This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/QDA-i1_uO7l2cpkirQ4QxILDVE4.roa File: QDA-i1_uO7l2cpkirQ4QxILDVE4.roa (raw, json) Hash identifier: nlLmxzPV9FPeDWmJ64dZ3ihDAd5qXUMVD7huuqkNYlA= Subject key identifier: 40:30:3E:8B:5F:EE:3B:B9:76:72:99:22:AD:0E:10:C4:82:C3:54:4E Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019B7EA6D8D8755031C95CDF34BB3E560934 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/QDA-i1_uO7l2cpkirQ4QxILDVE4.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48014 IP address blocks: 31.41.33.0/24 maxlen: 24 45.88.89.0/24 maxlen: 24 84.54.48.0/24 maxlen: 24 2001:3783::/32 maxlen: 32 2001:3787::/32 maxlen: 32 2a12:4040::/32 maxlen: 32 2a12:4045::/32 maxlen: 32 2a12:4047::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d8:d8:75:50:31:c9:5c:df:34:bb:3e:56:09:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40303e8b5fee3bb976729922ad0e10c482c3544e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:08:00:90:1d:29:dc:11:ea:45:61:1c:b6: b3:d6:f9:fd:9d:2c:ba:0d:f1:6f:eb:35:b2:78:84: 1d:e7:58:d2:aa:85:14:0d:a2:2e:32:59:e3:e3:39: be:04:0e:c1:fd:83:97:43:f2:a8:02:0d:7f:0c:27: 63:a8:37:6e:41:d7:e2:46:a6:9e:86:b6:09:ea:9c: 17:53:96:b0:b7:81:1d:1a:db:8f:e4:ed:d4:29:41: 69:89:ac:4c:33:c7:d6:b7:64:be:b6:4b:ad:18:57: 65:18:b1:d9:4c:b4:39:49:85:38:f3:4c:10:08:2b: 39:07:7c:ce:56:5e:6d:22:11:52:ee:ab:4e:a3:e6: 05:97:85:08:b0:ba:c5:dd:86:27:f6:c8:e8:69:60: 95:45:53:56:67:41:91:bf:c1:df:99:85:4d:5f:ed: 9d:21:53:be:a9:42:98:db:1e:71:e6:2f:cd:de:60: 1f:4f:ac:dc:1a:f5:9b:72:d6:13:2c:2c:c7:d0:67: 33:ac:49:a1:8e:37:ae:b0:54:33:85:c4:97:21:84: 3c:b9:16:f7:ed:2f:94:bf:83:aa:97:82:4d:a8:81: f1:d4:c0:a3:44:24:5d:8d:bd:68:73:a7:58:83:1c: 0c:5f:30:f0:45:1c:7c:23:d1:cb:13:e5:ef:3c:e1: 2e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:30:3E:8B:5F:EE:3B:B9:76:72:99:22:AD:0E:10:C4:82:C3:54:4E X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/QDA-i1_uO7l2cpkirQ4QxILDVE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.33.0/24 45.88.89.0/24 84.54.48.0/24 IPv6: 2001:3783::/32 2001:3787::/32 2a12:4040::/32 2a12:4045::/32 2a12:4047::/32 Signature Algorithm: sha256WithRSAEncryption 1e:c6:0b:7a:90:74:2a:87:0c:9a:c9:4a:1f:37:00:96:77:34: 27:73:fe:78:00:bd:cb:a8:ee:b1:cc:ad:4a:2a:4c:3d:d5:97: 7f:80:71:2c:54:2b:31:72:99:50:23:60:22:17:16:e6:60:c7: 94:14:2e:77:bb:4c:02:01:7a:f0:2e:ac:43:19:cd:74:c0:69: ac:43:bc:1b:29:b6:7d:24:16:08:13:ad:25:49:16:e6:cb:dc: 7f:e7:fd:88:63:d2:b7:c8:b2:11:fa:4e:69:74:a0:77:3b:78: bb:2a:61:3a:2c:22:c9:57:7f:2f:49:6b:48:12:3b:56:54:73: 77:a4:5c:b8:01:94:ee:07:14:d6:65:48:e0:41:24:a2:5b:39: 31:c6:12:da:e7:d8:23:f5:27:b2:9e:18:c9:6b:77:ee:6f:58: 60:27:8e:04:72:37:28:20:55:b4:aa:28:53:33:27:23:36:6f: 10:0c:32:ff:95:9a:a3:c6:0d:05:a4:d8:7d:ee:95:1a:01:92: 36:6f:c8:61:ea:8e:b9:ff:34:1a:39:a3:67:9d:4c:f2:33:d6: d4:c8:ff:15:d2:0e:19:ef:67:13:9d:9f:53:bc:a2:54:f5:b8: f3:43:14:5b:21:6e:41:c6:08:39:43:d5:9f:ba:7b:13:b3:c2: 4b:fe:f4:6a -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt+ptjYdVAxyVzfNLs+Vgk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDMwM2U4YjVmZWUzYmI5NzY3Mjk5MjJhZDBlMTBjNDgyYzM1NDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+EIAJAdKdwR6kVhHLaz1vn9nSy6 DfFv6zWyeIQd51jSqoUUDaIuMlnj4zm+BA7B/YOXQ/KoAg1/DCdjqDduQdfiRqae hrYJ6pwXU5awt4EdGtuP5O3UKUFpiaxMM8fWt2S+tkutGFdlGLHZTLQ5SYU480wQ CCs5B3zOVl5tIhFS7qtOo+YFl4UIsLrF3YYn9sjoaWCVRVNWZ0GRv8HfmYVNX+2d IVO+qUKY2x5x5i/N3mAfT6zcGvWbctYTLCzH0GczrEmhjjeusFQzhcSXIYQ8uRb3 7S+Uv4Oql4JNqIHx1MCjRCRdjb1oc6dYgxwMXzDwRRx8I9HLE+XvPOEu9QIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFEAwPotf7ju5dnKZIq0OEMSCw1ROMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvUURBLWkxX3VPN2wyY3BraXJRNFF4SUxEVkU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAYBAIAATASAwQAHykhAwQA LVhZAwQAVDYwMCkEAgACMCMDBQAgATeDAwUAIAE3hwMFACoSQEADBQAqEkBFAwUA KhJARzANBgkqhkiG9w0BAQsFAAOCAQEAHsYLepB0KocMmslKHzcAlnc0J3P+eAC9 y6juscytSipMPdWXf4BxLFQrMXKZUCNgIhcW5mDHlBQud7tMAgF68C6sQxnNdMBp rEO8Gym2fSQWCBOtJUkW5svcf+f9iGPSt8iyEfpOaXSgdzt4uyphOiwiyVd/L0lr SBI7VlRzd6RcuAGU7gcU1mVI4EEkols5McYS2ufYI/Unsp4YyWt37m9YYCeOBHI3 KCBVtKooUzMnIzZvEAwy/5Wao8YNBaTYfe6VGgGSNm/IYeqOuf80GjmjZ51M8jPW 1Mj/FdIOGe9nE52fU7yiVPW480MUWyFuQcYIOUPVn7p7E7PCS/70ag== -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:05 2026 by rpki-client