This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QUEfrlIcOFMp6FQBKlTXO354Dsw.roa File: QUEfrlIcOFMp6FQBKlTXO354Dsw.roa (raw, json) Hash identifier: P3hs/8C+duYq6/XJf3Zxf8oluMGeXaAhRqjE6KJDH+0= Subject key identifier: 41:41:1F:AE:52:1C:38:53:29:E8:54:01:2A:54:D7:3B:7E:78:0E:CC Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB823A3F55A638C8727D9856809774 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QUEfrlIcOFMp6FQBKlTXO354Dsw.roa Signing time: Fri 02 Jan 2026 08:20:47 +0000 ROA not before: Fri 02 Jan 2026 08:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212667 IP address blocks: 5.182.116.0/24 maxlen: 24 45.15.255.0/24 maxlen: 24 45.86.3.0/24 maxlen: 24 45.90.44.0/24 maxlen: 24 45.90.47.0/24 maxlen: 24 45.128.130.0/23 maxlen: 23 45.128.228.0/22 maxlen: 22 46.149.174.0/24 maxlen: 24 46.174.192.0/24 maxlen: 24 46.174.193.0/24 maxlen: 24 46.174.194.0/24 maxlen: 24 46.174.195.0/24 maxlen: 24 46.174.196.0/24 maxlen: 24 46.174.197.0/24 maxlen: 24 46.174.198.0/24 maxlen: 24 46.174.199.0/24 maxlen: 24 62.204.32.0/24 maxlen: 24 178.212.78.0/24 maxlen: 24 185.253.2.0/24 maxlen: 24 188.64.140.0/24 maxlen: 24 188.93.136.0/24 maxlen: 24 195.96.141.0/24 maxlen: 24 212.18.98.0/24 maxlen: 24 212.52.13.0/24 maxlen: 24 212.60.6.0/24 maxlen: 24 212.107.24.0/24 maxlen: 24 212.115.48.0/24 maxlen: 24 212.115.50.0/24 maxlen: 24 213.166.92.0/24 maxlen: 24 213.166.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:82:3a:3f:55:a6:38:c8:72:7d:98:56:80:97:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41411fae521c385329e854012a54d73b7e780ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:cb:f1:70:8f:6a:3b:d8:9a:ff:93:58:3c: 97:f4:40:e4:a3:c3:11:2d:a3:24:45:da:56:b1:33: 64:fa:fb:07:70:13:46:7d:3f:fa:e4:b2:eb:e7:16: fb:79:77:f1:3d:a5:22:7b:53:c9:c6:8d:e9:04:3a: 5c:d7:83:c6:2f:0c:eb:5b:e9:26:02:1e:d2:49:4b: 4d:a4:c0:40:93:74:e8:e8:ef:c0:b8:aa:ad:6e:9d: 6c:6c:77:f0:d8:a0:5a:ca:96:ca:fb:c1:c7:0c:a4: d2:c1:92:fd:f6:f3:21:7d:41:f7:83:09:01:4a:bd: 3d:68:97:43:45:25:47:69:f0:ea:11:83:f7:0f:75: 53:3d:d5:b2:ea:0e:4d:6e:17:a5:8c:21:25:74:eb: 74:c3:33:9a:36:3f:16:62:d3:5f:4d:63:86:f6:30: 48:78:78:63:49:d7:95:32:a2:19:dc:bb:c7:6a:53: 5d:23:e5:3e:db:de:81:f5:f7:b3:fc:d5:50:32:9b: bd:9f:f5:6f:47:d8:ba:af:c3:aa:de:a6:9c:fe:be: 37:cd:95:52:a1:fc:3d:0f:2c:09:38:89:7a:7e:16: a9:94:6f:5b:c2:da:44:d2:f4:47:c5:d8:5c:92:b5: 5d:e1:0f:6a:1b:8c:82:46:34:e0:22:fc:b2:75:f6: 9c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:41:1F:AE:52:1C:38:53:29:E8:54:01:2A:54:D7:3B:7E:78:0E:CC X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QUEfrlIcOFMp6FQBKlTXO354Dsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.116.0/24 