This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qEXa5QS13mN_rKCZ6rpgrRLn4PQ.roa File: qEXa5QS13mN_rKCZ6rpgrRLn4PQ.roa (raw, json) Hash identifier: /QP9nxXfdL0JUnRJVN2J4RvjchIzuhjtUlQFlg+PdTo= Subject key identifier: A8:45:DA:E5:04:B5:DE:63:7F:AC:A0:99:EA:BA:60:AD:12:E7:E0:F4 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C131AD024DAA634C6BD8A0006A2B2A9 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qEXa5QS13mN_rKCZ6rpgrRLn4PQ.roa Signing time: Fri 02 Jan 2026 00:19:45 +0000 ROA not before: Fri 02 Jan 2026 00:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27796 IP address blocks: 201.77.54.0/24 maxlen: 24 201.77.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1a:d0:24:da:a6:34:c6:bd:8a:00:06:a2:b2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a845dae504b5de637faca099eaba60ad12e7e0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:16:f0:01:e5:29:65:ee:c7:3f:f2:e1:37: 54:be:2f:d4:63:2d:e8:54:16:6a:89:db:ab:95:56: 80:0f:0c:71:69:d0:55:38:e4:01:de:9b:02:e4:e3: 91:02:4d:08:87:7a:a9:90:0a:64:a1:35:b4:eb:41: 24:d8:98:50:cf:32:22:dc:9c:af:5f:56:92:90:6e: fc:96:44:57:00:b2:2b:77:fd:78:2b:2d:50:3a:5d: a8:69:fe:61:32:a8:f6:8f:60:9f:70:5c:43:4b:15: 02:6d:e6:42:19:ed:39:b9:fb:bc:62:34:00:88:83: 37:cd:d4:34:e6:bc:38:78:fd:be:ac:db:0e:d9:7b: 76:eb:4d:f1:db:4e:37:62:30:c7:b4:5d:9a:ce:d2: 6e:bf:6b:04:01:2f:9b:96:b0:d4:b0:4f:d7:e3:04: 1d:f6:26:23:48:5b:37:c2:2c:4d:2c:d5:14:e7:b5: 9e:4a:c3:fe:de:d9:52:2d:d8:16:a2:ea:f7:3b:c5: 75:80:be:24:68:59:6c:79:9d:84:c7:57:91:b9:bd: d7:7a:7f:59:c1:20:fb:6d:2a:07:4e:9c:3d:18:c1: c9:d6:3c:a7:c1:7e:c5:6f:38:ba:95:31:45:77:5d: e4:2c:44:23:b4:a2:f7:0e:f8:f0:1f:c5:9c:04:a2: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:45:DA:E5:04:B5:DE:63:7F:AC:A0:99:EA:BA:60:AD:12:E7:E0:F4 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qEXa5QS13mN_rKCZ6rpgrRLn4PQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.77.54.0/24 201.77.62.0/24 Signature Algorithm: sha256WithRSAEncryption 29:44:98:22:d6:d1:0a:fc:e0:90:e7:36:bb:a2:bd:ad:21:ea: 5c:e5:08:29:3d:83:74:89:d9:2e:98:0d:35:c1:62:7a:9e:23: 09:c5:58:bb:f9:59:42:c3:47:85:a8:d7:b5:d0:b9:d2:f0:57: 9f:63:78:04:64:77:2c:d6:c5:af:eb:c6:96:e1:4c:ad:84:ad: 6c:37:a0:80:6e:88:8f:53:a6:ee:f9:5d:cb:c6:19:50:30:1e: 3b:ff:1a:7c:52:f1:b3:5d:a9:ed:e8:f4:c7:f5:a6:79:98:0f: 4b:cb:a8:24:19:d0:3d:94:4b:a7:05:fb:4a:6a:7a:d2:78:e0: 2f:99:74:e7:de:e2:07:f8:12:06:69:36:f0:68:a3:c9:0d:a8: a3:c7:16:b7:2b:1e:4f:de:b9:92:5d:03:9b:b5:da:db:fa:6d: 4c:0e:89:fa:bd:ef:f1:cb:cb:dc:d2:f0:bf:c4:df:63:4a:ea: a5:61:f9:6d:27:01:51:34:05:86:d2:0b:9d:db:da:49:34:d5: 7b:43:69:a2:f5:18:1e:f4:fa:57:bb:98:d0:05:b4:83:b4:14: 01:c0:45:0f:95:7c:00:1b:c3:e3:53:02:35:6b:61:a2:2a:be: ef:36:a6:59:ab:fd:82:ec:e6:ab:52:0c:27:18:e4:74:53:1c: dc:28:5c:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ExrQJNqmNMa9igAGorKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODQ1ZGFlNTA0YjVkZTYzN2ZhY2EwOTllYWJhNjBhZDEyZTdlMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspMW8AHlKWXuxz/y4TdUvi/UYy3o VBZqidurlVaADwxxadBVOOQB3psC5OORAk0Ih3qpkApkoTW060Ek2JhQzzIi3Jyv X1aSkG78lkRXALIrd/14Ky1QOl2oaf5hMqj2j2CfcFxDSxUCbeZCGe05ufu8YjQA iIM3zdQ05rw4eP2+rNsO2Xt2603x2043YjDHtF2aztJuv2sEAS+blrDUsE/X4wQd 9iYjSFs3wixNLNUU57WeSsP+3tlSLdgWour3O8V1gL4kaFlseZ2Ex1eRub3Xen9Z wSD7bSoHTpw9GMHJ1jynwX7Fbzi6lTFFd13kLEQjtKL3DvjwH8WcBKKuLwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKhF2uUEtd5jf6ygmeq6YK0S5+D0MB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvcUVYYTVRUzEzbU5fcktDWjZycGdyUkxuNFBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAyU02AwQA yU0+MA0GCSqGSIb3DQEBCwUAA4IBAQApRJgi1tEK/OCQ5za7or2tIepc5QgpPYN0 idkumA01wWJ6niMJxVi7+VlCw0eFqNe10LnS8FefY3gEZHcs1sWv68aW4UythK1s N6CAboiPU6bu+V3LxhlQMB47/xp8UvGzXant6PTH9aZ5mA9Ly6gkGdA9lEunBftK anrSeOAvmXTn3uIH+BIGaTbwaKPJDaijxxa3Kx5P3rmSXQObtdrb+m1MDon6ve/x y8vc0vC/xN9jSuqlYfltJwFRNAWG0gud29pJNNV7Q2mi9Rge9PpXu5jQBbSDtBQB wEUPlXwAG8PjUwI1a2GiKr7vNqZZq/2C7OarUgwnGOR0UxzcKFwx -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:12 2026 by rpki-client