This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/qpMUFqbg_01nqmll8WKGqUhaRKU.roa File: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (raw, json) Hash identifier: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U= Subject key identifier: AA:93:14:16:A6:E0:FF:4D:67:AA:69:65:F1:62:86:A9:48:5A:44:A5 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E389B2E4F90B7439DC07A68F81AD0E9 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/qpMUFqbg_01nqmll8WKGqUhaRKU.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 45.155.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9b:2e:4f:90:b7:43:9d:c0:7a:68:f8:1a:d0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa931416a6e0ff4d67aa6965f16286a9485a44a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:0d:87:65:56:64:a5:0d:dc:05:52:17:6e: 06:07:36:3e:04:e2:1f:50:31:06:c1:fd:6b:3f:a6: 31:99:e3:e6:27:54:e0:b7:4a:da:45:8d:32:2d:bc: c2:46:91:ec:4c:2c:f0:51:74:f7:91:76:53:7b:ba: 3b:da:71:06:aa:3e:b1:e3:06:82:39:10:0b:c5:82: 82:7b:ff:20:57:01:a3:47:4f:78:10:b4:25:28:56: de:b4:29:88:4d:d1:10:65:8c:ae:ed:12:30:80:c4: 8f:57:3b:35:34:69:2a:e2:1a:21:ca:7b:36:14:ef: 1b:16:60:db:16:a7:57:c8:55:6a:6f:29:b2:36:7d: 7f:f7:04:54:ba:27:5e:dc:58:eb:db:78:e3:f4:14: ce:1e:93:40:ba:2d:9d:52:30:65:92:cf:fa:bb:c9: 1a:e7:f3:d6:e4:fb:ba:9a:be:cb:e2:56:b0:6b:c7: 21:dd:ed:40:48:cf:98:87:4e:2c:18:29:62:15:43: 17:3a:9d:56:ce:e6:b2:5f:fc:c1:2f:7a:83:45:c1: 29:6f:9a:2e:7c:e2:d7:b6:5e:aa:4f:00:6f:39:7c: c7:e7:d8:cd:f7:77:5a:aa:b8:d8:d9:ee:f7:93:3c: 80:ca:29:a1:6f:f9:bd:7e:fd:99:fc:85:a1:1e:fb: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:93:14:16:A6:E0:FF:4D:67:AA:69:65:F1:62:86:A9:48:5A:44:A5 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/qpMUFqbg_01nqmll8WKGqUhaRKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.242.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:fb:2f:40:63:6f:cd:f2:b1:42:bc:8c:a5:5b:d4:bb:3a:c5: 13:a5:e6:bc:0a:75:df:68:66:9f:dc:62:d4:3e:0f:c6:aa:a3: 6a:3a:a0:e8:de:00:fd:ed:b6:37:f1:ef:f0:5b:d3:43:f2:c8: 49:e7:a4:55:bd:06:39:0c:69:47:cf:e0:68:35:08:25:7a:5b: cd:88:55:8c:9c:c3:be:58:a1:a4:a9:5c:3b:59:8b:6f:c9:a3: 70:9d:96:49:95:79:ce:de:c4:c0:a1:78:bd:7b:36:2b:12:b3: 6d:b5:79:f8:bb:62:24:df:88:ec:70:fe:60:80:54:9d:ca:5a: 71:96:ba:74:b7:50:70:11:23:f7:d5:01:d9:c8:c0:d1:90:09: c5:af:12:e6:91:15:13:a6:c7:2c:a9:ad:28:85:29:25:a3:62: ba:41:1c:e8:4b:1a:9c:2c:bb:44:26:49:8e:85:77:d7:2a:df: b2:f7:4d:2c:5d:d3:e5:f0:1f:27:28:2e:4c:bb:1f:79:83:da: 0e:16:f5:b7:86:f6:0e:c6:53:5c:f2:45:9c:7a:46:47:c1:31: fa:b5:78:2a:2f:db:04:6f:2c:a9:ac:25:26:6c:42:77:d2:01: c1:ee:05:b9:27:bb:bb:5e:c4:72:28:9a:29:bf:22:76:1b:6b: 3f:c2:47:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJsuT5C3Q53Aemj4GtDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTkzMTQxNmE2ZTBmZjRkNjdhYTY5NjVmMTYyODZhOTQ4NWE0NGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw0Nh2VWZKUN3AVSF24GBzY+BOIf UDEGwf1rP6YxmePmJ1Tgt0raRY0yLbzCRpHsTCzwUXT3kXZTe7o72nEGqj6x4waC ORALxYKCe/8gVwGjR094ELQlKFbetCmITdEQZYyu7RIwgMSPVzs1NGkq4hohyns2 FO8bFmDbFqdXyFVqbymyNn1/9wRUuide3Fjr23jj9BTOHpNAui2dUjBlks/6u8ka 5/PW5Pu6mr7L4lawa8ch3e1ASM+Yh04sGCliFUMXOp1WzuayX/zBL3qDRcEpb5ou fOLXtl6qTwBvOXzH59jN93daqrjY2e73kzyAyimhb/m9fv2Z/IWhHvvnxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKqTFBam4P9NZ6ppZfFihqlIWkSlMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvcXBNVUZxYmdfMDFucW1sbDhXS0dxVWhhUktVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZvyMA0G CSqGSIb3DQEBCwUAA4IBAQA7+y9AY2/N8rFCvIylW9S7OsUTpea8CnXfaGaf3GLU Pg/GqqNqOqDo3gD97bY38e/wW9ND8shJ56RVvQY5DGlHz+BoNQglelvNiFWMnMO+ WKGkqVw7WYtvyaNwnZZJlXnO3sTAoXi9ezYrErNttXn4u2Ik34jscP5ggFSdylpx lrp0t1BwESP31QHZyMDRkAnFrxLmkRUTpscsqa0ohSklo2K6QRzoSxqcLLtEJkmO hXfXKt+y900sXdPl8B8nKC5Mux95g9oOFvW3hvYOxlNc8kWcekZHwTH6tXgqL9sE byyprCUmbEJ30gHB7gW5J7u7XsRyKJopvyJ2G2s/wkfb -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:20 2026 by rpki-client