This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BQ3FyGbVet7Gzh9ZSHwzuNM2L2Y.roa File: BQ3FyGbVet7Gzh9ZSHwzuNM2L2Y.roa (raw, json) Hash identifier: KeiWq2Uxpznl4CQykpBmkgaXNwbadBMsu28B8/ldMqE= Subject key identifier: 05:0D:C5:C8:66:D5:7A:DE:C6:CE:1F:59:48:7C:33:B8:D3:36:2F:66 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019BE6D8DD002E47D2ABE909EAF15AD37183 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BQ3FyGbVet7Gzh9ZSHwzuNM2L2Y.roa Signing time: Thu 22 Jan 2026 17:55:30 +0000 ROA not before: Thu 22 Jan 2026 17:55:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215727 IP address blocks: 5.180.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:d8:dd:00:2e:47:d2:ab:e9:09:ea:f1:5a:d3:71:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 22 17:55:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=050dc5c866d57adec6ce1f59487c33b8d3362f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:c8:7d:91:b6:80:a7:4c:dd:83:9a:83:e3: da:76:77:2f:5f:1d:c4:12:e6:8a:13:e2:25:0f:33: 36:1e:e3:eb:e2:97:3a:fa:8e:0e:0e:0f:82:60:69: be:ec:a9:91:26:22:71:01:61:03:98:a7:c8:ee:06: fb:5a:76:0b:c5:6e:52:94:d7:f5:1f:5c:e3:8f:44: d3:84:7e:66:4d:10:2e:23:2c:f9:60:17:b2:62:9f: 4a:bd:34:13:5d:c0:9b:81:c1:da:af:50:dc:01:e0: cf:e2:d6:85:4a:d1:3f:1e:a7:d9:fa:db:06:8e:e2: 7e:82:a3:ad:9a:ad:fb:f4:d7:2a:0a:ea:ca:5b:90: c6:2b:38:4f:74:21:84:94:4a:da:17:14:1a:5a:55: 22:df:e0:f6:29:8f:24:df:00:a0:b7:02:0c:30:b6: c9:03:cb:42:26:b5:b0:be:a0:0f:89:c2:30:17:b4: 51:f2:96:0c:37:77:51:fb:aa:3a:8f:82:52:c0:02: 7a:8b:5b:2a:dd:a8:57:8f:87:d9:b6:24:4d:e4:f7: 22:cf:81:1b:fc:9a:26:ba:8a:72:30:49:ca:b8:c6: 9e:08:85:20:36:e1:ca:b3:db:e9:a7:6e:30:b7:6c: 38:50:3a:62:15:ba:51:8b:b8:e9:93:1d:76:6c:3c: 69:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0D:C5:C8:66:D5:7A:DE:C6:CE:1F:59:48:7C:33:B8:D3:36:2F:66 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BQ3FyGbVet7Gzh9ZSHwzuNM2L2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.49.0/24 Signature Algorithm: sha256WithRSAEncryption b1:54:53:ac:e0:34:b6:e3:45:38:1d:39:6b:32:25:e3:18:d7: 8e:c0:83:ed:24:a2:57:4e:9e:c9:ac:df:95:27:01:5c:e3:3e: 4b:86:e6:1a:9f:47:02:8e:93:7d:aa:6b:f3:a1:01:26:fc:b7: b9:09:28:bc:d7:c0:ca:d0:c6:fb:4a:a2:dc:bf:b5:36:49:d4: 6e:28:2e:4a:a6:08:dd:a0:d5:11:ca:e5:2f:d5:2a:f1:db:2b: 88:17:9d:35:fe:10:85:0b:e4:7a:f2:f6:0f:a9:ed:28:de:55: 25:d7:fd:0f:b4:1c:c3:4e:82:38:65:74:c8:92:05:00:ca:de: 49:3b:71:36:2a:75:38:8d:a7:85:fe:6a:8b:b4:68:88:79:d9: 4b:5a:85:04:cc:bb:9d:b7:fe:c5:13:c9:67:49:8d:7c:92:67: 80:66:30:db:ec:ca:ee:a6:41:fa:fb:9b:62:38:e4:c6:88:3f: ed:7d:93:5c:76:47:0e:4f:bb:08:0b:f4:db:47:da:c7:7f:a7: e4:f0:9c:88:d6:45:98:f8:eb:b0:32:2b:83:c3:18:cc:61:02: a6:b4:cf:41:33:1e:5f:7b:46:9e:54:9e:4b:88:87:86:ea:4e: aa:c7:2d:a5:14:d7:29:cb:b1:48:5c:75:e8:e1:56:99:30:5d: 77:cf:c9:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvm2N0ALkfSq+kJ6vFa03GDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTIyMTc1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTBkYzVjODY2ZDU3YWRlYzZjZTFmNTk0ODdjMzNiOGQzMzYyZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRPIfZG2gKdM3YOag+PadncvXx3E EuaKE+IlDzM2HuPr4pc6+o4ODg+CYGm+7KmRJiJxAWEDmKfI7gb7WnYLxW5SlNf1 H1zjj0TThH5mTRAuIyz5YBeyYp9KvTQTXcCbgcHar1DcAeDP4taFStE/HqfZ+tsG juJ+gqOtmq379NcqCurKW5DGKzhPdCGElEraFxQaWlUi3+D2KY8k3wCgtwIMMLbJ A8tCJrWwvqAPicIwF7RR8pYMN3dR+6o6j4JSwAJ6i1sq3ahXj4fZtiRN5Pciz4Eb /JomuopyMEnKuMaeCIUgNuHKs9vpp24wt2w4UDpiFbpRi7jpkx12bDxpGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUNxchm1Xrexs4fWUh8M7jTNi9mMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvQlEzRnlHYlZldDdHemg5WlNId3p1Tk0yTDJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbQxMA0G CSqGSIb3DQEBCwUAA4IBAQCxVFOs4DS240U4HTlrMiXjGNeOwIPtJKJXTp7JrN+V JwFc4z5LhuYan0cCjpN9qmvzoQEm/Le5CSi818DK0Mb7SqLcv7U2SdRuKC5Kpgjd oNURyuUv1Srx2yuIF501/hCFC+R68vYPqe0o3lUl1/0PtBzDToI4ZXTIkgUAyt5J O3E2KnU4jaeF/mqLtGiIedlLWoUEzLudt/7FE8lnSY18kmeAZjDb7MrupkH6+5ti OOTGiD/tfZNcdkcOT7sIC/TbR9rHf6fk8JyI1kWY+OuwMiuDwxjMYQKmtM9BMx5f e0aeVJ5LiIeG6k6qxy2lFNcpy7FIXHXo4VaZMF13z8k+ -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:38 2026 by rpki-client