This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa File: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (raw, json) Hash identifier: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak= Subject key identifier: 40:B3:FD:5D:B3:75:1F:28:5C:FD:50:90:D9:44:F2:27:CB:69:43:96 Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b Certificate serial: 019B78347D1F27A0993F7634C3C3D559F6C2 Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 148.187.0.0/16 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7d:1f:27:a0:99:3f:76:34:c3:c3:d5:59:f6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40b3fd5db3751f285cfd5090d944f227cb694396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:75:b6:2e:b1:bc:01:3c:61:91:38:da:d6: 7a:89:f1:56:7e:74:e4:da:29:e4:1c:69:65:ca:33: dd:69:fc:d7:55:d1:ac:92:34:02:34:0c:6c:5c:29: fd:d5:39:e8:8b:0a:e2:e3:67:e5:15:10:eb:ea:ac: 98:e1:bb:87:1a:4a:d0:1e:97:83:28:33:75:19:cd: 5e:5c:8b:97:52:e3:09:80:0d:9e:66:7e:34:1e:9e: 41:36:d5:4c:79:cc:c5:4c:c1:8f:50:c6:fb:20:5d: 0d:a2:8d:1a:0a:d6:f3:18:02:5e:61:dd:64:15:d4: 6e:ed:70:ea:b3:2b:d5:dd:51:b2:3c:25:f2:36:92: 24:88:d9:59:6e:d2:00:34:f2:a1:20:cb:5c:ec:49: 12:a3:04:f6:9f:82:b5:28:90:1a:32:95:75:27:15: 0e:89:83:19:4a:7b:16:b5:35:c0:e3:59:9e:aa:0f: a7:e7:7a:ac:1a:00:1b:60:d1:59:fe:9f:4f:a3:21: ad:c4:d7:60:99:2d:d8:9a:5f:32:96:23:c1:2c:fd: 70:9e:81:de:df:a6:d4:1c:4e:9d:59:bf:56:6f:7d: ce:b9:f4:99:36:86:60:aa:66:74:fc:b8:fa:51:88: 3c:56:95:a1:5f:a2:72:d9:8a:c7:44:14:17:d9:45: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B3:FD:5D:B3:75:1F:28:5C:FD:50:90:D9:44:F2:27:CB:69:43:96 X509v3 Authority Key Identifier: keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.187.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:e7:27:02:6b:65:d8:3d:43:0d:19:2e:49:f6:cc:ad:3f:9a: 1b:16:f8:e9:70:84:3e:17:f2:38:11:b1:52:34:1a:19:16:8c: ac:ff:91:1a:9a:da:8d:9a:41:47:c3:8c:fd:12:e6:27:1e:38: a5:1a:d7:6a:8e:26:b7:0c:93:e6:3c:7e:4a:2d:92:07:3f:63: d5:08:d9:3e:bc:c8:7f:ea:fb:8e:25:f7:2e:d6:76:08:5d:a7: 37:7b:fb:88:86:76:d6:e9:d0:cb:44:05:63:2c:c1:73:dd:ce: eb:f1:50:92:70:cf:43:a6:2a:04:b4:b7:d2:b5:bb:b9:29:8e: ce:5a:22:00:ff:cf:8e:74:34:c1:e7:43:7a:cb:60:6e:a3:50: c5:72:eb:0f:37:26:68:1e:95:02:21:93:cd:b5:e6:75:0b:64: da:fd:bd:57:66:bc:21:7c:61:5d:07:d1:99:6e:e2:b0:d3:36: 46:07:ad:6f:17:40:82:13:16:f5:2b:81:15:9d:74:55:c8:b0: 3f:54:50:24:d2:b6:d7:ff:75:02:e0:95:ca:47:bd:fa:33:f4: 40:80:91:aa:36:6c:83:73:8d:ae:d1:c7:53:25:11:2e:a5:e7: ba:b5:93:a8:5a:cf:f1:30:30:02:69:32:2a:9f:e3:1e:4b:a7: c8:4c:82:dc -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt4NH0fJ6CZP3Y0w8PVWfbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTM5ZjkzNTVkM2ViNzc4YjFiYjhlZTI3MjMzMjYwMTFh MTIyOWIwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGIzZmQ1ZGIzNzUxZjI4NWNmZDUwOTBkOTQ0ZjIyN2NiNjk0Mzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXV1ti6xvAE8YZE42tZ6ifFWfnTk 2inkHGllyjPdafzXVdGskjQCNAxsXCn91Tnoiwri42flFRDr6qyY4buHGkrQHpeD KDN1Gc1eXIuXUuMJgA2eZn40Hp5BNtVMeczFTMGPUMb7IF0Noo0aCtbzGAJeYd1k FdRu7XDqsyvV3VGyPCXyNpIkiNlZbtIANPKhIMtc7EkSowT2n4K1KJAaMpV1JxUO iYMZSnsWtTXA41meqg+n53qsGgAbYNFZ/p9PoyGtxNdgmS3Yml8yliPBLP1wnoHe 36bUHE6dWb9Wb33OufSZNoZgqmZ0/Lj6UYg8VpWhX6Jy2YrHRBQX2UUbXwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFECz/V2zdR8oXP1QkNlE8ifLaUOWMB8GA1UdIwQY MBaAFKhTn5NV0+t3ixu47icjMmARoSKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80ZjhlNzYtNTllNS00MGQxLWExM2Ut NzFmNGM0N2Y1MDZlLzEvUUxQOVhiTjFIeWhjX1ZDUTJVVHlKOHRwUTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80ZjhlNzYtNTllNS00MGQxLWExM2UtNzFmNGM0N2Y1MDZl LzEvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlLswDQYJ KoZIhvcNAQELBQADggEBAEPnJwJrZdg9Qw0ZLkn2zK0/mhsW+OlwhD4X8jgRsVI0 GhkWjKz/kRqa2o2aQUfDjP0S5iceOKUa12qOJrcMk+Y8fkotkgc/Y9UI2T68yH/q +44l9y7Wdghdpzd7+4iGdtbp0MtEBWMswXPdzuvxUJJwz0OmKgS0t9K1u7kpjs5a IgD/z450NMHnQ3rLYG6jUMVy6w83JmgelQIhk8215nULZNr9vVdmvCF8YV0H0Zlu 4rDTNkYHrW8XQIITFvUrgRWddFXIsD9UUCTSttf/dQLglcpHvfoz9ECAkao2bINz ja7Rx1MlES6l57q1k6haz/EwMAJpMiqf4x5Lp8hMgtw= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:16 2026 by rpki-client