This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa File: B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa (raw, json) Hash identifier: xAVVZn3+u5SiYc0g3K3z0LHTfUSG0q/VqxbfyLSsAU0= Subject key identifier: 07:EA:B0:5E:16:61:36:A3:FB:45:DF:6B:AF:3A:E5:9C:8B:53:AA:F5 Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4 Certificate serial: 019B775900872C882C721C3F567814FDE19C Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205953 IP address blocks: 45.159.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:87:2c:88:2c:72:1c:3f:56:78:14:fd:e1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07eab05e166136a3fb45df6baf3ae59c8b53aaf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:d4:f9:a9:f7:c6:0e:61:cf:e3:59:05:24: 79:59:89:76:df:d7:dc:20:be:0f:40:d6:63:2e:15: 73:ac:44:15:6b:2d:b1:42:c8:78:b7:ef:c0:39:d1: 3b:55:d8:b4:b3:64:f9:da:01:ff:35:9f:73:a7:0d: af:49:d5:69:0f:d8:1b:05:38:05:c0:c2:cf:e1:91: 3b:4b:03:21:f1:6a:f3:9e:3e:9f:b0:e3:94:47:f2: f0:6a:e1:94:26:ae:ca:6c:22:0f:f0:16:69:c9:d6: 8e:70:56:2d:a6:c9:01:f7:0c:7f:bd:43:b1:7c:f8: 34:1f:2c:49:3a:a4:05:e1:3c:7c:51:be:7e:ec:ec: 5c:6b:74:72:cc:8a:a5:f1:9e:99:d2:82:ce:8f:ee: a4:18:33:b0:70:1d:02:22:e9:a0:21:50:69:01:73: 1a:63:ea:1b:a4:c0:0a:d3:b1:d3:79:7c:1a:59:30: 43:45:fb:6c:2b:00:7a:be:3a:e7:26:49:f8:53:d1: 63:06:88:c0:42:b6:d8:5e:96:43:0c:7b:22:09:e4: 63:18:43:bf:8a:21:03:d1:f4:42:a0:32:5e:de:02: 37:ce:ac:24:7c:50:9d:85:b5:40:6f:ba:b9:6c:b4: 12:b2:83:85:c1:a4:95:18:ed:a4:2b:b0:60:44:45: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EA:B0:5E:16:61:36:A3:FB:45:DF:6B:AF:3A:E5:9C:8B:53:AA:F5 X509v3 Authority Key Identifier: keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.30.0/24 Signature Algorithm: sha256WithRSAEncryption 43:00:9c:3b:e7:a4:16:b0:77:39:0a:7b:3a:96:c7:d8:df:ec: c5:e6:a2:ef:49:5b:97:21:51:b1:e6:33:01:b5:98:13:a1:60: 3f:2d:85:e1:7e:39:7d:ee:87:11:4e:34:84:0f:99:d4:f4:39: b2:d6:90:22:83:9e:c1:f6:39:32:c6:12:5c:a1:3d:a4:ef:d0: 5a:f3:49:98:8f:a9:3a:45:e9:98:bc:32:11:21:67:ef:83:83: 78:e3:3e:9e:6f:27:f1:d7:c6:52:9e:a0:6d:75:15:04:c2:5b: ad:e7:98:fe:41:fe:02:3f:11:ee:27:9e:22:9c:31:02:0f:7f: f3:58:b3:6b:4f:d1:2b:96:67:62:ba:ce:7e:49:d7:12:15:f3: fe:dd:6b:d1:28:d1:bc:74:cf:41:5c:1b:04:99:57:5a:5e:b4: 3d:61:8e:f7:4f:34:81:94:f7:d0:cd:1a:02:1a:c1:fc:e0:1b: fb:98:84:f4:23:d0:4c:86:b7:1e:a3:cb:e9:cb:17:fb:3c:71: ef:87:f8:60:33:ac:e3:26:4d:c5:3c:75:9b:7f:e0:1f:d9:fb: 59:56:75:c0:b7:16:aa:ea:92:3f:38:2f:0a:df:73:d3:e3:3a: db:75:7d:70:4c:90:06:01:33:9b:05:3a:51:71:37:4a:b5:66: 3d:6a:71:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQCHLIgschw/VngU/eGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDJkM2Y5YjMxMTI2ZTA4NTAyNjU3MTVjOWZjMzIxNzRi NTU3YTQwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2VhYjA1ZTE2NjEzNmEzZmI0NWRmNmJhZjNhZTU5YzhiNTNhYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXTU+an3xg5hz+NZBSR5WYl239fc IL4PQNZjLhVzrEQVay2xQsh4t+/AOdE7Vdi0s2T52gH/NZ9zpw2vSdVpD9gbBTgF wMLP4ZE7SwMh8Wrznj6fsOOUR/LwauGUJq7KbCIP8BZpydaOcFYtpskB9wx/vUOx fPg0HyxJOqQF4Tx8Ub5+7Oxca3RyzIql8Z6Z0oLOj+6kGDOwcB0CIumgIVBpAXMa Y+obpMAK07HTeXwaWTBDRftsKwB6vjrnJkn4U9FjBojAQrbYXpZDDHsiCeRjGEO/ iiED0fRCoDJe3gI3zqwkfFCdhbVAb7q5bLQSsoOFwaSVGO2kK7BgREVYmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAfqsF4WYTaj+0Xfa6865ZyLU6r1MB8GA1UdIwQY MBaAFEFC0/mzESbghQJlcVyfwyF0tVekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGIt OWM5OGQxMTE5N2I3LzEvQi1xd1hoWmhOcVA3UmQ5cnJ6cmxuSXRUcXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGItOWM5OGQxMTE5N2I3 LzEvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ8eMA0G CSqGSIb3DQEBCwUAA4IBAQBDAJw756QWsHc5Cns6lsfY3+zF5qLvSVuXIVGx5jMB tZgToWA/LYXhfjl97ocRTjSED5nU9Dmy1pAig57B9jkyxhJcoT2k79Ba80mYj6k6 RemYvDIRIWfvg4N44z6ebyfx18ZSnqBtdRUEwlut55j+Qf4CPxHuJ54inDECD3/z WLNrT9Erlmdius5+SdcSFfP+3WvRKNG8dM9BXBsEmVdaXrQ9YY73TzSBlPfQzRoC GsH84Bv7mIT0I9BMhrceo8vpyxf7PHHvh/hgM6zjJk3FPHWbf+Af2ftZVnXAtxaq 6pI/OC8K33PT4zrbdX1wTJAGATObBTpRcTdKtWY9anEe -----END CERTIFICATE-----Generated at Mon Jan 26 05:34:15 2026 by rpki-client