZnLt8tIv8OcZtDaekzNK7GSzjLIe7Rbc+0yykVhwdRp zHOCSeSKq171Earm+csiN8YXqLAZkfUHiY4/CeTHJOyOfln+LOHD/ZGWrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEEhANuFvoyYdJMMjIGt0g4X5tJlMB8GA1UdIwQY MBaAFCjGgA10vEEFtA536ghboCbb7sNfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS01hQURYUzhRUVcwRG5mcUNGdWdKdHZ1dzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yNDI5MTEtOTNjMC00NWU3LTkwMTIt NDkzOWJiZmRmYjg2LzEvUVNFQTI0Vy1qSmgwa3d5TWdhM1NEaGZtMG1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8yNDI5MTEtOTNjMC00NWU3LTkwMTItNDkzOWJiZmRmYjg2 LzEvS01hQURYUzhRUVcwRG5mcUNGdWdKdHZ1dzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZHoMA0G CSqGSIb3DQEBCwUAA4IBAQBtmxtM1vELuodi1YHWlRJck0OBKA9hrN3tOYosXsFP BBPeZkgkb9P3AE2HQqdMroAMqhVYDOR5BsrXoSnMP8+OGZsyAjoYj90CdLLPQw/L 44PJ77BGA8XU5dvAxOJGyurg3w4WWBVUoLB7FIJDkzD1+qOVjehD1c1NCUIcpWUu 7rVIGggI5n8G06NNyijaLZJG1vFLutwvnVcodeiEqJ187xicp25/SA7Ib7pgGLG6 Zi5kiXKgr9KjaCyNdVD0fyKaoSdy741W6YNWk+F51Z/nx2zG/b8SP9GH119sHD0I CRLZaQWxKrdXzyVBNjUASGxMWDyPXrhCJOiwl0j9yKYg -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:48 2026 by rpki-client