This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa File: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (raw, json) Hash identifier: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE= Subject key identifier: AA:94:91:27:FD:FF:D5:6B:52:6E:1D:73:F1:F0:36:37:5B:CA:91:94 Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418 Certificate serial: 019B7D5BF65052F312D569E91C5400025C1A Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa Signing time: Fri 02 Jan 2026 06:18:57 +0000 ROA not before: Fri 02 Jan 2026 06:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13101 IP address blocks: 62.93.0.0/19 maxlen: 19 185.119.72.0/22 maxlen: 22 2a06:9040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f6:50:52:f3:12:d5:69:e9:1c:54:00:02:5c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418 Validity Not Before: Jan 2 06:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa949127fdffd56b526e1d73f1f036375bca9194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:36:be:4a:b5:93:f4:26:60:7a:2a:16:92:f9: 6e:1c:24:eb:22:af:79:98:64:02:33:d6:a2:3b:52: 1b:be:50:a8:8c:8a:83:68:39:45:49:2f:d4:47:21: 71:89:b5:54:fa:46:7b:f1:c2:f2:e3:2c:27:39:41: 56:a2:87:08:d1:71:13:7d:88:d3:cd:b2:79:e7:44: 85:fe:0a:16:58:90:8d:30:29:f7:a2:37:76:7f:6b: 7f:a9:29:6e:a1:ae:1b:ba:6d:99:62:aa:e3:c6:1d: e1:18:5d:d6:ae:d9:20:d7:41:ca:63:70:2b:02:5b: 00:ef:57:ac:a9:e9:3a:91:51:b9:fe:55:5e:06:01: 9e:bb:19:c2:d2:4f:f7:6b:ee:e9:5f:92:aa:63:9a: 47:13:3d:0b:f0:14:36:ec:20:01:4a:0a:bb:d5:a1: 24:ed:09:69:8a:cd:40:c8:36:ba:37:11:42:b8:3e: a5:cb:07:7c:e4:66:a1:cb:59:9d:c4:8b:4f:b9:71: 36:10:1c:fe:d1:a0:d3:20:ce:fe:6f:30:d6:c2:40: bd:cd:9c:5e:54:fa:6c:06:49:a9:f2:c3:f7:ca:20: c0:8d:00:2e:23:09:4b:ad:7b:8e:99:34:23:0c:85: 8a:5c:d5:84:ef:78:c7:03:98:0b:14:1c:35:cb:cb: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:94:91:27:FD:FF:D5:6B:52:6E:1D:73:F1:F0:36:37:5B:CA:91:94 X509v3 Authority Key Identifier: keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.93.0.0/19 185.119.72.0/22 IPv6: 2a06:9040::/29 Signature Algorithm: sha256WithRSAEncryption 9e:e8:03:50:70:12:f6:b4:b9:4e:d7:06:bb:80:83:c9:95:5e: 0d:5a:4e:d1:6f:04:af:2c:ec:e2:50:4b:12:72:4b:ec:aa:37: b2:53:12:d4:51:05:54:16:dc:6a:7a:d4:37:97:f8:45:9e:7b: 4d:f5:ed:33:39:1a:79:34:7e:05:82:87:1f:13:13:18:04:66: 33:3f:f9:c0:88:bb:9c:6a:b8:7c:d5:dc:75:ee:2a:66:0f:95: 17:fd:5c:6e:61:ec:2d:08:05:6b:fd:56:24:4a:b4:d9:5e:db: 1a:df:6e:f2:b5:10:9a:4c:d1:7d:85:59:80:80:3e:f4:7c:ea: 52:fe:8e:e9:f8:76:a2:b3:28:89:3e:fb:c1:a6:7b:f7:13:14: 5d:db:6a:51:4b:83:70:85:68:ff:b9:11:48:72:bb:84:a2:ce: 3a:00:09:b2:6a:30:72:94:17:99:0c:aa:7e:1e:e6:1c:9a:3c: 03:e5:5c:6e:09:7f:9a:43:38:4f:2c:4e:9e:4f:6d:f9:97:56: 2b:21:63:c4:af:20:42:20:8c:82:2e:af:e6:d5:22:93:16:b7: ce:19:b1:c6:16:bc:37:b3:6b:00:67:ef:1b:ed:52:f1:43:e6: fb:6b:9d:55:d8:12:e0:38:4f:19:2e:93:fa:eb:c2:7b:b4:ba: a3:9e:b9:a3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9W/ZQUvMS1WnpHFQAAlwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZGM0MDJjZDUzNWZjOTEyM2VhMDI2YzYyYWU5Y2YwZjgw ZTk0MTgwHhcNMjYwMTAyMDYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTk0OTEyN2ZkZmZkNTZiNTI2ZTFkNzNmMWYwMzYzNzViY2E5MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhza+SrWT9CZgeioWkvluHCTrIq95 mGQCM9aiO1IbvlCojIqDaDlFSS/URyFxibVU+kZ78cLy4ywnOUFWoocI0XETfYjT zbJ550SF/goWWJCNMCn3ojd2f2t/qSluoa4bum2ZYqrjxh3hGF3Wrtkg10HKY3Ar AlsA71esqek6kVG5/lVeBgGeuxnC0k/3a+7pX5KqY5pHEz0L8BQ27CABSgq71aEk 7Qlpis1AyDa6NxFCuD6lywd85Gahy1mdxItPuXE2EBz+0aDTIM7+bzDWwkC9zZxe VPpsBkmp8sP3yiDAjQAuIwlLrXuOmTQjDIWKXNWE73jHA5gLFBw1y8sS9wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKqUkSf9/9VrUm4dc/HwNjdbypGUMB8GA1UdIwQY MBaAFKvcQCzVNfyRI+oCbGKunPD4DpQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEt NDA3MzViMmY4NDgxLzEvcXBTUkpfM18xV3RTYmgxejhmQTJOMXZLa1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEtNDA3MzViMmY4NDgx LzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPl0AAwQC uXdIMA0EAgACMAcDBQMqBpBAMA0GCSqGSIb3DQEBCwUAA4IBAQCe6ANQcBL2tLlO 1wa7gIPJlV4NWk7RbwSvLOziUEsSckvsqjeyUxLUUQVUFtxqetQ3l/hFnntN9e0z ORp5NH4FgocfExMYBGYzP/nAiLucarh81dx17ipmD5UX/VxuYewtCAVr/VYkSrTZ Xtsa327ytRCaTNF9hVmAgD70fOpS/o7p+HaisyiJPvvBpnv3ExRd22pRS4NwhWj/ uRFIcruEos46AAmyajBylBeZDKp+HuYcmjwD5VxuCX+aQzhPLE6eT235l1YrIWPE ryBCIIyCLq/m1SKTFrfOGbHGFrw3s2sAZ+8b7VLxQ+b7a51V2BLgOE8ZLpP668J7 tLqjnrmj -----END CERTIFICATE-----Generated at Mon Jan 26 10:25:30 2026 by rpki-client