This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/tqoYIoJqozwAy_oQQoUSMn_UbDo.roa File: tqoYIoJqozwAy_oQQoUSMn_UbDo.roa (raw, json) Hash identifier: gw5mlh4GqpBE0X4qpdSCk5ZoQB0cwmYNXSfT/Fs8hD0= Subject key identifier: B6:AA:18:22:82:6A:A3:3C:00:CB:FA:10:42:85:12:32:7F:D4:6C:3A Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019BD6DC9FFAC7F9581C8E7C9B636F781DB9 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/tqoYIoJqozwAy_oQQoUSMn_UbDo.roa Signing time: Mon 19 Jan 2026 15:25:41 +0000 ROA not before: Mon 19 Jan 2026 15:25:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 110.172.189.0/24 maxlen: 24 114.69.244.0/24 maxlen: 24 114.69.245.0/24 maxlen: 24 114.69.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:dc:9f:fa:c7:f9:58:1c:8e:7c:9b:63:6f:78:1d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 19 15:25:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6aa1822826aa33c00cbfa10428512327fd46c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1c:52:37:94:40:9f:24:c1:df:77:52:b0:b1: eb:14:50:bb:d6:98:28:52:0d:38:26:4d:56:8c:46: 27:3c:b3:00:5a:2c:e5:f4:82:cd:fe:bc:82:d2:12: 06:7d:91:41:11:00:eb:77:06:bf:ba:51:f7:10:6c: 33:7c:b7:3f:56:92:dd:e3:d4:dc:82:55:5d:94:9f: f7:3c:50:24:63:bf:54:1b:3c:f4:00:e4:ec:4b:66: 32:8b:41:ba:6e:a0:a7:0b:a4:97:8a:a7:c9:a9:35: c4:c3:dc:6e:76:27:56:73:b3:fd:c6:1b:8d:8e:3a: 5e:2c:1c:9c:5e:70:94:c5:9d:f3:4a:6c:8d:06:2c: 43:a1:82:65:83:12:25:99:cf:ee:af:b8:d5:33:fd: 62:d4:c4:db:c5:f3:87:69:19:b8:2e:7e:0f:c6:74: 82:b6:9a:5a:0f:54:a7:22:54:10:9f:f5:d6:08:b6: af:3f:09:cc:63:d7:d3:59:dd:6b:6a:b3:a7:0c:dc: 2d:3b:0d:df:e1:f9:be:1a:d2:c8:4a:8a:cf:af:d7: 8b:db:e3:d1:44:e7:64:99:19:ee:eb:07:04:a4:97: 93:9a:2b:9f:a7:8c:d8:4b:c5:3d:aa:d1:62:83:5a: 66:5b:05:88:24:a8:8b:75:ee:2f:fb:4c:21:d6:d1: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AA:18:22:82:6A:A3:3C:00:CB:FA:10:42:85:12:32:7F:D4:6C:3A X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/tqoYIoJqozwAy_oQQoUSMn_UbDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.172.189.0/24 114.69.244.0/23 114.69.247.0/24 Signature Algorithm: sha256WithRSAEncryption 63:fe:7c:7f:fc:53:c3:59:e0:fe:68:c8:9b:18:2a:82:f5:47: 01:11:3d:4f:30:2e:64:e6:87:34:38:08:f1:3c:58:5a:18:e4: e0:d9:5d:fe:8f:85:25:78:13:b5:21:85:5b:8e:7f:f9:4b:af: 11:f3:8e:e6:43:74:7c:0b:a1:16:4c:e0:25:7a:b6:92:78:b5: a5:4a:88:a6:8e:4a:3a:4b:5e:a5:77:25:1f:74:64:fd:be:8e: e0:2c:a3:37:95:f2:f8:6a:22:10:ae:a7:09:00:13:f9:f5:31: a6:b4:80:41:41:b2:c6:df:45:49:0f:e9:2d:5e:d7:99:44:53: b1:fc:56:44:0e:63:42:be:b2:9d:cf:87:16:09:9b:85:bc:33: e5:b3:ad:2e:f6:de:76:91:bf:f8:a8:a1:ed:74:19:6e:2f:b6: 3b:19:37:c0:04:7f:af:98:a4:66:2e:19:7a:da:ae:e5:c1:96: a8:20:3e:65:39:67:1a:bd:6a:0b:ae:cb:bd:79:e5:0b:75:5d: 04:f0:b3:b4:b5:46:7c:b9:e7:fb:34:4e:d2:8f:ba:2b:58:40: d2:8c:5c:a2:55:2b:95:98:0b:a9:b9:84:89:49:b5:14:5e:4b: 69:0f:23:7f:a7:6e:b9:8b:7e:6b:8e:b5:74:75:18:02:76:b3: cd:69:3f:89 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvW3J/6x/lYHI58m2NveB25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTE5MTUyNTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmFhMTgyMjgyNmFhMzNjMDBjYmZhMTA0Mjg1MTIzMjdmZDQ2YzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hxSN5RAnyTB33dSsLHrFFC71pgo Ug04Jk1WjEYnPLMAWizl9ILN/ryC0hIGfZFBEQDrdwa/ulH3EGwzfLc/VpLd49Tc glVdlJ/3PFAkY79UGzz0AOTsS2Yyi0G6bqCnC6SXiqfJqTXEw9xudidWc7P9xhuN jjpeLBycXnCUxZ3zSmyNBixDoYJlgxIlmc/ur7jVM/1i1MTbxfOHaRm4Ln4PxnSC tppaD1SnIlQQn/XWCLavPwnMY9fTWd1rarOnDNwtOw3f4fm+GtLISorPr9eL2+PR ROdkmRnu6wcEpJeTmiufp4zYS8U9qtFig1pmWwWIJKiLde4v+0wh1tHH2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLaqGCKCaqM8AMv6EEKFEjJ/1Gw6MB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvdHFvWUlvSnFvendBeV9vUVFvVVNNbl9VYkRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbqy9AwQB ckX0AwQAckX3MA0GCSqGSIb3DQEBCwUAA4IBAQBj/nx//FPDWeD+aMibGCqC9UcB ET1PMC5k5oc0OAjxPFhaGOTg2V3+j4UleBO1IYVbjn/5S68R847mQ3R8C6EWTOAl eraSeLWlSoimjko6S16ldyUfdGT9vo7gLKM3lfL4aiIQrqcJABP59TGmtIBBQbLG 30VJD+ktXteZRFOx/FZEDmNCvrKdz4cWCZuFvDPls60u9t52kb/4qKHtdBluL7Y7 GTfABH+vmKRmLhl62q7lwZaoID5lOWcavWoLrsu9eeULdV0E8LO0tUZ8uef7NE7S j7orWEDSjFyiVSuVmAupuYSJSbUUXktpDyN/p265i35rjrV0dRgCdrPNaT+J -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:26 2026 by rpki-client