This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/Qji-FTCQgnzWlGVff_f5I6ony7M.roa File: Qji-FTCQgnzWlGVff_f5I6ony7M.roa (raw, json) Hash identifier: UnWSs70LgZcBG1uCBITka2HO4cPr5lx7seKqttKm19E= Subject key identifier: 42:38:BE:15:30:90:82:7C:D6:94:65:5F:7F:F7:F9:23:AA:27:CB:B3 Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8 Certificate serial: 019AC98A30B0A96B62D82270C9A52849160B Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/Qji-FTCQgnzWlGVff_f5I6ony7M.roa Signing time: Fri 28 Nov 2025 08:17:48 +0000 ROA not before: Fri 28 Nov 2025 08:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51910 IP address blocks: 46.17.72.0/21 maxlen: 24 46.17.77.0/24 maxlen: 24 46.17.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:8a:30:b0:a9:6b:62:d8:22:70:c9:a5:28:49:16:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8 Validity Not Before: Nov 28 08:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4238be153090827cd694655f7ff7f923aa27cbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:6a:f4:7b:fd:4c:5e:51:67:d4:08:17:e6: 49:a8:b9:7d:14:b6:c0:24:3a:63:0d:1d:9a:23:6f: 8a:bb:53:2b:f4:17:37:7b:85:02:5f:9b:91:09:ae: bf:71:62:e0:14:00:e7:b6:6c:39:a7:ae:b8:62:76: f9:2c:ab:6b:99:54:1f:6b:20:69:67:2e:3a:14:cc: bc:3c:07:1a:7f:50:c7:63:6b:1a:53:b7:3b:61:4f: 01:0c:34:55:f8:c6:4c:d5:5f:c6:57:7e:9f:3c:6a: 1b:48:f5:9c:05:fd:95:63:4f:a0:f0:33:b1:fb:b4: df:f8:c4:51:31:32:a7:b6:ce:ff:dd:c4:5e:b3:ee: 1b:c5:c4:dd:37:cc:5b:ae:38:09:3d:fc:78:f5:5d: 43:4f:b4:ee:44:96:0d:ae:83:4f:48:54:25:19:ea: 7d:3a:46:36:21:d5:1d:88:27:3f:a4:80:39:f7:24: 12:c8:1c:c2:4b:47:36:16:fc:e7:88:b2:6b:76:5c: 7c:f1:9b:30:8b:16:d1:be:54:10:7b:8e:d0:00:ae: 7c:12:f0:7f:29:ce:f5:48:81:9d:70:50:9f:07:41: 07:81:77:62:8c:3c:ec:fd:83:eb:11:8f:52:54:01: a8:93:dc:d8:1e:bf:dc:91:fb:9c:b0:ce:60:2b:02: a5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:38:BE:15:30:90:82:7C:D6:94:65:5F:7F:F7:F9:23:AA:27:CB:B3 X509v3 Authority Key Identifier: keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/Qji-FTCQgnzWlGVff_f5I6ony7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.72.0/21 Signature Algorithm: sha256WithRSAEncryption 62:9f:6c:2b:90:83:24:76:1b:22:48:f3:eb:c4:fb:60:31:2e: 8d:96:59:4f:b3:c7:90:61:7b:bd:fe:e2:16:35:26:c8:48:3e: 14:6b:1b:95:4d:58:5d:3f:54:64:b5:ea:1b:41:e1:49:a8:c7: f7:82:75:d1:d3:8e:4d:33:f5:cf:c5:7f:a6:1b:f9:67:b7:3d: 10:1a:34:ee:d7:3b:96:f0:5d:95:a2:af:e8:47:17:45:bf:c5: f4:e6:2d:53:51:3a:7c:1f:87:5c:4c:39:f6:93:28:8b:9c:c5: 4d:90:fa:06:a9:6c:34:b3:b2:ef:73:5f:20:d7:2a:41:20:45: 04:3b:c1:d9:e6:39:ce:e2:dd:36:ae:f3:0f:55:4b:b4:c2:24: e4:b2:37:62:c9:93:8d:1a:d2:dc:d2:bf:12:12:a3:48:29:81: dd:ad:d9:c4:d4:83:ed:dd:c7:65:4a:04:56:da:07:9f:5e:98: 42:5b:9f:b7:86:13:0c:84:11:d0:9b:f8:cc:eb:67:3d:b5:3e: 2b:9b:b7:af:38:01:c0:96:e1:ab:7b:59:d1:63:6e:33:3f:94: 33:ab:3b:8c:f3:fc:5a:1f:bc:7a:cd:6d:07:4e:f5:69:dc:a8: 87:6c:a6:cf:20:9c:1a:b1:24:65:dd:cd:b7:67:e9:27:17:64: b4:74:a9:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJijCwqWti2CJwyaUoSRYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj ZWU0ZDgwHhcNMjUxMTI4MDgxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjM4YmUxNTMwOTA4MjdjZDY5NDY1NWY3ZmY3ZjkyM2FhMjdjYmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwopq9Hv9TF5RZ9QIF+ZJqLl9FLbA JDpjDR2aI2+Ku1Mr9Bc3e4UCX5uRCa6/cWLgFADntmw5p664Ynb5LKtrmVQfayBp Zy46FMy8PAcaf1DHY2saU7c7YU8BDDRV+MZM1V/GV36fPGobSPWcBf2VY0+g8DOx +7Tf+MRRMTKnts7/3cRes+4bxcTdN8xbrjgJPfx49V1DT7TuRJYNroNPSFQlGep9 OkY2IdUdiCc/pIA59yQSyBzCS0c2FvzniLJrdlx88ZswixbRvlQQe47QAK58EvB/ Kc71SIGdcFCfB0EHgXdijDzs/YPrEY9SVAGok9zYHr/ckfucsM5gKwKlHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEI4vhUwkIJ81pRlX3/3+SOqJ8uzMB8GA1UdIwQY MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt ZDU5MDMwNjYxOTQ5LzEvUWppLUZUQ1FnbnpXbEdWZmZfZjVJNm9ueTdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5 LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhFIMA0G CSqGSIb3DQEBCwUAA4IBAQBin2wrkIMkdhsiSPPrxPtgMS6NlllPs8eQYXu9/uIW NSbISD4UaxuVTVhdP1RkteobQeFJqMf3gnXR045NM/XPxX+mG/lntz0QGjTu1zuW 8F2Voq/oRxdFv8X05i1TUTp8H4dcTDn2kyiLnMVNkPoGqWw0s7Lvc18g1ypBIEUE O8HZ5jnO4t02rvMPVUu0wiTksjdiyZONGtLc0r8SEqNIKYHdrdnE1IPt3cdlSgRW 2gefXphCW5+3hhMMhBHQm/jM62c9tT4rm7evOAHAluGre1nRY24zP5QzqzuM8/xa H7x6zW0HTvVp3KiHbKbPIJwasSRl3c23Z+knF2S0dKlm -----END CERTIFICATE-----Generated at Sun Dec 7 06:45:12 2025 by rpki-client