This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/QviPBhLr-CXgt9EbTIrGj_yt3o0.roa File: QviPBhLr-CXgt9EbTIrGj_yt3o0.roa (raw, json) Hash identifier: A2iZoqo4X/JrmbpOlsLJJidbfz0mL9O7JboFIKE1auY= Subject key identifier: 42:F8:8F:06:12:EB:F8:25:E0:B7:D1:1B:4C:8A:C6:8F:FC:AD:DE:8D Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019B7CEDCFDECCA041A23A6A63E6106D8DBD Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/QviPBhLr-CXgt9EbTIrGj_yt3o0.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211967 IP address blocks: 46.229.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cf:de:cc:a0:41:a2:3a:6a:63:e6:10:6d:8d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42f88f0612ebf825e0b7d11b4c8ac68ffcadde8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8a:79:7c:be:7c:52:51:ee:89:1b:3c:28:81: 0d:02:dc:58:af:96:68:71:46:c1:0c:95:b6:33:8d: c4:6b:3c:42:43:1a:7b:3a:1c:df:0a:97:92:d0:ec: cd:0d:1b:cd:10:ea:f7:81:e9:7c:39:2b:4b:b4:79: ab:41:37:8d:81:6f:f7:77:43:1e:ba:b0:1c:14:4d: 0c:59:14:9c:10:b5:a3:cc:bc:df:26:4e:f4:6d:aa: c7:14:c7:98:e3:fb:1f:a0:58:8f:94:ef:3d:9c:b7: df:e7:0b:47:d4:be:cf:90:13:1d:c6:41:7c:02:b9: c5:4a:37:a3:89:4b:d5:82:6b:a6:8f:e3:c2:67:7c: f1:d5:cc:6c:2b:1f:e0:3f:c7:b4:6f:3a:79:cd:46: 76:f3:a9:9d:6e:6e:e4:cf:85:6e:7c:aa:d8:ac:f1: 78:8c:65:8b:03:61:c7:65:ed:08:39:4a:95:43:4e: 1c:d9:b1:a7:a5:6a:f4:4c:b0:27:53:e4:b1:a9:32: 1f:75:ad:4b:7f:d3:97:7e:57:4a:72:4f:a3:cc:40: 83:4e:e2:b0:db:82:99:39:0f:80:89:69:f5:77:8a: 45:a6:2a:e6:25:ae:97:7a:ff:a6:35:db:7c:fa:d1: 31:7c:03:a2:a5:66:77:c0:ed:84:7d:65:b9:70:75: 75:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F8:8F:06:12:EB:F8:25:E0:B7:D1:1B:4C:8A:C6:8F:FC:AD:DE:8D X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/QviPBhLr-CXgt9EbTIrGj_yt3o0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.53.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:50:49:aa:3e:32:8c:c7:e3:c0:07:02:d1:3b:5d:8f:31:32: 67:12:24:4e:f1:81:48:23:4f:95:d7:d2:df:6f:46:bc:6a:22: 97:44:02:f1:ff:f5:e1:67:72:de:1e:0b:92:27:ff:13:f0:4b: 46:a2:87:3f:46:20:27:53:3e:21:a8:b4:e6:27:d5:d0:cd:de: 75:79:ee:b3:be:92:94:b4:0b:a8:43:a2:55:84:1f:6d:84:f6: f9:a4:04:3a:e9:84:ab:21:84:17:f2:73:ed:85:5d:60:6c:15: 1c:f8:49:62:a4:df:3a:06:c0:c8:3a:1d:fd:d6:2e:d9:a7:64: 4c:3d:d1:e4:5a:22:00:85:c3:17:cc:23:bd:8b:cd:48:a1:9b: 81:15:fb:78:03:51:8a:bc:e9:b3:fb:6f:1f:45:75:00:ad:68: 2c:ee:71:27:88:98:de:9a:a8:47:26:1d:a2:cd:09:10:97:f4: ca:78:7a:b3:30:5c:9f:5c:f0:29:60:06:3e:ca:f5:5e:89:42: 3c:2d:2e:29:f1:47:39:5e:d5:22:97:b9:20:bc:08:26:72:20: 5c:b8:ae:7d:a1:61:7e:74:7a:b6:ae:a5:71:3e:6f:73:f7:1e: 44:36:cf:15:1f:9e:db:b4:36:d3:47:c7:5b:c2:67:f2:d0:c3: 7a:a9:77:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87c/ezKBBojpqY+YQbY29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmY4OGYwNjEyZWJmODI1ZTBiN2QxMWI0YzhhYzY4ZmZjYWRkZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Yp5fL58UlHuiRs8KIENAtxYr5Zo cUbBDJW2M43EazxCQxp7OhzfCpeS0OzNDRvNEOr3gel8OStLtHmrQTeNgW/3d0Me urAcFE0MWRScELWjzLzfJk70barHFMeY4/sfoFiPlO89nLff5wtH1L7PkBMdxkF8 ArnFSjejiUvVgmumj+PCZ3zx1cxsKx/gP8e0bzp5zUZ286mdbm7kz4VufKrYrPF4 jGWLA2HHZe0IOUqVQ04c2bGnpWr0TLAnU+SxqTIfda1Lf9OXfldKck+jzECDTuKw 24KZOQ+AiWn1d4pFpirmJa6Xev+mNdt8+tExfAOipWZ3wO2EfWW5cHV19QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEL4jwYS6/gl4LfRG0yKxo/8rd6NMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvUXZpUEJoTHItQ1hndDlFYlRJckdqX3l0M28wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuU1MA0G CSqGSIb3DQEBCwUAA4IBAQB+UEmqPjKMx+PABwLRO12PMTJnEiRO8YFII0+V19Lf b0a8aiKXRALx//XhZ3LeHguSJ/8T8EtGooc/RiAnUz4hqLTmJ9XQzd51ee6zvpKU tAuoQ6JVhB9thPb5pAQ66YSrIYQX8nPthV1gbBUc+ElipN86BsDIOh391i7Zp2RM PdHkWiIAhcMXzCO9i81IoZuBFft4A1GKvOmz+28fRXUArWgs7nEniJjemqhHJh2i zQkQl/TKeHqzMFyfXPApYAY+yvVeiUI8LS4p8Uc5XtUil7kgvAgmciBcuK59oWF+ dHq2rqVxPm9z9x5ENs8VH57btDbTR8dbwmfy0MN6qXdi -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:11 2026 by rpki-client