This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa File: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (raw, json) Hash identifier: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0= Subject key identifier: 41:DC:04:18:31:2B:E8:0C:74:B0:52:2A:71:52:B4:D7:3D:20:C0:57 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 019B7E3902CC5B9A6939A46E398BEDADDFDA Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5640 IP address blocks: 90.183.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:02:cc:5b:9a:69:39:a4:6e:39:8b:ed:ad:df:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41dc0418312be80c74b0522a7152b4d73d20c057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:19:ad:7e:ac:de:17:3e:8e:a5:8f:16:ac:8a: 65:15:38:a4:c3:51:d6:46:86:63:d7:d4:c0:b7:42: 6f:00:71:59:17:ed:01:66:34:e9:cb:10:21:d6:4a: 4e:6a:7d:c6:53:b9:cb:61:bf:52:0a:2c:27:f0:ad: f2:0c:49:7c:3c:a1:84:13:45:0c:36:4c:7f:ec:de: a2:8e:d3:b9:a3:58:9a:d9:78:3b:33:c8:bd:3d:7c: ac:75:48:3f:10:de:24:6f:3b:a9:33:17:16:49:8d: 3b:1f:70:5f:7b:83:28:fc:ef:5b:31:d6:57:1a:b1: a3:fe:12:aa:fe:ab:35:80:e0:38:1a:1c:51:07:c0: d3:8f:2d:6c:b5:00:77:0b:1b:e4:f3:f2:94:38:72: f7:12:e8:d4:1e:b6:b1:0e:a1:68:cc:f8:21:70:fc: 35:89:cd:be:46:7d:7b:b5:d1:2a:2e:b5:22:e5:cc: 2f:30:0f:d8:bd:21:55:8b:41:86:d8:4d:6d:1d:d9: 40:35:7e:46:7a:57:bb:26:4d:27:4f:6e:65:13:ca: 19:d1:a9:a5:45:41:39:9c:54:a1:ec:8b:05:06:75: 99:5e:89:1c:f2:5d:77:40:fb:48:c3:be:08:eb:8f: fb:bd:d1:70:72:c2:2f:50:a6:9d:02:16:b0:17:28: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DC:04:18:31:2B:E8:0C:74:B0:52:2A:71:52:B4:D7:3D:20:C0:57 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.183.151.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:3f:cc:96:e1:8c:40:ed:23:86:77:62:68:e7:ed:ea:8e:d9: f1:95:c5:2d:f6:af:5c:f8:9e:c7:c5:72:7a:07:be:0f:25:84: 0e:21:07:0a:92:e1:5d:03:c9:ce:43:86:f9:e9:24:4f:d5:2a: e3:d6:ac:4c:95:24:f5:f3:32:f8:ef:4c:28:ae:dd:85:b7:7b: 7e:a9:4d:48:87:16:30:27:c9:e7:07:ea:f7:d9:ed:ab:47:a4: b9:42:1f:cc:ac:39:35:52:e1:36:e1:cb:de:87:98:af:26:6c: 65:08:27:f0:b8:c0:ff:64:16:e6:a5:0e:db:89:22:53:58:4e: ea:d0:4b:f3:55:20:28:0b:fc:37:0a:98:51:07:46:c7:78:5c: 30:0e:e0:ca:c4:15:8b:09:44:da:0a:7c:1a:f0:fd:5c:45:33: b9:d0:f8:65:0f:fe:09:81:3f:d3:0f:75:1f:fa:6a:74:07:78: f0:c4:8b:8b:5a:b3:8c:4e:46:07:6f:ca:17:04:ed:8e:1a:58: 40:9b:30:3c:c2:c4:3b:b9:c3:e2:fc:62:55:d7:55:b2:67:ee: 3d:12:5c:a3:24:03:b9:d3:c9:43:31:58:95:97:fe:e9:78:6d: 46:f7:08:f4:c1:aa:45:7d:7c:39:8a:dc:c9:1f:29:c2:e0:f9: 0f:fc:76:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQLMW5ppOaRuOYvtrd/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWRjMDQxODMxMmJlODBjNzRiMDUyMmE3MTUyYjRkNzNkMjBjMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BmtfqzeFz6OpY8WrIplFTikw1HW RoZj19TAt0JvAHFZF+0BZjTpyxAh1kpOan3GU7nLYb9SCiwn8K3yDEl8PKGEE0UM Nkx/7N6ijtO5o1ia2Xg7M8i9PXysdUg/EN4kbzupMxcWSY07H3Bfe4Mo/O9bMdZX GrGj/hKq/qs1gOA4GhxRB8DTjy1stQB3Cxvk8/KUOHL3EujUHraxDqFozPghcPw1 ic2+Rn17tdEqLrUi5cwvMA/YvSFVi0GG2E1tHdlANX5Gele7Jk0nT25lE8oZ0aml RUE5nFSh7IsFBnWZXokc8l13QPtIw74I64/7vdFwcsIvUKadAhawFygYeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEHcBBgxK+gMdLBSKnFStNc9IMBXMB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvUWR3RUdERXI2QXgwc0ZJcWNWSzAxejBnd0ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWreXMA0G CSqGSIb3DQEBCwUAA4IBAQCMP8yW4YxA7SOGd2Jo5+3qjtnxlcUt9q9c+J7HxXJ6 B74PJYQOIQcKkuFdA8nOQ4b56SRP1Srj1qxMlST18zL470wort2Ft3t+qU1IhxYw J8nnB+r32e2rR6S5Qh/MrDk1UuE24cveh5ivJmxlCCfwuMD/ZBbmpQ7biSJTWE7q 0EvzVSAoC/w3CphRB0bHeFwwDuDKxBWLCUTaCnwa8P1cRTO50PhlD/4JgT/TD3Uf +mp0B3jwxIuLWrOMTkYHb8oXBO2OGlhAmzA8wsQ7ucPi/GJV11WyZ+49ElyjJAO5 08lDMViVl/7peG1G9wj0wapFfXw5itzJHynC4PkP/Hbo -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:37 2026 by rpki-client