This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/QLKMe_jElWZCYxaDhAzkorlz3LQ.roa File: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (raw, json) Hash identifier: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs= Subject key identifier: 40:B2:8C:7B:F8:C4:95:66:42:63:16:83:84:0C:E4:A2:B9:73:DC:B4 Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215 Certificate serial: 019B7AC8C6F6203C65040656C567C270CB82 Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/QLKMe_jElWZCYxaDhAzkorlz3LQ.roa Signing time: Thu 01 Jan 2026 18:18:56 +0000 ROA not before: Thu 01 Jan 2026 18:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44947 IP address blocks: 194.5.54.0/24 maxlen: 24 2a13:5e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c6:f6:20:3c:65:04:06:56:c5:67:c2:70:cb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215 Validity Not Before: Jan 1 18:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40b28c7bf8c4956642631683840ce4a2b973dcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:76:fc:09:7a:a5:5f:67:bc:e3:35:e6:d4: 9e:d9:da:fd:9c:e4:9a:27:ed:ce:f5:45:1e:cf:55: 2c:9f:15:4f:33:6c:25:6b:14:2d:5f:b0:26:e0:bf: 3b:a5:da:90:6e:42:03:c9:f3:88:08:2e:56:df:0b: 03:74:cf:9f:3a:d5:20:aa:db:a3:6b:79:3d:c0:0d: 03:2d:a3:85:77:c9:d3:2e:18:67:0a:10:01:b5:a3: 91:02:c7:34:18:30:42:3b:82:2d:c1:14:d0:fb:b8: 34:65:0e:5a:98:4d:3e:8c:ac:de:2e:57:6f:36:4c: 05:1d:ef:d4:fa:7e:6c:e8:5e:2e:6e:b8:30:00:4c: b0:ce:ed:d6:51:c4:fe:bd:40:9e:21:4a:fd:f6:0d: 38:d6:81:99:a6:6d:8e:46:8c:55:54:1d:e7:af:e5: a3:75:1c:aa:31:08:f2:c9:bf:0c:b2:00:26:29:22: 98:45:cd:29:31:d4:4a:05:47:6a:e4:b8:df:ba:74: 0a:0b:6f:fb:5f:ad:14:69:1c:b8:41:80:e4:49:28: 18:0d:fe:64:b6:db:1b:6e:8d:cd:95:a3:f1:d2:ad: f2:00:4e:f3:82:24:66:b1:b0:7e:b4:61:41:9e:5b: 61:80:83:8c:ef:64:c1:69:46:e3:7a:8f:96:54:38: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B2:8C:7B:F8:C4:95:66:42:63:16:83:84:0C:E4:A2:B9:73:DC:B4 X509v3 Authority Key Identifier: keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/QLKMe_jElWZCYxaDhAzkorlz3LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.54.0/24 IPv6: 2a13:5e40::/29 Signature Algorithm: sha256WithRSAEncryption 9a:6b:ac:ae:bb:31:f0:82:6b:7f:2d:04:40:f1:ed:91:e6:d5: e2:63:68:b8:6b:0f:62:ed:f1:4c:35:c2:3b:d9:52:a3:22:a0: 95:9b:89:63:e7:c7:f8:52:52:54:36:c1:6b:e9:36:b9:2b:d0: 1b:ba:7c:da:d2:b6:39:98:e5:50:9c:4d:87:ca:31:eb:37:0f: 59:01:71:c7:3e:37:fc:cc:91:76:5b:40:92:07:47:db:61:95: 3c:a7:78:56:9e:9e:97:da:6c:39:64:77:cc:a8:3b:ab:37:7c: 08:bd:7b:f8:69:18:7e:b0:13:f6:01:82:68:c6:44:0f:7f:3d: b9:d8:9b:31:48:2f:00:d2:47:d5:1e:59:c3:b9:5e:93:c1:e6: 65:df:a1:0e:7b:83:5f:0a:4e:d0:85:b0:d2:36:c8:53:98:9a: 71:73:73:e0:79:8e:44:27:ed:3a:49:43:17:8e:f2:bc:80:17: dd:44:fe:28:32:00:bd:86:64:0b:36:ca:65:81:d0:f4:1c:7c: 55:dd:87:d7:d6:02:4e:48:dd:97:fd:5c:17:f5:aa:74:e9:bd: 59:0b:f2:0d:37:c1:81:ca:76:55:9b:07:4d:17:cf:d0:d6:38: 1a:9f:bb:eb:be:de:e2:b0:f0:5f:ba:68:7f:e3:1a:9c:6b:80: 9a:28:f7:9f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yMb2IDxlBAZWxWfCcMuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Yjc5NTA2NjE1MGExYzM2N2RhYmNjZjY5Yzk3MGFiMGM3 MjMyMTUwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGIyOGM3YmY4YzQ5NTY2NDI2MzE2ODM4NDBjZTRhMmI5NzNkY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsId2/Al6pV9nvOM15tSe2dr9nOSa J+3O9UUez1UsnxVPM2wlaxQtX7Am4L87pdqQbkIDyfOICC5W3wsDdM+fOtUgqtuj a3k9wA0DLaOFd8nTLhhnChABtaORAsc0GDBCO4ItwRTQ+7g0ZQ5amE0+jKzeLldv NkwFHe/U+n5s6F4ubrgwAEywzu3WUcT+vUCeIUr99g041oGZpm2ORoxVVB3nr+Wj dRyqMQjyyb8MsgAmKSKYRc0pMdRKBUdq5LjfunQKC2/7X60UaRy4QYDkSSgYDf5k ttsbbo3NlaPx0q3yAE7zgiRmsbB+tGFBnlthgIOM72TBaUbjeo+WVDgVTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFECyjHv4xJVmQmMWg4QM5KK5c9y0MB8GA1UdIwQY MBaAFHW3lQZhUKHDZ9q8z2nJcKsMcjIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjct NTQ3YmU0Y2ZhNDU3LzEvUUxLTWVfakVsV1pDWXhhRGhBemtvcmx6M0xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjctNTQ3YmU0Y2ZhNDU3 LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwgU2MA0E AgACMAcDBQMqE15AMA0GCSqGSIb3DQEBCwUAA4IBAQCaa6yuuzHwgmt/LQRA8e2R 5tXiY2i4aw9i7fFMNcI72VKjIqCVm4lj58f4UlJUNsFr6Ta5K9Abunza0rY5mOVQ nE2HyjHrNw9ZAXHHPjf8zJF2W0CSB0fbYZU8p3hWnp6X2mw5ZHfMqDurN3wIvXv4 aRh+sBP2AYJoxkQPfz252JsxSC8A0kfVHlnDuV6TweZl36EOe4NfCk7QhbDSNshT mJpxc3PgeY5EJ+06SUMXjvK8gBfdRP4oMgC9hmQLNsplgdD0HHxV3YfX1gJOSN2X /VwX9ap06b1ZC/INN8GBynZVmwdNF8/Q1jgan7vrvt7isPBfumh/4xqca4CaKPef -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:07 2026 by rpki-client