This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/rQLbdriK0jnMdE7JRC1g2epgjUc.roa File: rQLbdriK0jnMdE7JRC1g2epgjUc.roa (raw, json) Hash identifier: YMekmh4KR56RcqgKA//VTvKhVa3RKYniDG03zrRvz/8= Subject key identifier: AD:02:DB:76:B8:8A:D2:39:CC:74:4E:C9:44:2D:60:D9:EA:60:8D:47 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA551E6EDE6115B311D4E2B309482AA Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/rQLbdriK0jnMdE7JRC1g2epgjUc.roa Signing time: Thu 01 Jan 2026 22:19:50 +0000 ROA not before: Thu 01 Jan 2026 22:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56309 IP address blocks: 45.91.133.0/24 maxlen: 24 45.91.134.0/23 maxlen: 24 45.136.252.0/22 maxlen: 22 45.144.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:51:e6:ed:e6:11:5b:31:1d:4e:2b:30:94:82:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad02db76b88ad239cc744ec9442d60d9ea608d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:33:97:00:ad:50:d9:f2:48:d5:ca:a8:f5: 6b:8b:b7:14:47:0f:38:ed:fd:29:fa:16:2e:f2:b4: 9f:53:32:5f:eb:27:fa:a5:33:b6:cb:c9:bd:64:bf: 79:77:7f:6d:40:05:bd:c9:9c:ac:95:62:b8:ea:b3: b3:5a:9a:fc:32:cf:b5:5c:79:78:7e:f9:7b:fb:c9: db:6d:7b:bc:cb:26:ba:5b:d7:2b:50:56:1e:d4:a1: f1:e2:15:a2:8b:d2:1f:b8:2e:b3:cb:f2:4a:ed:85: 12:c7:28:19:d6:38:9e:01:02:e7:20:13:08:5f:bb: 44:e4:fa:65:34:75:87:df:6b:d9:c5:d4:0f:ab:1d: 6d:17:3e:bc:5b:c1:85:d8:74:fc:2a:e7:9f:62:ef: 56:55:4e:2d:06:4b:3c:a0:cb:ab:b7:12:02:82:77: 4a:16:0a:28:06:27:32:03:b7:35:e6:e4:bd:99:7d: ee:a2:be:b9:74:44:ae:0d:2d:78:bb:cc:0a:a3:c0: 6a:bf:70:33:72:4c:83:bc:98:ef:be:65:9c:f4:29: 15:bf:4c:54:25:48:98:1b:9e:94:54:9d:f2:b5:62: 9d:58:31:84:4f:fb:ff:98:03:d1:3f:ec:db:52:bc: cc:a2:60:ec:25:58:0b:c8:85:79:16:41:01:0c:7b: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:02:DB:76:B8:8A:D2:39:CC:74:4E:C9:44:2D:60:D9:EA:60:8D:47 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/rQLbdriK0jnMdE7JRC1g2epgjUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.133.0-45.91.135.255 45.136.252.0/22 45.144.164.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:1e:a1:6f:bb:ad:f6:58:9f:9e:0d:b3:a3:93:51:ef:9a:a5: aa:23:65:25:ec:6b:7d:d1:cc:17:ce:38:30:4a:88:c0:83:8c: b1:50:4f:73:b9:48:c6:a1:42:6d:3f:eb:83:c1:86:e4:9a:cb: 52:30:3e:e6:1f:c9:bd:c9:a3:08:39:2a:9f:c3:21:e6:23:83: 1d:a6:3a:65:a7:47:21:91:53:80:a8:09:88:1e:ca:0e:84:9e: 0c:f9:46:09:51:b5:84:6b:d7:c7:c2:bf:0e:16:b7:8c:18:fc: 87:7f:35:cf:75:7f:f4:10:9e:28:84:58:d5:cd:e2:a9:23:e7: 4b:1e:34:b2:35:7f:87:1c:93:f8:3f:7c:a9:10:4d:57:05:72: f4:22:f9:86:cc:f6:81:9d:dd:b1:5c:87:97:34:6d:a7:8c:a4: 13:dd:e3:c7:41:f0:e4:f3:61:5a:ef:13:ea:e2:4f:ed:3e:d5: d0:68:dc:b6:20:71:05:3d:b5:15:82:00:36:a3:c5:58:0b:7f: c9:41:fa:b4:c1:78:22:ad:35:06:c4:f8:8d:1d:46:b4:b3:cf: bf:a1:93:9e:b8:b8:e9:93:22:c1:e3:3a:5c:6e:fe:5a:1a:d3: d7:b1:a9:5e:8b:09:e4:9e:5a:95:d3:44:ab:08:e5:e0:a1:ae: b3:5b:6c:c7 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7pVHm7eYRWzEdTiswlIKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDAyZGI3NmI4OGFkMjM5Y2M3NDRlYzk0NDJkNjBkOWVhNjA4ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UgzlwCtUNnySNXKqPVri7cURw84 7f0p+hYu8rSfUzJf6yf6pTO2y8m9ZL95d39tQAW9yZyslWK46rOzWpr8Ms+1XHl4 fvl7+8nbbXu8yya6W9crUFYe1KHx4hWii9IfuC6zy/JK7YUSxygZ1jieAQLnIBMI X7tE5PplNHWH32vZxdQPqx1tFz68W8GF2HT8KuefYu9WVU4tBks8oMurtxICgndK FgooBicyA7c15uS9mX3uor65dESuDS14u8wKo8Bqv3AzckyDvJjvvmWc9CkVv0xU JUiYG56UVJ3ytWKdWDGET/v/mAPRP+zbUrzMomDsJVgLyIV5FkEBDHs58QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFK0C23a4itI5zHROyUQtYNnqYI1HMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvclFMYmRyaUswam5NZEU3SlJDMWcyZXBnalVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtW4UD BAMtW4ADBAItiPwDBAItkKQwDQYJKoZIhvcNAQELBQADggEBAJ4eoW+7rfZYn54N s6OTUe+apaojZSXsa33RzBfOODBKiMCDjLFQT3O5SMahQm0/64PBhuSay1IwPuYf yb3Jowg5Kp/DIeYjgx2mOmWnRyGRU4CoCYgeyg6Engz5RglRtYRr18fCvw4Wt4wY /Id/Nc91f/QQniiEWNXN4qkj50seNLI1f4cck/g/fKkQTVcFcvQi+YbM9oGd3bFc h5c0baeMpBPd48dB8OTzYVrvE+riT+0+1dBo3LYgcQU9tRWCADajxVgLf8lB+rTB eCKtNQbE+I0dRrSzz7+hk564uOmTIsHjOlxu/loa09exqV6LCeSeWpXTRKsI5eCh rrNbbMc= -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:13 2026 by rpki-client