This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/Q-ZhLXGU3V7WMJf_F4jA-hfVPCo.roa File: Q-ZhLXGU3V7WMJf_F4jA-hfVPCo.roa (raw, json) Hash identifier: Ad4i58VjKhwdfxFqTtK2L0c60TXelJ6/sX2iLUaz7Lc= Subject key identifier: 43:E6:61:2D:71:94:DD:5E:D6:30:97:FF:17:88:C0:FA:17:D5:3C:2A Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Certificate serial: 019B7C7FB6FB92F8139744065971BEEF8BBA Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/Q-ZhLXGU3V7WMJf_F4jA-hfVPCo.roa Signing time: Fri 02 Jan 2026 02:18:23 +0000 ROA not before: Fri 02 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29311 IP address blocks: 159.46.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b6:fb:92:f8:13:97:44:06:59:71:be:ef:8b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Validity Not Before: Jan 2 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43e6612d7194dd5ed63097ff1788c0fa17d53c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:00:1e:ac:bd:b2:4f:7a:a8:ef:f8:fa:68: 60:90:82:c3:ec:6f:af:2f:b8:01:85:ed:3a:b0:db: 6f:e3:81:c6:eb:cc:77:22:6c:af:77:b3:2c:11:54: 13:03:73:ec:0c:2e:d6:40:c1:2c:b0:26:8a:e5:6a: 9e:74:0d:d8:f0:e4:9d:52:ce:77:71:37:01:62:67: 67:9e:cc:d7:6b:1d:89:c9:ac:ab:a2:c3:56:16:21: 77:ca:81:ae:d1:65:97:a6:00:f3:f6:99:5e:ab:6f: 81:82:09:a8:04:f4:1a:c9:a5:a8:de:33:53:d4:dc: 82:e6:ab:2d:38:71:87:b9:62:a5:ff:c8:56:ad:22: 84:c2:6b:6c:c6:c5:ba:2c:6a:50:ae:a5:1e:14:90: 9f:e8:21:83:fc:11:e8:06:83:15:fc:a7:ec:60:69: ab:e9:c0:32:25:f7:d4:75:52:84:24:2a:c6:2d:ea: 95:ed:92:01:ba:c3:f4:e1:55:f0:c9:d4:ce:f6:42: 28:b1:74:08:08:49:d2:fd:da:a9:1f:d2:2d:13:a1: ad:3a:36:73:d6:61:32:a3:f4:ec:17:c0:ba:32:fb: 06:66:09:8f:d6:c3:3e:bb:01:d6:46:85:b8:f7:c5: b6:b4:2b:c3:a0:b5:46:9e:f7:d0:91:bf:2c:18:cb: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E6:61:2D:71:94:DD:5E:D6:30:97:FF:17:88:C0:FA:17:D5:3C:2A X509v3 Authority Key Identifier: keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/Q-ZhLXGU3V7WMJf_F4jA-hfVPCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.46.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9a:0c:4e:aa:bd:b3:da:d9:1b:11:b3:0a:db:00:ae:7e:b3:20: 51:1c:81:de:f8:6f:98:c2:b0:ab:78:20:9e:a0:fc:0a:94:6a: ee:d4:27:fb:9d:0d:9a:a6:8c:c2:2c:b9:c2:55:11:1d:11:2e: b5:01:a3:77:81:88:3e:c4:a3:34:97:c7:54:db:8f:f9:f4:46: 00:b2:b2:07:0a:44:5b:0f:96:e4:43:7c:5a:3a:52:ca:0a:6f: 13:14:15:7d:f6:60:f0:93:17:25:6f:76:0d:2a:1a:fe:6f:6d: 52:2c:8f:58:18:07:0f:0b:0b:0f:b2:5c:02:23:b6:46:18:24: 1c:c5:27:34:3e:82:2e:72:2f:d1:9a:6e:27:b1:15:30:3c:ee: dd:f3:b6:f7:ec:34:9f:21:39:d6:af:0e:5a:f7:e3:42:f0:28: 2d:99:16:94:d5:7c:97:bb:7a:87:09:cf:40:2a:41:bc:9e:44: 17:96:a3:86:2f:87:b8:0d:21:26:7f:0d:8f:b0:93:2a:ff:9f: c5:bf:e6:52:6b:11:01:d6:ff:c2:96:09:e2:84:d4:cd:58:fa: 79:59:2c:f4:cf:eb:21:57:b4:d4:2d:93:89:b2:84:47:27:7c: f2:f7:b6:32:37:28:f3:42:2d:86:cb:f2:8f:d2:88:01:e8:b4: ec:de:d5:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7b7kvgTl0QGWXG+74u6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh NzFjNGIwHhcNMjYwMTAyMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2U2NjEyZDcxOTRkZDVlZDYzMDk3ZmYxNzg4YzBmYTE3ZDUzYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBUAHqy9sk96qO/4+mhgkILD7G+v L7gBhe06sNtv44HG68x3Imyvd7MsEVQTA3PsDC7WQMEssCaK5WqedA3Y8OSdUs53 cTcBYmdnnszXax2JyayrosNWFiF3yoGu0WWXpgDz9pleq2+BggmoBPQayaWo3jNT 1NyC5qstOHGHuWKl/8hWrSKEwmtsxsW6LGpQrqUeFJCf6CGD/BHoBoMV/KfsYGmr 6cAyJffUdVKEJCrGLeqV7ZIBusP04VXwydTO9kIosXQICEnS/dqpH9ItE6GtOjZz 1mEyo/TsF8C6MvsGZgmP1sM+uwHWRoW498W2tCvDoLVGnvfQkb8sGMuBiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPmYS1xlN1e1jCX/xeIwPoX1TwqMB8GA1UdIwQY MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt YWYzOWJiMDMwOTdmLzEvUS1aaExYR1UzVjdXTUpmX0Y0akEtaGZWUENvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGny7AMA0G CSqGSIb3DQEBCwUAA4IBAQCaDE6qvbPa2RsRswrbAK5+syBRHIHe+G+YwrCreCCe oPwKlGru1Cf7nQ2apozCLLnCVREdES61AaN3gYg+xKM0l8dU24/59EYAsrIHCkRb D5bkQ3xaOlLKCm8TFBV99mDwkxclb3YNKhr+b21SLI9YGAcPCwsPslwCI7ZGGCQc xSc0PoIuci/Rmm4nsRUwPO7d87b37DSfITnWrw5a9+NC8CgtmRaU1XyXu3qHCc9A KkG8nkQXlqOGL4e4DSEmfw2PsJMq/5/Fv+ZSaxEB1v/ClgnihNTNWPp5WSz0z+sh V7TULZOJsoRHJ3zy97YyNyjzQi2Gy/KP0ogB6LTs3tU0 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:30 2026 by rpki-client