This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Qo4-a-RFERrW0EQ6_74r6CoEhjk.roa File: Qo4-a-RFERrW0EQ6_74r6CoEhjk.roa (raw, json) Hash identifier: x2Wmppdy2Ajye6PIuIvuUnAbUbAVtlr23RMFZfg4Rlg= Subject key identifier: 42:8E:3E:6B:E4:45:11:1A:D6:D0:44:3A:FF:BE:2B:E8:2A:04:86:39 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAFC9AA162419D6D75A4CDD56B3963 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Qo4-a-RFERrW0EQ6_74r6CoEhjk.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209178 IP address blocks: 202.133.88.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fc:9a:a1:62:41:9d:6d:75:a4:cd:d5:6b:39:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=428e3e6be445111ad6d0443affbe2be82a048639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:54:7e:9b:fe:c0:58:fd:25:c1:96:ce:9f: db:8d:1a:c0:62:1a:57:31:2d:4f:7f:50:ae:13:4d: 1e:81:42:29:e1:06:01:a1:1a:24:2e:86:f6:bf:b2: f5:e2:c3:1b:5d:34:72:25:d7:d8:35:9e:d3:3d:95: 25:e0:a5:19:80:51:20:46:6c:ed:a0:05:e4:1a:b1: b3:09:07:e3:b6:58:f4:65:1a:22:35:8b:10:61:08: 72:ad:26:e2:9a:08:e8:9c:de:a3:1d:1a:f1:2f:73: 5d:d2:c6:25:94:99:9e:1c:89:0f:09:e4:85:71:30: e6:1f:e1:c8:41:bc:94:ce:c3:15:e0:ad:9c:df:3d: 53:06:4c:3d:a5:58:0c:26:42:82:0a:46:16:4d:b1: 8f:ba:6a:43:db:55:b4:9c:0f:49:58:27:e2:1a:f5: ec:d9:b1:09:36:41:d4:19:a3:76:19:37:47:07:36: 09:ae:a6:66:94:3b:8e:2f:2e:69:a3:f6:e0:3e:8e: dc:ce:79:f7:47:cb:ec:fe:98:fb:9e:d6:ce:4b:bb: d1:73:51:6a:2c:86:05:79:f5:ee:27:ec:0b:4e:3e: 77:78:52:7b:ac:d4:a6:e3:fa:e9:05:80:53:e7:35: 94:fe:b2:75:ef:e2:b2:54:f9:c7:5f:29:ff:76:3f: 56:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8E:3E:6B:E4:45:11:1A:D6:D0:44:3A:FF:BE:2B:E8:2A:04:86:39 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Qo4-a-RFERrW0EQ6_74r6CoEhjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.133.88.0/22 Signature Algorithm: sha256WithRSAEncryption 96:2c:56:cb:be:20:66:84:c8:97:86:a4:0d:c2:89:6d:0b:73: 28:7e:34:4d:0c:96:41:b7:e9:c2:09:37:b6:eb:e8:27:68:1f: 1f:fe:9f:fc:1c:f9:45:09:0c:c4:e0:1f:f7:2b:24:13:67:59: a6:76:3c:dd:f7:83:35:e2:09:e2:12:41:ad:28:f8:e4:ae:8a: 3e:3e:e2:b0:f4:5d:0e:9a:3e:08:a5:be:1e:ec:b8:e8:b1:93: ff:2b:41:94:3e:3f:b7:8a:42:49:88:5f:d1:d0:ec:a3:30:f6: 75:2b:a8:f6:6e:ae:44:a2:af:da:f7:5f:d2:e0:bf:45:a6:ad: e9:c5:4a:f0:5c:87:e7:7d:14:57:ec:cf:00:f3:08:5c:72:d9: 65:bb:96:9c:f2:a4:21:83:3b:b3:b1:6b:8f:c4:54:ad:f3:5f: 02:22:b7:a6:bb:1a:88:8b:25:6d:2a:70:bd:52:c6:be:d9:ed: 0f:be:df:57:1d:c2:65:8c:65:b5:e7:97:04:8f:0e:b1:63:09: 4d:6c:6f:18:be:7f:1b:db:f3:48:e4:e6:3b:21:5a:f9:09:6a: f3:48:81:3d:a3:89:b5:8a:85:86:1b:85:7b:fa:92:e2:0d:fa: 59:68:0a:78:70:57:49:c0:5a:c2:83:4b:9f:47:5d:f5:04:3c: 97:10:31:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vyaoWJBnW11pM3VazljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjhlM2U2YmU0NDUxMTFhZDZkMDQ0M2FmZmJlMmJlODJhMDQ4NjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKhUfpv+wFj9JcGWzp/bjRrAYhpX MS1Pf1CuE00egUIp4QYBoRokLob2v7L14sMbXTRyJdfYNZ7TPZUl4KUZgFEgRmzt oAXkGrGzCQfjtlj0ZRoiNYsQYQhyrSbimgjonN6jHRrxL3Nd0sYllJmeHIkPCeSF cTDmH+HIQbyUzsMV4K2c3z1TBkw9pVgMJkKCCkYWTbGPumpD21W0nA9JWCfiGvXs 2bEJNkHUGaN2GTdHBzYJrqZmlDuOLy5po/bgPo7cznn3R8vs/pj7ntbOS7vRc1Fq LIYFefXuJ+wLTj53eFJ7rNSm4/rpBYBT5zWU/rJ17+KyVPnHXyn/dj9WSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEKOPmvkRREa1tBEOv++K+gqBIY5MB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvUW80LWEtUkZFUnJXMEVRNl83NHI2Q29FaGprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyoVYMA0G CSqGSIb3DQEBCwUAA4IBAQCWLFbLviBmhMiXhqQNwoltC3MofjRNDJZBt+nCCTe2 6+gnaB8f/p/8HPlFCQzE4B/3KyQTZ1mmdjzd94M14gniEkGtKPjkroo+PuKw9F0O mj4Ipb4e7LjosZP/K0GUPj+3ikJJiF/R0OyjMPZ1K6j2bq5Eoq/a91/S4L9Fpq3p xUrwXIfnfRRX7M8A8whcctllu5ac8qQhgzuzsWuPxFSt818CIremuxqIiyVtKnC9 Usa+2e0Pvt9XHcJljGW155cEjw6xYwlNbG8Yvn8b2/NI5OY7IVr5CWrzSIE9o4m1 ioWGG4V7+pLiDfpZaAp4cFdJwFrCg0ufR131BDyXEDGL -----END CERTIFICATE-----Generated at Sun Jan 25 11:58:07 2026 by rpki-client