This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/QwXJQ-gW-nj7udxCnL15rUHQAAk.roa File: QwXJQ-gW-nj7udxCnL15rUHQAAk.roa (raw, json) Hash identifier: 4JkftfFeA+8MJJ74ERDuye4yAiHABdPHlYQTJhofoC8= Subject key identifier: 43:05:C9:43:E8:16:FA:78:FB:B9:DC:42:9C:BD:79:AD:41:D0:00:09 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CCEC4D70D27C86D6C2922716EC3F0 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/QwXJQ-gW-nj7udxCnL15rUHQAAk.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56769 IP address blocks: 31.15.20.0/24 maxlen: 24 31.15.21.0/24 maxlen: 24 192.162.66.0/24 maxlen: 24 192.162.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ce:c4:d7:0d:27:c8:6d:6c:29:22:71:6e:c3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4305c943e816fa78fbb9dc429cbd79ad41d00009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:ff:99:f1:61:3d:66:c4:96:41:c8:aa:e0: ec:7a:d3:24:95:17:28:1a:6e:e4:78:8c:8b:ee:e5: 71:15:e9:6d:35:41:20:65:72:c2:98:2c:64:6b:04: ec:45:29:cb:38:e8:1e:6f:e4:93:d6:5a:3e:83:a3: ac:cd:89:ad:a2:a9:a7:e4:fb:87:39:57:79:e4:b3: 2c:62:c9:22:29:ae:97:07:a8:11:97:91:be:38:79: 09:b7:9a:cd:b2:90:55:56:2f:97:2c:4c:8a:98:73: df:6d:01:49:52:c8:85:40:4f:a8:2d:43:79:2e:ab: aa:c9:a0:3c:a6:c7:63:bc:b2:dd:18:46:e1:38:d2: f1:15:65:2f:e0:0f:cb:7e:2b:84:e5:ed:3d:bb:8d: 77:12:9a:76:bc:0e:0c:f2:0a:21:d8:a1:04:ff:6b: 3c:da:8e:ab:cf:eb:93:0d:b6:f7:50:d1:29:58:70: 4b:e0:73:31:bf:37:38:46:dd:a7:b1:dd:a0:1b:9c: c2:26:44:99:a9:4d:99:90:2d:2b:13:e7:9b:58:bc: 2f:a0:bf:d5:ff:c3:b6:e5:b2:a3:90:4d:76:2c:bd: b8:13:8d:1f:d2:50:77:cc:f9:89:e6:1d:4b:91:bc: ed:0d:a0:8b:9a:28:47:31:a3:e3:82:ad:62:09:79: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:05:C9:43:E8:16:FA:78:FB:B9:DC:42:9C:BD:79:AD:41:D0:00:09 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/QwXJQ-gW-nj7udxCnL15rUHQAAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.20.0/23 192.162.66.0/23 Signature Algorithm: sha256WithRSAEncryption 83:7a:bf:f1:b1:a6:39:cc:92:bf:fa:3e:97:6f:61:61:9f:2a: df:46:34:38:73:f2:b9:1f:bf:95:a3:85:b6:bb:65:0b:8e:27: c7:b2:17:7f:98:c7:a0:dd:d6:97:f4:1c:c0:11:51:34:aa:b3: 97:15:77:a7:f8:03:42:c8:74:ad:12:7c:4c:f2:fa:cb:f5:38: e7:0b:af:78:4a:3c:d5:2b:1e:8d:3d:28:13:23:d7:a4:59:f5: c0:32:5f:a7:19:d7:1e:a9:29:59:a8:c7:6a:71:6f:44:56:53: 14:e2:1c:fe:1f:9f:41:99:89:e5:4f:25:f3:5f:2e:24:28:d9: 1f:e2:21:b0:71:81:ef:df:1c:64:4c:02:8d:ea:aa:39:c7:1e: 23:e6:0a:7c:bd:cb:5b:9d:d4:7a:65:16:de:34:bd:2e:6e:05: 66:03:50:ea:92:df:5f:4f:a5:87:65:e2:59:49:5c:20:ba:c9: 52:fa:ec:08:d5:b2:b6:99:5e:96:2b:8d:1c:f2:a7:29:17:ff: a3:30:69:ef:2b:2a:29:95:ad:92:23:03:e7:07:9f:96:c0:83: b9:6b:56:00:df:a3:56:68:50:f9:90:1c:0d:e7:c7:4b:38:6c: bc:bb:bb:ea:52:bb:8f:a1:35:e4:64:87:2e:32:b0:2c:6b:22: 27:d1:44:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XM7E1w0nyG1sKSJxbsPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzA1Yzk0M2U4MTZmYTc4ZmJiOWRjNDI5Y2JkNzlhZDQxZDAwMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxj/mfFhPWbElkHIquDsetMklRco Gm7keIyL7uVxFeltNUEgZXLCmCxkawTsRSnLOOgeb+ST1lo+g6OszYmtoqmn5PuH OVd55LMsYskiKa6XB6gRl5G+OHkJt5rNspBVVi+XLEyKmHPfbQFJUsiFQE+oLUN5 LquqyaA8psdjvLLdGEbhONLxFWUv4A/LfiuE5e09u413Epp2vA4M8goh2KEE/2s8 2o6rz+uTDbb3UNEpWHBL4HMxvzc4Rt2nsd2gG5zCJkSZqU2ZkC0rE+ebWLwvoL/V /8O25bKjkE12LL24E40f0lB3zPmJ5h1LkbztDaCLmihHMaPjgq1iCXniJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEMFyUPoFvp4+7ncQpy9ea1B0AAJMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvUXdYSlEtZ1ctbmo3dWR4Q25MMTVyVUhRQUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBHw8UAwQB wKJCMA0GCSqGSIb3DQEBCwUAA4IBAQCDer/xsaY5zJK/+j6Xb2FhnyrfRjQ4c/K5 H7+Vo4W2u2ULjifHshd/mMeg3daX9BzAEVE0qrOXFXen+ANCyHStEnxM8vrL9Tjn C694SjzVKx6NPSgTI9ekWfXAMl+nGdceqSlZqMdqcW9EVlMU4hz+H59BmYnlTyXz Xy4kKNkf4iGwcYHv3xxkTAKN6qo5xx4j5gp8vctbndR6ZRbeNL0ubgVmA1Dqkt9f T6WHZeJZSVwguslS+uwI1bK2mV6WK40c8qcpF/+jMGnvKyopla2SIwPnB5+WwIO5 a1YA36NWaFD5kBwN58dLOGy8u7vqUruPoTXkZIcuMrAsayIn0URl -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:01 2026 by rpki-client