This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/qmM745JG5d8A72hNRLQ9llmN77k.roa File: qmM745JG5d8A72hNRLQ9llmN77k.roa (raw, json) Hash identifier: oG4zT6yCNtdrlBl0ys4LHmnKeKqhudHo7676jRW7Np0= Subject key identifier: AA:63:3B:E3:92:46:E5:DF:00:EF:68:4D:44:B4:3D:96:59:8D:EF:B9 Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B78A329482DB194FC6DB680858159BF21 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/qmM745JG5d8A72hNRLQ9llmN77k.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3170 IP address blocks: 45.14.112.0/24 maxlen: 24 45.95.184.0/24 maxlen: 24 147.189.134.0/24 maxlen: 24 147.189.141.0/24 maxlen: 24 185.127.95.0/24 maxlen: 24 193.8.173.0/24 maxlen: 24 2a0e:c80:1::/48 maxlen: 48 2a0e:c80:2::/48 maxlen: 48 2a0e:3840:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:29:48:2d:b1:94:fc:6d:b6:80:85:81:59:bf:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa633be39246e5df00ef684d44b43d96598defb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:d9:b8:fc:6a:78:fc:ef:8b:32:f7:97:3b: d2:cf:0e:e2:87:ab:5e:c3:e1:29:1c:2a:1b:13:85: 5c:e9:b5:1a:c0:b1:b7:ec:d1:9a:7b:a6:1d:f1:35: 95:6d:0e:94:6e:7a:af:28:e9:9c:d8:26:5b:87:97: 4d:df:ea:2b:8e:7c:8d:05:a3:ce:0a:d4:50:23:8f: e1:e1:70:ec:b1:88:ff:42:ea:9e:77:1a:17:d7:41: 01:56:98:1f:2e:2b:d7:4a:d0:b3:eb:51:b5:ff:14: 7e:57:40:66:64:08:63:18:1d:7f:bb:5d:a9:18:f9: e3:5a:2d:e6:54:0c:63:04:9c:c0:f9:c7:f1:ef:4a: be:e1:72:6e:31:ff:3b:42:c6:a8:74:d6:51:a5:2c: 33:b1:07:8a:56:2a:ec:a3:36:64:60:7d:cf:1e:df: 54:95:b0:68:13:a8:9d:69:74:a6:82:2d:d0:6e:d0: 39:2f:4a:66:b6:19:a6:76:e7:af:96:1f:d8:5b:c7: 99:23:0d:c4:d3:4a:4e:75:98:56:1d:b6:f5:90:0a: 95:54:5f:a6:33:1b:94:bd:16:97:0a:69:d4:35:be: 91:40:d6:e3:de:6c:22:63:5e:55:13:cd:13:2f:91: 11:dd:55:72:e9:e8:7c:89:26:1b:c8:25:ed:2a:4f: 08:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:63:3B:E3:92:46:E5:DF:00:EF:68:4D:44:B4:3D:96:59:8D:EF:B9 X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/qmM745JG5d8A72hNRLQ9llmN77k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.112.0/24 45.95.184.0/24 147.189.134.0/24 147.189.141.0/24 185.127.95.0/24 193.8.173.0/24 IPv6: 2a0e:c80:1::-2a0e:c80:2:ffff:ffff:ffff:ffff:ffff 2a0e:3840:1::/48 Signature Algorithm: sha256WithRSAEncryption 84:04:19:84:46:58:4e:94:37:51:3b:0b:3b:76:2f:37:2e:4b: 28:29:99:16:13:c0:cc:e7:e9:39:d0:5b:91:e1:f7:20:b0:32: fd:30:cc:96:e4:c1:ef:5b:96:54:50:26:70:14:64:4f:2f:73: 96:6d:3c:49:f5:53:6e:d2:e9:83:7e:41:eb:18:5d:75:f2:94: fd:8a:24:a4:d3:3c:fc:04:98:d9:57:c2:1f:97:bc:f7:fc:3b: b8:84:d8:ef:95:e5:21:b4:a3:e1:c4:b2:ba:d2:58:ee:27:86: be:d8:32:4b:08:a9:ea:14:78:90:89:55:79:b2:a7:2e:87:81: 76:5c:76:7b:c9:ff:13:c0:35:37:f0:93:e7:89:08:d2:fc:ad: ae:5d:a5:72:00:96:a7:01:88:07:90:cc:53:8a:cf:4a:70:28: 26:d3:c4:e1:a3:3e:05:eb:0c:e5:5a:f1:01:1b:e5:fd:b3:da: c6:09:3f:11:c6:1a:22:00:67:20:dc:73:9c:6b:e7:13:05:01: 2d:d2:70:7e:89:a9:3c:1a:d7:04:67:07:ca:4b:24:78:c6:3b: 68:b7:69:88:de:7f:ce:4a:c9:be:74:06:38:fa:24:99:ce:7e: ff:5f:db:14:8f:07:90:97:d2:f5:0d:38:8b:00:96:81:ab:db: f0:1c:c1:f4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt4oylILbGU/G22gIWBWb8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTYzM2JlMzkyNDZlNWRmMDBlZjY4NGQ0NGI0M2Q5NjU5OGRlZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcjZuPxqePzvizL3lzvSzw7ih6te w+EpHCobE4Vc6bUawLG37NGae6Yd8TWVbQ6UbnqvKOmc2CZbh5dN3+orjnyNBaPO CtRQI4/h4XDssYj/QuqedxoX10EBVpgfLivXStCz61G1/xR+V0BmZAhjGB1/u12p GPnjWi3mVAxjBJzA+cfx70q+4XJuMf87QsaodNZRpSwzsQeKVirsozZkYH3PHt9U lbBoE6idaXSmgi3QbtA5L0pmthmmduevlh/YW8eZIw3E00pOdZhWHbb1kAqVVF+m MxuUvRaXCmnUNb6RQNbj3mwiY15VE80TL5ER3VVy6eh8iSYbyCXtKk8I3wIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFKpjO+OSRuXfAO9oTUS0PZZZje+5MB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xL3FtTTc0NUpHNWQ4QTcyaE5STFE5bGxtTjc3ay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwYgYIKwYBBQUHAQcBAf8EUzBRMCoEAgABMCQDBAAtDnAD BAAtX7gDBACTvYYDBACTvY0DBAC5f18DBADBCK0wIwQCAAIwHTASAwcAKg4MgAAB AwcAKg4MgAACAwcAKg44QAABMA0GCSqGSIb3DQEBCwUAA4IBAQCEBBmERlhOlDdR Ows7di83LksoKZkWE8DM5+k50FuR4fcgsDL9MMyW5MHvW5ZUUCZwFGRPL3OWbTxJ 9VNu0umDfkHrGF118pT9iiSk0zz8BJjZV8Ifl7z3/Du4hNjvleUhtKPhxLK60lju J4a+2DJLCKnqFHiQiVV5sqcuh4F2XHZ7yf8TwDU38JPniQjS/K2uXaVyAJanAYgH kMxTis9KcCgm08Thoz4F6wzlWvEBG+X9s9rGCT8RxhoiAGcg3HOca+cTBQEt0nB+ iak8GtcEZwfKSyR4xjtot2mI3n/OSsm+dAY4+iSZzn7/X9sUjweQl9L1DTiLAJaB q9vwHMH0 -----END CERTIFICATE-----Generated at Sun Jan 25 07:20:22 2026 by rpki-client