This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/qehqqDaLvfGapcYu35gg8njdQ84.roa File: qehqqDaLvfGapcYu35gg8njdQ84.roa (raw, json) Hash identifier: YPLOkpy5OjMzs5AXbxjYvdLVfqkHQrfn1XIRF6xrJPM= Subject key identifier: A9:E8:6A:A8:36:8B:BD:F1:9A:A5:C6:2E:DF:98:20:F2:78:DD:43:CE Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B791079468868FB8B4A8EF0DC3F780AD8 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/qehqqDaLvfGapcYu35gg8njdQ84.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215140 IP address blocks: 5.178.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:79:46:88:68:fb:8b:4a:8e:f0:dc:3f:78:0a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9e86aa8368bbdf19aa5c62edf9820f278dd43ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:33:90:87:ac:07:21:7b:9d:e2:3e:5e:81:89: e2:d9:01:ef:6c:5f:c7:82:77:8f:6a:13:af:a2:0b: 68:95:c0:f0:8b:e1:5a:a9:9b:00:81:a1:54:73:e6: bf:bb:b5:1d:5b:eb:7f:55:1d:3f:a8:d3:39:8c:c7: d7:d6:d7:4e:09:2c:0a:bc:ec:21:b1:66:af:df:37: d4:96:0f:fd:c7:b0:8e:eb:d6:3c:0b:1b:ee:65:14: 43:f4:11:f6:a6:03:c2:33:bb:91:9f:e5:0c:43:13: 30:f6:2f:cf:4a:e0:7d:8e:8d:e8:9e:f4:d5:8e:fe: bc:0d:9f:af:39:bc:f4:03:0c:eb:5e:ac:16:e6:f0: 12:e1:01:7a:72:ea:fc:39:5b:d0:26:f4:04:d1:ca: 82:72:62:6c:10:e8:28:70:d4:81:bc:4f:81:5a:6c: e3:3c:95:57:63:53:3b:2c:b1:f1:a7:ee:d3:cd:93: f4:ca:7f:77:f9:ca:e6:57:53:38:39:87:03:5a:9c: 9c:c6:63:85:22:da:3f:4d:04:e3:7e:79:0a:83:1f: a4:cd:fa:19:e9:8a:59:c0:d8:6a:b6:33:b0:bc:fc: 57:ac:ef:80:fb:16:3f:d2:8e:2a:e6:47:c3:a9:f7: 52:fc:ae:a7:82:99:43:8a:cf:c8:64:88:4a:64:eb: 9c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E8:6A:A8:36:8B:BD:F1:9A:A5:C6:2E:DF:98:20:F2:78:DD:43:CE X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/qehqqDaLvfGapcYu35gg8njdQ84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.99.0/24 Signature Algorithm: sha256WithRSAEncryption d2:a4:67:49:35:ff:2f:51:b0:28:9b:20:2d:69:40:09:26:05: 93:55:4f:cc:52:71:3b:5d:57:82:42:85:90:44:ce:9a:90:aa: f6:40:26:db:3b:42:c0:0f:7f:da:3c:77:45:d5:9a:00:2a:21: 5f:ed:29:e9:d8:c5:15:c3:09:0b:2f:09:0a:1c:5b:91:84:b2: c2:22:8c:93:34:40:c8:54:83:f8:96:a7:80:48:5f:79:11:24: e9:12:5c:72:fd:3e:cf:53:c1:90:ab:35:96:22:d9:d0:3f:a4: ed:22:0c:b6:e6:33:62:3e:9d:d8:90:13:b8:91:39:65:e2:ae: 4d:c6:f7:a1:89:e8:00:e1:97:26:63:1f:e0:72:96:89:4b:2b: bb:82:0d:90:a4:76:29:b0:6d:d5:45:e0:a6:9d:83:97:50:57: fa:6c:90:79:d0:15:aa:1c:53:da:ca:57:df:f6:72:da:68:07: 67:32:0d:5f:33:9b:32:4d:ad:e5:80:e4:e8:f1:5b:90:65:ba: 84:a9:5e:6d:0f:65:57:d7:f8:50:06:40:cd:13:90:c3:d1:91: 92:4f:38:3f:9d:ac:66:e0:c2:3a:ac:ae:98:5c:97:0e:f5:e2: 99:99:b0:a7:52:bb:97:29:d7:20:00:44:ee:23:c4:e5:7c:66: 8e:79:5f:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHlGiGj7i0qO8Nw/eArYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWU4NmFhODM2OGJiZGYxOWFhNWM2MmVkZjk4MjBmMjc4ZGQ0M2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zOQh6wHIXud4j5egYni2QHvbF/H gnePahOvogtolcDwi+FaqZsAgaFUc+a/u7UdW+t/VR0/qNM5jMfX1tdOCSwKvOwh sWav3zfUlg/9x7CO69Y8CxvuZRRD9BH2pgPCM7uRn+UMQxMw9i/PSuB9jo3onvTV jv68DZ+vObz0AwzrXqwW5vAS4QF6cur8OVvQJvQE0cqCcmJsEOgocNSBvE+BWmzj PJVXY1M7LLHxp+7TzZP0yn93+crmV1M4OYcDWpycxmOFIto/TQTjfnkKgx+kzfoZ 6YpZwNhqtjOwvPxXrO+A+xY/0o4q5kfDqfdS/K6ngplDis/IZIhKZOucYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKnoaqg2i73xmqXGLt+YIPJ43UPOMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvcWVocXFEYUx2ZkdhcGNZdTM1Z2c4bmpkUTg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbJjMA0G CSqGSIb3DQEBCwUAA4IBAQDSpGdJNf8vUbAomyAtaUAJJgWTVU/MUnE7XVeCQoWQ RM6akKr2QCbbO0LAD3/aPHdF1ZoAKiFf7Snp2MUVwwkLLwkKHFuRhLLCIoyTNEDI VIP4lqeASF95ESTpElxy/T7PU8GQqzWWItnQP6TtIgy25jNiPp3YkBO4kTll4q5N xvehiegA4ZcmYx/gcpaJSyu7gg2QpHYpsG3VReCmnYOXUFf6bJB50BWqHFPaylff 9nLaaAdnMg1fM5syTa3lgOTo8VuQZbqEqV5tD2VX1/hQBkDNE5DD0ZGSTzg/naxm 4MI6rK6YXJcO9eKZmbCnUruXKdcgAETuI8TlfGaOeV8c -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:27 2026 by rpki-client