This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/qmwlU-LpszPGm_f_AiX4jfEipIU.roa File: qmwlU-LpszPGm_f_AiX4jfEipIU.roa (raw, json) Hash identifier: eBcbl11HwyKBKgKCJIYPrcRxwRYlzqQyOytUqmTgqj8= Subject key identifier: AA:6C:25:53:E2:E9:B3:33:C6:9B:F7:FF:02:25:F8:8D:F1:22:A4:85 Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a Certificate serial: 019B7B36D9C945FF09BE426B7022C16E2B79 Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/qmwlU-LpszPGm_f_AiX4jfEipIU.roa Signing time: Thu 01 Jan 2026 20:19:10 +0000 ROA not before: Thu 01 Jan 2026 20:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59422 IP address blocks: 5.149.96.0/24 maxlen: 24 5.149.106.0/24 maxlen: 24 5.149.107.0/24 maxlen: 24 5.149.108.0/24 maxlen: 24 5.149.110.0/24 maxlen: 24 5.149.111.0/24 maxlen: 24 2a12:2340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d9:c9:45:ff:09:be:42:6b:70:22:c1:6e:2b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa6c2553e2e9b333c69bf7ff0225f88df122a485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:f5:68:30:f6:21:f7:c5:20:35:78:bc:68: f0:c5:f4:31:82:fa:fe:0a:1b:11:df:d4:65:11:81: ab:5f:aa:37:2d:03:05:55:ae:91:0e:2b:e2:a0:c8: b5:8a:da:e5:48:97:ed:35:a7:0a:72:dd:df:71:98: 24:ff:e7:42:6c:61:80:9b:e2:92:1b:5d:3b:44:7d: e1:9f:3d:d4:a1:05:88:61:a3:52:7d:23:ce:50:05: 35:51:6a:27:3e:52:42:ab:32:68:ea:95:27:3d:26: 3c:80:91:68:d6:6a:a0:89:8b:27:0b:1c:35:17:2d: 79:28:70:f9:39:82:42:36:63:ba:18:7f:f5:f1:79: 5f:67:71:1d:93:70:46:4b:9c:74:48:54:8f:18:96: f0:70:5a:36:0a:6f:3f:64:4a:5d:b9:3a:82:a5:04: 89:3d:61:80:26:52:6d:4e:b5:fa:4f:e0:8b:c5:e6: 9f:33:b1:86:35:ed:ec:70:d5:f3:e3:2b:0f:2c:07: a0:18:fe:d5:ea:df:34:c0:c9:fd:58:13:90:99:b8: 3e:86:c3:8b:68:09:53:14:99:40:eb:d4:3e:18:32: 46:cf:09:f4:00:9a:79:2f:39:b1:d0:40:16:fa:51: 98:a7:0a:bf:f5:47:4c:f0:b9:8d:0a:bd:30:4a:15: 43:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6C:25:53:E2:E9:B3:33:C6:9B:F7:FF:02:25:F8:8D:F1:22:A4:85 X509v3 Authority Key Identifier: keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/qmwlU-LpszPGm_f_AiX4jfEipIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.96.0/24 5.149.106.0-5.149.108.255 5.149.110.0/23 IPv6: 2a12:2340::/48 Signature Algorithm: sha256WithRSAEncryption 05:03:93:28:1e:cb:6f:22:64:2b:21:3f:3b:f6:2f:49:95:53: 19:f4:55:c1:ba:ba:a4:16:e8:2e:2d:0b:17:82:05:ed:32:24: 89:0e:93:15:76:7b:12:2c:57:3d:70:e2:64:c9:4e:cc:32:c8: 9e:3d:46:b7:af:66:93:63:10:f7:b9:6b:b1:be:b1:7c:65:3d: 8c:6c:6d:2d:22:5a:ba:0d:2f:9c:b3:f1:83:0c:20:be:80:f2: 53:b2:b6:e6:af:d1:96:b1:1d:d8:b2:cb:bc:37:01:43:99:2e: ab:43:68:df:90:5e:79:a1:62:c5:46:ed:bf:c5:04:c6:7f:59: b2:89:c8:74:99:6c:e5:aa:69:ea:b6:bc:cf:5d:6a:38:5e:b7: ee:1f:d6:36:d3:fb:b7:f0:2e:be:1e:79:d3:82:22:53:80:6f: 02:1d:67:44:bf:7c:b0:55:26:47:20:ab:1b:55:74:f3:6d:6b: 31:a1:c0:8f:32:05:82:7e:f2:e8:9c:bb:dc:e4:e6:0e:bb:e4: e4:61:ff:a7:6a:05:b2:62:9a:10:cc:b4:68:00:52:bb:19:2d: 9e:fd:d8:20:b0:f7:26:65:8d:88:20:f0:31:93:6d:06:e7:cb: 2e:07:18:a0:46:f1:99:4d:c8:98:d8:5c:5a:0c:34:7f:b6:ee: 11:49:35:04 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt7NtnJRf8JvkJrcCLBbit5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTA4ZDkzMzZmMmU2Y2QxNjVlYjczMDI5N2ZlNmQyMGM4 M2MzOWEwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTZjMjU1M2UyZTliMzMzYzY5YmY3ZmYwMjI1Zjg4ZGYxMjJhNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOb1aDD2IffFIDV4vGjwxfQxgvr+ ChsR39RlEYGrX6o3LQMFVa6RDivioMi1itrlSJftNacKct3fcZgk/+dCbGGAm+KS G107RH3hnz3UoQWIYaNSfSPOUAU1UWonPlJCqzJo6pUnPSY8gJFo1mqgiYsnCxw1 Fy15KHD5OYJCNmO6GH/18XlfZ3Edk3BGS5x0SFSPGJbwcFo2Cm8/ZEpduTqCpQSJ PWGAJlJtTrX6T+CLxeafM7GGNe3scNXz4ysPLAegGP7V6t80wMn9WBOQmbg+hsOL aAlTFJlA69Q+GDJGzwn0AJp5Lzmx0EAW+lGYpwq/9UdM8LmNCr0wShVDawIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFKpsJVPi6bMzxpv3/wIl+I3xIqSFMB8GA1UdIwQY MBaAFK7gjZM28ubNFl63MCl/5tIMg8OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAt NDk3YmVkZDcxZWI5LzEvcW13bFUtTHBzelBHbV9mX0FpWDRqZkVpcElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAtNDk3YmVkZDcxZWI5 LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQABZVgMAwD BAEFlWoDBAAFlWwDBAEFlW4wDwQCAAIwCQMHACoSI0AAADANBgkqhkiG9w0BAQsF AAOCAQEABQOTKB7LbyJkKyE/O/YvSZVTGfRVwbq6pBboLi0LF4IF7TIkiQ6TFXZ7 EixXPXDiZMlOzDLInj1Gt69mk2MQ97lrsb6xfGU9jGxtLSJaug0vnLPxgwwgvoDy U7K25q/RlrEd2LLLvDcBQ5kuq0No35BeeaFixUbtv8UExn9ZsonIdJls5app6ra8 z11qOF637h/WNtP7t/Auvh5504IiU4BvAh1nRL98sFUmRyCrG1V0821rMaHAjzIF gn7y6Jy73OTmDrvk5GH/p2oFsmKaEMy0aABSuxktnv3YILD3JmWNiCDwMZNtBufL LgcYoEbxmU3ImNhcWgw0f7buEUk1BA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:04 2026 by rpki-client