This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QXuK5zpqqkGcTPqp1QYzhQJHxkQ.roa File: QXuK5zpqqkGcTPqp1QYzhQJHxkQ.roa (raw, json) Hash identifier: 1RHffr+6PUIG8HoDD+BWWE0Cf41XvkSkSbFnMQE53WY= Subject key identifier: 41:7B:8A:E7:3A:6A:AA:41:9C:4C:FA:A9:D5:06:33:85:02:47:C6:44 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84FDA00D52B2864B18E88FF88CDBF4 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QXuK5zpqqkGcTPqp1QYzhQJHxkQ.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207228 IP address blocks: 31.148.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fd:a0:0d:52:b2:86:4b:18:e8:8f:f8:8c:db:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=417b8ae73a6aaa419c4cfaa9d50633850247c644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:d9:bc:be:a8:89:8f:a5:1f:14:bd:b0:cd: e3:00:fe:0a:b5:5c:5a:c3:32:04:94:89:ec:f8:6c: d6:7a:79:35:99:c0:5b:7b:64:a5:97:2e:2e:1e:59: 54:ec:96:c1:a1:20:70:84:19:e2:10:64:dd:ac:7b: 53:a7:4a:de:3d:d6:e3:b8:60:8e:c5:6f:50:de:00: f6:3d:10:41:15:54:f6:00:75:d7:29:b3:40:19:f9: fc:0f:49:31:45:87:97:d7:3a:d3:c4:e0:64:a5:05: c8:ca:b9:12:1f:b5:4b:c2:bd:a9:ab:11:5d:4c:17: 1f:a8:f8:fe:3f:52:02:45:03:5f:49:0f:d3:4d:33: a2:93:15:f5:bf:86:89:fd:01:8d:9f:3c:05:26:1b: a1:38:f0:74:f6:15:b3:66:96:bc:0e:86:62:24:7c: b7:fe:2b:e5:1f:48:55:d3:fc:d9:e9:3a:e5:d9:ba: 9e:52:98:14:ab:f6:ac:29:43:54:fb:f0:a6:58:11: 1f:7e:b4:ee:80:89:52:e5:31:16:c0:3d:d5:53:8d: 6c:9e:cd:e2:31:4b:9a:44:2c:84:44:40:68:cc:f4: 46:39:c6:9a:84:00:7a:62:97:2d:af:77:17:0b:67: cd:0e:55:23:59:86:80:a2:23:04:c2:53:95:2b:09: 01:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7B:8A:E7:3A:6A:AA:41:9C:4C:FA:A9:D5:06:33:85:02:47:C6:44 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QXuK5zpqqkGcTPqp1QYzhQJHxkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.48.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:f9:aa:f2:5f:79:37:23:85:94:c0:7f:94:8f:f5:87:fb:64: f0:d5:6b:e0:eb:63:06:1f:f3:2a:2d:16:3b:9f:15:33:b4:e8: ca:81:05:8d:31:76:8f:1b:d8:06:27:77:13:14:4c:28:d3:00: 71:65:a3:88:1c:92:76:6d:45:a1:01:3a:46:b0:9d:77:7f:a9: 1a:3f:43:45:3e:18:2f:69:63:9f:4b:c1:6e:75:b6:fb:eb:08: 11:99:7b:a5:85:8b:e1:bd:96:5a:3c:b4:13:ea:e3:df:5c:53: 8d:96:25:4f:06:c6:37:fe:eb:e7:eb:a3:03:6e:83:b8:2d:12: 75:f9:01:a2:be:8f:f2:da:74:30:86:74:e6:1c:55:83:36:6e: e2:b3:26:ab:b1:8e:cf:06:50:4b:3c:0c:17:bf:d2:81:dd:77: 66:da:9b:5a:19:0d:9b:64:4f:a9:9a:e8:f6:4d:0a:b9:f7:30: a1:86:98:0e:5b:62:e8:c2:e1:3a:a3:dc:29:c6:8c:8c:dc:72: ff:f1:ae:c8:fb:83:28:27:5b:3f:99:47:90:e5:d6:07:0e:36: 88:22:31:a2:31:9c:58:5e:f4:aa:20:19:5d:89:7c:38:48:9a: 68:ed:2c:f5:d9:45:74:29:06:8d:af:04:ed:e6:52:52:85:4f: 00:ef:40:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hP2gDVKyhksY6I/4jNv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTdiOGFlNzNhNmFhYTQxOWM0Y2ZhYTlkNTA2MzM4NTAyNDdjNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j7ZvL6oiY+lHxS9sM3jAP4KtVxa wzIElIns+GzWenk1mcBbe2Slly4uHllU7JbBoSBwhBniEGTdrHtTp0rePdbjuGCO xW9Q3gD2PRBBFVT2AHXXKbNAGfn8D0kxRYeX1zrTxOBkpQXIyrkSH7VLwr2pqxFd TBcfqPj+P1ICRQNfSQ/TTTOikxX1v4aJ/QGNnzwFJhuhOPB09hWzZpa8DoZiJHy3 /ivlH0hV0/zZ6Trl2bqeUpgUq/asKUNU+/CmWBEffrTugIlS5TEWwD3VU41sns3i MUuaRCyEREBozPRGOcaahAB6Ypctr3cXC2fNDlUjWYaAoiMEwlOVKwkBDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEF7iuc6aqpBnEz6qdUGM4UCR8ZEMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUVh1SzV6cHFxa0djVFBxcDFRWXpoUUpIeGtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH5QwMA0G CSqGSIb3DQEBCwUAA4IBAQAc+aryX3k3I4WUwH+Uj/WH+2Tw1Wvg62MGH/MqLRY7 nxUztOjKgQWNMXaPG9gGJ3cTFEwo0wBxZaOIHJJ2bUWhATpGsJ13f6kaP0NFPhgv aWOfS8Fudbb76wgRmXulhYvhvZZaPLQT6uPfXFONliVPBsY3/uvn66MDboO4LRJ1 +QGivo/y2nQwhnTmHFWDNm7isyarsY7PBlBLPAwXv9KB3Xdm2ptaGQ2bZE+pmuj2 TQq59zChhpgOW2LowuE6o9wpxoyM3HL/8a7I+4MoJ1s/mUeQ5dYHDjaIIjGiMZxY XvSqIBldiXw4SJpo7Sz12UV0KQaNrwTt5lJShU8A70Dv -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:33 2026 by rpki-client