This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa File: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (raw, json) Hash identifier: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU= Subject key identifier: A9:E4:30:CD:E3:6E:4F:D8:C3:74:E6:31:23:84:D6:20:DE:19:A3:D9 Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4 Certificate serial: 019B7B35C96D0BFBD7B785662D18001335FE Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198504 IP address blocks: 141.105.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c9:6d:0b:fb:d7:b7:85:66:2d:18:00:13:35:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9e430cde36e4fd8c374e6312384d620de19a3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:a3:9b:d2:9c:a4:b5:5e:f0:6a:dd:e7:95: c7:71:4d:bb:5d:b0:27:fd:1b:70:7a:93:75:62:9c: 13:ae:45:ab:97:7b:4f:71:9d:30:3f:39:08:34:3c: 03:6c:b0:7a:81:a4:92:f3:24:b7:0c:30:5d:0b:c9: b6:cf:1e:71:fb:6b:19:05:78:1c:0e:05:aa:17:de: f5:eb:00:48:25:9d:eb:89:a2:c5:58:56:f6:a9:bd: 2d:a1:30:fe:00:e0:73:f4:7c:63:b9:0d:48:c7:db: e1:7c:0a:d4:b6:0e:a8:08:99:e2:6c:1c:66:37:3d: 73:00:77:c5:40:94:66:87:fc:e4:93:da:8a:46:f4: fc:db:7d:9e:fd:5f:ba:a5:91:c3:5f:67:6b:c6:dc: 0f:5b:7d:d3:9b:df:aa:a0:ca:35:4c:34:22:37:a1: 51:0c:38:1c:8e:51:10:bb:b5:4a:09:ac:70:75:c0: 39:18:68:91:da:b0:aa:db:a1:74:ca:cd:25:31:f0: 5f:12:93:6a:e7:a7:7c:c1:b3:b4:2c:33:37:2b:51: f3:ae:3d:46:38:56:37:43:df:44:21:28:5e:46:89: 63:95:39:4e:4f:9f:03:6f:cd:97:22:12:d3:cc:dc: ec:f1:ec:7a:04:2d:dd:b1:db:85:18:4b:c2:42:45: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E4:30:CD:E3:6E:4F:D8:C3:74:E6:31:23:84:D6:20:DE:19:A3:D9 X509v3 Authority Key Identifier: keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.166.0/23 Signature Algorithm: sha256WithRSAEncryption c3:ad:e6:3f:44:22:eb:f9:85:b8:3c:8b:b3:0f:53:0c:85:e6: 6a:cd:99:a8:d7:06:88:65:bd:d0:b3:da:72:2f:60:cd:a3:a3: 6d:f3:15:b1:a5:ac:f6:f9:be:7c:f4:24:9c:48:b0:2c:31:78: 64:58:75:91:c0:54:e6:a8:ee:09:67:ba:54:d7:b0:a0:f1:81: fd:c9:b2:46:ab:ff:12:5f:2d:bc:03:b7:d2:8c:cd:79:16:9c: f2:d3:67:71:45:af:12:df:61:b4:a2:24:bf:33:d8:8a:d5:ea: e2:fd:e1:fd:17:81:7a:e7:f3:cc:03:43:b6:7e:14:31:37:65: 55:94:64:c4:73:5a:3d:4b:ef:f2:35:54:f5:f0:60:51:38:f0: 63:89:9a:2c:d1:76:bf:60:e7:d6:d6:ed:ab:e8:af:0d:48:fc: a1:1e:1e:33:48:45:50:ae:f5:d3:59:b4:38:be:61:d6:6f:9c: 72:eb:5f:ec:8e:e9:43:93:00:35:85:c7:8d:d3:38:94:d5:40: 54:32:1a:78:03:e8:f5:66:02:ea:9b:3e:d9:10:4a:69:dd:5d: 49:53:54:59:d8:ac:72:9e:27:44:4d:b3:73:85:09:e4:18:3d: fd:f9:79:3e:b5:fa:16:89:63:70:22:13:e3:73:ca:26:a8:69: 9f:f9:86:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcltC/vXt4VmLRgAEzX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk NGJjYTQwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWU0MzBjZGUzNmU0ZmQ4YzM3NGU2MzEyMzg0ZDYyMGRlMTlhM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKKjm9KcpLVe8Grd55XHcU27XbAn /RtwepN1YpwTrkWrl3tPcZ0wPzkINDwDbLB6gaSS8yS3DDBdC8m2zx5x+2sZBXgc DgWqF9716wBIJZ3riaLFWFb2qb0toTD+AOBz9HxjuQ1Ix9vhfArUtg6oCJnibBxm Nz1zAHfFQJRmh/zkk9qKRvT8232e/V+6pZHDX2drxtwPW33Tm9+qoMo1TDQiN6FR DDgcjlEQu7VKCaxwdcA5GGiR2rCq26F0ys0lMfBfEpNq56d8wbO0LDM3K1Hzrj1G OFY3Q99EISheRoljlTlOT58Db82XIhLTzNzs8ex6BC3dsduFGEvCQkXerQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKnkMM3jbk/Yw3TmMSOE1iDeGaPZMB8GA1UdIwQY MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt MGEwZjNlNzhhNDkzLzEvcWVRd3plTnVUOWpEZE9ZeEk0VFdJTjRabzlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjWmmMA0G CSqGSIb3DQEBCwUAA4IBAQDDreY/RCLr+YW4PIuzD1MMheZqzZmo1waIZb3Qs9py L2DNo6Nt8xWxpaz2+b589CScSLAsMXhkWHWRwFTmqO4JZ7pU17Cg8YH9ybJGq/8S Xy28A7fSjM15Fpzy02dxRa8S32G0oiS/M9iK1eri/eH9F4F65/PMA0O2fhQxN2VV lGTEc1o9S+/yNVT18GBROPBjiZos0Xa/YOfW1u2r6K8NSPyhHh4zSEVQrvXTWbQ4 vmHWb5xy61/sjulDkwA1hceN0ziU1UBUMhp4A+j1ZgLqmz7ZEEpp3V1JU1RZ2Kxy nidETbNzhQnkGD39+Xk+tfoWiWNwIhPjc8omqGmf+Yaz -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:11 2026 by rpki-client