This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/QajoMPTah5HmQYWazmOhTmEgdy4.roa File: QajoMPTah5HmQYWazmOhTmEgdy4.roa (raw, json) Hash identifier: vdxOYd3C96luAne3fsVsAc2/Kvs7MPuLrsOoLRiJHqk= Subject key identifier: 41:A8:E8:30:F4:DA:87:91:E6:41:85:9A:CE:63:A1:4E:61:20:77:2E Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Certificate serial: 019BE07963D2A2C60D6E9F7E786DBB2AD209 Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/QajoMPTah5HmQYWazmOhTmEgdy4.roa Signing time: Wed 21 Jan 2026 12:13:30 +0000 ROA not before: Wed 21 Jan 2026 12:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 46.243.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:79:63:d2:a2:c6:0d:6e:9f:7e:78:6d:bb:2a:d2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Validity Not Before: Jan 21 12:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41a8e830f4da8791e641859ace63a14e6120772e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:86:be:d6:7f:05:b1:e6:76:59:7d:16:0c: c2:25:8c:0b:08:79:08:22:7a:20:6e:27:02:81:0e: cf:f9:fa:8a:68:35:b4:73:2b:2c:f3:f3:d7:b8:bb: c0:26:40:db:04:9c:54:bb:21:5f:05:39:0b:88:b4: fe:a7:1f:7c:83:1e:b3:cb:8c:c9:d8:7c:66:c0:f0: 36:e5:2c:8c:c2:fd:d4:c0:d3:8e:a5:ca:19:ea:f5: 29:73:df:88:91:79:e8:18:a8:7d:30:a9:4c:3c:0e: a6:1c:d5:5e:62:0f:95:d3:f0:0b:1d:92:35:3f:b7: 86:5c:b8:9f:81:25:c3:f3:19:10:02:35:01:1a:96: 1c:87:f1:f1:b2:69:05:7f:a3:46:12:ee:11:06:45: 3d:4d:7f:14:26:c0:2c:fc:c7:75:9b:0b:99:05:74: 73:81:c6:c1:f2:c8:6a:44:71:c9:c0:dc:e8:06:80: 90:c7:9a:1d:95:cf:b8:7a:7d:c6:ac:48:8a:1e:41: 88:af:22:6b:a7:6f:d8:a0:61:40:28:c7:f9:48:f8: 58:bf:df:be:55:88:69:2c:93:2e:da:61:f7:1e:3a: 78:f8:37:46:33:1d:82:d7:4e:89:2d:db:72:2c:d6: 33:99:c7:83:d8:4b:89:dc:87:09:85:4b:3d:93:f1: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A8:E8:30:F4:DA:87:91:E6:41:85:9A:CE:63:A1:4E:61:20:77:2E X509v3 Authority Key Identifier: keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/QajoMPTah5HmQYWazmOhTmEgdy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.53.0/24 Signature Algorithm: sha256WithRSAEncryption 46:60:c2:6c:95:57:6f:f8:84:6f:d4:33:ac:9b:b9:62:1f:2a: 9c:e0:f8:00:4f:bc:b5:57:4e:18:66:1a:12:ad:6e:85:7e:b6: 72:0d:b2:04:f8:30:4e:4c:c7:7a:d6:8f:f1:73:df:8b:f0:77: 43:bc:1f:1e:5d:b6:35:d4:17:b9:7f:53:d9:0a:c6:da:43:66: 60:29:cd:e0:00:d0:18:26:8c:c3:43:d2:45:8b:e3:43:92:de: 1a:2e:a2:c8:73:9b:99:79:95:f9:aa:ae:0c:e6:1f:93:1a:82: fc:49:0b:e1:67:d5:54:1e:31:36:18:82:09:eb:1b:7c:07:64: f5:5f:04:ce:67:cf:f9:68:85:59:2e:e7:8b:8b:9c:20:e6:ab: b2:55:38:b8:d3:8e:99:fe:23:50:5e:d8:45:5b:e3:40:4e:fa: 7e:48:a2:b5:ed:f0:45:1f:c3:e4:44:f4:21:c0:b5:28:73:68: ad:9c:3a:fc:c3:23:d1:df:ed:b5:dd:ee:7c:4e:46:91:c1:97: a1:2a:a5:22:a2:38:97:24:60:17:d2:01:bf:6b:f9:0d:04:b4: 8e:46:a2:31:ef:29:9d:6f:70:c5:31:c5:74:fb:16:13:a5:22: 14:2d:48:ab:9a:53:c5:56:62:da:27:f6:16:66:17:9c:97:d9: f1:80:7e:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgeWPSosYNbp9+eG27KtIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0 MmUzMTgwHhcNMjYwMTIxMTIxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWE4ZTgzMGY0ZGE4NzkxZTY0MTg1OWFjZTYzYTE0ZTYxMjA3NzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/CGvtZ/BbHmdll9FgzCJYwLCHkI InogbicCgQ7P+fqKaDW0cyss8/PXuLvAJkDbBJxUuyFfBTkLiLT+px98gx6zy4zJ 2HxmwPA25SyMwv3UwNOOpcoZ6vUpc9+IkXnoGKh9MKlMPA6mHNVeYg+V0/ALHZI1 P7eGXLifgSXD8xkQAjUBGpYch/HxsmkFf6NGEu4RBkU9TX8UJsAs/Md1mwuZBXRz gcbB8shqRHHJwNzoBoCQx5odlc+4en3GrEiKHkGIryJrp2/YoGFAKMf5SPhYv9++ VYhpLJMu2mH3Hjp4+DdGMx2C106JLdtyLNYzmceD2EuJ3IcJhUs9k/Hk9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGo6DD02oeR5kGFms5joU5hIHcuMB8GA1UdIwQY MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt ODQ5Y2ZjYWJiNjU3LzEvUWFqb01QVGFoNUhtUVlXYXptT2hUbUVnZHk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3 LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvM1MA0G CSqGSIb3DQEBCwUAA4IBAQBGYMJslVdv+IRv1DOsm7liHyqc4PgAT7y1V04YZhoS rW6FfrZyDbIE+DBOTMd61o/xc9+L8HdDvB8eXbY11Be5f1PZCsbaQ2ZgKc3gANAY JozDQ9JFi+NDkt4aLqLIc5uZeZX5qq4M5h+TGoL8SQvhZ9VUHjE2GIIJ6xt8B2T1 XwTOZ8/5aIVZLueLi5wg5quyVTi4046Z/iNQXthFW+NATvp+SKK17fBFH8PkRPQh wLUoc2itnDr8wyPR3+213e58TkaRwZehKqUiojiXJGAX0gG/a/kNBLSORqIx7ymd b3DFMcV0+xYTpSIULUirmlPFVmLaJ/YWZhecl9nxgH6r -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:31 2026 by rpki-client