This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa File: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (raw, json) Hash identifier: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc= Subject key identifier: 42:A1:2D:23:B9:92:06:77:F7:93:5D:EC:C4:0D:AD:84:9F:B5:A3:84 Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1 Certificate serial: 019B77C6FB03EB5763F5B9574EAEBBE4B4A3 Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49250 IP address blocks: 45.149.248.0/23 maxlen: 23 45.149.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fb:03:eb:57:63:f5:b9:57:4e:ae:bb:e4:b4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42a12d23b9920677f7935decc40dad849fb5a384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:19:0e:81:b6:f7:37:cc:04:71:f4:3c:8c: bf:51:fb:18:d9:b1:e2:ab:21:37:dd:bd:66:4c:a3: 47:0d:ed:a2:a9:13:1f:40:26:29:20:16:5c:f7:1a: 98:17:9c:6a:6a:ba:bd:c8:91:7d:f4:29:ad:e9:62: 0b:46:a6:e1:fd:c2:72:fc:2c:ac:8b:0f:3c:22:54: 88:b7:0f:7c:04:63:a5:e5:53:82:43:a5:09:4c:d0: e7:45:69:62:bc:d6:46:42:e8:0a:f8:67:5b:fd:2e: 7f:3b:a8:61:4b:96:28:e8:a9:fd:42:98:8c:88:f9: 03:9c:88:bd:ee:a8:b8:07:0c:8a:82:ac:0c:a2:33: 37:51:86:f7:03:96:3b:f3:37:bf:da:23:89:96:34: 5b:d0:e9:27:0d:ab:af:7c:af:02:58:06:4f:e9:ac: 68:2e:24:32:bc:3e:80:47:d9:6e:c8:79:49:86:b4: 62:e4:e7:c0:36:6b:da:6b:62:2d:56:68:d7:54:0d: a9:93:da:de:6e:d7:68:15:ed:1a:b4:fb:74:56:96: 23:87:8f:bb:bc:0a:7f:e8:f5:ab:9f:ef:a0:70:c8: 54:8a:81:6f:73:17:f6:84:24:cc:aa:f9:a3:cd:c4: 5f:d9:92:ab:b3:98:49:d5:0a:1c:f4:3d:4a:94:f1: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A1:2D:23:B9:92:06:77:F7:93:5D:EC:C4:0D:AD:84:9F:B5:A3:84 X509v3 Authority Key Identifier: keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.248.0-45.149.250.255 Signature Algorithm: sha256WithRSAEncryption 88:09:16:51:cf:9e:4d:e8:65:3f:07:05:af:ea:de:9b:50:d9: 56:52:ff:76:0f:e9:18:ae:fa:37:f9:bb:76:e6:f3:af:f1:2b: da:39:ff:02:3a:21:24:39:03:82:28:d7:34:5c:34:2d:41:39: 61:61:ca:6b:79:22:05:e5:0e:8f:de:8a:eb:e9:9b:f5:4b:47: e8:af:5b:2d:80:15:df:b9:8c:1d:2f:d7:c8:9e:f7:cf:80:7b: 79:1a:0e:73:81:6a:0d:da:c5:83:f4:19:40:20:32:03:c2:79: 5c:43:d4:b6:f2:29:1c:9f:df:a8:0d:84:65:b3:b1:37:b2:02: ee:ec:9d:08:52:79:b5:4e:dc:b8:fe:c8:ba:bf:bf:83:da:29: bc:28:61:71:b3:0a:8f:ea:30:5b:e6:ad:5f:4c:1d:c9:7b:7f: d7:94:9d:99:ee:a3:c5:fc:b5:30:81:cb:4a:08:e7:24:50:99: 8d:e4:81:bd:88:9f:89:ef:50:30:4a:b8:d7:85:e9:33:89:84: 8d:6a:74:7c:39:4e:8e:df:ec:f5:42:06:09:4b:63:2e:86:54: bc:a2:52:93:69:d4:d3:c7:65:d5:6e:2c:28:18:47:95:16:b1: 6b:3f:cc:9f:4a:3a:14:2f:95:34:a4:ba:d4:f2:06:8a:e4:5c: f8:7c:9d:15 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xvsD61dj9blXTq675LSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh ZDQ4YTEwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmExMmQyM2I5OTIwNjc3Zjc5MzVkZWNjNDBkYWQ4NDlmYjVhMzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYkZDoG29zfMBHH0PIy/UfsY2bHi qyE33b1mTKNHDe2iqRMfQCYpIBZc9xqYF5xqarq9yJF99Cmt6WILRqbh/cJy/Cys iw88IlSItw98BGOl5VOCQ6UJTNDnRWlivNZGQugK+Gdb/S5/O6hhS5Yo6Kn9QpiM iPkDnIi97qi4BwyKgqwMojM3UYb3A5Y78ze/2iOJljRb0OknDauvfK8CWAZP6axo LiQyvD6AR9luyHlJhrRi5OfANmvaa2ItVmjXVA2pk9rebtdoFe0atPt0VpYjh4+7 vAp/6PWrn++gcMhUioFvcxf2hCTMqvmjzcRf2ZKrs5hJ1Qoc9D1KlPFI7wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEKhLSO5kgZ395Nd7MQNrYSftaOEMB8GA1UdIwQY MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt NDE5YjU3MjNlZWY5LzEvUXFFdEk3bVNCbmYzazEzc3hBMnRoSi0xbzRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5 LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMtlfgD BAAtlfowDQYJKoZIhvcNAQELBQADggEBAIgJFlHPnk3oZT8HBa/q3ptQ2VZS/3YP 6Riu+jf5u3bm86/xK9o5/wI6ISQ5A4Io1zRcNC1BOWFhymt5IgXlDo/eiuvpm/VL R+ivWy2AFd+5jB0v18ie98+Ae3kaDnOBag3axYP0GUAgMgPCeVxD1LbyKRyf36gN hGWzsTeyAu7snQhSebVO3Lj+yLq/v4PaKbwoYXGzCo/qMFvmrV9MHcl7f9eUnZnu o8X8tTCBy0oI5yRQmY3kgb2In4nvUDBKuNeF6TOJhI1qdHw5To7f7PVCBglLYy6G VLyiUpNp1NPHZdVuLCgYR5UWsWs/zJ9KOhQvlTSkutTyBorkXPh8nRU= -----END CERTIFICATE-----Generated at Tue Feb 10 05:30:44 2026 by rpki-client