This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qgT_hxk3M3AoqT_yII7-MSL6kYY.roa File: qgT_hxk3M3AoqT_yII7-MSL6kYY.roa (raw, json) Hash identifier: 8O3lwxnBR+tVc0A3q/CWaQJ43IljLIVM4ta+FComJZ8= Subject key identifier: AA:04:FF:87:19:37:33:70:28:A9:3F:F2:20:8E:FE:31:22:FA:91:86 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB7C74893CA970A16B1EF2DF8456F0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qgT_hxk3M3AoqT_yII7-MSL6kYY.roa Signing time: Fri 02 Jan 2026 08:20:46 +0000 ROA not before: Fri 02 Jan 2026 08:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209604 IP address blocks: 151.242.129.0/24 maxlen: 24 151.243.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:7c:74:89:3c:a9:70:a1:6b:1e:f2:df:84:56:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa04ff871937337028a93ff2208efe3122fa9186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:ba:d0:8a:95:ba:6f:24:ca:2a:02:fe:3f: 7b:a5:9a:46:af:76:73:6f:b6:23:ea:0a:2c:3a:2a: dd:0b:e6:a8:6c:96:ca:21:55:48:dd:a1:61:c8:87: e0:25:0e:d9:9b:36:76:64:c2:59:6a:a8:28:dd:2b: 83:60:ec:fc:a4:85:b8:ca:94:d2:b8:bd:04:a8:9d: 17:53:96:4e:fd:7e:e8:3a:90:67:59:7d:78:ec:e3: a6:05:92:bd:ae:9a:0d:c6:0a:5e:02:0c:0c:6f:20: 40:76:0a:98:b2:a8:f1:72:a6:19:e0:09:ed:00:73: e7:e9:8a:98:59:f6:5d:52:1d:a1:7f:f7:0a:b8:96: bc:00:7e:28:3b:32:8b:1e:74:99:fa:c5:b2:4d:f4: 70:80:a3:5c:97:5e:f0:02:49:60:5f:fb:94:2f:37: 31:85:70:ba:b8:82:ee:1d:9e:90:16:8c:3d:58:06: 52:1b:69:27:44:74:99:f1:5e:d7:f1:68:6d:41:26: 05:53:c9:17:0e:dd:ed:53:02:d6:d7:f6:68:17:a5: b5:93:e7:d8:fc:8e:7d:ee:11:35:84:17:23:25:51: 5f:f3:58:02:22:3c:6e:8f:6c:81:87:11:fc:23:e2: c5:7a:b3:ee:f5:da:40:3f:13:f8:ce:7b:c8:2a:b7: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:04:FF:87:19:37:33:70:28:A9:3F:F2:20:8E:FE:31:22:FA:91:86 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qgT_hxk3M3AoqT_yII7-MSL6kYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.129.0/24 151.243.240.0/24 Signature Algorithm: sha256WithRSAEncryption 42:4c:cd:60:63:bb:94:33:03:20:05:82:1e:57:27:c7:ef:e4: 9b:10:1b:9f:62:9a:7b:45:ab:2f:ec:75:d0:08:17:07:af:70: 2c:3f:27:d9:64:60:24:05:81:7c:e4:0e:d4:fb:80:b1:86:2e: ee:48:9e:9f:8d:ec:37:cd:d1:4c:2c:1c:28:c6:0b:8b:b0:b1: 01:c3:7e:9a:fc:f8:9a:c5:5e:d9:05:38:e7:04:e8:86:23:03: 9e:71:f0:bc:56:03:d2:2b:df:ed:03:75:a9:2f:87:d1:05:75: 16:f7:d7:06:45:ee:e7:d6:d5:81:97:de:22:d5:b8:ab:10:ad: 90:d2:1a:8c:0d:e3:85:b9:87:ee:dd:bd:ce:97:9e:7b:51:43: 1f:e3:c6:4a:ea:42:9b:bc:86:67:0f:6d:6e:4c:3b:e9:03:80: 44:d6:19:d4:db:75:7e:c1:2c:78:21:b5:06:5e:36:96:7f:5b: 14:5d:f5:1b:c8:aa:d4:95:fc:7f:f5:5f:44:53:f1:57:af:56: cc:f4:f5:ad:6a:f1:89:3e:dc:c2:2c:89:08:00:e9:82:20:8d: 24:c9:31:2b:a3:f5:e6:21:c0:5c:ac:67:3b:2d:6f:ee:d5:3b: 47:c9:e7:6b:95:ec:5d:72:86:67:97:87:63:db:f5:86:30:98: b6:18:bf:12 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y3x0iTypcKFrHvLfhFbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTA0ZmY4NzE5MzczMzcwMjhhOTNmZjIyMDhlZmUzMTIyZmE5MTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJO60IqVum8kyioC/j97pZpGr3Zz b7Yj6gosOirdC+aobJbKIVVI3aFhyIfgJQ7ZmzZ2ZMJZaqgo3SuDYOz8pIW4ypTS uL0EqJ0XU5ZO/X7oOpBnWX147OOmBZK9rpoNxgpeAgwMbyBAdgqYsqjxcqYZ4Ant AHPn6YqYWfZdUh2hf/cKuJa8AH4oOzKLHnSZ+sWyTfRwgKNcl17wAklgX/uULzcx hXC6uILuHZ6QFow9WAZSG2knRHSZ8V7X8WhtQSYFU8kXDt3tUwLW1/ZoF6W1k+fY /I597hE1hBcjJVFf81gCIjxuj2yBhxH8I+LFerPu9dpAPxP4znvIKrdxyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKoE/4cZNzNwKKk/8iCO/jEi+pGGMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcWdUX2h4azNNM0FvcVRfeUlJNy1NU0w2a1lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/KBAwQA l/PwMA0GCSqGSIb3DQEBCwUAA4IBAQBCTM1gY7uUMwMgBYIeVyfH7+SbEBufYpp7 Rasv7HXQCBcHr3AsPyfZZGAkBYF85A7U+4Cxhi7uSJ6fjew3zdFMLBwoxguLsLEB w36a/PiaxV7ZBTjnBOiGIwOecfC8VgPSK9/tA3WpL4fRBXUW99cGRe7n1tWBl94i 1birEK2Q0hqMDeOFuYfu3b3Ol557UUMf48ZK6kKbvIZnD21uTDvpA4BE1hnU23V+ wSx4IbUGXjaWf1sUXfUbyKrUlfx/9V9EU/FXr1bM9PWtavGJPtzCLIkIAOmCII0k yTEro/XmIcBcrGc7LW/u1TtHyedrlexdcoZnl4dj2/WGMJi2GL8S -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:53 2026 by rpki-client