This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/QeC4jltjMzL5cvM7cD5MnVWWoIA.roa File: QeC4jltjMzL5cvM7cD5MnVWWoIA.roa (raw, json) Hash identifier: Kmf6YMhA+eYnv3eAUVenCP2DSzTqCja78UTer2zlhVc= Subject key identifier: 41:E0:B8:8E:5B:63:33:32:F9:72:F3:3B:70:3E:4C:9D:55:96:A0:80 Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a Certificate serial: 019B7A5AC23643EACAECDB6B7308DC87FA37 Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/QeC4jltjMzL5cvM7cD5MnVWWoIA.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34108 IP address blocks: 145.32.0.0/16 maxlen: 16 145.32.0.0/17 maxlen: 17 145.32.0.0/24 maxlen: 24 145.32.10.0/23 maxlen: 23 145.32.66.0/24 maxlen: 24 145.32.86.0/23 maxlen: 24 145.32.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c2:36:43:ea:ca:ec:db:6b:73:08:dc:87:fa:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41e0b88e5b633332f972f33b703e4c9d5596a080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:11:64:ca:bf:30:d7:a1:97:8d:d5:8b:dd: 9a:a6:35:23:8c:6b:4a:45:6a:3a:d3:e5:e2:18:09: 40:f6:93:b9:8a:db:70:1f:fb:f2:62:0f:36:6c:da: 5a:f2:c1:42:9e:4b:31:0a:e9:df:e1:53:07:a9:20: 4b:2f:16:2c:61:25:7e:1d:20:98:1f:aa:3c:54:b5: 50:ae:5d:6c:6b:84:85:0b:a7:74:a0:42:56:c8:bb: 5e:b2:d0:da:41:7d:c0:6f:76:d8:2d:00:99:ab:c7: e9:f4:da:89:ad:4f:1e:61:a0:d9:e3:15:53:9d:9c: d3:09:e6:df:a0:7e:45:3d:61:46:e9:77:78:03:88: 0e:d6:ec:88:b8:4a:a9:59:4f:6a:eb:4c:fd:ce:73: 4c:22:17:b7:78:d6:5c:2e:83:6c:8a:ac:1a:5e:99: 97:b4:0c:26:a6:0d:10:b3:62:77:05:7b:ed:d5:92: bf:d6:88:15:d6:cd:ec:ec:6a:f5:32:98:11:cb:55: f9:27:3f:9c:1b:fb:9a:d9:62:d9:70:e1:67:3f:59: bd:43:77:88:91:1a:ae:26:26:81:0d:f5:69:f4:28: f7:ee:a0:7c:9b:9d:67:81:c4:41:59:20:34:e3:b3: e2:7a:72:7e:98:b6:76:d0:54:53:f7:c0:e6:6f:fc: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E0:B8:8E:5B:63:33:32:F9:72:F3:3B:70:3E:4C:9D:55:96:A0:80 X509v3 Authority Key Identifier: keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/QeC4jltjMzL5cvM7cD5MnVWWoIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 64:e0:35:35:ab:cc:df:c0:89:82:8a:41:9c:70:7e:ba:a2:58: cb:60:ca:a6:79:96:df:5d:f3:80:ce:11:ba:40:21:08:7c:d9: a9:fd:27:4d:0f:e8:c0:27:98:b1:37:af:97:97:7b:48:c0:ca: b5:5f:84:3a:d2:49:10:99:ba:2d:41:85:2b:c5:a1:dc:57:83: f3:22:e4:3f:e2:26:bd:10:f4:c0:66:ff:ee:be:d4:75:96:39: e0:82:d4:53:a9:36:95:86:84:46:ab:4f:75:39:b2:9e:0b:40: cb:d7:ce:e9:19:bc:43:c5:18:f7:a0:78:48:65:88:8c:f2:52: a3:f6:26:6c:2b:06:e6:66:b2:b7:25:08:d7:7e:17:a2:46:e3: 49:46:6e:43:40:3b:88:01:8e:3f:17:75:3c:f8:34:a3:6a:a2: 2b:69:1b:f2:9e:6f:b2:12:ec:6b:0e:c8:98:89:d8:63:e0:fa: 76:dc:3e:5f:cc:8e:19:58:ef:86:67:62:bb:46:65:97:95:f0: e4:c9:c5:f9:af:d3:c0:42:fb:a1:e6:26:8a:5f:53:78:73:bd: 54:fe:e8:0f:9b:53:91:48:3b:2c:ae:81:15:54:2a:fc:5a:08: fc:84:02:01:96:71:fc:b3:19:87:ad:54:70:c2:7b:89:2a:55: c9:36:18:4b -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6WsI2Q+rK7Ntrcwjch/o3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTE1NjczYjI4YmRmYWRiMmMyMDE5YWM2OGQwNDY0ZmQy MWI3MWEwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWUwYjg4ZTViNjMzMzMyZjk3MmYzM2I3MDNlNGM5ZDU1OTZhMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk8RZMq/MNehl43Vi92apjUjjGtK RWo60+XiGAlA9pO5ittwH/vyYg82bNpa8sFCnksxCunf4VMHqSBLLxYsYSV+HSCY H6o8VLVQrl1sa4SFC6d0oEJWyLtestDaQX3Ab3bYLQCZq8fp9NqJrU8eYaDZ4xVT nZzTCebfoH5FPWFG6Xd4A4gO1uyIuEqpWU9q60z9znNMIhe3eNZcLoNsiqwaXpmX tAwmpg0Qs2J3BXvt1ZK/1ogV1s3s7Gr1MpgRy1X5Jz+cG/ua2WLZcOFnP1m9Q3eI kRquJiaBDfVp9Cj37qB8m51ngcRBWSA047PienJ+mLZ20FRT98Dmb/zS6wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFEHguI5bYzMy+XLzO3A+TJ1VlqCAMB8GA1UdIwQY MBaAFDeRVnOyi9+tssIBmsaNBGT9IbcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVGV2M3S0wzNjJ5d2dHYXhvMEVaUDBodHhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZWE0ZjctZDcwZS00MmEyLWFmZDct M2UzYTE4OGY0OWRlLzEvUWVDNGpsdGpNekw1Y3ZNN2NENU1uVldXb0lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS80ZWE0ZjctZDcwZS00MmEyLWFmZDctM2UzYTE4OGY0OWRl LzEvTjVGV2M3S0wzNjJ5d2dHYXhvMEVaUDBodHhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkSAwDQYJ KoZIhvcNAQELBQADggEBAGTgNTWrzN/AiYKKQZxwfrqiWMtgyqZ5lt9d84DOEbpA IQh82an9J00P6MAnmLE3r5eXe0jAyrVfhDrSSRCZui1BhSvFodxXg/Mi5D/iJr0Q 9MBm/+6+1HWWOeCC1FOpNpWGhEarT3U5sp4LQMvXzukZvEPFGPegeEhliIzyUqP2 JmwrBuZmsrclCNd+F6JG40lGbkNAO4gBjj8XdTz4NKNqoitpG/Keb7IS7GsOyJiJ 2GPg+nbcPl/MjhlY74ZnYrtGZZeV8OTJxfmv08BC+6HmJopfU3hzvVT+6A+bU5FI OyyugRVUKvxaCPyEAgGWcfyzGYetVHDCe4kqVck2GEs= -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:19 2026 by rpki-client