This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/BQSGEx3nMb3rW3Le5hymWyu8-YU.roa File: BQSGEx3nMb3rW3Le5hymWyu8-YU.roa (raw, json) Hash identifier: S7mWCQBW//r+Jv4L1fzMRolM2RhYHtuAZtqku2trt+E= Subject key identifier: 05:04:86:13:1D:E7:31:BD:EB:5B:72:DE:E6:1C:A6:5B:2B:BC:F9:85 Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996 Certificate serial: 019B7835295DD6252273CBF45F2648369D2D Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/BQSGEx3nMb3rW3Le5hymWyu8-YU.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49514 IP address blocks: 62.122.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:29:5d:d6:25:22:73:cb:f4:5f:26:48:36:9d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996 Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=050486131de731bdeb5b72dee61ca65b2bbcf985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:d9:24:b1:47:3c:9d:ff:84:00:09:ff:fe: 07:cf:1d:ec:b5:b1:89:83:27:b5:4c:b8:21:44:60: 80:03:52:60:e3:f8:ed:d3:3e:7d:eb:c4:ab:3f:d3: f3:6b:c9:97:e5:4c:61:49:eb:c2:97:02:3a:7e:a9: 2e:9d:2c:9b:d6:13:96:cb:bd:d9:5c:b7:61:f4:0f: 5d:2f:14:05:c0:a8:12:36:25:aa:2b:a8:5d:29:77: 6e:6d:ec:0f:6a:0a:c1:72:c5:b3:83:2c:51:d9:34: da:0e:31:5f:b4:68:3a:91:d8:91:ce:ed:02:b5:a3: bf:db:ac:96:8b:77:51:7a:49:c3:34:46:20:11:71: df:12:0c:ca:7e:b1:40:e5:47:5d:8b:32:66:b9:c0: a5:f0:a4:43:ac:ab:21:30:b2:cb:f3:33:63:26:33: c6:a5:1f:46:5e:37:6e:2d:39:df:62:d7:f8:a8:5a: e9:c7:5d:af:c2:f3:08:65:c2:2e:32:4e:3e:ab:23: 25:e8:62:61:a8:85:f4:12:dd:19:af:07:8a:56:4b: f1:0b:ac:f8:5e:09:77:19:9f:38:e5:47:b5:ad:dd: f7:a2:b0:fb:4c:e1:f3:ef:49:82:1f:49:cf:75:22: fd:66:c8:be:03:3a:28:6e:1d:ee:f6:6d:3f:4b:91: a0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:04:86:13:1D:E7:31:BD:EB:5B:72:DE:E6:1C:A6:5B:2B:BC:F9:85 X509v3 Authority Key Identifier: keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/BQSGEx3nMb3rW3Le5hymWyu8-YU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.160.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:2b:75:5e:ea:78:c7:23:21:31:b4:c8:0f:38:df:4b:14:7d: 6d:c8:05:7f:48:46:ff:bf:6a:14:cf:65:0f:e1:bb:1e:3e:32: 59:0e:e5:48:08:1d:89:bb:31:7a:7a:fc:08:00:4c:e0:73:db: 59:b0:96:b6:2c:4e:33:6f:37:a8:c9:f8:55:f4:e5:fa:e3:84: f5:47:6f:d4:de:71:98:76:d1:73:0d:88:f0:4e:37:59:fe:f5: 08:ee:f7:69:60:25:2d:46:8f:a1:f1:6c:2d:0e:21:86:84:12: 64:ab:d9:1c:ff:90:b7:fe:f6:f9:e7:03:68:68:0d:ed:3a:71: 75:64:2d:f6:6a:2b:78:f8:b4:28:32:97:48:7d:d4:22:69:06: 55:ef:6a:6f:55:2e:98:e1:8a:fb:b7:9a:c6:aa:0c:00:89:e5: 1b:41:4d:4e:99:a4:36:99:f0:a0:39:0e:b4:cf:93:08:eb:bc: c3:f4:53:82:d8:1f:cd:4a:f1:9a:6c:ad:29:d7:0a:b3:fc:e5: 85:59:7a:39:7c:cb:88:09:5d:fc:7c:cb:33:cf:d0:dc:35:be: b4:fe:d2:0b:f9:e5:09:e4:ab:a9:e9:35:17:bd:09:ca:35:35: e0:a5:ae:38:a0:da:d1:dc:a0:9d:97:2b:6a:6f:85:b2:4f:62: 2c:5e:ba:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSld1iUic8v0XyZINp0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMzZmMmU0MjUyMmU5OGQzNzZiZTM4YTg5ZTVkZDUxYWJi Zjc5OTYwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTA0ODYxMzFkZTczMWJkZWI1YjcyZGVlNjFjYTY1YjJiYmNmOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4bZJLFHPJ3/hAAJ//4Hzx3stbGJ gye1TLghRGCAA1Jg4/jt0z5968SrP9Pza8mX5UxhSevClwI6fqkunSyb1hOWy73Z XLdh9A9dLxQFwKgSNiWqK6hdKXdubewPagrBcsWzgyxR2TTaDjFftGg6kdiRzu0C taO/26yWi3dReknDNEYgEXHfEgzKfrFA5UddizJmucCl8KRDrKshMLLL8zNjJjPG pR9GXjduLTnfYtf4qFrpx12vwvMIZcIuMk4+qyMl6GJhqIX0Et0ZrweKVkvxC6z4 Xgl3GZ845Ue1rd33orD7TOHz70mCH0nPdSL9Zsi+Azoobh3u9m0/S5GgEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUEhhMd5zG961ty3uYcplsrvPmFMB8GA1UdIwQY MBaAFLI28uQlIumNN2vjionl3VGrv3mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYt NmVhYTFjODk4MjRhLzEvQlFTR0V4M25NYjNyVzNMZTVoeW1XeXU4LVlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYtNmVhYTFjODk4MjRh LzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPnqgMA0G CSqGSIb3DQEBCwUAA4IBAQAeK3Ve6njHIyExtMgPON9LFH1tyAV/SEb/v2oUz2UP 4bsePjJZDuVICB2JuzF6evwIAEzgc9tZsJa2LE4zbzeoyfhV9OX644T1R2/U3nGY dtFzDYjwTjdZ/vUI7vdpYCUtRo+h8WwtDiGGhBJkq9kc/5C3/vb55wNoaA3tOnF1 ZC32ait4+LQoMpdIfdQiaQZV72pvVS6Y4Yr7t5rGqgwAieUbQU1OmaQ2mfCgOQ60 z5MI67zD9FOC2B/NSvGabK0p1wqz/OWFWXo5fMuICV38fMszz9DcNb60/tIL+eUJ 5Kup6TUXvQnKNTXgpa44oNrR3KCdlytqb4WyT2IsXroR -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:34 2026 by rpki-client