This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/QwQnz-pEovJpo92d5HY7igvB9Vo.roa File: QwQnz-pEovJpo92d5HY7igvB9Vo.roa (raw, json) Hash identifier: VEvWF3p1aPp2iWWpY2IcjSNWG0ZND2nHo0BXuCB05Xo= Subject key identifier: 43:04:27:CF:EA:44:A2:F2:69:A3:DD:9D:E4:76:3B:8A:0B:C1:F5:5A Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f Certificate serial: 019B7DCA392D8F49C1E14B1E7B0F2F159BF8 Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/QwQnz-pEovJpo92d5HY7igvB9Vo.roa Signing time: Fri 02 Jan 2026 08:19:23 +0000 ROA not before: Fri 02 Jan 2026 08:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 5.57.16.0/24 maxlen: 24 5.57.17.0/24 maxlen: 24 5.57.18.0/24 maxlen: 24 5.57.19.0/24 maxlen: 24 5.57.20.0/24 maxlen: 24 5.57.21.0/24 maxlen: 24 5.57.23.0/24 maxlen: 24 37.10.0.0/24 maxlen: 24 37.10.1.0/24 maxlen: 24 37.10.3.0/24 maxlen: 24 37.10.4.0/22 maxlen: 22 37.10.4.0/24 maxlen: 24 37.10.5.0/24 maxlen: 24 37.10.6.0/24 maxlen: 24 37.10.7.0/24 maxlen: 24 37.10.30.0/24 maxlen: 24 37.10.31.0/24 maxlen: 24 37.10.63.0/24 maxlen: 24 185.28.220.0/24 maxlen: 24 185.28.221.0/24 maxlen: 24 185.28.222.0/24 maxlen: 24 185.28.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:39:2d:8f:49:c1:e1:4b:1e:7b:0f:2f:15:9b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f Validity Not Before: Jan 2 08:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=430427cfea44a2f269a3dd9de4763b8a0bc1f55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:26:54:3f:c5:08:7c:01:26:fc:d2:80:4f: c6:d2:2d:50:86:9c:88:7d:b5:05:6f:5d:80:e6:d6: 3a:72:1c:bc:b9:d4:c7:40:e4:97:8f:af:3f:3b:d3: 19:ac:be:69:50:7d:ca:2d:be:72:2b:c7:b0:75:1a: ed:12:35:41:33:d0:77:fc:ca:fc:22:ee:c2:57:93: ec:e6:36:2b:17:dd:f4:b8:0f:45:bf:9b:a9:b4:19: a2:ae:44:ca:6c:cf:31:76:49:a4:ae:fc:d7:13:88: 3f:98:59:90:00:3a:ce:d2:5b:f4:ed:59:66:b4:e6: f7:cd:44:fe:3b:27:9b:cc:50:7e:84:02:ec:db:46: 41:8b:5a:b5:b6:24:4f:af:37:43:77:5d:e4:b0:61: ce:2c:41:2c:6f:d2:52:b1:6e:bd:4d:21:04:20:b1: 4a:4d:b2:ae:5a:d2:a9:3c:31:45:e3:18:63:4b:16: 18:d9:cb:6a:03:3c:70:d1:ac:68:8a:0f:1e:c9:84: 95:eb:6b:56:47:55:f7:63:dd:b3:80:1f:f5:dc:c4: f8:b6:02:d8:3b:41:f5:10:c7:58:02:49:89:42:1f: ce:03:d7:f7:6c:16:ec:6f:44:43:26:8b:da:78:3c: 07:ff:1e:59:54:35:be:fe:c4:57:25:5e:48:7f:c2: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:04:27:CF:EA:44:A2:F2:69:A3:DD:9D:E4:76:3B:8A:0B:C1:F5:5A X509v3 Authority Key Identifier: keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/QwQnz-pEovJpo92d5HY7igvB9Vo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.16.0-5.57.21.255 