This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/nqjUsQFOSSR_VlQgo8F_ZyOdpaw.roa File: nqjUsQFOSSR_VlQgo8F_ZyOdpaw.roa (raw, json) Hash identifier: KD4iauv6bhWKHocLXwPOQP3wZ1EE4UVEn94ibBoHPqQ= Subject key identifier: 9E:A8:D4:B1:01:4E:49:24:7F:56:54:20:A3:C1:7F:67:23:9D:A5:AC Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019BE9F389B971F0763E929EB3281F517C92 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/nqjUsQFOSSR_VlQgo8F_ZyOdpaw.roa Signing time: Fri 23 Jan 2026 08:23:30 +0000 ROA not before: Fri 23 Jan 2026 08:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 144.56.7.0/24 maxlen: 24 144.56.9.0/24 maxlen: 24 144.56.13.0/24 maxlen: 24 144.56.17.0/24 maxlen: 24 144.56.20.0/24 maxlen: 24 144.56.23.0/24 maxlen: 24 144.56.24.0/24 maxlen: 24 144.56.27.0/24 maxlen: 24 144.56.29.0/24 maxlen: 24 144.56.31.0/24 maxlen: 24 144.56.33.0/24 maxlen: 24 144.56.34.0/24 maxlen: 24 144.56.35.0/24 maxlen: 24 144.56.40.0/24 maxlen: 24 144.56.41.0/24 maxlen: 24 144.56.51.0/24 maxlen: 24 144.56.71.0/24 maxlen: 24 144.56.72.0/24 maxlen: 24 144.56.76.0/24 maxlen: 24 144.56.80.0/24 maxlen: 24 144.56.81.0/24 maxlen: 24 144.56.85.0/24 maxlen: 24 144.56.86.0/24 maxlen: 24 144.56.88.0/24 maxlen: 24 144.56.91.0/24 maxlen: 24 144.56.93.0/24 maxlen: 24 144.56.94.0/24 maxlen: 24 144.56.95.0/24 maxlen: 24 144.56.97.0/24 maxlen: 24 144.56.98.0/24 maxlen: 24 144.56.99.0/24 maxlen: 24 144.56.100.0/24 maxlen: 24 144.56.101.0/24 maxlen: 24 144.56.102.0/24 maxlen: 24 144.56.103.0/24 maxlen: 24 144.56.105.0/24 maxlen: 24 144.56.106.0/24 maxlen: 24 144.56.107.0/24 maxlen: 24 144.56.108.0/24 maxlen: 24 144.56.112.0/24 maxlen: 24 144.56.117.0/24 maxlen: 24 144.56.118.0/24 maxlen: 24 144.56.119.0/24 maxlen: 24 144.56.121.0/24 maxlen: 24 144.56.122.0/24 maxlen: 24 144.56.124.0/24 maxlen: 24 144.56.125.0/24 maxlen: 24 144.56.126.0/24 maxlen: 24 144.56.127.0/24 maxlen: 24 144.56.128.0/24 maxlen: 24 144.56.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:f3:89:b9:71:f0:76:3e:92:9e:b3:28:1f:51:7c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 23 08:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea8d4b1014e49247f565420a3c17f67239da5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:c5:05:29:98:d3:ab:01:24:3c:c8:09:b0: 8d:50:d5:a0:aa:c0:93:fd:84:f3:78:aa:5a:75:af: 03:8a:e4:19:6b:43:c1:10:72:48:5d:ec:68:c2:d4: 8d:09:1c:13:f2:aa:c8:87:a6:32:4c:5b:e0:77:b5: 0f:f1:d8:bc:82:f8:f9:43:79:50:3c:38:b2:a9:c7: 4d:0f:f5:bb:2f:73:50:9b:76:41:94:68:48:40:67: 31:15:95:46:94:71:3e:33:fe:67:9e:76:2a:ef:d1: 62:9a:d5:4d:f2:2e:68:87:2e:5e:31:c8:be:80:4d: 17:d2:e7:1f:25:9f:98:92:fa:27:b4:0d:56:2d:2c: 72:48:99:47:80:f8:f3:d3:6c:87:30:bd:c3:e2:cf: cc:8c:41:f9:31:ed:6e:f2:0d:6c:d1:4c:96:5f:d9: 3c:70:32:39:57:7b:b1:16:c8:68:bf:cc:94:6a:8b: e0:f8:81:6a:5e:7e:67:ba:f1:b5:fa:07:a5:73:7f: b1:30:7f:bc:c8:01:66:a8:4e:96:a3:42:29:f0:d8: 07:98:5d:c9:e9:fe:05:cf:55:ef:a8:dd:a3:13:1a: d1:81:c7:89:5f:f8:26:58:e4:0f:52:9d:63:90:8a: 90:03:bd:70:98:46:a5:8c:49:8f:d5:f6:87:23:a6: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A8:D4:B1:01:4E:49:24:7F:56:54:20:A3:C1:7F:67:23:9D:A5:AC