This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/qVXn2mio2xGIpazTfAYClCM2JZM.roa File: qVXn2mio2xGIpazTfAYClCM2JZM.roa (raw, json) Hash identifier: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA= Subject key identifier: A9:55:E7:DA:68:A8:DB:11:88:A5:AC:D3:7C:06:02:94:23:36:25:93 Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9 Certificate serial: 019B78346B81EF8567FEA35E677FDC1EFAA0 Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/qVXn2mio2xGIpazTfAYClCM2JZM.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48072 IP address blocks: 45.90.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6b:81:ef:85:67:fe:a3:5e:67:7f:dc:1e:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a955e7da68a8db1188a5acd37c06029423362593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:ef:ba:54:d3:08:49:9a:db:f6:3a:f1:61: cd:02:b1:0e:43:fb:e3:d9:88:e4:89:33:a7:dd:a1: 94:ad:fe:d2:d8:be:14:51:00:c3:94:ab:f4:c9:a6: 83:f7:b6:95:08:b6:c0:fa:94:ef:a7:6f:10:72:70: d6:1e:17:7a:b9:77:52:d7:a7:6b:82:12:57:fe:52: 14:45:fd:18:f1:47:1d:d4:c8:82:3d:58:dd:51:c4: 75:ab:10:87:13:61:5e:ef:b2:bc:2a:94:16:26:0c: dd:76:d8:76:1b:b9:fa:f8:a7:1f:b2:43:7c:12:d5: e0:2a:13:2d:45:4e:b4:21:55:49:1a:f6:4e:3c:b5: 3b:1d:66:5f:79:bf:be:ea:c0:fe:aa:8b:f7:a3:11: 72:ee:4a:09:6a:1d:f8:f6:b1:ca:e5:7a:39:01:25: 83:b1:1d:7c:3b:07:3d:6b:b9:d4:dc:c9:52:c2:29: 9e:3b:1d:a3:38:3a:6e:d3:d9:89:7f:7d:13:f5:ff: 8c:c7:12:b5:0b:23:85:50:46:07:dc:47:30:5a:16: fc:10:66:e0:96:d6:20:86:b7:22:25:0f:ee:ea:b3: f7:64:d4:1e:c4:77:d7:2e:2d:b9:37:ea:02:02:68: 66:04:9a:38:a6:b5:d1:5b:7c:e2:98:4c:32:9e:ed: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:55:E7:DA:68:A8:DB:11:88:A5:AC:D3:7C:06:02:94:23:36:25:93 X509v3 Authority Key Identifier: keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/qVXn2mio2xGIpazTfAYClCM2JZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.194.0/23 Signature Algorithm: sha256WithRSAEncryption 61:51:c1:16:84:57:bb:56:b0:4a:e4:e7:3f:7e:d7:b8:64:44: 4d:25:af:5c:fa:01:78:a6:e1:e9:a1:8d:64:be:57:29:31:28: 25:76:48:f6:03:04:01:04:8f:be:34:c7:85:f1:7f:a4:d1:ae: 67:35:fb:48:92:58:c6:63:b9:91:35:96:3f:fd:ff:c6:6e:10: d8:25:30:8f:54:5d:0d:17:63:90:2f:ff:f1:ad:1e:20:db:90: a3:d4:2f:6e:82:1a:7b:5c:f4:79:b8:1f:b9:95:27:07:b6:87: 8c:03:84:8d:1e:dc:9d:00:8a:b7:95:9d:e9:40:88:92:50:8a: 85:53:1f:4d:42:49:eb:5b:33:8f:56:18:3f:2e:77:85:f4:58: 81:1f:7a:6c:d4:32:fb:a8:70:2b:06:63:b2:29:46:93:f2:8c: ed:98:88:4f:1a:b8:93:a6:97:f9:d9:e7:5d:32:77:2e:cb:2d: 45:94:9a:be:45:ed:d5:02:74:2b:90:0f:29:f0:fe:45:cf:eb: 98:35:15:4f:f1:96:b3:1b:94:90:9c:eb:b0:dc:88:20:a4:09: 24:5e:7b:4d:81:41:09:dc:3c:cc:38:81:c5:e6:6a:0a:86:91: 12:70:2f:5b:a7:0e:6f:a3:ef:3a:de:c6:de:61:b9:cc:94:10: 53:0f:4d:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGuB74Vn/qNeZ3/cHvqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy NGQ0YzkwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTU1ZTdkYTY4YThkYjExODhhNWFjZDM3YzA2MDI5NDIzMzYyNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE/vulTTCEma2/Y68WHNArEOQ/vj 2YjkiTOn3aGUrf7S2L4UUQDDlKv0yaaD97aVCLbA+pTvp28QcnDWHhd6uXdS16dr ghJX/lIURf0Y8Ucd1MiCPVjdUcR1qxCHE2Fe77K8KpQWJgzddth2G7n6+KcfskN8 EtXgKhMtRU60IVVJGvZOPLU7HWZfeb++6sD+qov3oxFy7koJah349rHK5Xo5ASWD sR18Owc9a7nU3MlSwimeOx2jODpu09mJf30T9f+MxxK1CyOFUEYH3EcwWhb8EGbg ltYghrciJQ/u6rP3ZNQexHfXLi25N+oCAmhmBJo4prXRW3zimEwynu2wowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKlV59poqNsRiKWs03wGApQjNiWTMB8GA1UdIwQY MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt YjFhOTc5M2VlMzI0LzEvcVZYbjJtaW8yeEdJcGF6VGZBWUNsQ00ySlpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0 LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVrCMA0G CSqGSIb3DQEBCwUAA4IBAQBhUcEWhFe7VrBK5Oc/fte4ZERNJa9c+gF4puHpoY1k vlcpMSgldkj2AwQBBI++NMeF8X+k0a5nNftIkljGY7mRNZY//f/GbhDYJTCPVF0N F2OQL//xrR4g25Cj1C9ughp7XPR5uB+5lScHtoeMA4SNHtydAIq3lZ3pQIiSUIqF Ux9NQknrWzOPVhg/LneF9FiBH3ps1DL7qHArBmOyKUaT8oztmIhPGriTppf52edd Mncuyy1FlJq+Re3VAnQrkA8p8P5Fz+uYNRVP8ZazG5SQnOuw3IggpAkkXntNgUEJ 3DzMOIHF5moKhpEScC9bpw5vo+863sbeYbnMlBBTD03z -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:43 2026 by rpki-client