This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Q64xUrRAaelDNsVxAUyEucxHw7Y.roa File: Q64xUrRAaelDNsVxAUyEucxHw7Y.roa (raw, json) Hash identifier: C8dCOpG/z2zTzKRV0qbQKf4ylmBMywe/913i1rh1tTg= Subject key identifier: 43:AE:31:52:B4:40:69:E9:43:36:C5:71:01:4C:84:B9:CC:47:C3:B6 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019B7BA39F227F886AFB4F5D240B8879E030 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Q64xUrRAaelDNsVxAUyEucxHw7Y.roa Signing time: Thu 01 Jan 2026 22:17:59 +0000 ROA not before: Thu 01 Jan 2026 22:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206862 IP address blocks: 5.200.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9f:22:7f:88:6a:fb:4f:5d:24:0b:88:79:e0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Jan 1 22:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43ae3152b44069e94336c571014c84b9cc47c3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:27:aa:38:b7:93:7d:92:60:5d:74:bc:92: 8a:0b:e6:6d:24:3d:cd:86:35:5e:d3:a1:55:84:c1: 0e:2e:1a:de:10:ec:20:57:58:19:6e:32:3a:01:bb: ac:3b:b0:98:18:cb:82:4a:43:1b:8c:f6:95:07:ca: 22:83:a3:35:4c:b8:d9:4c:ed:b5:a7:a9:ab:d5:fc: 7d:1e:f0:a8:f9:2b:84:4e:09:f0:19:b9:ed:44:32: c9:3f:55:a0:b0:19:f2:00:8f:4a:90:0a:7c:d4:7f: 2b:6f:37:ef:9a:28:cd:ef:00:75:bf:b7:78:87:48: ff:a8:b9:cf:36:ed:b4:b9:c3:18:4e:28:a6:3d:ae: 3b:b5:a5:e8:44:ea:2c:7c:cf:ab:3e:b0:2b:d8:2d: 99:b0:90:d1:4d:7e:4e:7f:e2:b7:9d:b6:83:21:bf: f0:ae:4d:85:62:cd:08:33:ae:3d:0c:99:b6:77:77: 1b:c7:c5:de:ca:fd:07:a5:b2:4c:8e:bb:f4:93:92: 07:0a:b1:2c:88:ba:06:f3:a0:e6:ec:7f:0b:b2:34: dd:61:e6:b8:b0:36:82:1b:c3:09:d1:6a:74:57:0e: a5:9c:26:89:a4:27:4f:e5:eb:b8:fd:e9:1e:dd:66: 2a:33:b2:72:18:bc:5b:a9:c0:6e:79:fd:ca:49:ed: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AE:31:52:B4:40:69:E9:43:36:C5:71:01:4C:84:B9:CC:47:C3:B6 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Q64xUrRAaelDNsVxAUyEucxHw7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.200.95.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:b4:5a:d0:6f:3c:c2:a7:90:46:54:32:26:4a:b1:ea:42:25: 15:5a:b6:fe:50:60:a7:11:90:39:eb:d8:53:c1:e3:f5:44:3c: d1:bb:47:1e:b5:92:5b:68:d3:79:a7:90:70:c9:5d:77:30:3d: 9b:63:6f:a7:62:fe:80:44:92:ca:98:1e:86:cf:e0:ea:4f:7d: da:af:b8:71:7b:ad:25:c0:7f:6a:cc:8e:90:83:73:47:35:2f: d0:28:05:c2:ce:24:b9:da:7e:6b:99:7b:7e:aa:8d:8c:ca:f3: 3a:ba:b0:11:1e:b9:40:49:ce:6f:e8:15:98:79:ac:d4:1a:c7: ac:46:33:cb:c7:b1:2d:23:fc:75:01:0b:e6:5a:20:74:76:8f: 38:cf:fb:61:c5:02:59:ba:c6:53:9f:22:6d:42:2a:19:2f:37: d9:d2:e0:06:50:8d:0b:57:9b:c9:98:e2:a5:a8:a3:51:eb:45: 0c:63:af:93:d3:78:3b:a1:be:3c:37:1b:68:19:1c:06:c9:b9: 58:68:90:ae:38:04:3a:ad:c5:f6:cc:d1:26:4d:6e:a1:c6:b0: 78:a3:ce:65:c4:5b:61:7c:8e:d4:f9:2e:68:2c:7e:52:21:82: 3f:65:e0:1d:2a:fd:d5:17:5d:78:8b:60:0f:77:ba:7e:f6:fd: 16:01:5b:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o58if4hq+09dJAuIeeAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2FlMzE1MmI0NDA2OWU5NDMzNmM1NzEwMTRjODRiOWNjNDdjM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIInqji3k32SYF10vJKKC+ZtJD3N hjVe06FVhMEOLhreEOwgV1gZbjI6AbusO7CYGMuCSkMbjPaVB8oig6M1TLjZTO21 p6mr1fx9HvCo+SuETgnwGbntRDLJP1WgsBnyAI9KkAp81H8rbzfvmijN7wB1v7d4 h0j/qLnPNu20ucMYTiimPa47taXoROosfM+rPrAr2C2ZsJDRTX5Of+K3nbaDIb/w rk2FYs0IM649DJm2d3cbx8Xeyv0HpbJMjrv0k5IHCrEsiLoG86Dm7H8LsjTdYea4 sDaCG8MJ0Wp0Vw6lnCaJpCdP5eu4/eke3WYqM7JyGLxbqcBuef3KSe1XKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEOuMVK0QGnpQzbFcQFMhLnMR8O2MB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvUTY0eFVyUkFhZWxETnNWeEFVeUV1Y3hIdzdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABchfMA0G CSqGSIb3DQEBCwUAA4IBAQA8tFrQbzzCp5BGVDImSrHqQiUVWrb+UGCnEZA569hT weP1RDzRu0cetZJbaNN5p5BwyV13MD2bY2+nYv6ARJLKmB6Gz+DqT33ar7hxe60l wH9qzI6Qg3NHNS/QKAXCziS52n5rmXt+qo2MyvM6urARHrlASc5v6BWYeazUGses RjPLx7EtI/x1AQvmWiB0do84z/thxQJZusZTnyJtQioZLzfZ0uAGUI0LV5vJmOKl qKNR60UMY6+T03g7ob48NxtoGRwGyblYaJCuOAQ6rcX2zNEmTW6hxrB4o85lxFth fI7U+S5oLH5SIYI/ZeAdKv3VF114i2APd7p+9v0WAVtm -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:21 2026 by rpki-client