This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/qh7UtXFS8GM0jt3hkapz3mDCQ5Y.roa File: qh7UtXFS8GM0jt3hkapz3mDCQ5Y.roa (raw, json) Hash identifier: bK/ZSD9IopAichABUi1qk65QlYFISbXCl3LiF+vq1SQ= Subject key identifier: AA:1E:D4:B5:71:52:F0:63:34:8E:DD:E1:91:AA:73:DE:60:C2:43:96 Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c Certificate serial: 019B79ED5595E67D5A6DD2C89D3996D656A7 Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/qh7UtXFS8GM0jt3hkapz3mDCQ5Y.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215024 IP address blocks: 45.148.64.0/24 maxlen: 24 45.148.67.0/24 maxlen: 24 2a14:48c7::/48 maxlen: 48 2a14:48c7:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:55:95:e6:7d:5a:6d:d2:c8:9d:39:96:d6:56:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa1ed4b57152f063348edde191aa73de60c24396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:b1:6d:ec:82:66:9a:f0:2f:04:d3:06:57: 42:01:ac:27:a9:69:ac:ed:7e:81:89:ca:97:21:5f: bf:b2:2f:8b:cb:7b:2d:ac:ba:8b:1a:d6:7e:66:4a: 7f:0e:38:e2:07:35:aa:4c:d7:31:eb:c5:0e:9c:bd: 1f:a1:a2:20:09:df:0f:7e:7c:cc:20:a0:91:3e:99: ce:47:b0:2b:9e:c6:9e:e1:02:78:a7:b0:17:af:c6: 5d:59:28:cd:6f:04:5f:75:e4:ee:b6:64:61:ca:cf: e4:ef:a3:c5:8a:fe:27:b5:f5:be:2d:ea:d7:08:05: 25:8b:fd:6e:68:0d:2e:b4:4b:70:1f:c1:c9:91:32: a6:f7:13:4f:c9:eb:b1:d8:bd:0a:e0:a6:d1:64:17: 9c:59:c2:8d:42:d6:8c:48:62:90:84:46:05:79:74: fa:1c:90:af:c6:2a:d0:25:96:0e:b9:5f:4a:5f:d1: 22:79:5f:6c:56:9c:2b:77:7e:cc:cf:45:f7:e1:67: 53:0e:42:6e:af:c4:64:91:49:f2:15:7a:35:dd:c1: 3a:a7:d9:0e:54:32:bc:00:4f:3c:99:4a:ce:12:21: 58:40:0f:e9:d3:37:89:06:44:a1:53:57:2e:2e:07: 67:39:c9:9f:8f:fa:84:45:38:41:6a:64:e6:44:aa: 49:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1E:D4:B5:71:52:F0:63:34:8E:DD:E1:91:AA:73:DE:60:C2:43:96 X509v3 Authority Key Identifier: keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/qh7UtXFS8GM0jt3hkapz3mDCQ5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.64.0/24 45.148.67.0/24 IPv6: 2a14:48c7::/48 2a14:48c7:2::/48 Signature Algorithm: sha256WithRSAEncryption 8f:9a:ca:5a:a6:53:bb:8e:56:ed:16:09:27:02:22:c7:10:e1: 71:23:a5:47:85:8b:98:b7:17:16:50:53:2e:4d:82:df:23:bc: ca:43:f4:6c:13:2d:7f:d4:b3:bf:e4:f4:e3:6e:67:48:b0:60: 73:e0:75:c5:c8:3f:e7:03:c7:ca:35:72:14:ae:37:fb:23:eb: c1:30:24:01:ca:84:e5:a8:23:2e:d8:cd:ff:6e:42:dd:11:7d: c1:29:04:81:48:f1:8e:e1:17:e0:5c:eb:d8:07:97:6f:76:b4: 76:cd:3f:12:64:44:29:72:56:7f:0e:c0:37:92:4d:78:46:05: 07:ba:85:ef:9b:2a:01:0e:5f:b7:e0:4a:8d:2c:16:5c:98:fe: 8a:90:e2:d4:22:0c:22:ef:4e:ca:eb:9d:a1:22:4d:fd:3c:b8: c0:3d:27:96:78:5c:8c:69:8e:b8:c5:37:3a:01:ba:12:6a:ff: b5:6a:26:41:0f:b6:3d:7a:ce:f8:03:1b:b6:8b:3c:51:d9:d7: 7a:ec:e6:cb:c3:b1:fa:5e:2e:44:d4:9d:8d:e5:db:1a:6f:22: 42:69:41:aa:ef:90:af:14:24:fc:45:c1:a6:54:cc:54:26:91: 7c:42:29:70:8e:6c:5f:94:c6:38:9f:9e:fc:76:29:90:57:26: a4:70:f9:c7 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt57VWV5n1abdLInTmW1lanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NWFkZGNkNTc5NjQ4ZmMzZjYxMjRlNTU4NDc5ZWYwYjA3 ZjAxOGMwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTFlZDRiNTcxNTJmMDYzMzQ4ZWRkZTE5MWFhNzNkZTYwYzI0Mzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlexbeyCZprwLwTTBldCAawnqWms 7X6BicqXIV+/si+Ly3strLqLGtZ+Zkp/DjjiBzWqTNcx68UOnL0foaIgCd8PfnzM IKCRPpnOR7Arnsae4QJ4p7AXr8ZdWSjNbwRfdeTutmRhys/k76PFiv4ntfW+LerX CAUli/1uaA0utEtwH8HJkTKm9xNPyeux2L0K4KbRZBecWcKNQtaMSGKQhEYFeXT6 HJCvxirQJZYOuV9KX9EieV9sVpwrd37Mz0X34WdTDkJur8RkkUnyFXo13cE6p9kO VDK8AE88mUrOEiFYQA/p0zeJBkShU1cuLgdnOcmfj/qERThBamTmRKpJYQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKoe1LVxUvBjNI7d4ZGqc95gwkOWMB8GA1UdIwQY MBaAFLRa3c1Xlkj8P2Ek5VhHnvCwfwGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDIt YWY2MGZkNWYwNmIxLzEvcWg3VXRYRlM4R00wanQzaGthcHozbURDUTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDItYWY2MGZkNWYwNmIx LzEvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQALZRAAwQA LZRDMBgEAgACMBIDBwAqFEjHAAADBwAqFEjHAAIwDQYJKoZIhvcNAQELBQADggEB AI+aylqmU7uOVu0WCScCIscQ4XEjpUeFi5i3FxZQUy5Ngt8jvMpD9GwTLX/Us7/k 9ONuZ0iwYHPgdcXIP+cDx8o1chSuN/sj68EwJAHKhOWoIy7Yzf9uQt0RfcEpBIFI 8Y7hF+Bc69gHl292tHbNPxJkRClyVn8OwDeSTXhGBQe6he+bKgEOX7fgSo0sFlyY /oqQ4tQiDCLvTsrrnaEiTf08uMA9J5Z4XIxpjrjFNzoBuhJq/7VqJkEPtj16zvgD G7aLPFHZ13rs5svDsfpeLkTUnY3l2xpvIkJpQarvkK8UJPxFwaZUzFQmkXxCKXCO bF+Uxjifnvx2KZBXJqRw+cc= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:47 2026 by rpki-client