This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa File: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (raw, json) Hash identifier: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0= Subject key identifier: 43:35:CB:B5:14:8B:FD:6A:5B:E0:AC:C5:55:32:AC:3A:27:CB:BC:DD Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671 Certificate serial: 019B78A2ACFCAC8F78C1EB04A7F33EA5CBAF Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa Signing time: Thu 01 Jan 2026 08:18:05 +0000 ROA not before: Thu 01 Jan 2026 08:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35261 IP address blocks: 45.138.64.0/23 maxlen: 23 45.138.66.0/23 maxlen: 23 193.239.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ac:fc:ac:8f:78:c1:eb:04:a7:f3:3e:a5:cb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671 Validity Not Before: Jan 1 08:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4335cbb5148bfd6a5be0acc55532ac3a27cbbcdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:73:c0:74:c9:05:4c:28:09:db:2a:23:d0:cb: 68:7b:e3:a6:ff:cf:97:74:b7:55:c4:b0:c2:29:36: 24:9f:d0:75:20:bc:ab:17:6f:17:d8:dc:dd:e7:00: 38:86:e2:a9:14:81:b4:13:0b:a8:8b:ae:2a:c8:6f: 6b:c0:64:63:4d:94:7e:18:30:0b:8b:f3:0d:aa:f1: 7d:0f:f2:ea:12:49:65:93:7a:9e:bd:06:cd:4b:9c: 14:ff:4e:e5:5b:be:84:2f:41:a5:93:7b:6f:66:9c: b0:d0:60:8f:ba:d7:50:21:eb:9e:23:c1:5e:a8:ab: e1:d8:9d:31:d4:02:13:f3:b5:57:c7:ff:fc:5b:6d: 55:5c:31:15:2e:0c:b7:b2:e7:33:52:38:49:18:29: 44:dc:98:0e:c8:72:00:20:34:a0:a7:e2:63:28:e5: d5:34:85:8e:a8:f2:6c:6d:f3:d3:78:88:7c:2b:08: b9:c2:01:26:e1:93:fa:93:4b:e1:4d:73:4a:ca:a8: 8d:60:ec:a4:18:40:9d:07:cd:33:b3:73:a5:6d:aa: 3e:14:06:38:eb:42:b0:70:a6:53:52:75:c1:8f:54: 77:71:99:09:64:fc:a3:cd:d1:65:a2:82:7f:90:ce: b0:1b:82:14:b7:73:f0:c8:2e:34:7c:f1:89:9b:99: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:35:CB:B5:14:8B:FD:6A:5B:E0:AC:C5:55:32:AC:3A:27:CB:BC:DD X509v3 Authority Key Identifier: keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.64.0/22 193.239.212.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:9c:59:56:8e:8f:67:f3:c2:af:da:4d:64:48:5f:1a:9c:87: 7c:8b:43:37:c4:59:f9:98:f9:a6:64:e5:0f:b8:aa:16:36:e0: 0d:30:f1:85:06:a7:48:81:f6:83:41:40:db:67:b8:e3:7d:10: bf:de:ec:65:77:c0:5d:78:7a:32:23:54:af:33:2a:d8:04:da: 5f:ed:d1:f0:1d:3f:8e:91:c8:57:f3:a4:b9:62:2c:e7:86:c5: 1e:ac:0f:74:f0:3b:fd:79:3c:d5:de:84:31:87:11:b7:f7:79: 6d:43:43:bf:68:72:e1:26:33:1e:ae:8e:12:7a:d6:de:12:2f: 28:89:94:a4:50:55:9c:de:59:5b:ff:32:f3:38:b5:52:95:d0: 3a:82:4c:e8:33:dc:9a:f2:9a:cd:93:45:0a:1a:ec:27:a9:b5: c6:86:00:d1:92:75:c4:b5:97:2d:47:a6:36:29:d5:09:55:03: bc:4d:96:6d:95:3f:db:48:28:1f:7f:7a:e1:53:3b:b2:a9:7a: 9f:e9:ab:1b:6b:50:67:c4:7e:5b:9a:b4:3b:47:ad:a8:d6:3b: 79:5b:99:ae:f7:e9:f9:c5:59:1b:53:fb:2f:2d:48:62:53:37: 28:b0:bc:68:5f:7c:69:a6:09:e6:8d:ac:5f:7e:a7:a6:2b:62: 4e:23:37:9d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oqz8rI94wesEp/M+pcuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3 YzE2NzEwHhcNMjYwMTAxMDgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzM1Y2JiNTE0OGJmZDZhNWJlMGFjYzU1NTMyYWMzYTI3Y2JiY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHPAdMkFTCgJ2yoj0Mtoe+Om/8+X dLdVxLDCKTYkn9B1ILyrF28X2Nzd5wA4huKpFIG0Ewuoi64qyG9rwGRjTZR+GDAL i/MNqvF9D/LqEkllk3qevQbNS5wU/07lW76EL0Glk3tvZpyw0GCPutdQIeueI8Fe qKvh2J0x1AIT87VXx//8W21VXDEVLgy3suczUjhJGClE3JgOyHIAIDSgp+JjKOXV NIWOqPJsbfPTeIh8Kwi5wgEm4ZP6k0vhTXNKyqiNYOykGECdB80zs3Olbao+FAY4 60KwcKZTUnXBj1R3cZkJZPyjzdFlooJ/kM6wG4IUt3PwyC40fPGJm5np4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEM1y7UUi/1qW+CsxVUyrDony7zdMB8GA1UdIwQY MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt YjY0Y2FiNGJiZGZmLzEvUXpYTHRSU0xfV3BiNEt6RlZUS3NPaWZMdk4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYpAAwQB we/UMA0GCSqGSIb3DQEBCwUAA4IBAQBtnFlWjo9n88Kv2k1kSF8anId8i0M3xFn5 mPmmZOUPuKoWNuANMPGFBqdIgfaDQUDbZ7jjfRC/3uxld8BdeHoyI1SvMyrYBNpf 7dHwHT+OkchX86S5YiznhsUerA908Dv9eTzV3oQxhxG393ltQ0O/aHLhJjMero4S etbeEi8oiZSkUFWc3llb/zLzOLVSldA6gkzoM9ya8prNk0UKGuwnqbXGhgDRknXE tZctR6Y2KdUJVQO8TZZtlT/bSCgff3rhUzuyqXqf6asba1BnxH5bmrQ7R62o1jt5 W5mu9+n5xVkbU/svLUhiUzcosLxoX3xppgnmjaxffqemK2JOIzed -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:06 2026 by rpki-client