This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa File: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (raw, json) Hash identifier: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4= Subject key identifier: 43:E3:3F:A6:5A:87:BC:84:10:E0:E9:9D:D1:FC:CA:6E:7F:0C:30:81 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 019B7E390611DA973A10DC56E7C84D90F5DF Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42908 IP address blocks: 5.102.48.0/20 maxlen: 20 31.10.56.0/21 maxlen: 21 45.159.116.0/22 maxlen: 22 46.183.56.0/21 maxlen: 21 46.231.72.0/21 maxlen: 21 77.95.192.0/21 maxlen: 21 78.136.128.0/18 maxlen: 18 80.78.136.0/22 maxlen: 22 80.79.0.0/22 maxlen: 22 80.87.176.0/20 maxlen: 20 80.90.128.0/20 maxlen: 20 80.243.236.0/22 maxlen: 22 80.251.240.0/20 maxlen: 20 88.81.64.0/19 maxlen: 19 91.187.32.0/19 maxlen: 19 92.61.80.0/20 maxlen: 20 93.92.48.0/21 maxlen: 21 93.93.32.0/21 maxlen: 21 94.241.64.0/18 maxlen: 18 109.108.96.0/19 maxlen: 19 176.102.128.0/19 maxlen: 19 178.17.80.0/20 maxlen: 20 185.78.12.0/22 maxlen: 22 185.82.236.0/22 maxlen: 22 185.108.60.0/22 maxlen: 22 185.157.240.0/22 maxlen: 22 188.119.96.0/22 maxlen: 22 193.42.128.0/22 maxlen: 22 193.107.252.0/22 maxlen: 22 213.19.0.0/17 maxlen: 17 213.155.32.0/19 maxlen: 19 213.250.192.0/18 maxlen: 18 217.170.96.0/20 maxlen: 20 217.196.112.0/20 maxlen: 20 217.197.144.0/20 maxlen: 20 2a00:e4c0::/32 maxlen: 32 2a01:9f40::/29 maxlen: 29 2a02:2428::/32 maxlen: 32 2a02:2588::/29 maxlen: 29 2a03:1600::/32 maxlen: 32 2a03:7a00::/32 maxlen: 32 2a03:a820::/32 maxlen: 32 2a07:cc80::/29 maxlen: 29 2a0c:8b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:06:11:da:97:3a:10:dc:56:e7:c8:4d:90:f5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43e33fa65a87bc8410e0e99dd1fcca6e7f0c3081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:43:3d:c0:0b:28:c3:eb:b0:9c:ac:87:48: 4a:e7:47:62:f5:73:2c:eb:07:1f:22:b2:d2:ee:77: 9b:57:3e:96:3b:44:5c:bf:26:60:6b:c4:9c:42:e0: 0c:e0:76:7e:ec:17:99:98:78:e5:4b:dc:d1:b5:51: 4f:d0:e2:8b:34:ff:67:df:bd:29:b1:8b:32:ff:48: bd:6b:e3:e3:51:51:6d:b3:0e:e8:fa:e7:80:1b:b6: d4:55:e9:3c:d8:2b:5d:4c:6d:51:30:0e:38:64:46: eb:df:5a:63:e3:a3:b9:9f:60:56:36:bd:29:84:ae: e4:52:04:37:7b:9a:9a:21:b7:ca:9a:09:ad:c2:5f: 70:c7:77:9e:6c:91:d0:e2:70:bc:68:4a:9e:67:5d: d2:42:88:e2:fb:f7:0f:14:fa:31:bd:06:85:80:41: 6f:44:51:51:e8:79:9c:ad:91:3d:97:0d:fa:38:5d: 51:80:c1:96:d6:26:88:54:3f:55:b5:fc:22:2b:ec: ec:e1:26:fb:9f:94:b3:8b:ca:ae:38:70:61:21:77: f6:e6:a8:b6:7d:69:73:53:fc:ca:a9:e2:33:06:c5: 56:67:1b:27:82:a3:fa:03:79:98:50:c7:b1:ef:c7: 04:4c:d1:a8:3f:48:8b:d9:cf:b9:f1:72:67:95:3a: 55:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E3:3F:A6:5A:87:BC:84:10:E0:E9:9D:D1:FC:CA:6E:7F:0C:30:81 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.48.0/20 31.10.56.0/21 45.159.116.0/22 46.183.56.0/21 46.231.72.0/21 77.95.192.0/21 78.136.128.0/18 80.78.136.0/22 80.79.0.0/22 80.87.176.0/20 80.90.128.0/20 80.243.236.0/22 80.251.240.0/20 