This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/cqkPcUlhylPWROpeUvaKpM1IHzI.roa File: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (raw, json) Hash identifier: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o= Subject key identifier: 72:A9:0F:71:49:61:CA:53:D6:44:EA:5E:52:F6:8A:A4:CD:48:1F:32 Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91 Certificate serial: 019B7C11ADE6489B955F004751AEB8B282DF Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/cqkPcUlhylPWROpeUvaKpM1IHzI.roa Signing time: Fri 02 Jan 2026 00:18:11 +0000 ROA not before: Fri 02 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 45.143.224.0/24 maxlen: 24 45.143.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ad:e6:48:9b:95:5f:00:47:51:ae:b8:b2:82:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91 Validity Not Before: Jan 2 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72a90f714961ca53d644ea5e52f68aa4cd481f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:18:28:21:47:17:c4:cf:df:e4:88:df:e7: 8d:be:48:38:f2:a6:31:36:76:2f:2b:cd:b2:b7:ba: 32:54:9e:c0:59:f2:7f:d8:92:21:01:1e:27:5b:89: 18:16:a5:aa:69:4e:b0:27:88:7a:55:0d:c9:38:63: 3c:3e:74:27:0b:96:38:35:b7:83:c6:d9:fe:a6:4f: 1e:2b:df:40:fc:a9:ed:86:e1:0c:89:a2:9b:4c:53: ef:1f:ee:5e:c3:25:fd:94:23:76:08:1c:db:93:de: 6a:04:07:66:c6:14:15:ec:de:b6:b6:62:88:41:6c: 2c:a6:29:60:27:ab:78:1d:84:73:8f:91:06:e6:20: 05:b0:09:1f:38:0c:58:29:7b:ab:84:9a:62:0d:34: eb:87:e5:a4:19:cc:f6:cf:6d:e8:8a:14:01:c7:f1: d6:1a:33:d9:60:03:a3:a7:0f:16:d6:b4:f0:e9:69: d5:a9:09:94:7a:ce:70:5f:22:32:4a:96:65:d1:a3: 54:d2:c0:7d:9c:55:18:ca:59:dc:fc:29:58:09:83: 97:85:a9:1d:bb:8b:9a:5e:be:29:a3:ce:e9:9e:0f: d9:5e:6e:3d:63:ac:66:bc:3e:cc:1b:46:bb:dd:70: 6d:b2:0b:1e:e4:04:42:b1:fc:75:2c:b5:18:7e:80: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A9:0F:71:49:61:CA:53:D6:44:EA:5E:52:F6:8A:A4:CD:48:1F:32 X509v3 Authority Key Identifier: keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/cqkPcUlhylPWROpeUvaKpM1IHzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.224.0/23 Signature Algorithm: sha256WithRSAEncryption 42:6d:98:71:af:7e:b1:99:f7:77:66:bd:7f:6b:14:04:d7:64: d2:93:cf:dc:a1:74:29:50:51:1b:ba:a7:4c:1f:58:46:ab:00: 13:2f:c1:6c:f3:6c:51:bb:e8:e1:bd:23:ea:2b:f2:70:8b:79: 9b:0c:d5:bf:37:74:6e:54:64:cc:16:18:d2:42:df:2f:5a:0e: f7:c7:e5:3d:ef:df:d5:31:47:7e:4f:4f:74:49:a2:39:1b:f4: 4c:42:3e:89:77:13:e4:32:75:1e:d2:91:94:37:6f:50:46:2e: 88:29:39:d9:20:09:80:a4:21:ed:a0:57:d8:8d:2a:d3:93:d6: 59:59:43:c1:21:11:ae:ba:32:ba:3a:ca:00:34:8c:cd:04:b7: 94:fe:95:6e:8a:b5:92:b3:2d:b0:4c:e9:88:e0:d1:28:38:bd: 27:c1:d5:00:e5:e2:98:08:fa:6e:a4:61:77:40:78:0b:79:c7: aa:ce:1d:f3:22:82:b4:36:0c:18:7a:0c:9e:af:46:3d:1a:e8: 9c:70:27:82:bc:e3:70:d8:b5:52:47:a0:ab:78:60:7b:9f:26: 01:fe:bb:9d:03:6f:21:af:b2:fe:09:64:69:6c:82:29:53:30: d4:c4:33:41:61:6f:60:12:6d:ac:86:08:ff:92:bf:34:19:d4: 46:3a:77:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ea3mSJuVXwBHUa64soLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4M2YyZTkyYWQ1OWM3MGM4Y2RjMjhiMjgwMjllMjI5NzA1 YzZjOTEwHhcNMjYwMTAyMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmE5MGY3MTQ5NjFjYTUzZDY0NGVhNWU1MmY2OGFhNGNkNDgxZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqsYKCFHF8TP3+SI3+eNvkg48qYx NnYvK82yt7oyVJ7AWfJ/2JIhAR4nW4kYFqWqaU6wJ4h6VQ3JOGM8PnQnC5Y4NbeD xtn+pk8eK99A/KnthuEMiaKbTFPvH+5ewyX9lCN2CBzbk95qBAdmxhQV7N62tmKI QWwspilgJ6t4HYRzj5EG5iAFsAkfOAxYKXurhJpiDTTrh+WkGcz2z23oihQBx/HW GjPZYAOjpw8W1rTw6WnVqQmUes5wXyIySpZl0aNU0sB9nFUYylnc/ClYCYOXhakd u4uaXr4po87png/ZXm49Y6xmvD7MG0a73XBtsgse5ARCsfx1LLUYfoBnAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKpD3FJYcpT1kTqXlL2iqTNSB8yMB8GA1UdIwQY MBaAFHg/LpKtWccMjNwosoAp4ilwXGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQt ZTlhZjU2NmYyYzE0LzEvY3FrUGNVbGh5bFBXUk9wZVV2YUtwTTFJSHpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQtZTlhZjU2NmYyYzE0 LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLY/gMA0G CSqGSIb3DQEBCwUAA4IBAQBCbZhxr36xmfd3Zr1/axQE12TSk8/coXQpUFEbuqdM H1hGqwATL8Fs82xRu+jhvSPqK/Jwi3mbDNW/N3RuVGTMFhjSQt8vWg73x+U979/V MUd+T090SaI5G/RMQj6JdxPkMnUe0pGUN29QRi6IKTnZIAmApCHtoFfYjSrTk9ZZ WUPBIRGuujK6OsoANIzNBLeU/pVuirWSsy2wTOmI4NEoOL0nwdUA5eKYCPpupGF3 QHgLeceqzh3zIoK0NgwYegyer0Y9GuiccCeCvONw2LVSR6CreGB7nyYB/rudA28h r7L+CWRpbIIpUzDUxDNBYW9gEm2shgj/kr80GdRGOnfF -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:48 2026 by rpki-client