This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pqqlAlsB6FcVw6tUoBqGnyhuhNY.roa File: pqqlAlsB6FcVw6tUoBqGnyhuhNY.roa (raw, json) Hash identifier: KpZ66AvK48xrardRc6otYImq71PfZo5s+nXiT6KbsAs= Subject key identifier: A6:AA:A5:02:5B:01:E8:57:15:C3:AB:54:A0:1A:86:9F:28:6E:84:D6 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C806E737A35CA2A87463B501145E627 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pqqlAlsB6FcVw6tUoBqGnyhuhNY.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212667 IP address blocks: 45.91.160.0/24 maxlen: 24 87.247.140.0/24 maxlen: 24 213.134.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6e:73:7a:35:ca:2a:87:46:3b:50:11:45:e6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6aaa5025b01e85715c3ab54a01a869f286e84d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:87:05:dc:7b:d9:7c:1c:7c:5b:7c:3e:ef: f4:fa:0e:a1:f2:ae:13:b5:5d:dd:78:7b:5e:05:c8: 3d:76:65:3c:40:a9:8e:4a:67:61:69:91:d2:0c:60: e2:6d:62:17:e0:98:59:f3:3e:fa:7f:de:e5:b6:49: f0:61:76:fc:f0:97:53:27:3c:fb:43:42:28:63:02: 17:f7:d3:32:00:80:2d:72:e8:d6:49:23:17:82:18: 4e:e1:35:64:9a:87:7d:0d:bf:3c:6b:8a:7b:9e:19: 88:6a:f8:e1:aa:d8:6c:48:d4:9b:f7:8b:1c:ad:da: ab:84:97:2a:76:c5:9b:3c:d5:bf:3d:04:27:1d:74: ee:f7:8c:aa:3a:92:9e:1b:b4:7b:6e:1c:96:61:0c: d9:20:98:2b:81:8e:39:1a:0e:ec:b5:fa:de:72:cd: 37:b7:b6:01:0b:f3:3f:f2:07:32:39:d7:d3:f5:03: fd:0c:b6:53:dd:70:37:67:ca:03:10:8d:96:82:1b: 1b:1f:72:36:4d:cf:10:f0:ff:35:8b:08:ed:ca:a3: 53:c2:d0:de:81:5a:b6:c8:b8:70:6c:35:18:0d:28: 41:15:8a:57:8f:1f:89:1e:fd:8b:de:e5:a9:bc:6b: a8:9f:66:dc:bf:66:b2:2a:f8:2d:6d:74:da:e3:ea: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AA:A5:02:5B:01:E8:57:15:C3:AB:54:A0:1A:86:9F:28:6E:84:D6 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pqqlAlsB6FcVw6tUoBqGnyhuhNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.160.0/24 87.247.140.0/24 213.134.20.0/24 Signature Algorithm: sha256WithRSAEncryption 47:97:1a:0c:e1:3b:e3:8e:c9:c3:1a:ed:2d:71:5c:90:81:a1: b2:b0:f9:4b:ae:43:67:2a:6d:3b:8a:dc:5b:35:ef:4c:28:41: f8:74:dc:00:68:1c:1c:20:b7:9a:01:91:05:38:2e:0e:10:fd: de:85:75:b5:10:fe:0c:a9:86:eb:55:98:73:85:f1:48:29:07: 6f:0f:3d:75:ac:6d:6f:41:49:b4:6b:30:86:96:fd:cc:19:ba: e8:91:9c:4f:f9:15:77:0d:49:f9:12:b9:2f:d2:6a:20:46:c0: c9:d5:d2:24:41:48:b6:5d:99:f1:a4:54:9c:c2:d5:ee:79:c2: 4e:5e:d5:d2:13:a3:08:92:c1:ca:2b:53:e3:08:a7:0d:6e:b6: 0d:69:ae:af:28:92:9d:f5:5e:78:f9:40:6a:1a:d1:26:7e:b4: 3c:fc:56:46:34:61:a0:f4:16:0a:94:71:a7:4d:00:8e:a5:51: 5e:b8:73:e4:bb:21:a4:de:dd:9c:d3:9a:d3:9f:9f:62:cd:bf: 3d:fa:3b:4d:58:1c:a3:6c:9f:44:69:5d:63:6a:66:aa:ac:da: d6:3a:07:c0:0e:84:03:65:dd:38:a4:a5:65:ba:54:43:e3:23: df:64:46:87:0f:1a:2d:c6:77:80:ce:ef:9a:6b:98:d1:1d:81: 41:42:37:ec -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gG5zejXKKodGO1ARReYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmFhYTUwMjViMDFlODU3MTVjM2FiNTRhMDFhODY5ZjI4NmU4NGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL2HBdx72XwcfFt8Pu/0+g6h8q4T tV3deHteBcg9dmU8QKmOSmdhaZHSDGDibWIX4JhZ8z76f97ltknwYXb88JdTJzz7 Q0IoYwIX99MyAIAtcujWSSMXghhO4TVkmod9Db88a4p7nhmIavjhqthsSNSb94sc rdqrhJcqdsWbPNW/PQQnHXTu94yqOpKeG7R7bhyWYQzZIJgrgY45Gg7stfrecs03 t7YBC/M/8gcyOdfT9QP9DLZT3XA3Z8oDEI2WghsbH3I2Tc8Q8P81iwjtyqNTwtDe gVq2yLhwbDUYDShBFYpXjx+JHv2L3uWpvGuon2bcv2ayKvgtbXTa4+prZwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKaqpQJbAehXFcOrVKAahp8oboTWMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvcHFxbEFsc0I2RmNWdzZ0VW9CcUdueWh1aE5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVugAwQA V/eMAwQA1YYUMA0GCSqGSIb3DQEBCwUAA4IBAQBHlxoM4TvjjsnDGu0tcVyQgaGy sPlLrkNnKm07itxbNe9MKEH4dNwAaBwcILeaAZEFOC4OEP3ehXW1EP4MqYbrVZhz hfFIKQdvDz11rG1vQUm0azCGlv3MGbrokZxP+RV3DUn5Erkv0mogRsDJ1dIkQUi2 XZnxpFScwtXuecJOXtXSE6MIksHKK1PjCKcNbrYNaa6vKJKd9V54+UBqGtEmfrQ8 /FZGNGGg9BYKlHGnTQCOpVFeuHPkuyGk3t2c05rTn59izb89+jtNWByjbJ9EaV1j amaqrNrWOgfADoQDZd04pKVlulRD4yPfZEaHDxotxneAzu+aa5jRHYFBQjfs -----END CERTIFICATE-----Generated at Sat Jan 10 03:56:09 2026 by rpki-client