This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QBU_zqteu1URMJSh_d31gK7bs6w.roa File: QBU_zqteu1URMJSh_d31gK7bs6w.roa (raw, json) Hash identifier: NCcemEt2xcZZjrrL0dnu0wmQLb+DEQ+L+VfQ6W7F1gE= Subject key identifier: 40:15:3F:CE:AB:5E:BB:55:11:30:94:A1:FD:DD:F5:80:AE:DB:B3:AC Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8497FC68C28875A9841F22F1D0F401 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QBU_zqteu1URMJSh_d31gK7bs6w.roa Signing time: Fri 02 Jan 2026 16:22:34 +0000 ROA not before: Fri 02 Jan 2026 16:22:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205463 IP address blocks: 31.58.236.0/24 maxlen: 24 31.58.244.0/24 maxlen: 24 31.58.245.0/24 maxlen: 24 31.58.247.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:97:fc:68:c2:88:75:a9:84:1f:22:f1:d0:f4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40153fceab5ebb55113094a1fdddf580aedbb3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:2f:0e:cb:e3:5f:2a:bc:5d:14:26:ae:25: 8a:0f:cb:31:67:dc:21:36:ef:e6:39:e6:4c:d6:0e: ae:43:c8:be:89:ba:9d:e7:6d:06:b5:fa:d0:d2:7c: df:61:93:10:22:5f:1f:f7:27:dd:1a:3a:d6:91:19: 53:69:16:9e:0e:f4:e4:36:13:e4:51:9a:89:c9:99: ad:84:ef:15:e2:da:09:94:72:f6:91:a9:bb:aa:dd: 87:a8:99:84:16:0e:b7:be:23:07:0d:8a:14:08:ba: df:3f:a9:e8:4c:93:00:a3:22:57:4f:0f:c0:ed:3c: c9:18:93:64:16:aa:49:18:60:64:97:2f:b8:d1:d3: 50:6d:13:32:6b:9a:c2:d9:df:b6:b3:04:33:22:5c: 06:7e:89:3e:ef:1f:04:b0:0f:6c:13:71:dc:c2:93: 20:e9:d4:88:54:6d:69:fc:f3:25:fb:c2:9a:45:3e: a9:4a:37:3f:a5:03:35:64:7a:52:63:78:54:1e:d6: 2d:e3:c8:21:eb:10:01:79:07:15:1f:81:15:0d:af: 66:e8:1a:64:a9:31:9b:68:9c:57:01:ca:cc:61:1d: e8:ef:b5:06:72:cb:68:a4:d8:59:e4:81:50:70:6d: 85:20:a5:7e:a7:e6:25:62:b5:5a:7f:78:0b:04:33: 4c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:15:3F:CE:AB:5E:BB:55:11:30:94:A1:FD:DD:F5:80:AE:DB:B3:AC X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QBU_zqteu1URMJSh_d31gK7bs6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.236.0/24 31.58.244.0/23 31.58.247.0/24 31.58.249.0-31.58.251.255 Signature Algorithm: sha256WithRSAEncryption 52:1d:14:35:1b:e9:a2:be:9e:dc:b4:f4:ca:d0:2f:ac:5c:45: da:8a:5e:54:ce:c2:24:8f:21:00:a7:da:4c:1d:03:b3:68:36: 09:e0:f4:39:69:6b:0f:4b:d5:ce:a4:ca:73:3d:87:cc:97:60: 89:48:d6:6b:78:b8:7e:da:38:39:bc:2b:cd:57:e3:36:11:70: df:bf:f2:dc:7c:3a:81:e5:43:83:8f:f5:59:12:44:21:3d:62: d9:35:6a:24:b6:f4:35:b6:10:16:bf:79:42:6b:22:4f:b3:55: ae:04:de:18:33:0c:82:5c:12:58:b9:23:b0:26:69:42:ea:b4: 3a:29:3d:dd:31:af:7c:79:1f:10:ba:c4:76:1f:4b:36:e2:c1: 09:6d:25:8d:f3:34:47:c7:f8:2c:c8:6f:97:28:30:f7:40:75: 63:98:6c:00:e3:04:60:f1:bb:a5:fc:95:01:03:74:42:0a:16: d3:54:3d:e7:5c:e7:c3:d6:3a:9a:9c:c2:7c:ac:34:7f:9f:fe: 3d:d6:92:77:7c:50:d5:84:79:20:49:75:21:8d:03:0f:91:5e: 72:6d:16:af:db:fc:83:27:e7:92:24:58:70:00:5e:4d:61:98: 0c:fc:f3:d0:dd:13:71:c0:f4:3b:c3:37:b3:19:d3:59:31:61: 55:23:9e:58 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/hJf8aMKIdamEHyLx0PQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDE1M2ZjZWFiNWViYjU1MTEzMDk0YTFmZGRkZjU4MGFlZGJiM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXEvDsvjXyq8XRQmriWKD8sxZ9wh Nu/mOeZM1g6uQ8i+ibqd520GtfrQ0nzfYZMQIl8f9yfdGjrWkRlTaRaeDvTkNhPk UZqJyZmthO8V4toJlHL2kam7qt2HqJmEFg63viMHDYoUCLrfP6noTJMAoyJXTw/A 7TzJGJNkFqpJGGBkly+40dNQbRMya5rC2d+2swQzIlwGfok+7x8EsA9sE3HcwpMg 6dSIVG1p/PMl+8KaRT6pSjc/pQM1ZHpSY3hUHtYt48gh6xABeQcVH4EVDa9m6Bpk qTGbaJxXAcrMYR3o77UGcstopNhZ5IFQcG2FIKV+p+YlYrVaf3gLBDNMTQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFEAVP86rXrtVETCUof3d9YCu27OsMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUUJVX3pxdGV1MVVSTUpTaF9kMzFnSzdiczZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAHzrsAwQB Hzr0AwQAHzr3MAwDBAAfOvkDBAIfOvgwDQYJKoZIhvcNAQELBQADggEBAFIdFDUb 6aK+nty09MrQL6xcRdqKXlTOwiSPIQCn2kwdA7NoNgng9Dlpaw9L1c6kynM9h8yX YIlI1mt4uH7aODm8K81X4zYRcN+/8tx8OoHlQ4OP9VkSRCE9Ytk1aiS29DW2EBa/ eUJrIk+zVa4E3hgzDIJcEli5I7AmaULqtDopPd0xr3x5HxC6xHYfSzbiwQltJY3z NEfH+CzIb5coMPdAdWOYbADjBGDxu6X8lQEDdEIKFtNUPedc58PWOpqcwnysNH+f /j3Wknd8UNWEeSBJdSGNAw+RXnJtFq/b/IMn55IkWHAAXk1hmAz889DdE3HA9DvD N7MZ01kxYVUjnlg= -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:22 2026 by rpki-client