This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/qbVKuMc3qB9H7JsM6QLi1MH84nI.roa File: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (raw, json) Hash identifier: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4= Subject key identifier: A9:B5:4A:B8:C7:37:A8:1F:47:EC:9B:0C:E9:02:E2:D4:C1:FC:E2:72 Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e Certificate serial: 019B7AC7EFD1CDE355E20EC64E56FA9B24DE Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/qbVKuMc3qB9H7JsM6QLi1MH84nI.roa Signing time: Thu 01 Jan 2026 18:18:02 +0000 ROA not before: Thu 01 Jan 2026 18:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215239 IP address blocks: 45.143.0.0/22 maxlen: 24 176.118.178.0/24 maxlen: 24 2a14:2d40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 06:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ef:d1:cd:e3:55:e2:0e:c6:4e:56:fa:9b:24:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e Validity Not Before: Jan 1 18:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9b54ab8c737a81f47ec9b0ce902e2d4c1fce272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:68:d6:03:40:d3:55:1b:ed:04:2a:71:fe: 1a:67:29:7d:b5:49:3e:f0:d4:ee:b2:22:24:45:04: 6c:18:09:92:12:4f:35:1b:7b:a8:9d:ca:c8:f0:0d: e5:d4:ae:2d:8a:e0:b2:4c:fb:70:5b:c4:26:71:71: 87:f6:ca:38:1e:b8:f2:8e:28:f7:c1:82:9f:e7:82: 5f:03:00:2c:7c:76:4c:06:25:ce:a9:e9:63:0b:e4: 99:bc:6b:31:d0:e4:63:83:f3:ef:52:d6:18:44:29: 37:52:7b:25:9e:de:30:dd:69:97:0c:1a:2e:50:02: b9:80:8f:a1:4f:cd:0f:d6:50:9d:2e:f8:93:86:dc: c3:b9:d7:74:14:1e:0e:76:60:73:14:8c:e7:75:3e: a2:72:f8:b4:cb:46:8f:2c:d7:de:80:0e:c9:7f:7c: d0:4e:37:f4:b4:a0:31:e8:d4:31:46:35:b1:95:95: 15:8c:da:43:df:ba:ce:06:48:2c:b4:da:6e:ac:e7: 64:fc:d7:9a:8b:44:c9:39:55:7c:50:e2:c6:3d:2d: 24:3d:4a:11:ac:0c:57:e7:d3:68:63:57:3c:90:33: e9:d9:6d:33:55:60:c6:8b:70:e9:65:b6:13:0c:f1: 00:8b:d6:10:1c:7e:6e:28:47:ba:ec:5d:bf:e3:86: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B5:4A:B8:C7:37:A8:1F:47:EC:9B:0C:E9:02:E2:D4:C1:FC:E2:72 X509v3 Authority Key Identifier: keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/qbVKuMc3qB9H7JsM6QLi1MH84nI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.0.0/22 176.118.178.0/24 IPv6: 2a14:2d40::/29 Signature Algorithm: sha256WithRSAEncryption 3b:63:f4:fa:d5:6c:d8:63:f3:cd:d4:85:7e:ec:13:72:a0:85: 80:90:51:c8:cb:9b:ec:31:1b:e3:8b:17:44:46:62:66:d6:32: 3c:e3:f9:ac:c3:7e:5f:57:cc:b8:6e:56:ee:98:b1:21:ff:cf: be:00:40:ea:bd:51:a9:71:ca:72:c9:a3:89:5b:8c:58:10:17: 94:65:5c:57:7f:fd:d1:15:92:21:cf:21:eb:1b:79:18:b5:1a: 73:d2:e4:c4:a8:c6:6a:6c:34:fa:87:17:d8:ec:75:ef:f0:a7: dc:28:8f:04:3c:c9:a8:23:27:24:d4:a9:c1:b9:73:93:59:27: 8d:ab:42:1a:93:ca:67:a8:3d:69:60:ce:e5:ea:58:6e:49:9f: f5:cf:19:75:92:6e:4e:e2:fc:f2:9e:47:9f:04:20:76:8c:ff: 27:fb:90:76:e1:f3:fc:d7:fd:18:18:7b:f4:b3:36:9b:ca:d5: 2c:d2:33:29:f8:c2:3c:c1:4d:04:8e:aa:cf:d9:b7:cf:4d:99: b8:a7:ec:bf:39:67:e1:1c:eb:af:b1:c1:4d:1e:f7:88:9d:40: f1:15:6b:d6:bd:0e:38:59:dd:2a:5b:4d:18:6e:ec:0f:5a:ce: 24:45:ae:23:f4:c7:85:8f:81:cc:87:c0:50:34:8b:0c:c4:b6: c9:f0:16:41 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x+/RzeNV4g7GTlb6myTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZGRiY2NlMjYyOGJmMDlmYWU2YmYwNDQyMThjNjU3ZThi ZDNjNmUwHhcNMjYwMTAxMTgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWI1NGFiOGM3MzdhODFmNDdlYzliMGNlOTAyZTJkNGMxZmNlMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjRo1gNA01Ub7QQqcf4aZyl9tUk+ 8NTusiIkRQRsGAmSEk81G3uoncrI8A3l1K4tiuCyTPtwW8QmcXGH9so4Hrjyjij3 wYKf54JfAwAsfHZMBiXOqeljC+SZvGsx0ORjg/PvUtYYRCk3Unslnt4w3WmXDBou UAK5gI+hT80P1lCdLviThtzDudd0FB4OdmBzFIzndT6icvi0y0aPLNfegA7Jf3zQ Tjf0tKAx6NQxRjWxlZUVjNpD37rOBkgstNpurOdk/Neai0TJOVV8UOLGPS0kPUoR rAxX59NoY1c8kDPp2W0zVWDGi3DpZbYTDPEAi9YQHH5uKEe67F2/44ZEcwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKm1SrjHN6gfR+ybDOkC4tTB/OJyMB8GA1UdIwQY MBaAFEfdvM4mKL8J+ua/BEIYxlfovTxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgt NTBkNzA5YmZmZWI1LzEvcWJWS3VNYzNxQjlIN0pzTTZRTGkxTUg4NG5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgtNTBkNzA5YmZmZWI1 LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLY8AAwQA sHayMA0EAgACMAcDBQMqFC1AMA0GCSqGSIb3DQEBCwUAA4IBAQA7Y/T61WzYY/PN 1IV+7BNyoIWAkFHIy5vsMRvjixdERmJm1jI84/msw35fV8y4blbumLEh/8++AEDq vVGpccpyyaOJW4xYEBeUZVxXf/3RFZIhzyHrG3kYtRpz0uTEqMZqbDT6hxfY7HXv 8KfcKI8EPMmoIyck1KnBuXOTWSeNq0Iak8pnqD1pYM7l6lhuSZ/1zxl1km5O4vzy nkefBCB2jP8n+5B24fP81/0YGHv0szabytUs0jMp+MI8wU0EjqrP2bfPTZm4p+y/ OWfhHOuvscFNHveInUDxFWvWvQ44Wd0qW00YbuwPWs4kRa4j9MeFj4HMh8BQNIsM xLbJ8BZB -----END CERTIFICATE-----Generated at Mon Jan 12 15:27:10 2026 by rpki-client