This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qRSam9k-74-kk4Mu-c5_Rqm9HQ8.roa File: qRSam9k-74-kk4Mu-c5_Rqm9HQ8.roa (raw, json) Hash identifier: RVtxCyb+baaDkQzDJ5Oz9LvzwJaRlh8/ZF2x5fDEv10= Subject key identifier: A9:14:9A:9B:D9:3E:EF:8F:A4:93:83:2E:F9:CE:7F:46:A9:BD:1D:0F Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BF38AFF104E4FDA4DC8382D54A99F33EA Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qRSam9k-74-kk4Mu-c5_Rqm9HQ8.roa Signing time: Sun 25 Jan 2026 05:05:31 +0000 ROA not before: Sun 25 Jan 2026 05:05:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214783 IP address blocks: 5.231.240.0/24 maxlen: 24 89.144.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:8a:ff:10:4e:4f:da:4d:c8:38:2d:54:a9:9f:33:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 25 05:05:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9149a9bd93eef8fa493832ef9ce7f46a9bd1d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:78:d6:b1:18:e4:51:c9:b4:81:a9:5b:e5: 26:3c:3f:8f:61:72:7f:d2:5a:e1:6d:7f:49:43:3a: f3:4c:0a:41:64:fb:06:9f:49:51:dd:f9:88:b0:ae: de:aa:1c:b4:eb:32:e7:f1:37:c7:3d:aa:45:aa:39: f1:ec:a3:b3:45:0c:3a:97:6b:e5:ff:bf:6f:85:03: 5c:13:f4:02:07:69:45:12:07:3f:eb:20:cd:85:db: 0f:26:45:0c:fc:56:a6:6a:21:d5:25:53:44:ae:29: 48:10:ae:c3:50:c1:d2:22:87:36:eb:64:14:04:84: ca:88:9d:cc:27:ab:83:c5:57:37:af:df:8b:82:96: d7:c4:05:34:2c:bc:ff:39:9b:44:d9:e1:e7:f0:d5: 2b:2c:38:1d:68:75:ba:f5:b3:0e:03:9e:a1:b3:80: 5a:99:fc:8e:25:cd:12:4a:34:05:13:f7:7c:90:02: 0c:4a:81:c6:16:cb:24:4c:c1:e8:c7:56:3f:3b:5e: 90:6b:2e:06:c9:43:70:9e:50:3c:c7:6b:6e:95:94: ab:4c:16:b0:47:20:d8:5a:dd:d7:bf:86:99:9b:9f: c5:d1:3a:d5:b3:e3:2e:a0:4a:39:1a:27:7c:ef:94: 35:9c:8f:20:58:75:7d:93:5f:8a:64:d4:61:94:ac: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:14:9A:9B:D9:3E:EF:8F:A4:93:83:2E:F9:CE:7F:46:A9:BD:1D:0F X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qRSam9k-74-kk4Mu-c5_Rqm9HQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.240.0/24 89.144.55.0/24 Signature Algorithm: sha256WithRSAEncryption c0:fc:c6:ff:e2:15:55:8e:23:63:ba:ef:34:16:29:5a:69:22: 8b:fd:1f:be:4e:0a:ef:97:24:11:33:c4:db:24:d8:0c:09:e7: 46:33:64:7b:15:0d:c1:c8:74:10:de:e4:c0:61:fd:43:43:c4: b5:32:9e:15:da:bd:f1:74:ac:16:af:f6:f8:50:b2:c2:ad:b8: 9b:28:c1:8f:14:1b:45:b2:26:16:0e:3c:a9:0b:ce:7f:93:40: 0d:a8:61:b4:8d:d6:aa:4b:6f:3c:73:94:4a:66:83:62:83:92: 13:51:4c:37:d0:da:7f:0e:36:ce:f3:ab:20:6b:2e:21:39:35: 3c:09:76:7f:c5:2b:5e:93:e2:af:1a:a9:f9:d3:c6:da:21:cd: aa:77:58:a1:7a:7c:4c:43:c6:33:4b:c9:3a:56:e2:3f:25:45: 10:50:e8:cd:be:8a:04:05:d4:a3:36:21:1d:ab:19:5f:c1:9f: d3:15:b3:75:2b:bd:e0:a0:0f:6f:c3:58:d6:af:95:5e:0d:46: bd:27:96:d6:7a:89:f1:f7:a0:f1:71:a3:be:92:b8:3a:1e:89: 09:d8:bf:2b:37:96:5e:5a:f7:78:a0:50:72:ec:e3:c8:8f:98: e3:39:5d:5a:d3:af:c8:a5:b8:29:69:c9:ea:d2:c3:a3:20:3e: 81:8a:24:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvziv8QTk/aTcg4LVSpnzPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTI1MDUwNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTE0OWE5YmQ5M2VlZjhmYTQ5MzgzMmVmOWNlN2Y0NmE5YmQxZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnV41rEY5FHJtIGpW+UmPD+PYXJ/ 0lrhbX9JQzrzTApBZPsGn0lR3fmIsK7eqhy06zLn8TfHPapFqjnx7KOzRQw6l2vl /79vhQNcE/QCB2lFEgc/6yDNhdsPJkUM/FamaiHVJVNErilIEK7DUMHSIoc262QU BITKiJ3MJ6uDxVc3r9+LgpbXxAU0LLz/OZtE2eHn8NUrLDgdaHW69bMOA56hs4Ba mfyOJc0SSjQFE/d8kAIMSoHGFsskTMHox1Y/O16Qay4GyUNwnlA8x2tulZSrTBaw RyDYWt3Xv4aZm5/F0TrVs+MuoEo5Gid875Q1nI8gWHV9k1+KZNRhlKyVawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKkUmpvZPu+PpJODLvnOf0apvR0PMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvcVJTYW05ay03NC1razRNdS1jNV9ScW05SFE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABefwAwQA WZA3MA0GCSqGSIb3DQEBCwUAA4IBAQDA/Mb/4hVVjiNjuu80FilaaSKL/R++Tgrv lyQRM8TbJNgMCedGM2R7FQ3ByHQQ3uTAYf1DQ8S1Mp4V2r3xdKwWr/b4ULLCrbib KMGPFBtFsiYWDjypC85/k0ANqGG0jdaqS288c5RKZoNig5ITUUw30Np/DjbO86sg ay4hOTU8CXZ/xStek+KvGqn508baIc2qd1ihenxMQ8YzS8k6VuI/JUUQUOjNvooE BdSjNiEdqxlfwZ/TFbN1K73goA9vw1jWr5VeDUa9J5bWeonx96DxcaO+krg6HokJ 2L8rN5ZeWvd4oFBy7OPIj5jjOV1a06/Ipbgpacnq0sOjID6BiiRD -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:04 2026 by rpki-client