This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/QcgYM-UyKdzGgLQdEpCiofPelJI.roa File: QcgYM-UyKdzGgLQdEpCiofPelJI.roa (raw, json) Hash identifier: kjG2mQfvVjQpc2KkS6jOjXp+Qi/smrR8qknvtrSdG+U= Subject key identifier: 41:C8:18:33:E5:32:29:DC:C6:80:B4:1D:12:90:A2:A1:F3:DE:94:92 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA77ECF1B0E9DBAE3E5343228B1E966 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/QcgYM-UyKdzGgLQdEpCiofPelJI.roa Signing time: Fri 02 Jan 2026 12:21:04 +0000 ROA not before: Fri 02 Jan 2026 12:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60716 IP address blocks: 5.140.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:7e:cf:1b:0e:9d:ba:e3:e5:34:32:28:b1:e9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41c81833e53229dcc680b41d1290a2a1f3de9492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:67:25:6f:cc:b5:f2:a6:3e:77:6a:0e:d9: 81:c6:0f:3b:49:23:29:ee:ae:6b:a7:a5:b1:9a:a3: 72:02:af:0e:e6:1d:f3:2b:73:aa:ce:37:5c:ce:da: c3:5e:06:4e:48:16:ba:19:55:48:56:5a:05:6e:fc: a5:70:fa:f1:44:52:d7:49:75:e2:67:65:bb:8d:29: 86:5c:74:e6:c2:c3:06:49:ba:dc:eb:9e:8c:48:ff: 34:68:e5:19:f8:00:c1:db:35:46:40:11:78:46:ab: b2:53:7c:6c:ce:0e:73:29:e9:aa:1b:22:83:e9:94: 71:14:a0:8a:31:68:df:ae:e1:65:1e:b1:13:96:27: 6f:9d:5e:8f:8f:4a:c6:b8:a4:bd:bd:36:82:bb:a7: 95:47:df:77:7d:4f:cc:49:80:39:ce:be:cd:08:9b: 5e:dd:d8:8a:a7:db:5f:08:79:e6:5f:1f:a0:33:82: 1f:5c:c2:ec:8e:3d:05:87:95:85:06:84:5d:ea:d4: da:55:f7:f0:06:ac:9a:51:8c:a6:4b:b7:ad:73:2d: 86:0b:5c:40:77:1b:cf:5c:cf:58:1c:63:b4:6e:9d: 6c:a5:a3:72:81:1b:13:0f:d4:e7:18:ee:3b:73:ff: 4d:f6:e2:34:35:51:95:d2:23:5d:7a:35:9b:27:52: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C8:18:33:E5:32:29:DC:C6:80:B4:1D:12:90:A2:A1:F3:DE:94:92 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/QcgYM-UyKdzGgLQdEpCiofPelJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.140.161.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:c6:7d:b7:32:b6:51:6d:7c:1a:b6:70:ff:80:48:82:a8:d1: 8a:14:05:64:2c:77:16:5a:99:2a:b8:0e:fe:21:d2:e2:92:fc: b7:95:f3:83:a4:ee:1d:5b:25:d7:3d:1d:89:dd:a6:21:0d:10: 65:00:34:7e:bc:fe:1e:4a:fc:04:a6:98:64:0d:87:d7:c2:df: 13:06:44:1f:14:1f:42:1d:aa:95:c8:bb:31:38:c4:67:b4:dd: bc:b2:3f:e3:16:a0:58:83:71:a2:c2:02:2f:dc:c1:82:27:91: 0e:2d:6d:f9:68:38:3e:6f:31:3f:c2:b1:f9:3e:93:6f:d8:2f: 9f:b8:eb:10:33:71:81:5f:4b:5f:b2:13:af:af:f6:c2:62:cb: 27:5f:4a:75:18:1a:78:0c:97:08:64:2c:d2:10:fb:92:9d:f6: c3:46:69:05:07:5f:89:b8:0c:2c:b6:c6:83:0e:e8:09:41:0c: b8:38:9c:85:8b:9f:53:5a:6e:65:2e:0f:50:89:f8:14:db:13: 20:67:ba:28:a2:06:5a:bc:31:27:7b:e6:74:70:b3:0f:5e:7d: 49:63:60:75:c1:41:62:20:c0:cb:a5:54:39:07:7d:38:35:53: 66:52:e6:a7:c0:59:cc:d3:21:6b:b9:8c:a1:f9:9e:6f:f7:4b: b3:30:a2:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p37PGw6duuPlNDIoselmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWM4MTgzM2U1MzIyOWRjYzY4MGI0MWQxMjkwYTJhMWYzZGU5NDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaVnJW/MtfKmPndqDtmBxg87SSMp 7q5rp6WxmqNyAq8O5h3zK3OqzjdcztrDXgZOSBa6GVVIVloFbvylcPrxRFLXSXXi Z2W7jSmGXHTmwsMGSbrc656MSP80aOUZ+ADB2zVGQBF4RquyU3xszg5zKemqGyKD 6ZRxFKCKMWjfruFlHrETlidvnV6Pj0rGuKS9vTaCu6eVR993fU/MSYA5zr7NCJte 3diKp9tfCHnmXx+gM4IfXMLsjj0Fh5WFBoRd6tTaVffwBqyaUYymS7etcy2GC1xA dxvPXM9YHGO0bp1spaNygRsTD9TnGO47c/9N9uI0NVGV0iNdejWbJ1J97QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEHIGDPlMincxoC0HRKQoqHz3pSSMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvUWNnWU0tVXlLZHpHZ0xRZEVwQ2lvZlBlbEpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYyhMA0G CSqGSIb3DQEBCwUAA4IBAQA6xn23MrZRbXwatnD/gEiCqNGKFAVkLHcWWpkquA7+ IdLikvy3lfODpO4dWyXXPR2J3aYhDRBlADR+vP4eSvwEpphkDYfXwt8TBkQfFB9C HaqVyLsxOMRntN28sj/jFqBYg3GiwgIv3MGCJ5EOLW35aDg+bzE/wrH5PpNv2C+f uOsQM3GBX0tfshOvr/bCYssnX0p1GBp4DJcIZCzSEPuSnfbDRmkFB1+JuAwstsaD DugJQQy4OJyFi59TWm5lLg9QifgU2xMgZ7ooogZavDEne+Z0cLMPXn1JY2B1wUFi IMDLpVQ5B304NVNmUuanwFnM0yFruYyh+Z5v90uzMKJY -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:33 2026 by rpki-client