This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/QjEkoZ53NxBeCFxk_AcoQWsSsbc.roa File: QjEkoZ53NxBeCFxk_AcoQWsSsbc.roa (raw, json) Hash identifier: F5UhzU9AKBT9nluGCkFBzLOXoDePYCyzrIATvKRbYOM= Subject key identifier: 42:31:24:A1:9E:77:37:10:5E:08:5C:64:FC:07:28:41:6B:12:B1:B7 Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834 Certificate serial: 019B7EA6D5BD3D85EB1FB3A90128687E5FD5 Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/QjEkoZ53NxBeCFxk_AcoQWsSsbc.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206485 IP address blocks: 45.129.136.0/22 maxlen: 22 45.129.136.0/24 maxlen: 24 45.129.137.0/24 maxlen: 24 45.129.138.0/24 maxlen: 24 45.129.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d5:bd:3d:85:eb:1f:b3:a9:01:28:68:7e:5f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=423124a19e7737105e085c64fc0728416b12b1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5b:30:d0:97:28:f0:fe:5a:79:ee:0d:05:f4: 9e:29:bd:37:63:24:0f:89:b3:4f:23:33:11:42:4c: ca:6c:68:a5:e4:88:4a:3e:8f:5c:4d:b4:25:32:24: c0:6e:ba:d5:f4:a3:ac:dd:cf:62:2c:24:88:cc:10: f6:8c:37:cf:a3:a3:f7:a5:2a:35:78:e0:6d:70:ef: b6:98:85:de:ba:53:f2:0d:34:40:74:02:1b:b9:48: ec:66:36:31:bb:f3:fd:0c:06:65:0c:f5:cb:5a:15: 46:b6:1f:9d:38:5e:f2:18:78:79:a6:3a:ea:51:15: 5f:d7:72:84:79:df:77:f5:8f:36:d9:c9:7c:b5:74: 63:4e:23:ae:f9:4a:0d:56:bf:29:1d:ff:22:17:23: a8:0a:1e:47:92:40:05:f6:20:d6:93:6a:51:e8:37: 91:c4:bb:74:f3:e3:77:fb:e0:bf:13:29:48:c3:f4: 91:79:eb:bf:a7:76:86:6d:ec:eb:e6:25:4b:1d:90: d7:d5:95:b6:7f:6d:f4:bb:95:05:9e:31:c3:15:61: 2c:69:b7:28:d9:a5:12:e0:a0:17:4a:ca:89:fa:0a: 9d:26:f5:f7:bb:5d:6e:10:8f:79:45:a8:d7:c9:b0: da:16:5d:06:96:00:d0:34:1e:0e:96:3a:42:02:71: 72:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:31:24:A1:9E:77:37:10:5E:08:5C:64:FC:07:28:41:6B:12:B1:B7 X509v3 Authority Key Identifier: keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/QjEkoZ53NxBeCFxk_AcoQWsSsbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.136.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:34:2b:4a:db:96:5e:c5:84:e8:c9:45:7f:5f:d9:14:80:0a: c1:15:aa:19:94:46:04:03:c0:85:88:73:aa:d9:f0:4f:c5:6c: e4:48:a5:17:35:b9:5d:d1:97:82:db:40:3e:fd:8f:20:f4:e9: 22:08:86:7d:92:47:12:d7:15:85:39:3e:6d:f9:91:89:40:8f: 56:c0:2b:80:7b:86:a0:5f:b1:80:a0:31:d6:bb:a8:ef:cc:e1: 78:8b:e2:e7:9c:f4:77:ae:62:05:6d:6d:63:f2:41:ef:49:2b: ab:1c:b8:80:6d:87:6c:37:e4:32:34:b5:39:f5:f5:1d:96:83: a3:53:ab:8e:ce:4d:6d:c8:1f:d9:82:6d:76:c9:31:6a:7f:6d: 4e:80:80:43:6b:82:9b:44:ad:15:f2:14:08:93:9e:09:63:03: ef:c4:82:57:89:fe:48:91:7b:23:bd:0c:0f:49:35:00:b7:54: 79:dc:5e:59:b9:07:f8:42:0f:11:40:85:a9:56:4b:c4:a6:08: dd:37:fb:17:e5:6b:76:a6:c1:75:d7:b6:45:ac:5e:9e:8e:9a: d5:46:92:02:83:ba:ef:59:5f:f6:7f:35:15:63:db:a6:ca:a5: 1e:36:6b:a6:eb:d4:4c:a1:ed:3a:f0:b0:a9:97:7c:3d:76:3d: f2:8e:b4:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ptW9PYXrH7OpAShofl/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNjFhMjkyMjIzYWQ5YWViYzhhZDgyYzJhNTY0NzVmYmQ5 N2E4MzQwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjMxMjRhMTllNzczNzEwNWUwODVjNjRmYzA3Mjg0MTZiMTJiMWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vsw0Jco8P5aee4NBfSeKb03YyQP ibNPIzMRQkzKbGil5IhKPo9cTbQlMiTAbrrV9KOs3c9iLCSIzBD2jDfPo6P3pSo1 eOBtcO+2mIXeulPyDTRAdAIbuUjsZjYxu/P9DAZlDPXLWhVGth+dOF7yGHh5pjrq URVf13KEed939Y822cl8tXRjTiOu+UoNVr8pHf8iFyOoCh5HkkAF9iDWk2pR6DeR xLt08+N3++C/EylIw/SReeu/p3aGbezr5iVLHZDX1ZW2f230u5UFnjHDFWEsabco 2aUS4KAXSsqJ+gqdJvX3u11uEI95RajXybDaFl0GlgDQNB4OljpCAnFyTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEIxJKGedzcQXghcZPwHKEFrErG3MB8GA1UdIwQY MBaAFN9hopIiOtmuvIrYLCpWR1+9l6g0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iN2Q4NzUtYjEyYy00ZWQ4LWI4MGYt NDE0ODdmNGQ0MTcxLzEvUWpFa29aNTNOeEJlQ0Z4a19BY29RV3NTc2JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iN2Q4NzUtYjEyYy00ZWQ4LWI4MGYtNDE0ODdmNGQ0MTcx LzEvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYGIMA0G CSqGSIb3DQEBCwUAA4IBAQA/NCtK25ZexYToyUV/X9kUgArBFaoZlEYEA8CFiHOq 2fBPxWzkSKUXNbld0ZeC20A+/Y8g9OkiCIZ9kkcS1xWFOT5t+ZGJQI9WwCuAe4ag X7GAoDHWu6jvzOF4i+LnnPR3rmIFbW1j8kHvSSurHLiAbYdsN+QyNLU59fUdloOj U6uOzk1tyB/Zgm12yTFqf21OgIBDa4KbRK0V8hQIk54JYwPvxIJXif5IkXsjvQwP STUAt1R53F5ZuQf4Qg8RQIWpVkvEpgjdN/sX5Wt2psF117ZFrF6ejprVRpICg7rv WV/2fzUVY9umyqUeNmum69RMoe068LCpl3w9dj3yjrTw -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:23 2026 by rpki-client