This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/qg89v1sf7foDT9XyuTN1l9h6oXk.roa File: qg89v1sf7foDT9XyuTN1l9h6oXk.roa (raw, json) Hash identifier: RdOZrc2OczEQ2vYU/ofPrq6CdWSswAH8iko/GZ11EFA= Subject key identifier: AA:0F:3D:BF:5B:1F:ED:FA:03:4F:D5:F2:B9:33:75:97:D8:7A:A1:79 Certificate issuer: /CN=56e3353d5f423ad4271c3261caa543140530bddb Certificate serial: 019B7835527A57D7796085A1ADF645E9AA73 Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/qg89v1sf7foDT9XyuTN1l9h6oXk.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41794 IP address blocks: 5.44.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:52:7a:57:d7:79:60:85:a1:ad:f6:45:e9:aa:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa0f3dbf5b1fedfa034fd5f2b9337597d87aa179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:5c:1d:3f:d0:6a:43:62:73:91:ae:aa:17: 31:ab:a8:55:f8:d1:bc:cb:48:25:38:65:b7:59:5e: 42:2f:d2:8c:0e:e7:0b:83:dd:b1:e5:55:de:3e:6d: 67:73:99:51:d4:a9:01:f2:e9:8c:66:e5:90:99:e0: 40:a4:3c:6b:ae:08:5e:9a:b6:c9:ea:9a:90:95:d3: 83:a6:b7:87:4f:da:cc:7c:c6:36:7e:d2:af:87:7d: 73:9e:28:7b:d9:36:78:1f:e0:f5:d1:03:43:56:6c: 48:cf:a9:a1:55:e5:d5:a0:4d:67:85:a1:be:b7:5c: 89:0e:c5:91:ee:76:29:3f:4f:de:a0:fc:f5:92:81: 96:64:2a:c7:4c:f4:dd:b7:4e:89:29:ee:26:a5:66: cc:73:51:58:92:22:5d:d4:76:fe:c9:51:be:99:df: 45:e7:78:7f:d6:8c:69:4a:3b:b6:8e:6f:b2:18:54: 2b:90:27:24:a0:f6:e7:c3:c2:0f:ea:c7:40:6a:55: 25:a3:6c:70:ce:ea:04:05:3f:95:8d:f9:c3:0e:d5: 40:6d:ee:52:78:58:74:b8:d9:9e:e4:4e:67:50:66: b2:51:5d:85:1d:35:2e:36:05:1a:6b:d8:c1:91:a5: de:7b:70:38:b1:a8:2b:54:9f:4d:b0:cf:90:e9:7f: 0d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0F:3D:BF:5B:1F:ED:FA:03:4F:D5:F2:B9:33:75:97:D8:7A:A1:79 X509v3 Authority Key Identifier: keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/qg89v1sf7foDT9XyuTN1l9h6oXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.170.0/23 Signature Algorithm: sha256WithRSAEncryption 15:6c:56:4a:e8:ae:81:17:92:cf:5f:0c:67:a5:c3:99:cc:a9: 76:17:1b:8c:b0:06:26:11:80:ca:ff:c3:04:fa:e3:c8:a6:02: 03:8b:29:c1:d2:c2:28:38:59:c9:81:f5:ee:cb:a9:7c:65:9b: 0f:1d:ff:2d:8f:9a:6e:40:1e:44:2b:ec:56:0f:4a:95:c9:10: a7:62:dd:66:e7:45:75:d9:ed:4f:22:e2:d4:ae:3c:19:d9:90: 53:53:54:8c:fa:18:19:af:a5:3b:ce:12:84:61:f9:bc:c8:e2: 26:11:54:f7:52:47:4c:ff:18:c2:c4:66:95:01:9c:ab:75:3a: 48:e9:3c:b2:49:6c:23:a3:9d:1b:e8:18:b7:72:db:69:ba:63: 1c:42:bc:11:8c:15:5a:26:5f:d0:87:f1:83:a5:23:cc:ee:da: f9:72:25:50:2e:b5:ac:f7:a6:4f:24:40:b7:81:39:39:76:82: ae:50:65:94:98:df:ac:ff:07:38:f9:ca:fb:fb:9a:ab:79:08: 9a:9e:e5:01:7a:ab:c7:b8:f0:c4:51:30:ce:a2:e2:76:28:8d: 0e:9f:32:db:d2:f6:b8:18:d3:e7:92:93:75:ed:4c:9c:62:b5: b5:8e:78:61:05:fa:4b:d0:f0:19:d1:97:80:d7:07:23:64:a5: 3c:73:63:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVJ6V9d5YIWhrfZF6apzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZTMzNTNkNWY0MjNhZDQyNzFjMzI2MWNhYTU0MzE0MDUz MGJkZGIwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTBmM2RiZjViMWZlZGZhMDM0ZmQ1ZjJiOTMzNzU5N2Q4N2FhMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10JcHT/QakNic5Guqhcxq6hV+NG8 y0glOGW3WV5CL9KMDucLg92x5VXePm1nc5lR1KkB8umMZuWQmeBApDxrrghemrbJ 6pqQldODpreHT9rMfMY2ftKvh31znih72TZ4H+D10QNDVmxIz6mhVeXVoE1nhaG+ t1yJDsWR7nYpP0/eoPz1koGWZCrHTPTdt06JKe4mpWbMc1FYkiJd1Hb+yVG+md9F 53h/1oxpSju2jm+yGFQrkCckoPbnw8IP6sdAalUlo2xwzuoEBT+VjfnDDtVAbe5S eFh0uNme5E5nUGayUV2FHTUuNgUaa9jBkaXee3A4sagrVJ9NsM+Q6X8NNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKoPPb9bH+36A0/V8rkzdZfYeqF5MB8GA1UdIwQY MBaAFFbjNT1fQjrUJxwyYcqlQxQFML3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTIt ZTUyZGEzYjg2NzU0LzEvcWc4OXYxc2Y3Zm9EVDlYeXVUTjFsOWg2b1hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTItZTUyZGEzYjg2NzU0 LzEvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBSyqMA0G CSqGSIb3DQEBCwUAA4IBAQAVbFZK6K6BF5LPXwxnpcOZzKl2FxuMsAYmEYDK/8ME +uPIpgIDiynB0sIoOFnJgfXuy6l8ZZsPHf8tj5puQB5EK+xWD0qVyRCnYt1m50V1 2e1PIuLUrjwZ2ZBTU1SM+hgZr6U7zhKEYfm8yOImEVT3UkdM/xjCxGaVAZyrdTpI 6TyySWwjo50b6Bi3cttpumMcQrwRjBVaJl/Qh/GDpSPM7tr5ciVQLrWs96ZPJEC3 gTk5doKuUGWUmN+s/wc4+cr7+5qreQianuUBeqvHuPDEUTDOouJ2KI0OnzLb0va4 GNPnkpN17UycYrW1jnhhBfpL0PAZ0ZeA1wcjZKU8c2P8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:04 2026 by rpki-client