This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa File: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (raw, json) Hash identifier: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE= Subject key identifier: AA:F2:F9:70:DA:42:A3:F5:DA:14:23:72:92:1E:C6:C7:61:CF:8F:B0 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B7A5B8FA7E7CD5DC683B2E3A2F90BA908 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198548 IP address blocks: 141.138.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8f:a7:e7:cd:5d:c6:83:b2:e3:a2:f9:0b:a9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaf2f970da42a3f5da142372921ec6c761cf8fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:af:45:1e:3e:42:1a:87:2e:ba:44:4f:72: 5a:47:b4:15:bf:46:73:df:99:01:b0:a5:4c:6f:8e: 4b:f0:0b:5f:3d:f0:0f:f9:ea:48:fe:f9:ee:fa:b7: 89:8c:5c:52:ea:5c:57:be:39:1c:69:dc:49:a0:1a: f0:88:d1:e7:77:22:83:29:bc:07:0b:a4:b4:dc:96: ae:aa:9d:ae:b2:c9:86:a8:17:dc:7b:6f:d4:85:52: a5:8c:5d:e0:af:f1:4e:5d:bd:ab:f5:7d:c3:b2:51: 47:5d:91:c4:5e:55:51:f1:ec:ed:a8:6d:d3:23:60: d1:cd:3d:e7:8e:11:61:20:a2:e5:f9:ce:64:50:f8: c7:1b:17:92:ff:cd:20:53:4f:16:74:8e:60:17:e2: 85:23:61:76:8f:7c:a9:3c:49:c9:30:41:a8:22:fb: 81:fc:ec:82:47:b1:e2:b3:f5:f4:6f:08:99:0f:8f: dd:15:0f:47:d7:7f:d2:a2:89:d2:d9:7d:df:01:a9: b4:da:c2:9e:08:3c:f7:a1:b7:aa:13:7e:8f:84:dc: b5:2c:5a:41:95:59:7f:04:55:5e:0e:84:65:de:6d: 39:2f:9c:f2:3f:b6:11:c5:76:44:fe:78:87:91:a8: 2b:dd:f3:6b:f4:13:8d:cc:f1:99:9d:a0:63:f7:85: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F2:F9:70:DA:42:A3:F5:DA:14:23:72:92:1E:C6:C7:61:CF:8F:B0 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.138.4.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:6c:72:65:d3:c5:87:08:78:2d:c2:e7:d6:6e:18:06:ef:1c: 15:35:46:c0:95:7f:6b:45:64:bd:38:5f:93:df:01:96:69:5d: 9f:f2:a1:7c:10:6f:d7:62:8f:65:4e:01:80:01:02:75:9b:89: 40:e7:b6:a9:70:89:60:2d:62:59:d8:06:d3:1c:f5:22:a5:6e: b1:17:d5:9f:13:78:20:7a:94:bb:a5:97:28:1f:b1:5e:ab:c4: 1b:f9:f0:16:2b:90:a2:ff:63:3c:7e:5d:09:f4:f6:58:52:cc: a9:7b:58:b5:18:34:81:39:5a:2e:db:ee:b3:25:04:6b:67:2b: 75:20:db:84:af:de:bb:cf:02:86:af:15:aa:88:7b:ee:9b:6c: 15:c8:92:fa:d6:0f:22:c1:5e:12:3a:dd:fe:61:6f:fc:7f:cd: 28:e9:79:03:04:5a:e1:cb:d0:f4:37:a8:1a:10:f5:f1:34:73: 18:bc:3a:e9:8f:33:76:99:57:d7:4d:48:44:71:fe:c0:3c:3c: 32:f2:51:a1:2b:54:bb:96:78:3a:89:c5:65:57:af:89:03:9d: f9:50:56:d5:d3:2b:f0:b7:cb:7d:31:06:b6:35:81:21:ea:d5: dd:75:49:ef:7d:fe:8c:d8:fc:b4:42:2d:af:72:17:97:c3:e4: 2b:3b:d2:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4+n581dxoOy46L5C6kIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWYyZjk3MGRhNDJhM2Y1ZGExNDIzNzI5MjFlYzZjNzYxY2Y4ZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaavRR4+QhqHLrpET3JaR7QVv0Zz 35kBsKVMb45L8AtfPfAP+epI/vnu+reJjFxS6lxXvjkcadxJoBrwiNHndyKDKbwH C6S03Jauqp2ussmGqBfce2/UhVKljF3gr/FOXb2r9X3DslFHXZHEXlVR8eztqG3T I2DRzT3njhFhIKLl+c5kUPjHGxeS/80gU08WdI5gF+KFI2F2j3ypPEnJMEGoIvuB /OyCR7His/X0bwiZD4/dFQ9H13/SoonS2X3fAam02sKeCDz3obeqE36PhNy1LFpB lVl/BFVeDoRl3m05L5zyP7YRxXZE/niHkagr3fNr9BONzPGZnaBj94XPtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKry+XDaQqP12hQjcpIexsdhz4+wMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvcXZMNWNOcENvX1hhRkNOeWtoN0d4MkhQajdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYoEMA0G CSqGSIb3DQEBCwUAA4IBAQALbHJl08WHCHgtwufWbhgG7xwVNUbAlX9rRWS9OF+T 3wGWaV2f8qF8EG/XYo9lTgGAAQJ1m4lA57apcIlgLWJZ2AbTHPUipW6xF9WfE3gg epS7pZcoH7Feq8Qb+fAWK5Ci/2M8fl0J9PZYUsype1i1GDSBOVou2+6zJQRrZyt1 INuEr967zwKGrxWqiHvum2wVyJL61g8iwV4SOt3+YW/8f80o6XkDBFrhy9D0N6ga EPXxNHMYvDrpjzN2mVfXTUhEcf7APDwy8lGhK1S7lng6icVlV6+JA535UFbV0yvw t8t9MQa2NYEh6tXddUnvff6M2Py0Qi2vcheXw+QrO9IL -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:42 2026 by rpki-client