This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa File: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (raw, json) Hash identifier: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko= Subject key identifier: 7E:E6:90:8A:7E:59:36:3A:C2:4D:D5:16:9A:F1:01:0D:C5:C5:CF:C1 Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Certificate serial: 019B797E1ED626B578FF8AFA1554EBC78A9B Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa Signing time: Thu 01 Jan 2026 12:17:47 +0000 ROA not before: Thu 01 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50818 IP address blocks: 5.182.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:1e:d6:26:b5:78:ff:8a:fa:15:54:eb:c7:8a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Validity Not Before: Jan 1 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ee6908a7e59363ac24dd5169af1010dc5c5cfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:12:9c:a5:47:8f:a3:a8:cb:30:56:49:62: e5:65:a1:8e:9a:24:34:05:e2:4b:26:cb:5b:3f:4d: b1:6c:83:06:db:0f:a3:12:fe:d8:f5:28:1e:a1:fa: c9:fa:d5:75:23:6c:57:54:8d:02:73:b0:a6:13:46: e1:b5:80:96:12:14:17:4e:d6:22:38:52:d2:61:85: da:0e:ca:3a:b4:b9:7d:cb:38:15:53:7e:57:1d:8a: ab:e2:89:f6:2c:bb:6b:bd:b0:eb:91:5e:c9:6e:46: 1f:78:71:ba:d0:5e:e3:30:32:2f:09:ce:11:eb:cd: 57:23:aa:76:bd:e8:d3:da:29:cf:34:7e:af:18:fc: 96:2d:e0:d1:f4:0f:23:6b:59:b2:bc:92:a4:6c:66: ab:fd:c0:38:3b:ad:4c:44:be:38:4a:14:b8:76:ab: 65:15:07:e1:d4:ec:7c:00:d6:27:da:3a:95:26:c0: 0e:f9:e9:2e:78:27:89:90:99:b8:b0:87:ce:ec:63: 2f:d9:35:de:c5:a8:23:11:73:4c:a8:32:00:35:5d: b7:8e:b7:4f:b2:ad:b7:6d:9b:45:79:45:36:58:68: 5f:00:a2:8b:0c:56:64:50:20:05:9d:0a:6d:1f:84: 14:07:41:ad:59:31:de:5c:fb:1e:f0:0c:c0:99:14: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E6:90:8A:7E:59:36:3A:C2:4D:D5:16:9A:F1:01:0D:C5:C5:CF:C1 X509v3 Authority Key Identifier: keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.136.0/22 Signature Algorithm: sha256WithRSAEncryption 53:3a:26:6f:69:af:ef:b4:49:cf:ce:96:b7:88:98:de:e7:1b: 1a:fb:28:84:19:2c:05:6d:1b:0d:7c:ff:58:40:c1:96:8f:d2: 9b:55:e6:fc:fa:02:1c:5b:0e:cb:2d:77:ad:69:2f:f4:02:c8: fb:2b:01:41:c7:61:b9:03:74:58:5c:6d:e4:18:54:19:5b:9b: 9d:99:d2:a0:17:81:01:e8:3d:81:54:ad:06:a3:5f:25:f7:4a: a2:db:92:39:39:ee:06:43:ab:d8:ec:76:b5:be:f8:aa:6d:45: cf:a5:2d:80:7b:2d:19:48:09:13:82:a4:c9:a0:06:bc:23:e0: c0:44:38:f6:4b:65:12:bc:5e:95:35:9b:0e:82:01:22:54:d0: bb:bb:8b:b3:f1:fb:d7:d7:21:ba:0d:87:63:93:08:ec:e5:f7: c5:aa:85:5e:36:cf:b3:4d:47:dc:8c:ad:76:40:96:d7:18:d6: a9:cc:8a:b6:e3:99:cc:2f:13:14:23:66:08:5c:a5:7b:76:d3: 3e:fb:30:c3:fc:30:ee:b9:e3:ea:8e:8d:03:3d:35:d5:b6:95: b3:6e:c3:ff:41:d5:2a:fa:b5:79:32:8e:5c:25:7c:37:ca:a7: d7:c4:91:b2:3b:a3:52:1a:77:e6:a9:40:04:73:cf:08:62:18: 3a:fe:8b:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fh7WJrV4/4r6FVTrx4qbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw NDAyZjkwHhcNMjYwMTAxMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWU2OTA4YTdlNTkzNjNhYzI0ZGQ1MTY5YWYxMDEwZGM1YzVjZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSgSnKVHj6OoyzBWSWLlZaGOmiQ0 BeJLJstbP02xbIMG2w+jEv7Y9SgeofrJ+tV1I2xXVI0Cc7CmE0bhtYCWEhQXTtYi OFLSYYXaDso6tLl9yzgVU35XHYqr4on2LLtrvbDrkV7JbkYfeHG60F7jMDIvCc4R 681XI6p2vejT2inPNH6vGPyWLeDR9A8ja1myvJKkbGar/cA4O61MRL44ShS4dqtl FQfh1Ox8ANYn2jqVJsAO+ekueCeJkJm4sIfO7GMv2TXexagjEXNMqDIANV23jrdP sq23bZtFeUU2WGhfAKKLDFZkUCAFnQptH4QUB0GtWTHeXPse8AzAmRSwxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH7mkIp+WTY6wk3VFprxAQ3Fxc/BMB8GA1UdIwQY MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt NGIzNTBlYWNjODZiLzEvZnVhUWluNVpOanJDVGRVV212RUJEY1hGejhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbaIMA0G CSqGSIb3DQEBCwUAA4IBAQBTOiZvaa/vtEnPzpa3iJje5xsa+yiEGSwFbRsNfP9Y QMGWj9KbVeb8+gIcWw7LLXetaS/0Asj7KwFBx2G5A3RYXG3kGFQZW5udmdKgF4EB 6D2BVK0Go18l90qi25I5Oe4GQ6vY7Ha1vviqbUXPpS2Aey0ZSAkTgqTJoAa8I+DA RDj2S2USvF6VNZsOggEiVNC7u4uz8fvX1yG6DYdjkwjs5ffFqoVeNs+zTUfcjK12 QJbXGNapzIq245nMLxMUI2YIXKV7dtM++zDD/DDuuePqjo0DPTXVtpWzbsP/QdUq +rV5Mo5cJXw3yqfXxJGyO6NSGnfmqUAEc88IYhg6/osL -----END CERTIFICATE-----Generated at Mon Jan 26 08:43:02 2026 by rpki-client