88.81.64.0/19 91.187.32.0/19 92.61.80.0/20 93.92.48.0/21 93.93.32.0/21 94.241.64.0/18 109.108.96.0/19 176.102.128.0/19 178.17.80.0/20 185.78.12.0/22 185.82.236.0/22 185.108.60.0/22 185.157.240.0/22 188.119.96.0/22 193.42.128.0/22 193.107.252.0/22 213.19.0.0/17 213.155.32.0/19 213.250.192.0/18 217.170.96.0/20 217.196.112.0/20 217.197.144.0/20 IPv6: 2a00:e4c0::/32 2a01:9f40::/29 2a02:2428::/32 2a02:2588::/29 2a03:1600::/32 2a03:7a00::/32 2a03:a820::/32 2a07:cc80::/29 2a0c:8b40::/29 Signature Algorithm: sha256WithRSAEncryption 9e:1d:d0:5f:cb:ef:6a:9c:ef:8e:87:f2:06:86:1b:e3:0b:ce: 38:c7:b2:49:06:e1:b9:d9:98:e7:8a:bf:d8:6f:ec:8d:80:3d: 4d:ca:4e:c2:c3:5e:b0:e1:e4:69:19:95:05:9c:ea:8e:76:a5: 7a:5c:04:2f:c5:55:98:d1:3d:c3:fa:9d:a2:fd:33:e8:65:d7: 31:52:f8:0d:c0:b7:37:71:df:0b:7d:a5:b4:2b:0b:96:eb:d9: 69:c3:59:d1:66:02:0f:fe:61:71:b1:f6:88:72:9d:8e:2e:a2: 01:c7:3d:19:e1:c4:25:96:75:f2:50:da:df:28:18:f0:c6:16: ba:39:82:d5:e6:bd:9a:53:ff:77:1f:81:59:07:23:79:20:81: a7:71:cc:84:1e:11:5a:04:9a:26:3f:69:ab:35:0f:49:ed:a7: 92:b0:c4:16:0d:ba:e2:81:c4:3a:98:9e:f7:2e:5f:d8:a5:d7: 89:96:29:db:f6:7e:6b:78:e6:cb:ae:52:94:aa:34:6c:0f:ad: 84:df:1e:2e:72:f9:ad:70:3c:91:f1:9c:2a:33:c5:7f:9d:18: 4c:86:fc:be:1a:6d:8a:a3:ea:c4:cc:2c:5b:af:aa:a6:98:73: 31:59:e0:10:b3:24:9e:39:15:fe:96:51:08:ed:39:f8:cd:f0: 97:3b:cc:d2 -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISAZt+OQYR2pc6ENxW58hNkPXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2UzM2ZhNjVhODdiYzg0MTBlMGU5OWRkMWZjY2E2ZTdmMGMzMDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjRDPcALKMPrsJysh0hK50di9XMs 6wcfIrLS7nebVz6WO0RcvyZga8ScQuAM4HZ+7BeZmHjlS9zRtVFP0OKLNP9n370p sYsy/0i9a+PjUVFtsw7o+ueAG7bUVek82CtdTG1RMA44ZEbr31pj46O5n2BWNr0p hK7kUgQ3e5qaIbfKmgmtwl9wx3eebJHQ4nC8aEqeZ13SQoji+/cPFPoxvQaFgEFv RFFR6HmcrZE9lw36OF1RgMGW1iaIVD9VtfwiK+zs4Sb7n5Szi8quOHBhIXf25qi2 fWlzU/zKqeIzBsVWZxsngqP6A3mYUMex78cETNGoP0iL2c+58XJnlTpVoQIDAQAB o4IDJDCCAyAwHQYDVR0OBBYEFEPjP6Zah7yEEODpndH8ym5/DDCBMB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvUS1NX3BscUh2SVFRNE9tZDBmektibjhNTUlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOAYIKwYBBQUHAQcBAf8EggEnMIIBIzCB2QQCAAEwgdID BAQFZjADBAMfCjgDBAItn3QDBAMutzgDBAMu50gDBANNX8ADBAZOiIADBAJQTogD BAJQTwADBARQV7ADBARQWoADBAJQ8+wDBARQ+/ADBAVYUUADBAVbuyADBARcPVAD BANdXDADBANdXSADBAZe8UADBAVtbGADBAWwZoADBASyEVADBAK5TgwDBAK5UuwD BAK5bDwDBAK5nfADBAK8d2ADBALBKoADBALBa/wDBAfVEwADBAXVmyADBAbV+sAD BATZqmADBATZxHADBATZxZAwRQQCAAIwPwMFACoA5MADBQMqAZ9AAwUAKgIkKAMF AyoCJYgDBQAqAxYAAwUAKgN6AAMFACoDqCADBQMqB8yAAwUDKgyLQDANBgkqhkiG 9w0BAQsFAAOCAQEAnh3QX8vvapzvjofyBoYb4wvOOMeySQbhudmY54q/2G/sjYA9 TcpOwsNesOHkaRmVBZzqjnalelwEL8VVmNE9w/qdov0z6GXXMVL4DcC3N3HfC32l tCsLluvZacNZ0WYCD/5hcbH2iHKdji6iAcc9GeHEJZZ18lDa3ygY8MYWujmC1ea9 mlP/dx+BWQcjeSCBp3HMhB4RWgSaJj9pqzUPSe2nkrDEFg264oHEOpie9y5f2KXX iZYp2/Z+a3jmy65SlKo0bA+thN8eLnL5rXA8kfGcKjPFf50YTIb8vhptiqPqxMws W6+qpphzMVngELMknjkV/pZRCO05+M3wlzvM0g== -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:36 2026 by rpki-client