This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/QaQXyt1JUOdGAiMPwz_506zawSw.roa File: QaQXyt1JUOdGAiMPwz_506zawSw.roa (raw, json) Hash identifier: E1jcvO//eEWdMES9KtTK7xOBQZ3PG7iMEerQv3LjsUk= Subject key identifier: 41:A4:17:CA:DD:49:50:E7:46:02:23:0F:C3:3F:F9:D3:AC:DA:C1:2C Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781 Certificate serial: 019B7F14C35EE8E776F737770833B13D82B7 Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/QaQXyt1JUOdGAiMPwz_506zawSw.roa Signing time: Fri 02 Jan 2026 14:20:25 +0000 ROA not before: Fri 02 Jan 2026 14:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33814 IP address blocks: 46.235.192.0/21 maxlen: 24 2a03:c200::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c3:5e:e8:e7:76:f7:37:77:08:33:b1:3d:82:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb382815b25161365a91610cbdad71f66286f781 Validity Not Before: Jan 2 14:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41a417cadd4950e74602230fc33ff9d3acdac12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:0d:c2:24:7a:a0:49:e4:28:2a:91:cf:48: ca:fb:17:36:67:30:73:c1:b7:4f:a8:86:b6:fd:84: 48:26:74:34:0d:4a:29:91:cb:87:59:ea:fd:d8:f8: c3:92:f5:76:c5:4f:54:04:e4:77:e3:9a:78:0a:10: 3d:47:ab:4e:64:9f:65:b2:10:d5:3b:4d:98:8e:97: 36:5e:13:44:a1:06:56:c4:74:a8:d4:f8:9b:57:49: e5:e0:b3:96:06:f2:d3:9b:3f:a7:db:35:c4:94:9a: 19:27:f8:93:e0:81:10:dc:1b:42:44:b6:67:3e:62: 39:91:47:d2:ee:52:d2:08:aa:49:e8:a2:08:d0:a9: c8:3a:8f:ab:41:29:5b:be:86:7c:09:49:0e:b4:23: 58:f0:3b:15:f2:a7:8d:36:92:88:0b:07:65:c0:fb: 8b:a6:ed:33:5e:c3:24:8f:23:83:00:ac:a1:ea:f2: c1:16:b2:06:34:80:64:d5:fe:0f:01:72:f6:9a:a3: f7:90:11:d1:ae:33:79:38:c8:61:7b:10:14:c3:c9: 21:58:af:ff:00:03:d9:dc:93:40:2a:c4:eb:a4:41: 0d:b3:00:d6:ca:6d:e1:26:52:b9:d2:a4:ba:65:63: 28:4b:0e:31:d9:40:73:11:c0:5a:d4:31:b2:9c:95: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A4:17:CA:DD:49:50:E7:46:02:23:0F:C3:3F:F9:D3:AC:DA:C1:2C X509v3 Authority Key Identifier: keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/QaQXyt1JUOdGAiMPwz_506zawSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.192.0/21 IPv6: 2a03:c200::/32 Signature Algorithm: sha256WithRSAEncryption 98:f0:97:db:af:9c:ba:83:8e:c0:10:71:c8:4e:c5:4a:c8:d8: 40:64:26:12:32:f2:7b:30:36:03:f0:6a:10:6e:88:8b:97:aa: 6f:35:b5:c8:a6:c3:a6:ff:9b:61:00:13:34:d5:2b:8c:ee:24: 6a:8f:ca:f3:83:c5:1e:9e:eb:d7:5c:b3:64:af:0c:03:56:09: b0:6d:2b:71:2d:36:6a:1d:15:12:33:4e:9f:c1:25:a0:fe:73: 07:c9:8a:52:2a:72:17:25:0f:05:1c:67:ff:5b:d3:fb:a0:55: 50:15:be:d8:94:3f:90:ff:3f:8a:a1:24:54:1e:97:53:b3:a0: f9:ac:47:c7:85:fc:00:10:7b:d4:35:d6:1e:cb:73:11:34:00: bf:fb:94:11:fe:01:e5:5a:a7:85:ca:ec:63:7d:7b:67:08:96: 1c:1f:df:cc:cc:1c:60:83:44:4a:41:16:6e:51:2b:33:82:af: b5:c0:39:ca:18:96:36:6e:1a:dc:43:75:25:ee:fd:20:3d:4d: 1e:43:68:9c:12:47:33:6d:ea:2e:63:95:98:a3:08:ca:bd:47: 34:c4:6f:55:7c:ed:9c:53:74:cf:2d:96:ab:0e:aa:51:44:38: 9d:85:c2:e8:55:97:d8:72:f6:7c:fb:a1:15:21:b8:75:b7:50: 05:5a:03:7b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FMNe6Od29zd3CDOxPYK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzgyODE1YjI1MTYxMzY1YTkxNjEwY2JkYWQ3MWY2NjI4 NmY3ODEwHhcNMjYwMTAyMTQyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWE0MTdjYWRkNDk1MGU3NDYwMjIzMGZjMzNmZjlkM2FjZGFjMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0twNwiR6oEnkKCqRz0jK+xc2ZzBz wbdPqIa2/YRIJnQ0DUopkcuHWer92PjDkvV2xU9UBOR345p4ChA9R6tOZJ9lshDV O02Yjpc2XhNEoQZWxHSo1PibV0nl4LOWBvLTmz+n2zXElJoZJ/iT4IEQ3BtCRLZn PmI5kUfS7lLSCKpJ6KII0KnIOo+rQSlbvoZ8CUkOtCNY8DsV8qeNNpKICwdlwPuL pu0zXsMkjyODAKyh6vLBFrIGNIBk1f4PAXL2mqP3kBHRrjN5OMhhexAUw8khWK// AAPZ3JNAKsTrpEENswDWym3hJlK50qS6ZWMoSw4x2UBzEcBa1DGynJVXwwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEGkF8rdSVDnRgIjD8M/+dOs2sEsMB8GA1UdIwQY MBaAFMs4KBWyUWE2WpFhDL2tcfZihveBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYt NDE0MjM4YzViYmMyLzEvUWFRWHl0MUpVT2RHQWlNUHd6XzUwNnphd1N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYtNDE0MjM4YzViYmMy LzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLuvAMA0E AgACMAcDBQAqA8IAMA0GCSqGSIb3DQEBCwUAA4IBAQCY8Jfbr5y6g47AEHHITsVK yNhAZCYSMvJ7MDYD8GoQboiLl6pvNbXIpsOm/5thABM01SuM7iRqj8rzg8UenuvX XLNkrwwDVgmwbStxLTZqHRUSM06fwSWg/nMHyYpSKnIXJQ8FHGf/W9P7oFVQFb7Y lD+Q/z+KoSRUHpdTs6D5rEfHhfwAEHvUNdYey3MRNAC/+5QR/gHlWqeFyuxjfXtn CJYcH9/MzBxgg0RKQRZuUSszgq+1wDnKGJY2bhrcQ3Ul7v0gPU0eQ2icEkczbeou Y5WYowjKvUc0xG9VfO2cU3TPLZarDqpRRDidhcLoVZfYcvZ8+6EVIbh1t1AFWgN7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:58 2026 by rpki-client