This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa File: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (raw, json) Hash identifier: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA= Subject key identifier: FA:AB:F2:C2:55:0E:3B:81:9E:E3:52:DE:EB:01:A9:39:82:A3:7E:C1 Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Certificate serial: 019B797E1FF8417CAE618941CC67FAD9990E Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa Signing time: Thu 01 Jan 2026 12:17:47 +0000 ROA not before: Thu 01 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209095 IP address blocks: 5.182.136.0/22 maxlen: 24 5.182.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:1f:f8:41:7c:ae:61:89:41:cc:67:fa:d9:99:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Validity Not Before: Jan 1 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faabf2c2550e3b819ee352deeb01a93982a37ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:85:99:fd:b4:44:0b:0b:d2:2d:fb:9c:40:8d: 1b:c7:2c:af:9c:6b:ca:27:ad:02:39:50:ab:b8:ac: 83:d3:94:31:37:22:7a:7d:7a:50:de:f2:93:ea:db: 86:b7:6a:e9:8b:09:c2:48:d4:b6:f0:fe:2f:5d:a6: ae:b6:3f:e6:5b:ca:5f:0c:fc:ae:13:b4:58:78:d1: 2e:3a:d6:6d:b6:f0:db:13:5c:92:49:2a:09:98:b9: 0e:7f:d1:52:3c:60:8c:30:90:d7:89:df:c1:69:1b: 64:9c:aa:73:bd:4d:51:7c:01:f8:3d:31:7e:74:a4: fa:c4:58:db:58:70:0b:d1:3c:2d:ed:9c:00:4c:34: 72:ab:f3:58:d3:bb:53:3d:cd:bc:a9:b4:ef:b8:95: 98:bf:e1:b7:40:a7:81:6c:27:22:10:69:fc:f4:84: a2:27:d7:e9:70:c6:66:60:4f:94:7b:33:ff:b4:d8: 1f:0a:58:f5:c6:02:47:53:2a:a1:5b:15:e0:73:0d: ba:73:18:26:a9:87:3b:ef:0c:56:a5:8b:d1:4c:98: ee:dc:14:b8:7a:a9:54:dc:f1:e7:6f:bc:b9:d9:15: aa:30:52:b0:93:bc:39:1b:40:05:76:23:e6:ea:dd: 53:e6:be:07:71:00:fc:0a:61:47:93:34:2f:ce:05: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AB:F2:C2:55:0E:3B:81:9E:E3:52:DE:EB:01:A9:39:82:A3:7E:C1 X509v3 Authority Key Identifier: keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.136.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:39:7f:b8:e1:c6:0f:78:c4:7c:2f:34:ac:ad:94:3f:c4:45: 7a:bd:bf:13:7b:f5:37:37:27:15:9f:ce:a9:c8:46:f1:06:ce: 94:98:38:79:a6:11:78:3b:33:e4:2e:fb:d7:5e:d6:80:92:ef: b9:06:b4:48:50:b1:02:21:13:f0:f2:04:b4:ed:b2:e2:b6:37: 83:7e:92:aa:37:96:ff:22:a7:8e:c1:39:34:4e:d4:71:82:83: 58:88:e9:f3:94:ad:46:99:3e:e9:5b:a1:dd:40:f6:6e:f6:ae: 30:30:01:53:37:e7:5c:d9:be:0c:3c:d0:43:2e:ef:f1:40:da: 82:a9:f7:e0:69:2c:11:d7:41:be:98:9a:09:fc:5f:88:a7:f2: 1e:3a:5d:23:f8:e3:68:f2:f5:9a:1c:a3:8d:6c:ba:a5:96:42: 9b:72:17:5c:cc:8b:4a:51:32:1c:75:69:92:13:e2:54:ee:6b: aa:9b:ab:c6:1e:c1:34:30:b0:22:bf:18:d5:34:c1:8b:8e:2d: c5:18:1d:15:de:22:09:7d:d7:42:a2:bb:75:8f:82:fd:e8:14: 38:a5:7f:4e:d9:ae:e4:ee:75:1b:22:3f:61:d6:da:95:8d:8d: a6:b6:2a:8f:a3:f0:09:a3:ed:07:f4:ba:1a:78:32:c5:59:43: b2:ee:36:c9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fh/4QXyuYYlBzGf62ZkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw NDAyZjkwHhcNMjYwMTAxMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWFiZjJjMjU1MGUzYjgxOWVlMzUyZGVlYjAxYTkzOTgyYTM3ZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oWZ/bRECwvSLfucQI0bxyyvnGvK J60COVCruKyD05QxNyJ6fXpQ3vKT6tuGt2rpiwnCSNS28P4vXaautj/mW8pfDPyu E7RYeNEuOtZttvDbE1ySSSoJmLkOf9FSPGCMMJDXid/BaRtknKpzvU1RfAH4PTF+ dKT6xFjbWHAL0Twt7ZwATDRyq/NY07tTPc28qbTvuJWYv+G3QKeBbCciEGn89ISi J9fpcMZmYE+UezP/tNgfClj1xgJHUyqhWxXgcw26cxgmqYc77wxWpYvRTJju3BS4 eqlU3PHnb7y52RWqMFKwk7w5G0AFdiPm6t1T5r4HcQD8CmFHkzQvzgWJLwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqr8sJVDjuBnuNS3usBqTmCo37BMB8GA1UdIwQY MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt NGIzNTBlYWNjODZiLzEvMS1xdnl3bFVPTzRHZTQxTGU2d0dwT1lLamZzRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzQvYzVkYzczLTliZTItNDUwMy04MjgxLTRiMzUwZWFjYzg2 Yi8xL0w4OWhuTTdQZzI5V3B5QVE2Qy0zM1NRRUF2ay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgW2iDAN BgkqhkiG9w0BAQsFAAOCAQEAHjl/uOHGD3jEfC80rK2UP8RFer2/E3v1NzcnFZ/O qchG8QbOlJg4eaYReDsz5C77117WgJLvuQa0SFCxAiET8PIEtO2y4rY3g36SqjeW /yKnjsE5NE7UcYKDWIjp85StRpk+6Vuh3UD2bvauMDABUzfnXNm+DDzQQy7v8UDa gqn34GksEddBvpiaCfxfiKfyHjpdI/jjaPL1mhyjjWy6pZZCm3IXXMyLSlEyHHVp khPiVO5rqpurxh7BNDCwIr8Y1TTBi44txRgdFd4iCX3XQqK7dY+C/egUOKV/Ttmu 5O51GyI/YdbalY2NprYqj6PwCaPtB/S6GngyxVlDsu42yQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:53 2026 by rpki-client