This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/qNw9AQGKv7ZPwZbLGtS3SURNtOU.roa File: qNw9AQGKv7ZPwZbLGtS3SURNtOU.roa (raw, json) Hash identifier: 2+VxvFzEn6OTXuPf/Khi8sLwDBnZtcyQctbFQn2v60g= Subject key identifier: A8:DC:3D:01:01:8A:BF:B6:4F:C1:96:CB:1A:D4:B7:49:44:4D:B4:E5 Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8 Certificate serial: 019B7834E1705756C994FBA76FEB537D70B0 Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/qNw9AQGKv7ZPwZbLGtS3SURNtOU.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38999 IP address blocks: 5.57.0.0/24 maxlen: 24 185.76.176.0/24 maxlen: 24 185.76.176.0/25 maxlen: 25 185.76.176.64/26 maxlen: 26 185.76.177.0/24 maxlen: 24 185.76.177.192/27 maxlen: 27 185.76.177.224/28 maxlen: 28 185.76.178.0/24 maxlen: 24 212.98.134.0/24 maxlen: 24 213.204.96.0/24 maxlen: 24 2a05:5b80::/32 maxlen: 32 2a05:5b81::/32 maxlen: 32 2a05:5b82::/32 maxlen: 32 2a05:5b83::/32 maxlen: 32 2a05:5b84::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e1:70:57:56:c9:94:fb:a7:6f:eb:53:7d:70:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8dc3d01018abfb64fc196cb1ad4b749444db4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:fa:ae:e3:36:cc:ef:7b:1f:b3:35:c5:df: 99:74:35:39:8c:5a:0b:cc:8b:44:fa:3c:d7:24:74: a7:c6:19:81:28:50:5a:cd:77:cd:f1:ba:40:bc:42: 7f:10:c6:c7:b2:e7:37:7a:c1:c5:60:53:cd:16:62: a4:00:2a:bd:91:ef:d0:bb:36:f9:76:07:85:6d:c7: d4:80:54:ec:16:e0:e0:bb:d9:aa:65:11:ae:f9:46: 1d:95:a3:88:36:bc:5d:f2:e7:64:21:7c:21:e5:3f: 1a:38:d4:b9:c1:88:b8:c8:cb:99:7d:43:10:db:a5: b6:8a:3d:9b:1f:81:d5:ef:68:9a:ec:4d:c8:bb:66: 0b:fd:f2:bf:4c:1c:e5:e6:b9:30:9f:fb:fc:6e:09: c6:4f:f0:64:da:d1:79:88:7d:3c:a8:a1:ad:33:83: 90:59:2c:54:fe:40:a4:1c:d9:f3:5e:0a:58:5a:c0: d9:4a:6c:62:cd:6d:f1:41:21:60:b8:0e:c0:1c:25: 08:4f:6a:ff:f3:d6:bb:3f:fb:3c:db:c0:20:96:07: f9:cc:82:ed:68:90:ac:77:4b:ee:95:e8:c8:3d:8c: 11:e4:36:59:67:f0:6c:3b:61:88:48:c8:4f:d5:49: 41:f4:b8:98:4c:2e:3e:ab:c5:46:cf:0d:df:cd:11: 63:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DC:3D:01:01:8A:BF:B6:4F:C1:96:CB:1A:D4:B7:49:44:4D:B4:E5 X509v3 Authority Key Identifier: keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/qNw9AQGKv7ZPwZbLGtS3SURNtOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.0.0/24 185.76.176.0-185.76.178.255 212.98.134.0/24 213.204.96.0/24 IPv6: 2a05:5b80::-2a05:5b84:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7c:28:18:73:2d:87:9e:1e:6e:a2:d1:fb:04:72:fb:f0:3d:d2: