This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QEVT0nsNdMK5970-VuCNIO7bYg4.roa File: QEVT0nsNdMK5970-VuCNIO7bYg4.roa (raw, json) Hash identifier: H3kWdOUjD4rqnPFsu+zJAwLiJasUXrKvsMvw+jYrgQg= Subject key identifier: 40:45:53:D2:7B:0D:74:C2:B9:F7:BD:3E:56:E0:8D:20:EE:DB:62:0E Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84E6FF23E74BA126EF7A46220F8885 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QEVT0nsNdMK5970-VuCNIO7bYg4.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136557 IP address blocks: 2.58.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e6:ff:23:e7:4b:a1:26:ef:7a:46:22:0f:88:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=404553d27b0d74c2b9f7bd3e56e08d20eedb620e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d8:82:b8:ba:2f:ce:3f:9c:47:84:15:fe:11: a2:f5:29:0c:20:4a:fb:e7:21:15:c3:25:d3:d3:f1: 13:db:59:73:2c:55:4f:a0:fa:47:6e:a8:06:7d:df: 2a:d3:8e:8c:3e:dd:10:1c:21:e8:99:51:c4:2f:d1: c4:2b:4a:b8:a6:c4:30:88:73:39:ea:32:47:f2:a9: 95:79:50:53:e9:1a:f0:1c:58:5f:9e:8b:e7:8f:63: e1:ee:81:ae:83:09:4f:25:56:76:3d:f4:b2:ab:02: 2d:09:d5:91:2e:10:19:5a:c3:1f:cb:88:ab:3a:50: 69:37:eb:cf:f4:da:57:06:31:14:c7:35:3c:9d:6d: 48:8e:34:70:05:c3:43:54:dd:41:cd:08:be:8a:53: d1:11:05:3a:6d:4f:26:f9:0d:c0:30:dd:bd:d2:92: 78:cd:a6:1e:d1:20:a9:99:0a:9a:b9:10:be:fb:54: 20:87:af:94:d4:94:74:29:58:fb:8d:8a:a7:29:1c: a9:6c:84:3b:52:fb:5a:00:92:c9:78:5c:95:7d:01: 8d:0e:8a:d6:0a:17:c0:ee:50:cf:d8:4b:9e:56:d8: 75:ac:da:cb:10:9a:bd:80:d0:4d:74:73:c3:22:45: d5:78:dc:50:99:0f:20:94:d7:1d:aa:bf:3e:80:19: 9a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:45:53:D2:7B:0D:74:C2:B9:F7:BD:3E:56:E0:8D:20:EE:DB:62:0E X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QEVT0nsNdMK5970-VuCNIO7bYg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.170.0/24 Signature Algorithm: sha256WithRSAEncryption 90:5c:8e:ec:cd:5d:9e:f8:fc:b1:f1:33:4e:a0:1f:91:d1:7e: af:13:10:0a:aa:ce:ea:1d:c7:59:34:54:29:06:b5:77:bf:72: be:46:dd:7b:6a:8c:63:6c:3e:f4:6d:4a:c0:65:a3:4a:5e:67: 83:b1:d2:0d:17:f8:0d:af:6f:f2:43:a8:ac:b4:12:57:ef:df: 8e:0c:33:ae:8a:39:a7:91:51:9b:d2:bf:73:d5:27:5c:8b:bc: 5f:9d:b8:33:dd:b4:7c:14:e4:87:64:81:9e:70:e4:ae:28:85: af:29:9d:70:8b:a4:d8:91:b6:19:e4:26:f9:4a:62:b3:1a:2b: 72:89:b3:06:32:7e:66:0b:8a:ab:8f:61:83:f6:8d:b4:1f:0b: c4:58:d5:2a:47:f0:13:55:35:4e:c5:4c:d5:f8:aa:09:52:0c: 80:f0:78:c6:10:de:aa:c3:91:b1:7b:d2:4d:72:26:55:f3:61: 4f:6a:41:ba:be:ae:e0:bf:6c:64:22:8d:e3:6e:a0:0b:56:4b: 4b:be:20:50:1b:9c:8f:7a:49:fa:1a:20:5b:20:f1:fb:11:77: 1d:cc:54:da:bc:a8:81:b2:dc:08:60:bd:a2:64:f1:84:e3:7f: fa:38:cb:da:6e:93:0b:61:af:8c:96:09:1b:6d:44:64:f8:de: 45:2a:91:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOb/I+dLoSbvekYiD4iFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDQ1NTNkMjdiMGQ3NGMyYjlmN2JkM2U1NmUwOGQyMGVlZGI2MjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNiCuLovzj+cR4QV/hGi9SkMIEr7 5yEVwyXT0/ET21lzLFVPoPpHbqgGfd8q046MPt0QHCHomVHEL9HEK0q4psQwiHM5 6jJH8qmVeVBT6RrwHFhfnovnj2Ph7oGugwlPJVZ2PfSyqwItCdWRLhAZWsMfy4ir OlBpN+vP9NpXBjEUxzU8nW1IjjRwBcNDVN1BzQi+ilPREQU6bU8m+Q3AMN290pJ4 zaYe0SCpmQqauRC++1Qgh6+U1JR0KVj7jYqnKRypbIQ7UvtaAJLJeFyVfQGNDorW ChfA7lDP2EueVth1rNrLEJq9gNBNdHPDIkXVeNxQmQ8glNcdqr8+gBmaTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBFU9J7DXTCufe9PlbgjSDu22IOMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvUUVWVDBuc05kTUs1OTcwLVZ1Q05JTzdiWWc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjqqMA0G CSqGSIb3DQEBCwUAA4IBAQCQXI7szV2e+Pyx8TNOoB+R0X6vExAKqs7qHcdZNFQp BrV3v3K+Rt17aoxjbD70bUrAZaNKXmeDsdINF/gNr2/yQ6istBJX79+ODDOuijmn kVGb0r9z1Sdci7xfnbgz3bR8FOSHZIGecOSuKIWvKZ1wi6TYkbYZ5Cb5SmKzGity ibMGMn5mC4qrj2GD9o20HwvEWNUqR/ATVTVOxUzV+KoJUgyA8HjGEN6qw5Gxe9JN ciZV82FPakG6vq7gv2xkIo3jbqALVktLviBQG5yPekn6GiBbIPH7EXcdzFTavKiB stwIYL2iZPGE43/6OMvabpMLYa+MlgkbbURk+N5FKpGF -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:43 2026 by rpki-client