45.15.255.0/24 45.86.3.0/24 45.90.44.0/24 45.90.47.0/24 45.128.130.0/23 45.128.228.0/22 46.149.174.0/24 46.174.192.0/21 62.204.32.0/24 178.212.78.0/24 185.253.2.0/24 188.64.140.0/24 188.93.136.0/24 195.96.141.0/24 212.18.98.0/24 212.52.13.0/24 212.60.6.0/24 212.107.24.0/24 212.115.48.0/24 212.115.50.0/24 213.166.92.0/24 213.166.95.0/24 Signature Algorithm: sha256WithRSAEncryption 99:3b:75:22:d2:32:02:01:3e:3e:25:e0:21:08:ac:11:a6:82: 91:a2:b2:c7:f4:54:bf:db:f4:bc:6b:bc:56:e4:9a:38:a0:af: 79:6a:78:0b:db:bf:0e:47:35:fd:3d:dd:af:cf:4e:fd:1b:f7: 75:fd:63:c2:b8:8a:3a:05:10:07:69:f0:ab:1e:5e:b3:9a:59: 9d:db:c0:82:27:33:06:67:91:9c:bb:d0:1f:4c:ee:e5:e5:a5: 2d:b0:f8:bb:1c:73:71:2f:51:f2:e9:09:8d:d3:f3:74:90:4a: 0f:e3:85:d8:f6:84:4d:9e:4e:77:0f:cf:9b:38:9c:db:f5:b1: 9f:96:b9:ac:67:e9:15:69:29:12:fc:c8:5f:b1:91:20:0d:c6: c5:c1:3f:49:18:0c:b8:4a:e9:62:68:ae:fc:9f:b2:71:1f:b9: eb:e0:26:27:ea:0c:ea:7a:9e:ff:7a:27:af:da:f1:29:f7:4b: bb:75:14:0c:17:ba:b8:be:b5:eb:a8:5d:46:e9:22:ee:2f:85: 48:25:33:cc:4a:e8:c8:d1:0c:c1:f1:68:6d:2b:a2:a9:fe:ad: c3:1b:86:bd:05:00:e1:df:48:ba:ba:d1:9a:b1:36:0f:83:48: 9c:a1:0d:7f:b3:37:6a:a4:62:1d:36:e9:4c:38:26:cd:77:4a: 5c:0c:df:fa -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt9y4I6P1WmOMhyfZhWgJd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTQxMWZhZTUyMWMzODUzMjllODU0MDEyYTU0ZDczYjdlNzgwZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgPL8XCPajvYmv+TWDyX9EDko8MR LaMkRdpWsTNk+vsHcBNGfT/65LLr5xb7eXfxPaUie1PJxo3pBDpc14PGLwzrW+km Ah7SSUtNpMBAk3To6O/AuKqtbp1sbHfw2KBaypbK+8HHDKTSwZL99vMhfUH3gwkB Sr09aJdDRSVHafDqEYP3D3VTPdWy6g5NbheljCEldOt0wzOaNj8WYtNfTWOG9jBI eHhjSdeVMqIZ3LvHalNdI+U+296B9fez/NVQMpu9n/VvR9i6r8Oq3qac/r43zZVS ofw9DywJOIl6fhaplG9bwtpE0vRHxdhckrVd4Q9qG4yCRjTgIvyydfacLwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFEFBH65SHDhTKehUASpU1zt+eA7MMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvUVVFZnJsSWNPRk1wNkZRQktsVFhPMzU0RHN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAAF tnQDBAAtD/8DBAAtVgMDBAAtWiwDBAAtWi8DBAEtgIIDBAItgOQDBAAula4DBAMu rsADBAA+zCADBACy1E4DBAC5/QIDBAC8QIwDBAC8XYgDBADDYI0DBADUEmIDBADU NA0DBADUPAYDBADUaxgDBADUczADBADUczIDBADVplwDBADVpl8wDQYJKoZIhvcN AQELBQADggEBAJk7dSLSMgIBPj4l4CEIrBGmgpGissf0VL/b9LxrvFbkmjigr3lq eAvbvw5HNf093a/PTv0b93X9Y8K4ijoFEAdp8KseXrOaWZ3bwIInMwZnkZy70B9M 7uXlpS2w+Lscc3EvUfLpCY3T83SQSg/jhdj2hE2eTncPz5s4nNv1sZ+Wuaxn6RVp KRL8yF+xkSANxsXBP0kYDLhK6WJorvyfsnEfuevgJifqDOp6nv96J6/a8Sn3S7t1 FAwXuri+teuoXUbpIu4vhUglM8xK6MjRDMHxaG0roqn+rcMbhr0FAOHfSLq60Zqx Ng+DSJyhDX+zN2qkYh026Uw4Js13SlwM3/o= -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:56 2026 by rpki-client