This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa File: Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa (raw, json) Hash identifier: 2wZvpJoRPd1PR2vm6ydbigwXx/IfVUpp9SpAjC/KM7c= Subject key identifier: 42:0E:79:2F:18:B0:91:97:2D:D1:DC:C2:DE:E9:3A:CC:48:50:DA:D0 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B78526A376976E32D2DA258B300BC Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49847 IP address blocks: 5.160.160.0/24 maxlen: 24 5.160.161.0/24 maxlen: 24 5.160.164.0/24 maxlen: 24 5.160.165.0/24 maxlen: 24 5.160.180.0/22 maxlen: 24 5.160.180.0/23 maxlen: 23 5.160.182.0/23 maxlen: 23 5.160.183.0/24 maxlen: 24 46.209.54.0/24 maxlen: 24 46.209.55.0/24 maxlen: 24 46.209.178.0/24 maxlen: 24 46.209.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:78:52:6a:37:69:76:e3:2d:2d:a2:58:b3:00:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=420e792f18b091972dd1dcc2dee93acc4850dad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:66:76:59:20:9d:1b:57:0d:33:ef:88:bc: 87:df:ae:28:1c:b7:76:38:e1:8d:9b:21:b1:0a:e0: 84:08:6f:91:b9:07:ea:d1:4f:ca:d0:0f:86:e4:49: 8d:d3:6f:eb:6d:17:d3:62:d8:a3:f4:70:24:b6:9c: 2b:83:2e:9b:79:72:40:af:60:eb:f1:62:0a:2a:cf: 56:41:6d:5e:02:62:6e:f5:41:66:14:29:ca:bd:9a: 73:ad:56:8c:7b:fd:f1:d8:35:3c:ac:53:5f:3f:99: 42:d5:5f:24:d1:d2:32:f5:75:20:37:9a:2e:17:bf: 45:df:56:9e:4e:78:d7:d2:7d:63:e0:2b:d1:3d:9a: bb:21:95:15:eb:89:ec:62:56:f2:98:b0:e1:e9:a9: 2d:53:c5:14:82:7b:d2:73:6e:8b:43:9f:96:15:82: 92:76:e3:1c:b6:ef:94:b6:f4:c7:36:72:43:2a:c0: ff:9c:a4:60:22:4f:ea:6a:38:d2:53:28:72:ce:86: be:30:a6:ac:ed:fa:8f:8d:7a:00:88:9c:07:dd:69: c7:0a:75:57:00:64:19:07:c6:c9:e7:c5:d3:20:53: f3:36:ed:f5:9f:4b:59:7c:f4:51:37:2e:9b:bb:4b: be:ae:80:89:84:69:3b:a1:61:58:c4:f4:96:42:cd: 29:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0E:79:2F:18:B0:91:97:2D:D1:DC:C2:DE:E9:3A:CC:48:50:DA:D0 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.160.0/23 5.160.164.0/23 5.160.180.0/22 46.209.54.0/23 46.209.178.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:58:db:99:85:20:49:d7:3a:90:27:18:3f:2a:f7:3c:dd:43: d1:0a:0d:4f:8f:c5:2a:68:b3:aa:48:73:31:c9:f3:9d:0b:11: 1a:af:cc:01:2a:2e:54:43:08:31:93:4d:df:e0:b4:58:9b:f0: f6:19:3f:72:b3:61:e2:64:8b:bd:84:84:8c:66:78:f9:e6:b9: 18:bb:6d:d1:e3:4b:f3:b8:19:b7:fa:e2:97:5a:84:fc:48:a1: 7a:c2:2c:20:0a:c7:49:db:6f:35:e8:7a:31:f2:e6:53:b4:04: 49:1d:5e:8b:b0:46:3e:85:80:40:ed:13:f3:57:71:e0:17:5e: 60:06:53:1a:50:e1:d7:a5:7d:1d:ce:2b:68:19:6c:5b:09:41: 3a:b9:13:ec:e5:1b:60:da:9c:31:f7:18:be:28:f0:57:b6:4e: fe:76:54:86:69:0f:e5:1a:eb:70:4e:31:ea:9c:ef:a6:5b:46: b5:95:35:40:4d:2d:21:0e:71:2e:af:23:aa:b8:99:34:35:7f: d1:02:47:51:92:2a:e4:14:c6:e8:87:73:cb:de:18:57:c5:d9: 82:b8:1c:06:a0:c8:5e:e8:ec:a6:e6:88:bd:62:bd:76:cd:25: 1d:d3:d1:27:a1:fa:a8:92:10:eb:e8:58:17:0d:af:96:87:f1: 78:32:8f:c0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6W3hSajdpduMtLaJYswC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjBlNzkyZjE4YjA5MTk3MmRkMWRjYzJkZWU5M2FjYzQ4NTBkYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvVmdlkgnRtXDTPviLyH364oHLd2 OOGNmyGxCuCECG+RuQfq0U/K0A+G5EmN02/rbRfTYtij9HAktpwrgy6beXJAr2Dr 8WIKKs9WQW1eAmJu9UFmFCnKvZpzrVaMe/3x2DU8rFNfP5lC1V8k0dIy9XUgN5ou F79F31aeTnjX0n1j4CvRPZq7IZUV64nsYlbymLDh6aktU8UUgnvSc26LQ5+WFYKS duMctu+UtvTHNnJDKsD/nKRgIk/qajjSUyhyzoa+MKas7fqPjXoAiJwH3WnHCnVX AGQZB8bJ58XTIFPzNu31n0tZfPRRNy6bu0u+roCJhGk7oWFYxPSWQs0pFwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEIOeS8YsJGXLdHcwt7pOsxIUNrQMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvUWc1NUx4aXdrWmN0MGR6QzN1azZ6RWhRMnRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBBaCgAwQB BaCkAwQCBaC0AwQBLtE2AwQBLtGyMA0GCSqGSIb3DQEBCwUAA4IBAQAvWNuZhSBJ 1zqQJxg/Kvc83UPRCg1Pj8UqaLOqSHMxyfOdCxEar8wBKi5UQwgxk03f4LRYm/D2 GT9ys2HiZIu9hISMZnj55rkYu23R40vzuBm3+uKXWoT8SKF6wiwgCsdJ22816Hox 8uZTtARJHV6LsEY+hYBA7RPzV3HgF15gBlMaUOHXpX0dzitoGWxbCUE6uRPs5Rtg 2pwx9xi+KPBXtk7+dlSGaQ/lGutwTjHqnO+mW0a1lTVATS0hDnEuryOquJk0NX/R AkdRkirkFMboh3PL3hhXxdmCuBwGoMhe6Oym5oi9Yr12zSUd09EnofqokhDr6FgX Da+Wh/F4Mo/A -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:35 2026 by rpki-client