This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QfgYJeUmWc-i1hCJI_8Nw-SKYFE.roa File: QfgYJeUmWc-i1hCJI_8Nw-SKYFE.roa (raw, json) Hash identifier: mT+rK/GLM1raktAc6U7PkS8XWZE63wlto9dXJq1HT3w= Subject key identifier: 41:F8:18:25:E5:26:59:CF:A2:D6:10:89:23:FF:0D:C3:E4:8A:60:51 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D4BE63AC49480B3CCE19F1A89AC03 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QfgYJeUmWc-i1hCJI_8Nw-SKYFE.roa Signing time: Fri 02 Jan 2026 06:20:24 +0000 ROA not before: Fri 02 Jan 2026 06:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197432 IP address blocks: 45.123.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:4b:e6:3a:c4:94:80:b3:cc:e1:9f:1a:89:ac:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41f81825e52659cfa2d6108923ff0dc3e48a6051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:3c:17:5e:fb:9d:8d:7c:fa:5b:95:1f:1b: 14:53:d6:2c:0e:33:23:34:6e:12:20:d7:0c:fd:65: 48:7d:1a:59:0f:26:a3:cb:79:b3:32:a0:d8:b3:6e: 4b:7a:7d:64:14:e6:54:7d:b1:9a:1d:e6:c4:ca:51: ce:4a:01:e3:07:5e:64:3d:c9:50:96:7d:c3:92:d2: 26:c9:00:b6:40:b2:a4:f1:df:30:93:4d:6a:3b:49: a9:6b:08:b8:c8:fe:67:5e:a2:77:30:8f:f7:04:d4: b2:d5:9b:9f:dc:7c:ce:cb:16:4e:c4:6b:f9:ff:b5: 1c:90:d7:42:dc:81:a5:8e:ff:a1:ad:e9:9e:a0:f5: 29:6d:85:f0:18:03:9e:5b:fb:0c:b1:fd:01:c3:a3: ae:5c:8f:c7:ad:4f:d4:16:74:fb:da:97:e6:a3:c3: 0f:de:42:4a:41:54:4f:25:43:5f:e8:5f:3c:b8:f5: e6:60:d1:de:bc:0e:9a:18:44:5b:0f:87:8f:9e:eb: bf:39:bb:00:06:5f:3c:82:c8:2e:df:13:3c:d4:da: ff:bc:b7:ce:35:2d:81:ab:15:bc:8b:fa:24:18:b3: e2:0f:ee:39:d7:06:97:9b:cd:e0:5a:f8:7f:87:96: ee:71:ba:ed:50:36:98:b8:31:00:50:cf:30:7b:2a: dd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F8:18:25:E5:26:59:CF:A2:D6:10:89:23:FF:0D:C3:E4:8A:60:51 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QfgYJeUmWc-i1hCJI_8Nw-SKYFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.40.0/24 Signature Algorithm: sha256WithRSAEncryption 56:0a:3c:98:78:f0:f0:19:6a:a1:3b:ac:a1:dc:ed:53:9e:a6: be:93:65:6b:c0:59:af:5a:c7:a7:e7:3f:ec:b4:65:3d:c9:dc: 70:16:10:9e:b7:34:21:4d:4d:c2:95:a2:46:70:6f:f3:0b:0c: 90:a1:76:1a:36:14:36:d6:c5:66:cf:6e:8a:fd:46:48:bd:09: cf:1c:1a:ae:45:0a:35:f4:3a:38:53:81:38:e4:e3:5b:25:61: b2:5d:03:7b:33:18:31:a7:73:b6:eb:b8:27:93:4a:0b:f1:d9: 1c:a4:54:37:6d:f1:73:92:ef:d4:27:37:81:86:ea:08:64:d1: f7:1e:94:30:73:e2:f3:9f:37:11:e9:7b:7c:89:46:3d:84:43: d4:8d:53:fc:f6:a3:bd:40:ac:ac:6c:33:99:58:7c:b9:30:2f: 5a:a7:07:22:5d:7f:ed:f8:c2:3d:1f:5c:9b:61:f7:10:14:b9: 7b:56:9b:55:b2:2a:3a:5c:73:eb:0b:f5:31:1c:4d:83:17:36: c5:62:d1:1e:81:34:6a:2a:53:fd:73:b1:65:86:a9:b4:24:7c: d5:3b:a4:0d:2c:08:73:28:81:51:cb:69:d2:84:b6:c2:88:bc: a9:85:0b:1d:5d:44:28:f9:7d:d9:08:62:c6:50:60:ad:52:06: 03:71:af:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XUvmOsSUgLPM4Z8aiawDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWY4MTgyNWU1MjY1OWNmYTJkNjEwODkyM2ZmMGRjM2U0OGE2MDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCs8F177nY18+luVHxsUU9YsDjMj NG4SINcM/WVIfRpZDyajy3mzMqDYs25Len1kFOZUfbGaHebEylHOSgHjB15kPclQ ln3DktImyQC2QLKk8d8wk01qO0mpawi4yP5nXqJ3MI/3BNSy1Zuf3HzOyxZOxGv5 /7UckNdC3IGljv+hremeoPUpbYXwGAOeW/sMsf0Bw6OuXI/HrU/UFnT72pfmo8MP 3kJKQVRPJUNf6F88uPXmYNHevA6aGERbD4ePnuu/ObsABl88gsgu3xM81Nr/vLfO NS2BqxW8i/okGLPiD+451waXm83gWvh/h5bucbrtUDaYuDEAUM8weyrdsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEH4GCXlJlnPotYQiSP/DcPkimBRMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvUWZnWUplVW1XYy1pMWhDSklfOE53LVNLWUZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXsoMA0G CSqGSIb3DQEBCwUAA4IBAQBWCjyYePDwGWqhO6yh3O1Tnqa+k2VrwFmvWsen5z/s tGU9ydxwFhCetzQhTU3ClaJGcG/zCwyQoXYaNhQ21sVmz26K/UZIvQnPHBquRQo1 9Do4U4E45ONbJWGyXQN7Mxgxp3O267gnk0oL8dkcpFQ3bfFzku/UJzeBhuoIZNH3 HpQwc+LznzcR6Xt8iUY9hEPUjVP89qO9QKysbDOZWHy5MC9apwciXX/t+MI9H1yb YfcQFLl7VptVsio6XHPrC/UxHE2DFzbFYtEegTRqKlP9c7Flhqm0JHzVO6QNLAhz KIFRy2nShLbCiLyphQsdXUQo+X3ZCGLGUGCtUgYDca9R -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:47 2026 by rpki-client