This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qxRVneBb_uUd_NsM3Vb645rM-7A.roa File: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (raw, json) Hash identifier: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ= Subject key identifier: AB:14:55:9D:E0:5B:FE:E5:1D:FC:DB:0C:DD:56:FA:E3:9A:CC:FB:B0 Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066 Certificate serial: 019B7D5D2D7A8B088737D23B91415B9DCD4C Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qxRVneBb_uUd_NsM3Vb645rM-7A.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56595 IP address blocks: 5.175.60.0/24 maxlen: 24 5.175.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2d:7a:8b:08:87:37:d2:3b:91:41:5b:9d:cd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab14559de05bfee51dfcdb0cdd56fae39accfbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:de:1e:a4:54:ac:97:77:78:6c:ff:44:82: 87:c3:0a:ca:29:54:f0:b2:08:c9:23:72:b8:45:07: 72:d7:36:dd:43:29:21:93:10:f6:42:fd:2d:b3:4f: 62:d9:3c:23:77:b4:f7:5b:2d:62:12:83:4c:6e:ab: db:23:95:ba:ed:49:e7:0b:d6:95:72:52:d4:46:4e: 6d:94:f8:87:36:cf:1f:5d:ac:05:3b:65:1b:3d:2f: 23:5f:87:00:38:05:f8:20:ac:19:80:8a:39:ce:41: a4:37:82:5d:77:67:84:fd:29:05:b1:05:03:02:00: 34:b6:84:4b:ac:4f:65:fc:0e:5b:5f:5b:0e:b2:fe: 13:70:9f:1e:af:8e:8d:dd:59:9c:6c:8d:72:49:6b: 8d:b7:91:7c:f3:69:9f:c7:55:fb:29:09:e6:db:a4: b6:0f:08:37:6a:28:6f:bc:a3:93:d6:42:18:73:31: 59:e8:81:e4:80:d0:54:cb:f2:13:e9:19:f8:af:03: 0f:0a:ac:7e:49:d5:45:06:44:b0:70:ca:29:24:55: ad:91:58:89:67:a9:af:04:f3:36:63:12:a4:57:65: a6:6e:5b:47:13:3e:63:d8:8b:f9:1e:33:63:a4:3e: c5:e7:69:e1:1e:0c:89:40:e1:0e:e6:51:55:98:f6: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:14:55:9D:E0:5B:FE:E5:1D:FC:DB:0C:DD:56:FA:E3:9A:CC:FB:B0 X509v3 Authority Key Identifier: keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qxRVneBb_uUd_NsM3Vb645rM-7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.60.0/24 5.175.62.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:b1:bd:7a:52:2b:f2:7c:e4:7f:25:3f:99:98:e5:c4:5d:07: f5:2c:af:d6:b9:43:ea:f8:e2:2e:d9:af:da:c6:8f:db:fa:85: e9:4d:2a:55:9e:23:f3:16:8c:8b:43:c6:f7:a8:95:35:cd:36: 1a:89:cd:fd:36:48:53:b1:10:da:61:d3:a3:c7:93:fb:8e:5d: 9e:f6:e5:3d:0b:f4:ad:3f:45:61:07:31:8c:b9:65:e1:ed:c0: bb:e0:34:83:56:d0:f4:62:6e:17:cf:70:87:aa:7f:bf:d4:b1: 76:41:b4:4a:4f:55:25:33:e5:7d:94:da:40:d5:37:ce:c9:1f: 02:ad:e0:ea:53:a4:31:15:45:93:b0:5c:65:ae:00:3c:26:e0: 59:b5:8a:bd:51:01:dd:e7:3a:f8:d8:9d:b0:68:b6:e1:e8:44: 89:60:81:a7:90:63:3b:1c:ed:7d:c4:71:30:b4:65:c2:26:18: a4:ea:47:9d:f9:87:9b:de:6b:14:bb:d9:4c:53:d8:f3:67:f9: bd:b3:02:99:4e:8e:14:60:d1:66:b2:d9:8b:ac:2b:2a:49:94: ad:e8:c0:40:2d:dc:c5:73:f2:59:ac:47:7b:f7:67:ee:9e:b3: b4:0b:1d:92:24:9d:c6:92:9c:ba:db:f1:0f:03:f3:dd:83:92: c7:d0:78:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XS16iwiHN9I7kUFbnc1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTRjNDc2M2VhMDE4YzNkYzcwMjAzZDA0ZWZlNzFmZDRi MWIwNjYwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjE0NTU5ZGUwNWJmZWU1MWRmY2RiMGNkZDU2ZmFlMzlhY2NmYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFveHqRUrJd3eGz/RIKHwwrKKVTw sgjJI3K4RQdy1zbdQykhkxD2Qv0ts09i2Twjd7T3Wy1iEoNMbqvbI5W67UnnC9aV clLURk5tlPiHNs8fXawFO2UbPS8jX4cAOAX4IKwZgIo5zkGkN4Jdd2eE/SkFsQUD AgA0toRLrE9l/A5bX1sOsv4TcJ8er46N3VmcbI1ySWuNt5F882mfx1X7KQnm26S2 Dwg3aihvvKOT1kIYczFZ6IHkgNBUy/IT6Rn4rwMPCqx+SdVFBkSwcMopJFWtkViJ Z6mvBPM2YxKkV2WmbltHEz5j2Iv5HjNjpD7F52nhHgyJQOEO5lFVmPaKmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKsUVZ3gW/7lHfzbDN1W+uOazPuwMB8GA1UdIwQY MBaAFKpUxHY+oBjD3HAgPQTv5x/UsbBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQt ZGUzNzY3M2M0MDljLzEvcXhSVm5lQmJfdVVkX05zTTNWYjY0NXJNLTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQtZGUzNzY3M2M0MDlj LzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa88AwQA Ba8+MA0GCSqGSIb3DQEBCwUAA4IBAQArsb16UivyfOR/JT+ZmOXEXQf1LK/WuUPq +OIu2a/axo/b+oXpTSpVniPzFoyLQ8b3qJU1zTYaic39NkhTsRDaYdOjx5P7jl2e 9uU9C/StP0VhBzGMuWXh7cC74DSDVtD0Ym4Xz3CHqn+/1LF2QbRKT1UlM+V9lNpA 1TfOyR8CreDqU6QxFUWTsFxlrgA8JuBZtYq9UQHd5zr42J2waLbh6ESJYIGnkGM7 HO19xHEwtGXCJhik6ked+Yeb3msUu9lMU9jzZ/m9swKZTo4UYNFmstmLrCsqSZSt 6MBALdzFc/JZrEd792funrO0Cx2SJJ3Gkpy62/EPA/Pdg5LH0Hit -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:25 2026 by rpki-client