This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/VQtJlC9hHzZMq_K64NB0xltL3Qc.roa File: VQtJlC9hHzZMq_K64NB0xltL3Qc.roa (raw, json) Hash identifier: My9rgEJXYw1FAk2B4n4agl5BA61SBdcnSem0n0fXVFA= Subject key identifier: 55:0B:49:94:2F:61:1F:36:4C:AB:F2:BA:E0:D0:74:C6:5B:4B:DD:07 Certificate issuer: /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62 Certificate serial: 019B775933552FFF52855A43B8ED9945821A Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/VQtJlC9hHzZMq_K64NB0xltL3Qc.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51896 IP address blocks: 31.209.136.0/21 maxlen: 21 46.22.96.0/20 maxlen: 20 46.22.96.0/24 maxlen: 24 89.17.128.0/19 maxlen: 19 185.191.232.0/22 maxlen: 22 2a00:5000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:33:55:2f:ff:52:85:5a:43:b8:ed:99:45:82:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=550b49942f611f364cabf2bae0d074c65b4bdd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:a8:82:8f:0c:24:8a:85:64:23:c7:3c:de: af:b9:03:ca:28:31:1c:10:74:81:3b:33:42:1b:40: 67:46:67:aa:16:9f:f9:62:78:20:12:e4:30:87:54: 6d:df:0e:61:f3:0b:1e:c2:45:d3:99:2e:ca:3c:18: e3:56:b2:1b:fb:a1:fc:b1:64:58:bd:d7:12:b4:2e: a5:d1:1d:12:f7:b8:24:74:46:43:37:74:82:7c:63: 27:b4:94:93:f7:03:f1:4d:04:00:03:b3:83:65:83: 9f:c8:46:45:c2:8d:88:1e:4c:0c:72:16:3b:fc:11: aa:b7:30:bc:d2:d0:f4:d3:b4:0e:a4:b0:88:9b:a5: 72:d5:51:76:63:c0:bc:91:d6:26:d4:a7:22:d6:94: ff:36:f5:34:08:4d:80:9b:00:d5:96:2c:6f:2d:3a: 93:42:ff:17:a7:59:af:08:59:70:58:9e:6a:32:66: 10:a2:d3:41:db:da:9f:48:21:c7:c0:05:45:c1:c0: d0:73:c6:33:08:ec:63:5b:6d:53:a0:3a:a1:94:7c: a9:2b:7b:40:50:92:94:63:10:b9:84:dd:3b:4a:db: 05:71:84:08:6b:cb:e8:00:06:d1:fd:0f:a9:34:5b: 52:21:92:69:f8:36:9f:b9:cc:7e:ce:a9:e7:8a:c1: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0B:49:94:2F:61:1F:36:4C:AB:F2:BA:E0:D0:74:C6:5B:4B:DD:07 X509v3 Authority Key Identifier: keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/VQtJlC9hHzZMq_K64NB0xltL3Qc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.209.136.0/21 46.22.96.0/20 89.17.128.0/19 185.191.232.0/22 IPv6: 2a00:5000::/29 Signature Algorithm: sha256WithRSAEncryption 09:27:3c:a7:73:ae:f9:96:d7:86:c9:44:c0:f8:de:ee:78:63: ff:c8:36:d0:18:47:3b:3d:91:77:12:ed:e7:25:8e:8f:4b:93: 14:63:36:57:ce:1a:a2:ef:ad:bb:b0:52:74:9f:95:5d:7f:f7: 63:17:5d:ef:dd:23:7c:ae:e8:e9:d2:b3:80:38:6a:c3:00:13: 1c:09:82:93:8c:32:b8:65:1a:c3:8b:3b:ed:91:82:57:00:41: 04:58:7d:ba:cf:16:60:c2:62:3e:e8:74:9f:72:b0:de:39:aa: b3:4f:4b:28:01:96:e6:3f:f7:1b:02:a3:d1:ed:c3:9e:53:61: e2:f4:54:86:ca:ca:85:ab:a6:65:57:6e:56:f0:f5:67:18:31: d3:87:7c:96:0f:4d:c0:83:9d:dd:6e:04:52:68:51:bc:a8:02: d2:84:45:bd:40:3d:e5:9d:9d:1c:22:56:fc:a6:1b:2b:92:04: a1:e4:19:a5:fb:ed:28:89:fc:27:43:af:7d:93:a2:f7:bf:db: 56:c2:89:94:5c:8e:1d:14:67:37:a9:6a:c4:84:37:8a:0b:f3: ba:ab:b2:1c:69:df:ae:01:85:f2:a2:ff:3e:08:b4:39:4a:a8: 1b:06:8e:51:51:8a:a6:92:b5:14:10:9f:ed:80:65:af:5f:82: 40:e1:de:ea -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3WTNVL/9ShVpDuO2ZRYIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwY2NkMDlhNTRiZmE2MzE0MTk5N2NkNjUzYjc3YmM5OTM5 MmVmNjIwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTBiNDk5NDJmNjExZjM2NGNhYmYyYmFlMGQwNzRjNjViNGJkZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgGogo8MJIqFZCPHPN6vuQPKKDEc EHSBOzNCG0BnRmeqFp/5YnggEuQwh1Rt3w5h8wsewkXTmS7KPBjjVrIb+6H8sWRY vdcStC6l0R0S97gkdEZDN3SCfGMntJST9wPxTQQAA7ODZYOfyEZFwo2IHkwMchY7 /BGqtzC80tD007QOpLCIm6Vy1VF2Y8C8kdYm1Kci1pT/NvU0CE2AmwDVlixvLTqT Qv8Xp1mvCFlwWJ5qMmYQotNB29qfSCHHwAVFwcDQc8YzCOxjW21ToDqhlHypK3tA UJKUYxC5hN07StsFcYQIa8voAAbR/Q+pNFtSIZJp+Dafucx+zqnnisH1BQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFFULSZQvYR82TKvyuuDQdMZbS90HMB8GA1UdIwQY MBaAFNDM0JpUv6YxQZl81lO3e8mTku9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWIt M2I5OTA4NzhhNTJiLzEvVlF0SmxDOWhIelpNcV9LNjROQjB4bHRMM1FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWItM2I5OTA4NzhhNTJi LzEvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDH9GIAwQE LhZgAwQFWRGAAwQCub/oMA0EAgACMAcDBQMqAFAAMA0GCSqGSIb3DQEBCwUAA4IB AQAJJzync675lteGyUTA+N7ueGP/yDbQGEc7PZF3Eu3nJY6PS5MUYzZXzhqi7627 sFJ0n5Vdf/djF13v3SN8rujp0rOAOGrDABMcCYKTjDK4ZRrDizvtkYJXAEEEWH26 zxZgwmI+6HSfcrDeOaqzT0soAZbmP/cbAqPR7cOeU2Hi9FSGysqFq6ZlV25W8PVn GDHTh3yWD03Ag53dbgRSaFG8qALShEW9QD3lnZ0cIlb8phsrkgSh5Bml++0oifwn Q699k6L3v9tWwomUXI4dFGc3qWrEhDeKC/O6q7Icad+uAYXyov8+CLQ5SqgbBo5R UYqmkrUUEJ/tgGWvX4JA4d7q -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:44 2026 by rpki-client