This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Quhg1-f3ek0jh_p3LGlkfN6kX6g.roa File: Quhg1-f3ek0jh_p3LGlkfN6kX6g.roa (raw, json) Hash identifier: ju3MQtEx6VMpCOhsGkeB2d13t7vujXfIP9b/HFrDuBg= Subject key identifier: 42:E8:60:D7:E7:F7:7A:4D:23:87:FA:77:2C:69:64:7C:DE:A4:5F:A8 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E033CF837F4406FCE6FF94DE9ABF Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Quhg1-f3ek0jh_p3LGlkfN6kX6g.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22400 IP address blocks: 5.1.92.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 05:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e0:33:cf:83:7f:44:06:fc:e6:ff:94:de:9a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42e860d7e7f77a4d2387fa772c69647cdea45fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:f6:d5:f8:25:28:df:a8:42:27:4a:0e:bf: b0:40:7b:d3:a1:ff:33:95:6b:59:a3:26:53:5b:45: 29:87:84:fd:ff:fb:b1:a4:0e:84:02:b5:0e:0d:81: bc:cb:86:da:a5:b6:31:d3:43:95:30:9f:06:14:19: 75:20:38:13:a3:42:44:69:da:93:a6:55:56:1e:7b: 45:f2:f6:db:52:94:c2:f6:c3:f2:60:a0:8f:8a:73: c8:58:e2:d3:88:72:56:38:98:76:9e:6e:99:f1:05: 0e:e7:48:7f:e3:bc:98:44:6e:ef:69:4c:f9:7a:fe: 68:37:73:10:8b:4c:45:7c:28:43:21:2a:50:8c:13: 96:33:85:d8:de:8f:85:39:23:3b:0f:c4:30:4d:a7: 5b:31:b6:5b:17:0d:dc:f1:90:42:b8:eb:f0:8a:dd: e0:57:ec:da:5c:df:4e:88:07:d9:42:94:fc:bd:57: f6:60:c3:0c:26:39:05:11:bd:bc:b8:6f:cd:d8:61: 5c:14:71:35:17:ae:e9:a8:94:2c:88:36:39:52:65: 23:23:0f:ee:a1:79:72:60:22:4b:08:60:38:4a:dc: a5:5e:37:5c:4b:fc:1a:1a:f7:ce:db:40:23:d6:ba: 77:57:ba:24:d0:34:17:e1:8d:37:7e:07:a8:60:08: 69:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E8:60:D7:E7:F7:7A:4D:23:87:FA:77:2C:69:64:7C:DE:A4:5F:A8 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Quhg1-f3ek0jh_p3LGlkfN6kX6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.92.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:a4:a6:4f:56:5c:ef:b5:40:f1:66:71:c2:b0:49:0b:0c:2d: 8c:93:d3:06:28:55:c0:f5:d4:fd:05:d7:c1:82:aa:0a:1b:d4: a3:bd:e8:c0:5b:26:9c:af:a9:a2:a4:bf:34:07:ca:80:d1:3e: c8:b3:80:a3:8d:01:b7:86:9f:cf:d5:9e:4f:2f:0a:5a:eb:33: ab:20:ef:c9:5a:78:3c:f6:63:01:06:18:b5:69:16:5c:89:82: 05:a1:db:5c:71:d3:1a:42:9d:ab:c9:69:d7:bf:a4:b2:dd:bc: b1:17:c7:0c:b8:f4:c9:11:2c:a9:c5:73:64:3b:1e:f5:81:a8: 3e:11:fa:4b:65:01:27:3e:7f:ee:67:0b:db:5d:2f:c7:9e:4f: e4:18:06:98:0e:c5:e9:72:26:8b:4f:32:89:7d:66:38:7a:33: c2:39:85:a2:e9:ca:d0:4e:42:00:dc:37:c1:a7:b7:a1:c5:58: 6f:38:a4:37:12:60:c8:13:48:ac:b5:05:93:96:6a:82:6d:da: 30:c1:30:d3:64:49:3e:64:c0:e3:76:d3:38:e5:cf:d6:0e:47: 84:b3:27:b5:d4:ae:ac:53:64:02:21:8a:e8:4d:36:cc:2c:c8: fc:fa:36:91:bc:f9:ba:16:ff:30:cf:4c:01:d9:ca:8d:e1:38: 3f:18:d8:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOAzz4N/RAb85v+U3pq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmU4NjBkN2U3Zjc3YTRkMjM4N2ZhNzcyYzY5NjQ3Y2RlYTQ1ZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxj21fglKN+oQidKDr+wQHvTof8z lWtZoyZTW0Uph4T9//uxpA6EArUODYG8y4bapbYx00OVMJ8GFBl1IDgTo0JEadqT plVWHntF8vbbUpTC9sPyYKCPinPIWOLTiHJWOJh2nm6Z8QUO50h/47yYRG7vaUz5 ev5oN3MQi0xFfChDISpQjBOWM4XY3o+FOSM7D8QwTadbMbZbFw3c8ZBCuOvwit3g V+zaXN9OiAfZQpT8vVf2YMMMJjkFEb28uG/N2GFcFHE1F67pqJQsiDY5UmUjIw/u oXlyYCJLCGA4StylXjdcS/waGvfO20Aj1rp3V7ok0DQX4Y03fgeoYAhpXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFELoYNfn93pNI4f6dyxpZHzepF+oMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvUXVoZzEtZjNlazBqaF9wM0xHbGtmTjZrWDZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBQFcMA0G CSqGSIb3DQEBCwUAA4IBAQB6pKZPVlzvtUDxZnHCsEkLDC2Mk9MGKFXA9dT9BdfB gqoKG9SjvejAWyacr6mipL80B8qA0T7Is4CjjQG3hp/P1Z5PLwpa6zOrIO/JWng8 9mMBBhi1aRZciYIFodtccdMaQp2ryWnXv6Sy3byxF8cMuPTJESypxXNkOx71gag+ EfpLZQEnPn/uZwvbXS/Hnk/kGAaYDsXpciaLTzKJfWY4ejPCOYWi6crQTkIA3DfB p7ehxVhvOKQ3EmDIE0istQWTlmqCbdowwTDTZEk+ZMDjdtM45c/WDkeEsye11K6s U2QCIYroTTbMLMj8+jaRvPm6Fv8wz0wB2cqN4Tg/GNg2 -----END CERTIFICATE-----Generated at Sun Jan 11 13:01:27 2026 by rpki-client