c9:e3:78:7e:6f:15:39:01:04:f1:ff:bf:ee:e6:f2:59:d4:58: 17:54:34:5c:1b:9b:02:02:d6:1b:ab:93:13:ba:f6:b1:8e:44: 24:3b:60:0c:de:45:ec:b2:61:ea:c8:5f:80:41:06:7c:36:f2: b6:19:e6:6d:ed:78:11:61:c9:e9:1e:c9:2c:45:7d:7a:79:ae: 10:84:3f:bc:78:53:0d:2f:a5:7e:df:74:a3:8a:73:ce:eb:44: ca:4d:d6:9a:43:70:2f:69:da:c0:f4:55:ec:3d:ba:16:88:b0: 38:14:d3:db:73:d6:5c:0e:3a:e7:8f:e0:bf:e4:a5:ee:9e:25: 14:3e:6f:4a:33:c8:b7:3b:c1:22:e4:32:50:22:ab:9f:b1:19: 5e:ca:1a:29:bb:89:04:8a:c4:06:5a:36:ba:3f:45:ae:4e:d1: 86:58:64:1e:ec:b2:3d:8b:d0:b7:2f:11:7d:23:2e:10:08:22: f7:27:3d:6e:1d:15:4a:00:92:7c:35:75:52:ae:30:47:fa:5a: c4:be:02:3c:f4:a6:1d:be:a0:72:49:ae:3a:9f:cb:c0:b5:5c: 20:ec:e9:41:80:40:01:7d:fd:53:d3:a5:5c:e6:75:72:59:b2: 08:b5:d1:3a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt4NOFwV1bJlPunb+tTfXCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzk0NDk4ZTQ3OTg3MjljZTk5NTBiZTM0YjQ1OWE5ZWYy OWY1ZTgwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGRjM2QwMTAxOGFiZmI2NGZjMTk2Y2IxYWQ0Yjc0OTQ0NGRiNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd76ruM2zO97H7M1xd+ZdDU5jFoL zItE+jzXJHSnxhmBKFBazXfN8bpAvEJ/EMbHsuc3esHFYFPNFmKkACq9ke/Quzb5 dgeFbcfUgFTsFuDgu9mqZRGu+UYdlaOINrxd8udkIXwh5T8aONS5wYi4yMuZfUMQ 26W2ij2bH4HV72ia7E3Iu2YL/fK/TBzl5rkwn/v8bgnGT/Bk2tF5iH08qKGtM4OQ WSxU/kCkHNnzXgpYWsDZSmxizW3xQSFguA7AHCUIT2r/89a7P/s828Aglgf5zILt aJCsd0vulejIPYwR5DZZZ/BsO2GISMhP1UlB9LiYTC4+q8VGzw3fzRFjnwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFKjcPQEBir+2T8GWyxrUt0lETbTlMB8GA1UdIwQY MBaAFJ45RJjkeYcpzplQvjS0WanvKfXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQt ZmE1ZWY0ZjUzZmJiLzEvcU53OUFRR0t2N1pQd1piTEd0UzNTVVJOdE9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQtZmE1ZWY0ZjUzZmJi LzEvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAmBAIAATAgAwQABTkAMAwD BAS5TLADBAC5TLIDBADUYoYDBADVzGAwFgQCAAIwEDAOAwUHKgVbgAMFACoFW4Qw DQYJKoZIhvcNAQELBQADggEBAHwoGHMth54ebqLR+wRy+/A90snjeH5vFTkBBPH/ v+7m8lnUWBdUNFwbmwIC1hurkxO69rGORCQ7YAzeReyyYerIX4BBBnw28rYZ5m3t eBFhyekeySxFfXp5rhCEP7x4Uw0vpX7fdKOKc87rRMpN1ppDcC9p2sD0Vew9uhaI sDgU09tz1lwOOueP4L/kpe6eJRQ+b0ozyLc7wSLkMlAiq5+xGV7KGim7iQSKxAZa Nro/Ra5O0YZYZB7ssj2L0LcvEX0jLhAIIvcnPW4dFUoAknw1dVKuMEf6WsS+Ajz0 ph2+oHJJrjqfy8C1XCDs6UGAQAF9/VPTpVzmdXJZsgi10To= -----END CERTIFICATE-----Generated at Tue Jan 27 04:57:58 2026 by rpki-client