This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/QPtWU0Le-lGW94gMt-weMxaQnAs.roa File: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (raw, json) Hash identifier: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E= Subject key identifier: 40:FB:56:53:42:DE:FA:51:96:F7:88:0C:B7:EC:1E:33:16:90:9C:0B Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Certificate serial: 019B7D5C71CA43892A97E51B5A341C0F91DF Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/QPtWU0Le-lGW94gMt-weMxaQnAs.roa Signing time: Fri 02 Jan 2026 06:19:29 +0000 ROA not before: Fri 02 Jan 2026 06:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13044 IP address blocks: 45.84.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:71:ca:43:89:2a:97:e5:1b:5a:34:1c:0f:91:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Validity Not Before: Jan 2 06:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40fb565342defa5196f7880cb7ec1e3316909c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:ba:96:24:b6:f2:a9:43:0b:9c:ef:c4:19: 96:bc:18:14:10:ed:18:3f:4c:c6:9d:92:d1:8b:3a: a9:e3:15:ab:0d:1f:7a:b8:58:4d:84:36:1f:84:c2: e4:db:39:72:60:f1:6c:23:db:2d:ae:1d:58:5a:b8: 5a:82:ed:9d:69:74:eb:05:ae:a5:51:08:20:8d:b4: 58:94:64:0d:7e:0a:37:ce:89:80:99:c8:69:4b:e6: 21:4a:3e:d8:83:5e:83:be:ec:b1:a0:9c:e9:75:06: ec:fb:e2:f4:14:42:4a:13:88:ea:bf:bc:92:04:3a: 7f:d8:8d:02:c6:0c:16:1c:5d:2f:f5:f0:37:5a:f3: 0a:f8:1d:0c:de:30:88:05:7f:2c:e7:a1:09:a4:f7: 1c:3a:22:41:3e:3e:18:e5:e5:5c:c0:19:bd:04:04: 84:58:44:e4:2c:5c:4d:ac:9c:3d:ff:cf:4b:e4:f3: db:e7:c1:95:7e:4a:c3:cc:5d:00:57:db:f1:61:c3: 26:11:76:69:c6:8c:8e:5e:fb:a4:5f:3b:f2:7a:4b: 91:34:0f:e1:1b:54:3a:73:25:e7:90:72:08:45:90: c4:86:97:2e:15:a8:2a:0c:2b:6b:96:02:ab:43:be: 7a:5b:53:bd:72:de:d5:bb:f7:53:94:44:2b:df:53: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FB:56:53:42:DE:FA:51:96:F7:88:0C:B7:EC:1E:33:16:90:9C:0B X509v3 Authority Key Identifier: keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/QPtWU0Le-lGW94gMt-weMxaQnAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.36.0/24 Signature Algorithm: sha256WithRSAEncryption 36:0a:34:5b:be:ec:01:09:0c:cf:33:7b:d4:fb:9b:e6:33:fe: a5:d0:ce:ad:d7:7d:bc:90:49:ac:0d:8d:65:38:8b:04:1b:c2: 43:64:84:a1:64:98:bf:ef:31:c7:59:53:8f:f6:03:10:d2:d0: c1:08:6d:25:17:17:d7:e5:36:7f:19:1e:be:c3:bf:ab:c8:ab: 4d:9c:ee:4e:60:ba:d3:f9:6f:b8:59:13:73:3a:93:62:15:06: 4f:55:1d:86:84:04:da:9f:12:f1:73:24:d3:3f:7c:89:dc:19: 72:c9:24:c2:b3:43:70:a4:e7:ab:4d:fa:46:c9:a2:bc:28:54: e8:ac:4b:9b:c4:d0:aa:7b:a4:37:48:75:d5:5f:f6:22:24:fd: 91:97:a3:38:56:20:9d:58:c1:e3:3d:a0:a2:a3:98:09:e4:e1: 26:5b:61:83:b0:91:f1:a6:bf:fa:1e:6e:f9:31:82:d1:78:c2: b6:37:6a:eb:91:06:40:2a:58:ea:ba:ae:db:bd:a3:f1:6f:b8: b5:09:82:08:9e:79:56:03:58:4a:43:f3:2f:1f:76:24:2e:ff: a4:01:62:61:b6:b5:7f:0c:27:49:ed:73:1a:1a:e4:4b:ec:b1: 49:d4:9c:b4:44:19:55:79:38:bf:06:fa:8c:f1:5f:f5:46:07: 31:64:4a:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XHHKQ4kql+UbWjQcD5HfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Mzg4MDdhYmI5Y2UxNWI3YTg5MjU5MmI2ZjAwM2YxYTNl MTZiNjAwHhcNMjYwMTAyMDYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGZiNTY1MzQyZGVmYTUxOTZmNzg4MGNiN2VjMWUzMzE2OTA5YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHu6liS28qlDC5zvxBmWvBgUEO0Y P0zGnZLRizqp4xWrDR96uFhNhDYfhMLk2zlyYPFsI9strh1YWrhagu2daXTrBa6l UQggjbRYlGQNfgo3zomAmchpS+YhSj7Yg16DvuyxoJzpdQbs++L0FEJKE4jqv7yS BDp/2I0CxgwWHF0v9fA3WvMK+B0M3jCIBX8s56EJpPccOiJBPj4Y5eVcwBm9BASE WETkLFxNrJw9/89L5PPb58GVfkrDzF0AV9vxYcMmEXZpxoyOXvukXzvyekuRNA/h G1Q6cyXnkHIIRZDEhpcuFagqDCtrlgKrQ756W1O9ct7Vu/dTlEQr31P5BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFED7VlNC3vpRlveIDLfsHjMWkJwLMB8GA1UdIwQY MBaAFMc4gHq7nOFbeoklkrbwA/Gj4WtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWIt M2QxZjMwZTA5MjNiLzEvUVB0V1UwTGUtbEdXOTRnTXQtd2VNeGFRbkFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWItM2QxZjMwZTA5MjNi LzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVQkMA0G CSqGSIb3DQEBCwUAA4IBAQA2CjRbvuwBCQzPM3vU+5vmM/6l0M6t1328kEmsDY1l OIsEG8JDZIShZJi/7zHHWVOP9gMQ0tDBCG0lFxfX5TZ/GR6+w7+ryKtNnO5OYLrT +W+4WRNzOpNiFQZPVR2GhATanxLxcyTTP3yJ3BlyySTCs0NwpOerTfpGyaK8KFTo rEubxNCqe6Q3SHXVX/YiJP2Rl6M4ViCdWMHjPaCio5gJ5OEmW2GDsJHxpr/6Hm75 MYLReMK2N2rrkQZAKljquq7bvaPxb7i1CYIInnlWA1hKQ/MvH3YkLv+kAWJhtrV/ DCdJ7XMaGuRL7LFJ1Jy0RBlVeTi/BvqM8V/1RgcxZEqR -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:23 2026 by rpki-client