This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CQT-WxpyeLt52Gckerhzl2jNTAI.roa File: CQT-WxpyeLt52Gckerhzl2jNTAI.roa (raw, json) Hash identifier: kjG6/mlZso/zuPSdSTyVjhhtqsR6XFhYsBrlxnqWSxk= Subject key identifier: 09:04:FE:5B:1A:72:78:BB:79:D8:67:24:7A:B8:73:97:68:CD:4C:02 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F400790E4E9157802D3EDCE71A3A6 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CQT-WxpyeLt52Gckerhzl2jNTAI.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213348 IP address blocks: 170.168.44.0/24 maxlen: 24 170.168.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:40:07:90:e4:e9:15:78:02:d3:ed:ce:71:a3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0904fe5b1a7278bb79d867247ab8739768cd4c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:77:68:89:c1:6f:2c:33:f7:ca:03:da:6f:d5: 3f:82:7d:f8:b6:e0:35:01:3c:7f:a7:5d:3f:67:9f: 9f:1f:8c:43:ff:db:9b:4a:a4:79:0e:b0:ec:c0:66: 8a:0a:ec:69:4d:b2:8f:c5:1e:ca:d2:e7:93:cc:bb: 65:8e:59:00:42:b4:df:b8:4c:ef:1f:04:f3:e8:ce: 26:50:86:2f:80:a0:1b:09:4a:af:90:f5:ed:c1:e8: 01:6c:c5:db:d1:68:ff:7a:86:5c:d5:89:0a:17:c4: 46:e1:23:ea:a1:20:1b:a3:26:d6:0f:9e:cc:55:ed: 79:38:db:f1:8d:04:e4:b3:ed:92:3e:dd:b5:46:e9: db:ef:55:cd:1b:b5:a1:7d:ab:ab:ad:58:dd:38:32: a1:03:18:f1:6e:69:81:6e:26:ea:46:45:86:43:28: cd:45:0a:60:92:cd:93:35:28:47:59:46:43:3a:c1: e1:b5:a7:7d:67:a7:5d:10:9c:ef:65:15:14:82:ac: 67:33:00:c3:f8:26:89:09:15:cc:53:d2:57:dc:3c: 72:27:99:f7:ab:ba:b6:40:e9:d8:9f:4a:bb:f5:23: ee:7b:bb:cc:73:94:cc:e9:d3:c7:ed:18:f4:98:be: a3:7e:a4:b3:e6:23:9e:ce:08:c7:7f:25:3f:75:2e: d0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:04:FE:5B:1A:72:78:BB:79:D8:67:24:7A:B8:73:97:68:CD:4C:02 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CQT-WxpyeLt52Gckerhzl2jNTAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.44.0/23 Signature Algorithm: sha256WithRSAEncryption 47:23:1f:56:a8:eb:d3:38:ce:50:91:e1:1f:e7:ff:56:a1:e1: 3b:f2:b9:e5:1d:3a:03:04:1f:57:11:2a:ba:8d:bd:4d:f2:f9: 48:12:c0:06:dd:f4:e5:fe:b2:b9:7b:6c:bc:9d:5d:76:e6:3b: f2:a5:4c:f1:e7:03:94:f0:4c:9b:73:5d:7b:5e:6c:ba:07:44: d3:09:7d:2a:d1:85:d6:bc:ee:b4:3d:8a:f2:14:7d:76:1b:aa: 0f:b0:76:bd:1e:48:b6:3a:37:38:dc:35:c7:5a:49:cc:36:a8: b7:96:17:2e:53:f3:98:68:5d:e3:7d:06:49:33:77:ad:35:d1: c5:d1:1b:2c:97:ff:a1:ac:3f:32:15:ff:98:2b:58:d4:40:e3: b4:a9:f6:c4:b3:ee:49:f5:8a:c6:cc:c1:12:48:6e:9b:6c:c5: 40:9f:95:80:f9:c8:a0:98:6b:5c:ae:4d:7e:76:3e:e9:1f:50: 82:2a:53:03:be:38:44:42:d3:9e:c4:34:a0:e8:aa:b0:bc:0e: 12:5c:79:da:1e:9c:7a:2f:ab:47:6f:10:04:04:be:a7:92:24: 85:14:07:02:dc:db:c7:0f:ce:04:f1:02:10:3b:9b:18:9e:45: 17:8f:1b:58:8e:73:bb:88:19:ff:ec:05:ca:e1:01:03:e3:89: 63:4f:e1:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0AHkOTpFXgC0+3OcaOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTA0ZmU1YjFhNzI3OGJiNzlkODY3MjQ3YWI4NzM5NzY4Y2Q0YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HdoicFvLDP3ygPab9U/gn34tuA1 ATx/p10/Z5+fH4xD/9ubSqR5DrDswGaKCuxpTbKPxR7K0ueTzLtljlkAQrTfuEzv HwTz6M4mUIYvgKAbCUqvkPXtwegBbMXb0Wj/eoZc1YkKF8RG4SPqoSAboybWD57M Ve15ONvxjQTks+2SPt21Runb71XNG7WhfaurrVjdODKhAxjxbmmBbibqRkWGQyjN RQpgks2TNShHWUZDOsHhtad9Z6ddEJzvZRUUgqxnMwDD+CaJCRXMU9JX3DxyJ5n3 q7q2QOnYn0q79SPue7vMc5TM6dPH7Rj0mL6jfqSz5iOezgjHfyU/dS7Q0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAkE/lsacni7edhnJHq4c5dozUwCMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvQ1FULVd4cHllTHQ1Mkdja2VyaHpsMmpOVEFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqqgsMA0G CSqGSIb3DQEBCwUAA4IBAQBHIx9WqOvTOM5QkeEf5/9WoeE78rnlHToDBB9XESq6 jb1N8vlIEsAG3fTl/rK5e2y8nV125jvypUzx5wOU8Eybc117Xmy6B0TTCX0q0YXW vO60PYryFH12G6oPsHa9Hki2Ojc43DXHWknMNqi3lhcuU/OYaF3jfQZJM3etNdHF 0Rssl/+hrD8yFf+YK1jUQOO0qfbEs+5J9YrGzMESSG6bbMVAn5WA+cigmGtcrk1+ dj7pH1CCKlMDvjhEQtOexDSg6KqwvA4SXHnaHpx6L6tHbxAEBL6nkiSFFAcC3NvH D84E8QIQO5sYnkUXjxtYjnO7iBn/7AXK4QED44ljT+Eo -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:03 2026 by rpki-client