This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/RQT8IM5YpZZwOG6-oLbHqe47a-w.roa File: RQT8IM5YpZZwOG6-oLbHqe47a-w.roa (raw, json) Hash identifier: blADeokcP6llo8Gy54kWFLivb2CKCeXJKcNiIgYk8iI= Subject key identifier: 45:04:FC:20:CE:58:A5:96:70:38:6E:BE:A0:B6:C7:A9:EE:3B:6B:EC Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Certificate serial: 019B7FF21E97E9C60FFF055258D401980A1F Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/RQT8IM5YpZZwOG6-oLbHqe47a-w.roa Signing time: Fri 02 Jan 2026 18:22:12 +0000 ROA not before: Fri 02 Jan 2026 18:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208789 IP address blocks: 45.85.52.0/22 maxlen: 24 2a0e:b880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1e:97:e9:c6:0f:ff:05:52:58:d4:01:98:0a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Validity Not Before: Jan 2 18:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4504fc20ce58a59670386ebea0b6c7a9ee3b6bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:21:76:79:b6:35:78:61:0f:80:db:45:df: 50:dd:14:4a:7c:8b:87:e2:5a:7d:53:cc:2a:12:46: 71:16:6d:d5:d8:0a:b3:1b:e7:36:54:0a:aa:45:46: 66:68:82:34:18:d2:91:9e:d3:70:38:97:0b:7b:e2: a3:38:c2:a7:3c:94:5e:2b:83:72:42:9f:53:cf:8a: 2e:54:8a:ca:6d:b0:28:34:99:10:14:bd:ab:35:3d: 87:d1:86:0d:2d:69:21:5b:37:eb:43:11:60:d9:3f: fc:6b:c7:0f:72:82:3a:75:62:94:25:72:04:91:96: e7:17:04:b2:21:42:e2:b5:de:16:43:8f:73:37:66: e6:c5:65:42:d3:b7:b8:e5:c3:ff:3f:6c:49:23:17: 47:29:d4:bf:fb:94:da:1b:9f:e2:11:10:08:1a:ee: e0:d7:87:25:95:68:9b:af:68:d3:6f:cd:1e:68:68: 33:ca:6e:66:f5:29:fe:d4:09:31:c8:72:78:0b:08: ec:58:62:6f:e4:8c:69:ca:f6:a8:b6:49:c2:a7:77: 26:21:dc:42:e1:a8:1e:82:0c:c8:3a:35:cc:01:5f: 55:75:8d:c9:1d:e7:8e:d3:36:6d:e7:f7:8a:9d:96: 66:0b:27:c5:63:9b:6a:f4:82:83:0d:b6:ef:4d:2c: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:04:FC:20:CE:58:A5:96:70:38:6E:BE:A0:B6:C7:A9:EE:3B:6B:EC X509v3 Authority Key Identifier: keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/RQT8IM5YpZZwOG6-oLbHqe47a-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.52.0/22 IPv6: 2a0e:b880::/29 Signature Algorithm: sha256WithRSAEncryption 0c:45:14:3e:fd:ed:15:07:f3:ca:71:24:a0:f5:7d:ed:ab:5b: 27:58:68:b9:23:41:aa:0d:38:74:82:12:08:2d:80:b5:40:c1: 73:bf:8b:8f:a5:e9:a5:d0:04:e7:14:f5:f6:8a:08:6d:f8:ad: a1:15:38:21:2b:64:cd:f7:46:e8:30:71:f9:d3:26:e8:88:d7: 70:10:e0:5e:1b:56:df:f2:27:bc:75:09:9a:5e:14:33:fc:66: 6e:fb:4f:95:b4:7b:50:12:1f:e6:97:0b:a1:90:ac:68:c3:34: 85:94:e0:32:f6:b4:72:b4:0c:87:16:3c:fb:4d:5c:c7:96:8d: 25:05:87:24:c8:a9:75:c2:dc:e5:42:05:01:aa:cd:e7:55:84: 44:ad:cb:c9:67:37:7c:40:3b:f5:9b:bb:58:ac:3d:04:fe:60: b5:4b:81:5e:24:1d:cf:3c:da:90:81:15:89:19:5e:c8:08:52: 5c:c1:46:6e:a9:e6:55:d8:b5:8f:1c:df:f9:a2:dd:98:54:96: a0:1e:b8:73:c3:c9:72:44:22:3a:3a:20:97:16:86:32:12:c6: 82:c8:e4:66:71:25:5f:55:8f:de:f0:45:71:2b:90:03:33:e1: 62:24:b3:5f:65:14:ad:21:70:74:8f:ca:02:82:b1:6c:96:23: f8:7f:85:60 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8h6X6cYP/wVSWNQBmAofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjM5ZDZjOGIyM2ZjZGMyMGU1MzE3NGU5MmZiM2Y1NmNh YThiNjEwHhcNMjYwMTAyMTgyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTA0ZmMyMGNlNThhNTk2NzAzODZlYmVhMGI2YzdhOWVlM2I2YmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcghdnm2NXhhD4DbRd9Q3RRKfIuH 4lp9U8wqEkZxFm3V2AqzG+c2VAqqRUZmaII0GNKRntNwOJcLe+KjOMKnPJReK4Ny Qp9Tz4ouVIrKbbAoNJkQFL2rNT2H0YYNLWkhWzfrQxFg2T/8a8cPcoI6dWKUJXIE kZbnFwSyIULitd4WQ49zN2bmxWVC07e45cP/P2xJIxdHKdS/+5TaG5/iERAIGu7g 14cllWibr2jTb80eaGgzym5m9Sn+1AkxyHJ4CwjsWGJv5IxpyvaotknCp3cmIdxC 4ageggzIOjXMAV9VdY3JHeeO0zZt5/eKnZZmCyfFY5tq9IKDDbbvTSyWcwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEUE/CDOWKWWcDhuvqC2x6nuO2vsMB8GA1UdIwQY MBaAFEnznWyLI/zcIOUxdOkvs/VsqothMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAt N2E1MDQzYzkxOGY5LzEvUlFUOElNNVlwWlp3T0c2LW9MYkhxZTQ3YS13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAtN2E1MDQzYzkxOGY5 LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVU0MA0E AgACMAcDBQMqDriAMA0GCSqGSIb3DQEBCwUAA4IBAQAMRRQ+/e0VB/PKcSSg9X3t q1snWGi5I0GqDTh0ghIILYC1QMFzv4uPpeml0ATnFPX2ight+K2hFTghK2TN90bo MHH50yboiNdwEOBeG1bf8ie8dQmaXhQz/GZu+0+VtHtQEh/mlwuhkKxowzSFlOAy 9rRytAyHFjz7TVzHlo0lBYckyKl1wtzlQgUBqs3nVYRErcvJZzd8QDv1m7tYrD0E /mC1S4FeJB3PPNqQgRWJGV7ICFJcwUZuqeZV2LWPHN/5ot2YVJagHrhzw8lyRCI6 OiCXFoYyEsaCyORmcSVfVY/e8EVxK5ADM+FiJLNfZRStIXB0j8oCgrFsliP4f4Vg -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:17 2026 by rpki-client