This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/QKaa5M_Ls464BGXTJZlXMkecYvk.roa File: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (raw, json) Hash identifier: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8= Subject key identifier: 40:A6:9A:E4:CF:CB:B3:8E:B8:04:65:D3:25:99:57:32:47:9C:62:F9 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B7758B899F7294093581ADAE157E42727 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/QKaa5M_Ls464BGXTJZlXMkecYvk.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 931 IP address blocks: 5.226.138.0/24 maxlen: 24 185.16.204.0/24 maxlen: 24 217.146.81.0/24 maxlen: 24 217.146.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b8:99:f7:29:40:93:58:1a:da:e1:57:e4:27:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40a69ae4cfcbb38eb80465d325995732479c62f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:01:1f:b4:02:af:63:15:6d:43:ce:06:87: 1d:77:7f:6e:d4:b9:f1:b6:0e:38:30:c7:43:5b:82: 25:a5:86:c6:15:13:66:d9:5e:24:97:1b:dd:8d:94: fb:ed:ac:da:b2:e4:1b:f8:f6:fd:63:3c:29:5c:4d: 08:00:3d:4e:6c:83:42:b9:50:5c:8d:3e:b3:54:8a: 81:b3:88:f2:2c:6c:7c:af:00:6a:72:2e:41:13:24: 80:4d:14:51:65:ca:de:df:07:b4:c2:fa:50:c4:35: 79:15:80:0b:50:cf:4c:49:95:ab:cf:20:9e:a1:e9: 34:cd:4d:0a:c3:b9:77:99:c0:2f:ba:9c:75:70:ad: 06:29:9b:0c:ea:40:32:15:c5:9f:4d:60:d5:e1:53: 3d:5e:47:c0:66:7c:b4:51:8b:ef:8b:6d:9d:ec:58: d0:8e:14:49:27:74:2a:38:42:3b:75:a8:a9:f2:4e: 90:ec:fb:c9:a3:5b:41:50:53:df:a2:ab:bb:91:06: e3:1e:c9:c0:24:b1:d3:a4:a6:3d:1a:32:9c:2c:bd: b9:75:1a:2a:67:8e:19:ed:ae:26:b8:20:c4:aa:f3: 41:72:c6:f4:8e:15:12:5c:d9:45:df:27:80:82:4f: 2a:04:cd:d9:9b:53:b0:71:ba:27:d5:0b:3b:4f:16: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A6:9A:E4:CF:CB:B3:8E:B8:04:65:D3:25:99:57:32:47:9C:62:F9 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/QKaa5M_Ls464BGXTJZlXMkecYvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.138.0/24 185.16.204.0/24 217.146.81.0/24 217.146.88.0/24 Signature Algorithm: sha256WithRSAEncryption 94:c4:47:70:5b:28:09:65:4d:ac:7b:b8:66:74:25:da:12:e6: 74:b0:04:9d:22:c0:27:2e:85:1a:2b:4d:16:63:2b:63:5c:a8: f3:fa:1e:1f:0f:84:8c:37:ca:aa:fa:ed:fa:f9:46:10:f3:4a: fe:87:e8:8f:0c:96:dd:fd:5e:ab:22:8c:88:70:80:db:b1:a4: 68:2e:cc:be:6b:8a:41:18:02:14:15:f9:d7:d5:61:f7:fc:1c: 3c:64:c1:a6:57:56:f8:bf:b6:67:68:ee:22:71:46:d6:cf:e8: d1:73:af:18:0a:80:0d:a8:fc:f6:a5:f5:26:f7:bd:64:75:cb: de:b5:1e:17:4f:8d:46:16:a2:cd:d7:3a:07:65:f0:79:16:52: 81:23:60:5e:5a:0f:92:c0:c7:5b:31:1e:c0:0a:b2:05:a7:1d: d1:d7:04:f3:45:12:79:a0:29:93:98:c4:d2:5a:f6:8c:58:80: 75:51:0b:65:43:f8:79:f6:83:c7:9a:49:70:cf:0a:b7:06:85: 36:ce:8e:8d:ff:a9:a8:6c:a1:a1:25:a8:55:01:16:c0:6c:b6: 0a:c2:37:46:a5:4b:97:44:10:18:1b:75:67:b8:19:f5:3e:5c: 2e:b5:40:d8:00:1b:4e:05:88:3f:21:74:15:fb:cd:42:90:c7: 5b:04:02:c8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WLiZ9ylAk1ga2uFX5CcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGE2OWFlNGNmY2JiMzhlYjgwNDY1ZDMyNTk5NTczMjQ3OWM2MmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7gBH7QCr2MVbUPOBocdd39u1Lnx tg44MMdDW4IlpYbGFRNm2V4klxvdjZT77azasuQb+Pb9YzwpXE0IAD1ObINCuVBc jT6zVIqBs4jyLGx8rwBqci5BEySATRRRZcre3we0wvpQxDV5FYALUM9MSZWrzyCe oek0zU0Kw7l3mcAvupx1cK0GKZsM6kAyFcWfTWDV4VM9XkfAZny0UYvvi22d7FjQ jhRJJ3QqOEI7daip8k6Q7PvJo1tBUFPfoqu7kQbjHsnAJLHTpKY9GjKcLL25dRoq Z44Z7a4muCDEqvNBcsb0jhUSXNlF3yeAgk8qBM3Zm1Owcbon1Qs7TxYOmQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFECmmuTPy7OOuARl0yWZVzJHnGL5MB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvUUthYTVNX0xzNDY0QkdYVEpabFhNa2VjWXZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABeKKAwQA uRDMAwQA2ZJRAwQA2ZJYMA0GCSqGSIb3DQEBCwUAA4IBAQCUxEdwWygJZU2se7hm dCXaEuZ0sASdIsAnLoUaK00WYytjXKjz+h4fD4SMN8qq+u36+UYQ80r+h+iPDJbd /V6rIoyIcIDbsaRoLsy+a4pBGAIUFfnX1WH3/Bw8ZMGmV1b4v7ZnaO4icUbWz+jR c68YCoANqPz2pfUm971kdcvetR4XT41GFqLN1zoHZfB5FlKBI2BeWg+SwMdbMR7A CrIFpx3R1wTzRRJ5oCmTmMTSWvaMWIB1UQtlQ/h59oPHmklwzwq3BoU2zo6N/6mo bKGhJahVARbAbLYKwjdGpUuXRBAYG3VnuBn1PlwutUDYABtOBYg/IXQV+81CkMdb BALI -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:43 2026 by rpki-client