X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/nqjUsQFOSSR_VlQgo8F_ZyOdpaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.7.0/24 144.56.9.0/24 144.56.13.0/24 144.56.17.0/24 144.56.20.0/24 144.56.23.0-144.56.24.255 144.56.27.0/24 144.56.29.0/24 144.56.31.0/24 144.56.33.0-144.56.35.255 144.56.40.0/23 144.56.51.0/24 144.56.71.0-144.56.72.255 144.56.76.0/24 144.56.80.0/23 144.56.85.0-144.56.86.255 144.56.88.0/24 144.56.91.0/24 144.56.93.0-144.56.95.255 144.56.97.0-144.56.103.255 144.56.105.0-144.56.108.255 144.56.112.0/24 144.56.117.0-144.56.119.255 144.56.121.0-144.56.122.255 144.56.124.0-144.56.129.255 Signature Algorithm: sha256WithRSAEncryption 02:92:30:85:5f:7a:b7:1d:25:de:fd:05:e2:e9:90:1f:3a:ae: fa:cc:9b:f4:11:d4:e3:98:9d:f0:69:37:aa:c6:ef:08:10:f8: fd:9e:e8:80:80:2f:63:cb:93:89:70:a8:46:5f:8c:f2:8a:b7: 3f:1d:56:f3:22:9f:10:a5:66:76:60:f1:75:54:ec:f4:d2:20: 3a:25:77:a3:98:e2:1a:c8:46:23:2d:b7:d3:0c:75:90:6c:fc: df:c8:51:bd:a7:61:c9:1a:0a:a9:53:5f:9f:a5:08:7d:68:33: 3d:fe:25:ea:e8:ed:bc:ad:cf:7f:58:85:0c:91:27:b6:4d:9d: 82:88:c0:77:8e:5e:9b:5e:13:2f:7f:b5:0e:62:6b:28:43:11: 7d:a6:63:70:bb:d7:03:9f:1f:0a:c5:bc:e7:d8:f5:98:f9:60: 42:39:ee:21:f5:88:8a:3c:99:fb:f2:62:41:54:c6:f3:53:f5: 61:aa:2e:5c:d9:95:76:4e:29:31:75:39:e0:18:5e:d0:0c:72: fc:c8:0e:59:36:db:13:15:df:9c:a3:76:7e:1a:95:c3:e3:6f: 44:ac:19:3f:1e:56:97:bb:c5:26:49:87:8d:2e:be:35:c8:78: 96:7d:c1:f6:71:52:64:4a:9c:f8:cc:5c:da:f8:28:ca:89:9e: 8e:c5:87:f7 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISAZvp84m5cfB2PpKesygfUXySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTIzMDgyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWE4ZDRiMTAxNGU0OTI0N2Y1NjU0MjBhM2MxN2Y2NzIzOWRhNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseDFBSmY06sBJDzICbCNUNWgqsCT /YTzeKpada8DiuQZa0PBEHJIXexowtSNCRwT8qrIh6YyTFvgd7UP8di8gvj5Q3lQ PDiyqcdND/W7L3NQm3ZBlGhIQGcxFZVGlHE+M/5nnnYq79FimtVN8i5ohy5eMci+ gE0X0ucfJZ+YkvontA1WLSxySJlHgPjz02yHML3D4s/MjEH5Me1u8g1s0UyWX9k8 cDI5V3uxFshov8yUaovg+IFqXn5nuvG1+gelc3+xMH+8yAFmqE6Wo0Ip8NgHmF3J 6f4Fz1XvqN2jExrRgceJX/gmWOQPUp1jkIqQA71wmEaljEmP1faHI6Y/nwIDAQAB o4IC7zCCAuswHQYDVR0OBBYEFJ6o1LEBTkkkf1ZUIKPBf2cjnaWsMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvbnFqVXNRRk9TU1JfVmxRZ284Rl9aeU9kcGF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAwYIKwYBBQUHAQcBAf8EgfMwgfAwge0EAgABMIHmAwQA kDgHAwQAkDgJAwQAkDgNAwQAkDgRAwQAkDgUMAwDBACQOBcDBACQOBgDBACQOBsD BACQOB0DBACQOB8wDAMEAJA4IQMEApA4IAMEAZA4KAMEAJA4MzAMAwQAkDhHAwQA kDhIAwQAkDhMAwQBkDhQMAwDBACQOFUDBACQOFYDBACQOFgDBACQOFswDAMEAJA4 XQMEBZA4QDAMAwQAkDhhAwQDkDhgMAwDBACQOGkDBACQOGwDBACQOHAwDAMEAJA4 dQMEA5A4cDAMAwQAkDh5AwQAkDh6MAwDBAKQOHwDBAGQOIAwDQYJKoZIhvcNAQEL BQADggEBAAKSMIVfercdJd79BeLpkB86rvrMm/QR1OOYnfBpN6rG7wgQ+P2e6ICA L2PLk4lwqEZfjPKKtz8dVvMinxClZnZg8XVU7PTSIDold6OY4hrIRiMtt9MMdZBs /N/IUb2nYckaCqlTX5+lCH1oMz3+Jero7bytz39YhQyRJ7ZNnYKIwHeOXpteEy9/ tQ5iayhDEX2mY3C71wOfHwrFvOfY9Zj5YEI57iH1iIo8mfvyYkFUxvNT9WGqLlzZ lXZOKTF1OeAYXtAMcvzIDlk22xMV35yjdn4alcPjb0SsGT8eVpe7xSZJh40uvjXI eJZ9wfZxUmRKnPjMXNr4KMqJno7Fh/c= -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:20 2026 by rpki-client