This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/qU2Uxsa9OcphCZGNqnBFa2jyqCY.roa File: qU2Uxsa9OcphCZGNqnBFa2jyqCY.roa (raw, json) Hash identifier: aLe2FX6wmJtGZLPPBo86FvVeGPLBBM9MJiBEGdjzEKA= Subject key identifier: A9:4D:94:C6:C6:BD:39:CA:61:09:91:8D:AA:70:45:6B:68:F2:A8:26 Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f Certificate serial: 019B7E374EF19867463001BEEEA155BC8CA9 Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/qU2Uxsa9OcphCZGNqnBFa2jyqCY.roa Signing time: Fri 02 Jan 2026 10:18:32 +0000 ROA not before: Fri 02 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.145.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4e:f1:98:67:46:30:01:be:ee:a1:55:bc:8c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f Validity Not Before: Jan 2 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a94d94c6c6bd39ca6109918daa70456b68f2a826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:93:c1:a5:fc:01:67:ed:64:d9:c3:4f:48: f1:21:d1:ce:a1:42:77:98:3b:33:f9:95:2d:e6:86: ca:98:7c:e2:b5:c4:62:b5:7a:ab:5c:d6:ba:e9:3d: 61:a9:fc:56:62:be:4b:71:28:ac:1f:d2:7b:00:10: 8b:0d:61:d3:32:cc:fb:c8:a0:15:cf:8b:82:37:d8: 3e:53:6a:aa:53:b4:03:23:cf:57:d8:c3:88:9b:ba: 61:0d:47:2d:3e:a6:7c:87:bd:86:6d:ee:86:37:f1: 0f:11:df:37:0c:81:a4:56:79:42:0d:b0:20:6c:34: be:82:63:96:79:8f:25:9d:c7:a4:00:8f:9e:47:47: 07:da:59:cd:d0:ad:9d:80:7a:78:61:94:d7:8d:d3: d7:96:89:d9:51:49:93:f5:07:2b:f0:7f:dd:bc:fa: 19:d6:7e:76:45:b1:9f:70:c2:63:3b:93:83:19:ae: e6:55:0e:90:e8:26:a1:fe:02:88:99:8f:cf:f7:f2: 42:d1:49:61:76:38:59:09:a5:42:ea:08:03:c2:f1: b7:f0:7d:d2:6a:e0:1f:50:c2:fa:66:4e:ba:f7:51: 2c:24:55:f6:92:03:60:29:f8:51:f9:33:03:15:c9: 9b:9e:98:d2:b9:ea:91:0b:cf:f2:30:88:ff:10:7d: 4b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4D:94:C6:C6:BD:39:CA:61:09:91:8D:AA:70:45:6B:68:F2:A8:26 X509v3 Authority Key Identifier: keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/qU2Uxsa9OcphCZGNqnBFa2jyqCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.234.0/23 Signature Algorithm: sha256WithRSAEncryption 31:50:84:a2:5b:4d:df:c7:42:ef:5a:6b:1d:bb:24:2c:3e:2c: 85:39:77:5d:cb:9a:43:d4:e8:47:ef:30:7e:97:f1:8d:43:7f: dc:23:9d:22:41:45:d0:3d:57:d8:81:a6:e1:74:a2:74:d5:6e: ce:5a:f6:bc:d2:f2:38:fe:52:a9:2c:8d:17:c8:9b:58:ce:04: 2b:f1:f5:1b:99:1e:5d:5e:8a:df:8e:52:3e:b0:aa:78:48:42: 93:3f:39:41:85:71:62:65:10:db:18:e9:69:c9:d4:db:83:55: f8:a9:41:6b:5b:ec:54:89:a6:4a:de:7c:94:aa:bf:53:af:76: 7b:5b:aa:48:3f:23:81:19:80:98:cd:aa:03:b2:93:ef:b2:48: dc:aa:65:ba:09:b8:c2:ca:f3:b7:2e:dc:6f:2b:93:e0:e7:0f: 71:73:6a:5c:fe:67:d2:99:1e:14:27:2c:a5:a0:54:6d:8d:d5: 7c:99:d1:9e:84:29:a8:2d:7d:b9:68:b3:a7:47:f0:8a:d2:43: 85:b0:73:28:c2:ca:57:9a:8a:ea:dc:3c:5a:d1:e6:40:12:3d: 15:30:fe:f2:4c:de:33:d2:26:bc:63:be:60:c1:f7:05:61:88: e3:4f:96:ca:54:f9:c1:f2:47:d9:63:08:3c:66:75:82:99:39: 16:4d:31:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N07xmGdGMAG+7qFVvIypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YzY4MDBkNzRiYzQxMDViNDBlNzdlYTA4NWJhMDI2ZGJl ZWMzNWYwHhcNMjYwMTAyMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTRkOTRjNmM2YmQzOWNhNjEwOTkxOGRhYTcwNDU2YjY4ZjJhODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17mTwaX8AWftZNnDT0jxIdHOoUJ3 mDsz+ZUt5obKmHzitcRitXqrXNa66T1hqfxWYr5LcSisH9J7ABCLDWHTMsz7yKAV z4uCN9g+U2qqU7QDI89X2MOIm7phDUctPqZ8h72Gbe6GN/EPEd83DIGkVnlCDbAg bDS+gmOWeY8lncekAI+eR0cH2lnN0K2dgHp4YZTXjdPXlonZUUmT9Qcr8H/dvPoZ 1n52RbGfcMJjO5ODGa7mVQ6Q6Cah/gKImY/P9/JC0UlhdjhZCaVC6ggDwvG38H3S auAfUML6Zk6691EsJFX2kgNgKfhR+TMDFcmbnpjSueqRC8/yMIj/EH1LWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKlNlMbGvTnKYQmRjapwRWto8qgmMB8GA1UdIwQY MBaAFCjGgA10vEEFtA536ghboCbb7sNfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS01hQURYUzhRUVcwRG5mcUNGdWdKdHZ1dzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yNDI5MTEtOTNjMC00NWU3LTkwMTIt NDkzOWJiZmRmYjg2LzEvcVUyVXhzYTlPY3BoQ1pHTnFuQkZhMmp5cUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8yNDI5MTEtOTNjMC00NWU3LTkwMTItNDkzOWJiZmRmYjg2 LzEvS01hQURYUzhRUVcwRG5mcUNGdWdKdHZ1dzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZHqMA0G CSqGSIb3DQEBCwUAA4IBAQAxUISiW03fx0LvWmsduyQsPiyFOXddy5pD1OhH7zB+ l/GNQ3/cI50iQUXQPVfYgabhdKJ01W7OWva80vI4/lKpLI0XyJtYzgQr8fUbmR5d XorfjlI+sKp4SEKTPzlBhXFiZRDbGOlpydTbg1X4qUFrW+xUiaZK3nyUqr9Tr3Z7 W6pIPyOBGYCYzaoDspPvskjcqmW6CbjCyvO3LtxvK5Pg5w9xc2pc/mfSmR4UJyyl oFRtjdV8mdGehCmoLX25aLOnR/CK0kOFsHMowspXmorq3Dxa0eZAEj0VMP7yTN4z 0ia8Y75gwfcFYYjjT5bKVPnB8kfZYwg8ZnWCmTkWTTFU -----END CERTIFICATE-----Generated at Mon Jan 19 14:43:30 2026 by rpki-client