This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RuQXXi-6-qy1uaGZNUfi12LVLGI.roa File: RuQXXi-6-qy1uaGZNUfi12LVLGI.roa (raw, json) Hash identifier: 5Rg/CZC0IFBz427D+HRf1bUNFpJEC9PJGoe7AbtNXc0= Subject key identifier: 46:E4:17:5E:2F:BA:FA:AC:B5:B9:A1:99:35:47:E2:D7:62:D5:2C:62 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC622E705CC540BE6A46F1821D1E42 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RuQXXi-6-qy1uaGZNUfi12LVLGI.roa Signing time: Thu 01 Jan 2026 14:18:13 +0000 ROA not before: Thu 01 Jan 2026 14:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32613 IP address blocks: 64.188.100.0/22 maxlen: 24 64.188.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:62:2e:70:5c:c5:40:be:6a:46:f1:82:1d:1e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46e4175e2fbafaacb5b9a1993547e2d762d52c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:62:2a:dd:ab:49:07:84:22:b1:17:4c:e4:57: 39:c0:25:35:7a:b3:da:84:f9:09:f2:3f:04:fc:15: 1a:b4:27:59:2c:ed:24:71:33:f7:23:75:32:bc:75: d7:68:ba:fe:36:6c:6c:0e:7d:57:08:12:fb:da:29: 62:78:96:84:cc:b8:0d:6a:3a:4d:a8:f1:ea:6d:91: cd:13:03:b9:8e:ba:e9:30:dd:65:3b:4e:70:1b:66: d0:2d:d5:43:6d:c3:09:59:8a:59:55:5e:6c:44:1e: f9:f1:64:2d:68:be:04:16:1f:97:8e:49:0f:c9:46: 24:4c:b7:8c:7e:59:73:de:bf:22:a7:53:d5:8a:2f: b1:a7:04:2c:5b:33:d2:2b:dc:98:c6:7c:08:c3:ba: 75:39:90:9c:c0:80:ed:94:72:8f:8f:0d:d4:22:cf: f4:28:6a:67:a7:4c:aa:7c:3d:d8:04:26:fb:4a:6e: c5:c9:87:71:f2:27:62:14:a7:05:a7:a7:de:3f:69: 0e:75:fe:28:91:3e:4e:13:68:39:73:05:5e:c6:61: e8:4e:66:37:08:e4:38:79:2c:2f:08:76:3f:35:09: a9:67:8c:05:33:c0:1e:d0:00:be:3a:9a:83:85:2c: e3:fa:17:aa:43:d5:98:76:4b:2b:d1:ba:6f:06:19: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E4:17:5E:2F:BA:FA:AC:B5:B9:A1:99:35:47:E2:D7:62:D5:2C:62 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RuQXXi-6-qy1uaGZNUfi12LVLGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.100.0/22 64.188.120.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:49:12:18:d1:f7:df:40:d9:69:b4:ab:8f:25:37:d8:e1:39: 25:13:6b:ed:86:ab:5d:9a:1a:84:4c:ed:17:04:c3:10:c3:03: ca:2b:30:e9:a8:f1:3b:b0:46:e2:40:28:96:58:b5:97:f8:52: a3:ef:8a:f4:20:86:ba:bd:33:ad:ac:3b:ad:b8:53:f8:08:6f: 23:b3:60:50:b9:01:97:ca:06:3d:a7:99:64:42:29:9c:ad:88: e5:31:d0:97:20:22:4a:34:dc:dd:e9:82:66:dc:f2:d0:5e:e1: f6:fe:09:de:5d:5a:0d:c3:52:5d:b8:c9:b6:93:56:82:c8:23: 73:b4:e5:3b:36:d5:a2:a8:51:ee:92:5d:56:0c:79:8c:ef:40: 8b:29:d9:df:34:80:97:fd:2b:4a:b6:b2:27:f7:f5:c1:ad:46: bb:33:af:a7:fc:d0:f5:6c:82:87:aa:73:68:0c:2a:a6:88:4a: 2e:bf:9e:fc:55:cb:cc:03:86:87:5c:69:64:32:01:30:f5:e3: 80:47:60:86:39:ba:d3:19:e8:e8:b1:3f:c0:65:e8:3a:c0:ac: 46:6d:c2:61:4c:fb:99:a6:2c:46:7a:8f:29:78:5e:5c:87:b1: 0e:b8:47:eb:79:82:62:bc:93:59:69:04:27:c3:a1:2c:7c:ec: e3:1d:1b:39 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57GIucFzFQL5qRvGCHR5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmU0MTc1ZTJmYmFmYWFjYjViOWExOTkzNTQ3ZTJkNzYyZDUyYzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmIq3atJB4QisRdM5Fc5wCU1erPa hPkJ8j8E/BUatCdZLO0kcTP3I3UyvHXXaLr+NmxsDn1XCBL72ilieJaEzLgNajpN qPHqbZHNEwO5jrrpMN1lO05wG2bQLdVDbcMJWYpZVV5sRB758WQtaL4EFh+XjkkP yUYkTLeMfllz3r8ip1PVii+xpwQsWzPSK9yYxnwIw7p1OZCcwIDtlHKPjw3UIs/0 KGpnp0yqfD3YBCb7Sm7FyYdx8idiFKcFp6feP2kOdf4okT5OE2g5cwVexmHoTmY3 COQ4eSwvCHY/NQmpZ4wFM8Ae0AC+OpqDhSzj+heqQ9WYdksr0bpvBhm7+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEbkF14vuvqstbmhmTVH4tdi1SxiMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvUnVRWFhpLTYtcXkxdWFHWk5VZmkxMkxWTEdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQLxkAwQC QLx4MA0GCSqGSIb3DQEBCwUAA4IBAQBaSRIY0fffQNlptKuPJTfY4TklE2vthqtd mhqETO0XBMMQwwPKKzDpqPE7sEbiQCiWWLWX+FKj74r0IIa6vTOtrDutuFP4CG8j s2BQuQGXygY9p5lkQimcrYjlMdCXICJKNNzd6YJm3PLQXuH2/gneXVoNw1JduMm2 k1aCyCNztOU7NtWiqFHukl1WDHmM70CLKdnfNICX/StKtrIn9/XBrUa7M6+n/ND1 bIKHqnNoDCqmiEouv578VcvMA4aHXGlkMgEw9eOAR2CGObrTGejosT/AZeg6wKxG bcJhTPuZpixGeo8peF5ch7EOuEfreYJivJNZaQQnw6EsfOzjHRs5 -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:37 2026 by rpki-client