This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QYcQcAo1yxIndrUc7lDaZ1BeeTk.roa File: QYcQcAo1yxIndrUc7lDaZ1BeeTk.roa (raw, json) Hash identifier: wPDFoi4hfBknvKhPq2VW2iK93xdJoVCYx60XdfpuuAA= Subject key identifier: 41:87:10:70:0A:35:CB:12:27:76:B5:1C:EE:50:DA:67:50:5E:79:39 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1323853711D716581F4D6C17B88DE7 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QYcQcAo1yxIndrUc7lDaZ1BeeTk.roa Signing time: Fri 02 Jan 2026 00:19:47 +0000 ROA not before: Fri 02 Jan 2026 00:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39944 IP address blocks: 139.28.84.0/22 maxlen: 24 139.28.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:23:85:37:11:d7:16:58:1f:4d:6c:17:b8:8d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=418710700a35cb122776b51cee50da67505e7939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:24:56:86:6e:ca:72:11:83:56:54:df:32: 62:de:ad:15:72:5d:95:1a:e8:c1:28:e8:98:18:59: a7:d9:33:29:26:4b:41:1e:aa:b3:27:1d:e4:61:73: 52:6c:44:00:c3:ad:b7:18:8d:b1:e2:d4:a1:18:4b: f4:f5:b8:52:eb:1d:25:20:68:33:c3:09:7a:c4:44: 86:12:39:aa:6c:f4:67:e8:13:14:83:52:d6:14:be: bb:9b:4e:c3:19:a7:56:ce:41:49:16:43:e7:09:8b: 39:ae:e8:cb:33:e7:65:4f:8d:e1:95:3f:ac:0a:81: 57:04:c4:fd:91:bd:c9:9d:14:9b:b5:9a:35:9e:e3: b4:dc:0d:88:74:25:cb:d8:26:66:3a:1b:d8:85:fb: 96:3b:8c:8d:88:9d:83:ff:dd:d8:88:e7:dd:eb:84: 36:98:08:55:52:1e:0e:4f:e6:18:aa:b1:c6:3b:fe: 48:3b:f2:5f:a9:19:ae:58:63:12:95:db:c8:51:9f: 94:91:fa:da:c2:3c:72:6a:5b:bc:8d:b5:34:50:b1: c9:ca:ed:76:96:32:fa:50:63:d4:25:7f:c6:58:07: 18:86:1c:1c:21:fa:8c:87:2c:a9:d0:62:d2:71:84: 3c:ab:3c:c7:5f:ca:0b:b1:a8:a7:bc:56:f5:60:4a: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:87:10:70:0A:35:CB:12:27:76:B5:1C:EE:50:DA:67:50:5E:79:39 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QYcQcAo1yxIndrUc7lDaZ1BeeTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.84.0/22 Signature Algorithm: sha256WithRSAEncryption 44:d2:0a:28:c5:be:33:19:24:14:83:5e:1b:83:f9:d8:cb:67: 9b:ec:93:c9:9a:71:3c:9c:12:00:8a:c1:7a:8d:21:ce:b1:ff: c8:c4:8c:7e:84:49:6b:ec:0e:59:83:57:84:20:b2:97:85:e9: 7b:4c:30:df:14:1e:ff:9d:cd:fc:33:e8:21:26:49:79:7e:98: 74:fe:8b:50:e8:af:4d:ee:37:6b:ba:cd:98:bf:91:75:14:51: 3e:66:4d:54:1a:10:c4:f4:cd:f6:43:dd:c3:7f:c1:01:d9:d8: 1d:ab:12:74:13:d3:bb:f9:a0:d3:a8:ee:a8:e3:c1:c9:37:5b: ae:8f:1b:98:71:f8:e2:73:4c:78:24:4f:ec:5d:f8:de:88:2a: a2:0a:2a:5d:f3:66:37:7e:9b:68:b8:1e:78:76:8e:7b:e7:b4: 3b:e2:96:bd:1e:49:63:ec:ca:dc:8c:ed:72:a5:40:c9:c9:3e: ab:63:ba:3e:ba:55:85:2a:08:87:79:2d:d6:26:6c:83:24:a6: 35:f0:2b:52:0c:98:29:b6:a0:fc:0a:38:14:62:60:23:73:5d: 9d:4a:d4:cf:42:ac:37:41:c8:72:fa:2f:86:39:02:00:40:f7: 12:29:a4:e2:be:7f:aa:f7:3e:f5:da:35:ad:fd:0e:b7:2b:09: 72:98:be:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EyOFNxHXFlgfTWwXuI3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTg3MTA3MDBhMzVjYjEyMjc3NmI1MWNlZTUwZGE2NzUwNWU3OTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T0kVoZuynIRg1ZU3zJi3q0Vcl2V GujBKOiYGFmn2TMpJktBHqqzJx3kYXNSbEQAw623GI2x4tShGEv09bhS6x0lIGgz wwl6xESGEjmqbPRn6BMUg1LWFL67m07DGadWzkFJFkPnCYs5rujLM+dlT43hlT+s CoFXBMT9kb3JnRSbtZo1nuO03A2IdCXL2CZmOhvYhfuWO4yNiJ2D/93YiOfd64Q2 mAhVUh4OT+YYqrHGO/5IO/JfqRmuWGMSldvIUZ+Ukfrawjxyalu8jbU0ULHJyu12 ljL6UGPUJX/GWAcYhhwcIfqMhyyp0GLScYQ8qzzHX8oLsainvFb1YEoBXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGHEHAKNcsSJ3a1HO5Q2mdQXnk5MB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvUVljUWNBbzF5eEluZHJVYzdsRGFaMUJlZVRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixxUMA0G CSqGSIb3DQEBCwUAA4IBAQBE0gooxb4zGSQUg14bg/nYy2eb7JPJmnE8nBIAisF6 jSHOsf/IxIx+hElr7A5Zg1eEILKXhel7TDDfFB7/nc38M+ghJkl5fph0/otQ6K9N 7jdrus2Yv5F1FFE+Zk1UGhDE9M32Q93Df8EB2dgdqxJ0E9O7+aDTqO6o48HJN1uu jxuYcfjic0x4JE/sXfjeiCqiCipd82Y3fptouB54do5757Q74pa9Hklj7MrcjO1y pUDJyT6rY7o+ulWFKgiHeS3WJmyDJKY18CtSDJgptqD8CjgUYmAjc12dStTPQqw3 Qchy+i+GOQIAQPcSKaTivn+q9z712jWt/Q63KwlymL57 -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:25 2026 by rpki-client