5.57.23.0/24 37.10.0.0/23 37.10.3.0-37.10.7.255 37.10.30.0/23 37.10.63.0/24 185.28.220.0/22 Signature Algorithm: sha256WithRSAEncryption c3:ea:8d:55:f9:74:43:f0:07:a5:64:e0:6f:51:8e:0e:67:fd: 11:82:45:68:1d:c4:f5:b6:f7:10:82:60:7f:b3:c5:70:81:ce: cc:28:3b:a9:24:72:cf:1a:6d:36:45:07:96:7c:01:f7:7d:05: 61:a8:20:df:d8:57:74:18:03:74:71:69:59:7a:e0:f0:6e:21: 7b:8a:75:80:bb:18:22:54:ef:fe:21:d9:d3:c5:53:ce:99:de: cc:1d:c9:1d:b3:38:39:0c:78:1b:7f:24:97:5f:74:93:58:4b: 70:0b:25:35:18:90:46:f8:6d:24:c2:c2:d2:e8:fd:1a:43:ec: 7e:c3:85:fe:fd:ae:42:cd:2c:fc:30:4a:02:11:f4:8a:c6:0b: db:d9:b8:9b:91:b1:90:3a:e6:df:dd:db:b4:d2:e1:c5:a1:9e: 11:a2:29:3f:42:20:df:e1:7c:46:3d:a8:6a:c5:9d:50:22:5e: c7:89:0b:4f:19:ea:56:5f:03:fc:89:23:9f:8e:5c:35:bb:a2: ff:83:7f:5a:14:cd:dd:50:20:eb:9b:06:a0:0e:c6:66:ff:50: 32:f1:be:4f:3c:7c:fe:be:28:7e:7d:d7:c3:c8:39:d2:80:3e: b8:8b:04:63:80:b9:fe:60:1f:53:d5:4e:d4:4a:93:c4:7d:8f: ec:8d:78:7e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt9yjktj0nB4Useew8vFZv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTc4NWRlNjJkY2Y5ZTc5MzBiYWJkN2IxZDM5YzU4NTNk MTk0NGYwHhcNMjYwMTAyMDgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzA0MjdjZmVhNDRhMmYyNjlhM2RkOWRlNDc2M2I4YTBiYzFmNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLYmVD/FCHwBJvzSgE/G0i1QhpyI fbUFb12A5tY6chy8udTHQOSXj68/O9MZrL5pUH3KLb5yK8ewdRrtEjVBM9B3/Mr8 Iu7CV5Ps5jYrF930uA9Fv5uptBmirkTKbM8xdkmkrvzXE4g/mFmQADrO0lv07Vlm tOb3zUT+OyebzFB+hALs20ZBi1q1tiRPrzdDd13ksGHOLEEsb9JSsW69TSEEILFK TbKuWtKpPDFF4xhjSxYY2ctqAzxw0axoig8eyYSV62tWR1X3Y92zgB/13MT4tgLY O0H1EMdYAkmJQh/OA9f3bBbsb0RDJovaeDwH/x5ZVDW+/sRXJV5If8KUGQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFEMEJ8/qRKLyaaPdneR2O4oLwfVaMB8GA1UdIwQY MBaAFNeXhd5i3Pnnkwur17HTnFhT0ZRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEt NzU4NTVkYjcxNTFmLzEvUXdRbnotcEVvdkpwbzkyZDVIWTdpZ3ZCOVZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEtNzU4NTVkYjcxNTFm LzEvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAQFORAD BAEFORQDBAAFORcDBAElCgAwDAMEACUKAwMEAyUKAAMEASUKHgMEACUKPwMEArkc 3DANBgkqhkiG9w0BAQsFAAOCAQEAw+qNVfl0Q/AHpWTgb1GODmf9EYJFaB3E9bb3 EIJgf7PFcIHOzCg7qSRyzxptNkUHlnwB930FYagg39hXdBgDdHFpWXrg8G4he4p1 gLsYIlTv/iHZ08VTzpnezB3JHbM4OQx4G38kl190k1hLcAslNRiQRvhtJMLC0uj9 GkPsfsOF/v2uQs0s/DBKAhH0isYL29m4m5GxkDrm393btNLhxaGeEaIpP0Ig3+F8 Rj2oasWdUCJex4kLTxnqVl8D/Ikjn45cNbui/4N/WhTN3VAg65sGoA7GZv9QMvG+ Tzx8/r4ofn3Xw8g50oA+uIsEY4C5/mAfU9VO1EqTxH2P7I14fg== -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:18 2026 by rpki-client