This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/qJD08TGqbLXdbWVjPMA7B5pGkPI.roa File: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (raw, json) Hash identifier: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ= Subject key identifier: A8:90:F4:F1:31:AA:6C:B5:DD:6D:65:63:3C:C0:3B:07:9A:46:90:F2 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019B797EA454AE0999223F297AB3BA8B57FD Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/qJD08TGqbLXdbWVjPMA7B5pGkPI.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44877 IP address blocks: 139.45.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a4:54:ae:09:99:22:3f:29:7a:b3:ba:8b:57:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a890f4f131aa6cb5dd6d65633cc03b079a4690f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:af:a7:f2:ce:9b:38:3b:93:72:f2:e9:19: 67:74:18:a2:12:37:d4:54:31:31:93:1c:a9:12:47: ed:e2:7d:ec:4e:8f:9f:84:42:a1:e3:37:b5:ed:07: f9:b7:09:a7:25:5f:9a:18:70:70:ba:67:5f:76:3f: a0:7f:fb:74:1c:f2:18:b7:1f:2d:b2:43:ca:79:e9: c2:a6:95:87:63:47:3b:4a:b4:78:14:b8:03:a7:e5: a2:b3:35:d5:9f:91:68:57:16:87:3e:a2:52:19:f8: 24:7f:53:e4:79:03:4b:38:55:55:a3:ab:d9:ec:e6: 8d:e1:9e:f1:5b:56:78:80:57:89:5a:9b:ac:6f:6d: 06:82:c0:4e:fe:d8:33:e9:cf:8e:4b:e9:e3:bf:10: 7e:89:a7:c6:98:70:63:c9:6a:8f:47:08:71:e4:2a: d3:1d:fc:d9:3a:d2:ac:f4:4a:b4:a6:2d:cf:7b:0f: 0c:5b:f8:f6:9a:5b:29:f8:a6:0d:b6:5c:60:ac:90: 36:3e:d5:77:61:2c:a0:83:d7:70:65:ac:54:a3:0f: c5:da:b1:8a:07:c9:1a:66:37:bd:bc:72:94:22:5e: 2c:92:5f:d1:3b:e0:d5:b7:ea:a4:b3:95:96:90:54: 1c:97:7e:fa:44:73:1f:80:ca:73:8b:3b:88:c0:6d: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:90:F4:F1:31:AA:6C:B5:DD:6D:65:63:3C:C0:3B:07:9A:46:90:F2 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/qJD08TGqbLXdbWVjPMA7B5pGkPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.45.211.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:60:93:c2:fd:1b:05:a9:19:b3:cc:94:b9:9e:a1:c0:5f:4b: 8a:55:fe:c3:f5:27:26:3d:99:d4:8c:23:e1:92:0c:45:5e:3f: 13:07:98:d0:3d:d6:21:5c:c9:55:ae:ff:32:48:88:35:ae:0c: 04:2c:b8:85:c3:1e:6c:59:8a:41:fc:f0:37:1f:dd:0f:f2:4a: fe:f9:55:f0:a6:57:b9:9e:ef:fa:d8:03:5d:cc:52:f1:cb:d5: e9:d2:b6:71:c0:dc:d3:44:92:ae:ec:dd:4f:72:96:31:38:64: 5f:17:a6:0c:fc:96:25:d4:22:fa:2a:d0:20:4a:cf:0b:47:40: 15:15:29:ca:88:b8:2d:c0:82:7f:7e:d1:49:b6:5d:eb:62:1b: b2:f9:7c:75:6b:2f:3a:9d:d5:74:aa:94:f3:13:ad:e7:60:be: 1a:0a:e5:f4:f7:55:ab:24:b7:85:b2:8b:f8:0c:e9:49:fb:a4: 87:5a:39:b7:64:51:10:6f:8b:74:e2:d4:38:13:f4:a4:10:91: 17:c2:fa:ec:bd:c7:e6:88:23:c5:bb:af:1f:dd:58:37:64:95: 94:a6:21:33:f6:a4:7b:bb:a1:61:c3:74:ea:b4:3a:07:4d:23: 72:c4:a4:02:24:6d:7d:ac:8a:9f:16:9e:3a:22:09:df:9e:0e: 24:76:6e:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqRUrgmZIj8perO6i1f9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODkwZjRmMTMxYWE2Y2I1ZGQ2ZDY1NjMzY2MwM2IwNzlhNDY5MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnyvp/LOmzg7k3Ly6RlndBiiEjfU VDExkxypEkft4n3sTo+fhEKh4ze17Qf5twmnJV+aGHBwumdfdj+gf/t0HPIYtx8t skPKeenCppWHY0c7SrR4FLgDp+WiszXVn5FoVxaHPqJSGfgkf1PkeQNLOFVVo6vZ 7OaN4Z7xW1Z4gFeJWpusb20GgsBO/tgz6c+OS+njvxB+iafGmHBjyWqPRwhx5CrT HfzZOtKs9Eq0pi3Pew8MW/j2mlsp+KYNtlxgrJA2PtV3YSygg9dwZaxUow/F2rGK B8kaZje9vHKUIl4skl/RO+DVt+qks5WWkFQcl376RHMfgMpzizuIwG3oLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKiQ9PExqmy13W1lYzzAOweaRpDyMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvcUpEMDhUR3FiTFhkYldWalBNQTdCNXBHa1BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiy3TMA0G CSqGSIb3DQEBCwUAA4IBAQAuYJPC/RsFqRmzzJS5nqHAX0uKVf7D9ScmPZnUjCPh kgxFXj8TB5jQPdYhXMlVrv8ySIg1rgwELLiFwx5sWYpB/PA3H90P8kr++VXwple5 nu/62ANdzFLxy9Xp0rZxwNzTRJKu7N1PcpYxOGRfF6YM/JYl1CL6KtAgSs8LR0AV FSnKiLgtwIJ/ftFJtl3rYhuy+Xx1ay86ndV0qpTzE63nYL4aCuX091WrJLeFsov4 DOlJ+6SHWjm3ZFEQb4t04tQ4E/SkEJEXwvrsvcfmiCPFu68f3Vg3ZJWUpiEz9qR7 u6Fhw3TqtDoHTSNyxKQCJG19rIqfFp46Ignfng4kdm6h -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:33 2026 by rpki-client