This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qHXbtEQJnS1u4ZJYOk3vRxyGxes.roa File: qHXbtEQJnS1u4ZJYOk3vRxyGxes.roa (raw, json) Hash identifier: UilVv6uNilTrH9/YgruFJk9NXC6XHbgjFvP6FEMEv90= Subject key identifier: A8:75:DB:B4:44:09:9D:2D:6E:E1:92:58:3A:4D:EF:47:1C:86:C5:EB Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1D5CAF4DC95360D9AB3E830AE71E0 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qHXbtEQJnS1u4ZJYOk3vRxyGxes.roa Signing time: Fri 02 Jan 2026 18:21:53 +0000 ROA not before: Fri 02 Jan 2026 18:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399989 IP address blocks: 45.129.127.0/24 maxlen: 24 93.190.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d5:ca:f4:dc:95:36:0d:9a:b3:e8:30:ae:71:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a875dbb444099d2d6ee192583a4def471c86c5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:12:12:b5:34:75:b9:db:7a:f9:84:59:71:38: ea:cc:0e:31:7f:e8:1d:f5:6c:54:d8:f6:b6:57:2b: 4e:22:56:66:61:4b:12:75:e0:ab:0c:bd:dd:fa:3f: b6:63:70:8d:e8:db:fe:bd:28:49:c6:11:cd:97:f1: 95:a1:f0:c7:b3:34:cd:7d:e4:56:41:af:03:50:a3: 50:47:36:60:62:af:e9:99:6d:0f:7e:b7:bb:7a:9a: 38:26:b1:5b:d5:db:80:69:fa:2b:4c:48:65:ac:92: d3:9f:31:7b:c9:d0:24:4b:20:e1:d3:ff:ad:1c:55: 18:59:fc:77:e8:c8:2c:f6:42:e9:73:be:8b:59:b8: 97:b0:19:62:c9:4c:c3:1b:d1:0c:38:a1:2c:09:78: 23:77:64:74:9e:55:ff:b3:ec:9c:56:88:fe:8f:a4: 92:1e:18:fb:8b:4f:b8:7b:8c:eb:ad:2a:8b:6b:55: 66:7f:79:8b:3d:b3:23:bc:88:30:2b:02:df:fb:96: 43:8b:0b:f6:45:0e:a9:b6:43:92:e6:a9:50:0a:11: cc:36:aa:22:9c:4c:e4:6a:fb:28:a9:60:42:a9:20: 8d:e4:38:4c:f7:42:92:ee:98:d7:41:fe:25:dd:40: 97:90:6f:78:7e:3e:ff:7a:93:1b:e8:67:0e:c4:83: 4f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:75:DB:B4:44:09:9D:2D:6E:E1:92:58:3A:4D:EF:47:1C:86:C5:EB X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qHXbtEQJnS1u4ZJYOk3vRxyGxes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.127.0/24 93.190.246.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:04:4e:16:4c:56:fd:49:4a:b4:c9:d1:83:2f:48:be:90:f3: 85:91:30:81:61:20:f7:ad:c2:d6:93:16:47:12:41:7c:c4:9f: 5d:22:c4:86:d8:25:40:7d:be:83:1b:3d:49:bb:44:10:30:c6: a1:35:54:70:3f:0b:7f:95:f1:ae:61:1d:50:a9:97:e8:8b:bb: 53:f5:90:06:ea:1e:bd:39:11:c2:ac:c8:41:fd:8b:8b:28:8a: da:80:cf:44:d5:c6:0d:27:39:2c:3c:4f:aa:2e:66:89:c8:7c: bf:5c:d2:5b:cc:88:52:71:e4:3d:6c:fd:2a:6a:fa:f8:a2:8d: 02:80:dc:32:2d:a5:f0:30:90:f6:37:59:fa:f9:19:18:52:e7: 1d:e3:ea:bc:9d:a9:5a:61:ad:df:5d:6b:aa:8f:2e:a8:7f:5d: 5f:48:24:57:0c:16:cb:43:d6:d6:7f:e1:f1:7f:6e:4f:a5:4a: 8d:e8:8e:77:cf:73:32:b0:dd:e5:1e:78:19:7f:2a:32:81:f0: 54:fb:61:49:11:e3:88:cb:9f:81:98:b0:8b:14:22:f9:f3:8e: a0:cb:c0:73:cf:70:4e:97:b4:21:aa:9f:77:40:77:45:74:ef: 37:43:aa:70:87:a5:6e:29:58:b8:92:ec:b8:a2:c7:b8:cb:df: 37:89:1b:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8dXK9NyVNg2as+gwrnHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODc1ZGJiNDQ0MDk5ZDJkNmVlMTkyNTgzYTRkZWY0NzFjODZjNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBIStTR1udt6+YRZcTjqzA4xf+gd 9WxU2Pa2VytOIlZmYUsSdeCrDL3d+j+2Y3CN6Nv+vShJxhHNl/GVofDHszTNfeRW Qa8DUKNQRzZgYq/pmW0Pfre7epo4JrFb1duAaforTEhlrJLTnzF7ydAkSyDh0/+t HFUYWfx36Mgs9kLpc76LWbiXsBliyUzDG9EMOKEsCXgjd2R0nlX/s+ycVoj+j6SS Hhj7i0+4e4zrrSqLa1Vmf3mLPbMjvIgwKwLf+5ZDiwv2RQ6ptkOS5qlQChHMNqoi nEzkavsoqWBCqSCN5DhM90KS7pjXQf4l3UCXkG94fj7/epMb6GcOxINP1wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKh127RECZ0tbuGSWDpN70cchsXrMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvcUhYYnRFUUpuUzF1NFpKWU9rM3ZSeHlHeGVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYF/AwQB Xb72MA0GCSqGSIb3DQEBCwUAA4IBAQBqBE4WTFb9SUq0ydGDL0i+kPOFkTCBYSD3 rcLWkxZHEkF8xJ9dIsSG2CVAfb6DGz1Ju0QQMMahNVRwPwt/lfGuYR1QqZfoi7tT 9ZAG6h69ORHCrMhB/YuLKIragM9E1cYNJzksPE+qLmaJyHy/XNJbzIhSceQ9bP0q avr4oo0CgNwyLaXwMJD2N1n6+RkYUucd4+q8nalaYa3fXWuqjy6of11fSCRXDBbL Q9bWf+Hxf25PpUqN6I53z3MysN3lHngZfyoygfBU+2FJEeOIy5+BmLCLFCL5846g y8Bzz3BOl7Qhqp93QHdFdO83Q6pwh6VuKVi4kuy4ose4y983iRvc -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:47 2026 by rpki-client