This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qDLdXKoUpJm2dsTwBt4zQnSNQnw.roa File: qDLdXKoUpJm2dsTwBt4zQnSNQnw.roa (raw, json) Hash identifier: iyRRGWBDG+XLYgp/kklLhjkEJWQzUFTgBj54SJwLLnw= Subject key identifier: A8:32:DD:5C:AA:14:A4:99:B6:76:C4:F0:06:DE:33:42:74:8D:42:7C Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Certificate serial: 019BE574B914030D2B7BE4C820F2E1B8333F Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qDLdXKoUpJm2dsTwBt4zQnSNQnw.roa Signing time: Thu 22 Jan 2026 11:26:30 +0000 ROA not before: Thu 22 Jan 2026 11:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59547 IP address blocks: 141.136.16.0/20 maxlen: 24 151.248.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:74:b9:14:03:0d:2b:7b:e4:c8:20:f2:e1:b8:33:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Validity Not Before: Jan 22 11:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a832dd5caa14a499b676c4f006de3342748d427c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:8b:77:f6:2b:a4:c2:25:af:07:96:47:3c: 10:aa:d4:cf:75:fa:64:f2:dd:d1:4d:29:86:b0:d6: 42:21:e4:24:2f:c5:2d:e6:5e:d2:08:4a:4b:d2:f1: 25:5a:7b:ca:97:81:ab:15:3b:30:cd:f8:f3:f6:af: b4:46:28:70:04:b4:31:ab:15:3f:7f:b2:7f:a6:12: 07:46:e9:5c:1e:ee:6c:25:c7:45:f0:e9:d1:fd:ca: 80:b1:d4:4d:7f:e7:63:f9:2e:74:b9:9e:c6:a2:d7: 5a:03:c5:c2:b3:65:8c:19:e9:ff:f3:0c:f3:4f:b0: 50:c8:af:9d:6b:04:df:19:f2:7e:03:cd:72:85:96: 99:d4:39:06:9e:b6:4a:e0:8e:86:7c:03:51:9c:a2: 00:2f:9f:80:ba:59:40:86:35:3c:14:42:0c:f6:98: a3:a8:a0:c3:53:c3:77:be:b8:33:53:5f:53:c3:c7: d3:39:66:0a:3a:63:81:e6:08:34:76:bb:8d:9e:fd: 1e:42:3c:32:53:c7:11:12:3c:f7:b6:d0:89:79:19: 40:d8:77:4f:95:7c:24:47:4e:39:d9:c3:13:6d:df: 88:d8:42:13:86:27:eb:3d:95:a8:07:ed:f7:24:28: fa:32:ef:dc:b4:21:af:17:01:df:c8:b9:50:0c:73: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:32:DD:5C:AA:14:A4:99:B6:76:C4:F0:06:DE:33:42:74:8D:42:7C X509v3 Authority Key Identifier: keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qDLdXKoUpJm2dsTwBt4zQnSNQnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.136.16.0/20 151.248.48.0/21 Signature Algorithm: sha256WithRSAEncryption 19:8c:49:91:70:d7:f0:82:0c:6f:9b:01:bd:37:c3:6f:cc:41: 5c:53:fa:f7:e0:07:76:3d:b8:fb:0d:3f:ac:28:46:42:64:d1: 8e:4a:1f:c0:90:60:6b:94:19:c7:9d:e4:67:91:c8:d1:79:ed: cc:f9:47:35:9d:f8:cd:21:5e:00:92:6c:82:85:b4:1d:cd:6a: 20:89:e7:83:1f:fa:ba:0d:ad:a8:7e:d3:3b:af:87:7e:e1:25: ef:0a:e9:e0:b6:fa:e4:75:09:c6:23:74:fa:c6:44:9e:b5:f2: 8f:26:82:30:4f:f9:3e:96:b4:51:e1:5c:00:0f:42:37:b3:9c: f3:49:05:ae:da:76:d2:88:ca:35:9e:7b:95:46:f3:3f:06:a8: 91:55:95:d7:df:d7:a1:16:1c:e5:b7:60:fa:d6:26:44:14:35: 07:35:ce:72:b8:e8:79:85:18:a2:ba:9c:f7:a8:b4:e3:74:b4: da:77:e4:b4:f6:ad:9b:c7:0e:19:5d:f8:c4:7c:d2:50:d8:6e: 15:d7:ed:38:d2:66:ee:bc:72:9d:dd:5b:b7:0b:59:c8:6d:1a: a6:c0:93:1e:31:9c:6f:a0:0b:ac:3e:ba:8b:ce:80:25:a6:26: 50:77:32:52:e1:12:e0:20:02:fb:89:6b:f1:44:55:88:e0:01: a3:18:f0:3e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvldLkUAw0re+TIIPLhuDM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjU4MGUxOGFkNmZmOGRjOTQyYmU4ODNjMTZkZThiNzMx Zjk2MDUwHhcNMjYwMTIyMTEyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODMyZGQ1Y2FhMTRhNDk5YjY3NmM0ZjAwNmRlMzM0Mjc0OGQ0MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx6Ld/YrpMIlrweWRzwQqtTPdfpk 8t3RTSmGsNZCIeQkL8Ut5l7SCEpL0vElWnvKl4GrFTswzfjz9q+0RihwBLQxqxU/ f7J/phIHRulcHu5sJcdF8OnR/cqAsdRNf+dj+S50uZ7GotdaA8XCs2WMGen/8wzz T7BQyK+dawTfGfJ+A81yhZaZ1DkGnrZK4I6GfANRnKIAL5+AullAhjU8FEIM9pij qKDDU8N3vrgzU19Tw8fTOWYKOmOB5gg0druNnv0eQjwyU8cREjz3ttCJeRlA2HdP lXwkR0452cMTbd+I2EIThifrPZWoB+33JCj6Mu/ctCGvFwHfyLlQDHNtOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKgy3VyqFKSZtnbE8AbeM0J0jUJ8MB8GA1UdIwQY MBaAFKhlgOGK1v+NyUK+iDwW3otzH5YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEt MjM2ZTkyZmM2YTU5LzEvcURMZFhLb1VwSm0yZHNUd0J0NHpRblNOUW53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEtMjM2ZTkyZmM2YTU5 LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEjYgQAwQD l/gwMA0GCSqGSIb3DQEBCwUAA4IBAQAZjEmRcNfwggxvmwG9N8NvzEFcU/r34Ad2 Pbj7DT+sKEZCZNGOSh/AkGBrlBnHneRnkcjRee3M+Uc1nfjNIV4AkmyChbQdzWog ieeDH/q6Da2oftM7r4d+4SXvCungtvrkdQnGI3T6xkSetfKPJoIwT/k+lrRR4VwA D0I3s5zzSQWu2nbSiMo1nnuVRvM/BqiRVZXX39ehFhzlt2D61iZEFDUHNc5yuOh5 hRiiupz3qLTjdLTad+S09q2bxw4ZXfjEfNJQ2G4V1+040mbuvHKd3Vu3C1nIbRqm wJMeMZxvoAusPrqLzoAlpiZQdzJS4RLgIAL7iWvxRFWI4AGjGPA+ -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:35 2026 by rpki-client