This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/5Nquyk_YS8j83lcZJdiswq8j9kg.roa File: 5Nquyk_YS8j83lcZJdiswq8j9kg.roa (raw, json) Hash identifier: BfZqdxUYisJtcIB1bX8hB4ZBa8K5totO7lD83EBGvt4= Subject key identifier: E4:DA:AE:CA:4F:D8:4B:C8:FC:DE:57:19:25:D8:AC:C2:AF:23:F6:48 Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682 Certificate serial: 019B7A5A123BA32461012321E2C434C1A609 Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/5Nquyk_YS8j83lcZJdiswq8j9kg.roa Signing time: Thu 01 Jan 2026 16:18:01 +0000 ROA not before: Thu 01 Jan 2026 16:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24867 IP address blocks: 62.140.192.0/19 maxlen: 24 82.211.64.0/18 maxlen: 24 85.133.0.0/17 maxlen: 24 2a01:398::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:12:3b:a3:24:61:01:23:21:e2:c4:34:c1:a6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682 Validity Not Before: Jan 1 16:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4daaeca4fd84bc8fcde571925d8acc2af23f648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:00:5e:a4:df:f9:da:af:b7:09:ea:7a:d9:a0: db:9a:0a:a1:b0:7e:02:db:9e:cf:02:b6:32:df:f5: a9:46:81:51:c4:ad:8c:30:ec:7e:58:0d:56:79:12: e6:c3:cb:a6:fc:26:8d:32:c7:ee:b2:3d:3c:5a:00: f1:c8:19:92:65:54:5a:1f:93:ef:b1:9e:06:60:82: 64:2c:bd:60:44:bf:06:24:f2:c7:86:10:3f:05:18: 5e:c2:1c:af:62:53:9a:af:d2:91:14:3a:c9:2b:8b: ed:5c:51:fd:5f:09:85:14:91:81:b4:b0:bd:99:ec: 01:87:bc:bf:92:e3:b8:c6:77:18:7e:af:6b:3a:ed: 7d:74:7f:da:9f:84:6a:6d:e8:fa:e9:96:e2:bf:21: 05:ae:86:74:8d:02:62:58:e2:de:5a:a0:e5:ac:1c: 9c:2f:a0:98:14:0d:0f:38:97:5e:02:37:40:01:c0: 5d:06:c7:90:53:44:f9:bc:46:e4:1c:90:55:ad:07: da:f9:d1:57:96:f9:70:64:c5:ea:50:77:74:27:37: c8:ff:c5:f3:51:05:1f:10:4a:74:7e:8e:0f:0e:65: ef:65:9e:05:a1:cf:be:6c:3a:e1:68:ea:e6:c5:72: 81:37:1e:f3:5d:a5:27:2b:44:d2:e4:57:8a:ac:7d: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DA:AE:CA:4F:D8:4B:C8:FC:DE:57:19:25:D8:AC:C2:AF:23:F6:48 X509v3 Authority Key Identifier: keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/5Nquyk_YS8j83lcZJdiswq8j9kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.140.192.0/19 82.211.64.0/18 85.133.0.0/17 IPv6: 2a01:398::/32 Signature Algorithm: sha256WithRSAEncryption 6c:16:e0:9e:2a:73:b7:e5:f3:3e:be:21:74:b7:98:ab:a3:e0: a9:0b:aa:e3:d1:30:2d:11:48:46:3b:67:85:a3:2e:53:10:5b: 5b:28:03:d5:60:3e:63:db:bd:0d:6f:68:32:23:bb:f6:50:7d: 50:3a:77:0a:ab:db:40:e9:41:f1:cb:8f:c8:fb:93:c1:d6:15: 58:72:9e:8f:43:b3:f3:a7:d8:48:ba:69:83:cd:c7:98:8e:a0: 72:63:2f:e9:c5:49:d3:62:95:18:ca:22:7b:3a:a6:50:80:37: 9f:fa:f3:b9:55:13:80:66:15:b1:8a:f9:40:2f:23:6c:7a:ca: 9b:9f:1e:ef:40:b0:aa:11:d5:2e:4f:1c:17:e2:1e:64:a0:70: 57:5b:1a:13:eb:e3:ad:8f:15:ee:8a:02:b6:43:43:e3:7e:99: fc:e3:39:00:3c:47:8f:3e:16:a2:64:96:d5:99:d5:45:a7:9a: a3:8f:60:ab:02:ec:f3:b1:e7:a3:b4:ca:27:c6:22:a2:89:dc: 34:a0:f1:c6:de:dc:7f:e0:c3:32:b9:19:7b:63:cc:8a:6d:ad: 5f:17:e6:c8:96:45:b3:a8:17:09:42:a0:46:59:18:56:c7:03: 3a:94:fe:b1:6d:50:28:f6:c6:d1:01:23:fb:7b:a0:43:a7:87: b4:70:61:66 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WhI7oyRhASMh4sQ0waYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMDRlMGE3MThhNjEzOWE5YzY1ZjBkNDg4NmJiODI3MTRk YTY2ODIwHhcNMjYwMTAxMTYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGRhYWVjYTRmZDg0YmM4ZmNkZTU3MTkyNWQ4YWNjMmFmMjNmNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngBepN/52q+3Cep62aDbmgqhsH4C 257PArYy3/WpRoFRxK2MMOx+WA1WeRLmw8um/CaNMsfusj08WgDxyBmSZVRaH5Pv sZ4GYIJkLL1gRL8GJPLHhhA/BRhewhyvYlOar9KRFDrJK4vtXFH9XwmFFJGBtLC9 mewBh7y/kuO4xncYfq9rOu19dH/an4Rqbej66ZbivyEFroZ0jQJiWOLeWqDlrByc L6CYFA0POJdeAjdAAcBdBseQU0T5vEbkHJBVrQfa+dFXlvlwZMXqUHd0JzfI/8Xz UQUfEEp0fo4PDmXvZZ4Foc++bDrhaOrmxXKBNx7zXaUnK0TS5FeKrH0a9wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOTarspP2EvI/N5XGSXYrMKvI/ZIMB8GA1UdIwQY MBaAFE4E4KcYphOanGXw1IhruCcU2maCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YWZlYWItMDJiOS00ZWJkLWJmYTIt OGU4MGI0OTZhMDNlLzEvNU5xdXlrX1lTOGo4M2xjWkpkaXN3cThqOWtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YWZlYWItMDJiOS00ZWJkLWJmYTItOGU4MGI0OTZhMDNl LzEvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFPozAAwQG UtNAAwQHVYUAMA0EAgACMAcDBQAqAQOYMA0GCSqGSIb3DQEBCwUAA4IBAQBsFuCe KnO35fM+viF0t5iro+CpC6rj0TAtEUhGO2eFoy5TEFtbKAPVYD5j270Nb2gyI7v2 UH1QOncKq9tA6UHxy4/I+5PB1hVYcp6PQ7Pzp9hIummDzceYjqByYy/pxUnTYpUY yiJ7OqZQgDef+vO5VROAZhWxivlALyNsesqbnx7vQLCqEdUuTxwX4h5koHBXWxoT 6+OtjxXuigK2Q0Pjfpn84zkAPEePPhaiZJbVmdVFp5qjj2CrAuzzseejtMonxiKi idw0oPHG3tx/4MMyuRl7Y8yKba1fF+bIlkWzqBcJQqBGWRhWxwM6lP6xbVAo9sbR ASP7e6BDp4e0cGFm -----END CERTIFICATE-----Generated at Tue Jan 27 07:44:09 2026 by rpki-client