This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QCoF-rujbi30mxySq-53A2Un6G0.roa File: QCoF-rujbi30mxySq-53A2Un6G0.roa (raw, json) Hash identifier: JvBfOTcTs7nWh8mPAtftbN8wivlXScDpGBs3k9Clm0w= Subject key identifier: 40:2A:05:FA:BB:A3:6E:2D:F4:9B:1C:92:AB:EE:77:03:65:27:E8:6D Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0 Certificate serial: 019B7F8563B364C94D82A11CFB531CDF1E22 Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QCoF-rujbi30mxySq-53A2Un6G0.roa Signing time: Fri 02 Jan 2026 16:23:26 +0000 ROA not before: Fri 02 Jan 2026 16:23:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209097 IP address blocks: 45.11.252.0/24 maxlen: 24 45.11.253.0/24 maxlen: 24 45.11.254.0/24 maxlen: 24 45.11.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:63:b3:64:c9:4d:82:a1:1c:fb:53:1c:df:1e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0 Validity Not Before: Jan 2 16:23:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=402a05fabba36e2df49b1c92abee77036527e86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:9c:62:04:b7:ea:99:25:ca:d4:16:de:2b: 61:12:bc:0a:fa:a8:17:07:7f:a7:a6:d2:7f:7d:6f: 32:89:bd:a1:e8:af:5b:57:c9:fc:86:ed:01:28:35: 94:c2:37:ac:9e:66:e1:97:99:85:c3:bb:39:6b:da: 87:f1:95:36:fd:47:de:0a:8a:e6:c4:34:3c:f7:e8: 4e:26:c2:a1:cc:f0:00:e2:57:ac:86:ca:fb:07:a3: 5d:d3:cc:07:b7:a7:6b:17:b9:12:dd:8d:6d:05:e1: 6f:25:58:6d:11:fb:eb:c8:7f:42:52:83:89:f1:77: a9:84:10:2b:4a:03:ea:ca:e7:d6:fe:02:c6:8c:43: 25:c7:3d:a2:db:ac:a6:07:28:89:4e:39:6c:43:cd: 36:99:a1:0b:4d:2d:ea:67:1e:db:f5:ef:8b:a0:4f: 81:1d:cd:f9:78:3b:df:8d:a0:d7:0b:4e:be:a3:ea: f2:bc:1c:68:36:e3:3d:8f:8f:3c:1f:91:91:90:80: 4e:84:9e:53:2e:b0:a2:59:70:6f:53:e1:09:d4:ba: 12:07:19:2f:21:78:fb:5f:4d:10:c7:c2:84:7f:cd: 4b:7b:2f:03:3d:46:21:4e:ea:5e:70:6a:10:b1:d7: 82:fd:2f:e0:a8:ed:bc:e3:9e:7c:8f:3c:7f:5b:67: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2A:05:FA:BB:A3:6E:2D:F4:9B:1C:92:AB:EE:77:03:65:27:E8:6D X509v3 Authority Key Identifier: keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QCoF-rujbi30mxySq-53A2Un6G0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.252.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:f7:bc:65:5f:cc:d4:0c:83:73:59:bd:24:fe:3d:47:50:f0: f1:aa:ff:7d:60:c3:b4:47:ac:8a:67:0d:e6:fd:33:18:f6:21: 4e:74:cf:52:70:d0:ec:9e:c6:91:b4:f2:5c:91:8e:66:d2:20: 92:ea:a0:da:d4:3b:8c:6a:7d:5b:db:6a:c1:c4:2f:2d:e7:c9: b8:9f:a5:5c:ed:ca:81:72:e2:45:ca:cb:19:b3:d0:c8:7b:4c: 05:a2:c3:ba:af:67:a5:4f:cd:ec:93:47:35:f8:1b:22:f2:23: 68:f3:39:f0:06:38:30:e2:97:c7:e4:47:cf:94:f4:e4:56:9b: 94:5e:54:e6:94:f9:ac:8c:71:d8:10:f2:c9:fb:28:fe:65:2b: fc:22:3e:7f:9b:98:17:68:d1:45:ed:de:e7:ba:a8:06:93:36: af:74:59:bc:f0:86:5d:6c:e1:85:79:c9:d4:38:16:ec:c4:af: f0:e3:e8:b1:02:b5:cc:f9:cf:c2:36:97:3c:fe:fa:19:9b:c9: a2:43:92:87:e1:66:54:e0:12:9f:82:3d:a8:60:77:e4:25:e1: c0:a2:e6:0e:ce:4d:58:46:80:a0:8a:3c:27:b7:2c:df:6c:f8: 62:bd:9a:de:19:8b:3a:c0:28:d1:53:c8:d2:97:06:39:52:c2: 6b:a7:76:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hWOzZMlNgqEc+1Mc3x4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWEyYTk0MDViZGExNjcxYzEwNzc2ZjQ0MjYyNzNjOTA0 ZTRhZDAwHhcNMjYwMTAyMTYyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDJhMDVmYWJiYTM2ZTJkZjQ5YjFjOTJhYmVlNzcwMzY1MjdlODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGCcYgS36pklytQW3ithErwK+qgX B3+nptJ/fW8yib2h6K9bV8n8hu0BKDWUwjesnmbhl5mFw7s5a9qH8ZU2/UfeCorm xDQ89+hOJsKhzPAA4leshsr7B6Nd08wHt6drF7kS3Y1tBeFvJVhtEfvryH9CUoOJ 8XephBArSgPqyufW/gLGjEMlxz2i26ymByiJTjlsQ802maELTS3qZx7b9e+LoE+B Hc35eDvfjaDXC06+o+ryvBxoNuM9j488H5GRkIBOhJ5TLrCiWXBvU+EJ1LoSBxkv IXj7X00Qx8KEf81Ley8DPUYhTupecGoQsdeC/S/gqO284558jzx/W2fWmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEAqBfq7o24t9JsckqvudwNlJ+htMB8GA1UdIwQY MBaAFEEaKpQFvaFnHBB3b0QmJzyQTkrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQt OGM1MmU2NjZhOGEyLzEvUUNvRi1ydWpiaTMwbXh5U3EtNTNBMlVuNkcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQtOGM1MmU2NjZhOGEy LzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQv8MA0G CSqGSIb3DQEBCwUAA4IBAQAq97xlX8zUDINzWb0k/j1HUPDxqv99YMO0R6yKZw3m /TMY9iFOdM9ScNDsnsaRtPJckY5m0iCS6qDa1DuMan1b22rBxC8t58m4n6Vc7cqB cuJFyssZs9DIe0wFosO6r2elT83sk0c1+Bsi8iNo8znwBjgw4pfH5EfPlPTkVpuU XlTmlPmsjHHYEPLJ+yj+ZSv8Ij5/m5gXaNFF7d7nuqgGkzavdFm88IZdbOGFecnU OBbsxK/w4+ixArXM+c/CNpc8/voZm8miQ5KH4WZU4BKfgj2oYHfkJeHAouYOzk1Y RoCgijwntyzfbPhivZreGYs6wCjRU8jSlwY5UsJrp3b8 -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:52 2026 by rpki-client