This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa File: QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa (raw, json) Hash identifier: XQYgd3zzuTttV8zp0GzxyEY68F4NaIMjIG/jCEfOzec= Subject key identifier: 40:BC:7F:6C:5A:4B:27:4A:BB:38:60:8B:7B:AC:2F:63:32:68:2E:BC Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019B7CEDBE901976311D9A4C0F99294EF50F Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa Signing time: Fri 02 Jan 2026 04:18:34 +0000 ROA not before: Fri 02 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197743 IP address blocks: 31.3.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:be:90:19:76:31:1d:9a:4c:0f:99:29:4e:f5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jan 2 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40bc7f6c5a4b274abb38608b7bac2f6332682ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:20:05:80:95:25:2a:90:3c:0a:a8:3a:cd: 6a:4e:23:fc:ca:a6:ea:43:95:2c:11:5a:8e:4a:21: 0e:70:4f:ec:b1:1a:56:8a:47:87:e6:4f:2f:af:3a: 77:69:15:a2:66:03:eb:ca:88:ea:1a:78:47:8f:b5: 40:ea:fb:56:2e:54:a6:1f:f1:19:f2:c5:86:65:81: 45:f1:33:e3:26:1e:09:f5:aa:fe:d7:71:be:ab:33: 9e:df:ce:41:33:63:e2:e2:80:f3:5c:6a:ca:7b:46: af:8b:59:58:cc:95:03:9a:47:29:74:27:15:98:4a: ff:9b:24:cc:60:08:3e:6a:6a:a4:45:5a:73:1b:8e: fd:3d:2e:ff:e8:35:bc:86:c8:e4:60:f6:e5:ea:db: f8:5e:70:46:ba:6e:c8:96:ec:f0:3b:a2:60:d2:b3: f9:87:d6:19:e5:c1:78:c2:be:27:32:b2:98:cf:50: ab:35:5d:00:7e:17:cb:c7:d7:03:9e:36:f9:d5:b3: 5b:bf:a9:16:0d:93:6e:ab:ec:1d:16:0f:54:9b:71: 8a:2a:b8:1b:1d:b9:d9:84:2f:89:2c:25:db:c5:49: 23:da:22:81:01:a1:9a:d5:be:e4:62:a0:0b:2a:7b: 97:b2:89:db:90:55:33:29:a8:5b:a6:26:07:a9:17: f1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BC:7F:6C:5A:4B:27:4A:BB:38:60:8B:7B:AC:2F:63:32:68:2E:BC X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.192.0/20 Signature Algorithm: sha256WithRSAEncryption 1f:0f:3c:e0:0a:63:3d:41:c8:93:bc:23:d4:a5:54:91:fa:99: b8:fe:28:20:42:e8:31:d0:43:37:73:c2:93:d6:7c:44:51:41: d3:a1:59:26:63:6d:69:48:06:4d:d5:29:8b:3b:10:21:e0:47: e7:6c:5a:28:75:f7:85:a8:88:5a:a1:20:d5:11:fc:7b:1a:54: 7a:58:66:7f:ce:9b:6e:04:93:66:96:45:7f:e9:b8:1c:79:f3: 67:62:70:42:e0:96:6c:4c:23:e9:f9:9d:35:3e:35:03:78:98: 7c:9c:03:86:77:f2:ed:b0:5e:42:a1:14:bf:66:79:0a:b4:e9: f9:ea:01:ff:48:2a:ea:46:82:47:35:23:eb:18:09:be:61:a5: 81:63:fa:ae:ac:bb:c4:53:53:60:e8:e0:06:4d:c0:22:65:99: ce:8d:db:71:0e:03:28:f5:06:9b:e2:2c:a2:d4:42:d4:30:47: bb:5c:86:a5:f8:dc:14:fd:c0:00:08:bc:04:b3:cb:6b:05:27: 05:f8:82:05:6b:9b:04:ad:ba:ae:36:b1:b2:3f:33:17:44:e5: da:c2:cd:53:fe:0f:0b:51:2f:b8:6a:1e:03:a9:41:13:c0:c0: 03:1f:ae:07:7f:23:63:55:12:ec:5f:c6:8d:2c:aa:19:0c:2a: 38:a4:24:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87b6QGXYxHZpMD5kpTvUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwMTAyMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGJjN2Y2YzVhNGIyNzRhYmIzODYwOGI3YmFjMmY2MzMyNjgyZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE4gBYCVJSqQPAqoOs1qTiP8yqbq Q5UsEVqOSiEOcE/ssRpWikeH5k8vrzp3aRWiZgPryojqGnhHj7VA6vtWLlSmH/EZ 8sWGZYFF8TPjJh4J9ar+13G+qzOe385BM2Pi4oDzXGrKe0avi1lYzJUDmkcpdCcV mEr/myTMYAg+amqkRVpzG479PS7/6DW8hsjkYPbl6tv4XnBGum7IluzwO6Jg0rP5 h9YZ5cF4wr4nMrKYz1CrNV0AfhfLx9cDnjb51bNbv6kWDZNuq+wdFg9Um3GKKrgb HbnZhC+JLCXbxUkj2iKBAaGa1b7kYqALKnuXsonbkFUzKahbpiYHqRfxqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEC8f2xaSydKuzhgi3usL2MyaC68MB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvUUx4X2JGcExKMHE3T0dDTGU2d3ZZekpvTHJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEHwPAMA0G CSqGSIb3DQEBCwUAA4IBAQAfDzzgCmM9QciTvCPUpVSR+pm4/iggQugx0EM3c8KT 1nxEUUHToVkmY21pSAZN1SmLOxAh4EfnbFoodfeFqIhaoSDVEfx7GlR6WGZ/zptu BJNmlkV/6bgcefNnYnBC4JZsTCPp+Z01PjUDeJh8nAOGd/LtsF5CoRS/ZnkKtOn5 6gH/SCrqRoJHNSPrGAm+YaWBY/qurLvEU1Ng6OAGTcAiZZnOjdtxDgMo9Qab4iyi 1ELUMEe7XIal+NwU/cAACLwEs8trBScF+IIFa5sErbquNrGyPzMXROXaws1T/g8L US+4ah4DqUETwMADH64HfyNjVRLsX8aNLKoZDCo4pCTY -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:21 2026 by rpki-client