This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qdXmhzXonHzY5SOwNScYkIMjw4c.roa File: qdXmhzXonHzY5SOwNScYkIMjw4c.roa (raw, json) Hash identifier: iJI1ndrqj5tq4krUQt6MgXQ8Hd9ZLg812f0vu2k2nEQ= Subject key identifier: A9:D5:E6:87:35:E8:9C:7C:D8:E5:23:B0:35:27:18:90:83:23:C3:87 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14FB9B3E714347AB6E3A29B33E2A83 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qdXmhzXonHzY5SOwNScYkIMjw4c.roa Signing time: Fri 02 Jan 2026 14:20:40 +0000 ROA not before: Fri 02 Jan 2026 14:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51026 IP address blocks: 62.220.126.0/24 maxlen: 24 62.220.127.0/24 maxlen: 24 81.12.24.0/22 maxlen: 24 81.12.24.0/24 maxlen: 24 81.12.25.0/24 maxlen: 24 81.12.26.0/24 maxlen: 24 81.12.27.0/24 maxlen: 24 81.12.30.0/24 maxlen: 24 81.12.31.0/24 maxlen: 24 87.107.6.0/23 maxlen: 24 87.107.8.0/23 maxlen: 24 87.107.108.0/23 maxlen: 24 87.107.110.0/23 maxlen: 24 87.107.110.0/24 maxlen: 24 87.107.111.0/24 maxlen: 24 87.107.144.0/24 maxlen: 24 87.107.152.0/24 maxlen: 24 87.107.153.0/24 maxlen: 24 87.107.166.0/24 maxlen: 24 87.107.167.0/24 maxlen: 24 87.107.174.0/24 maxlen: 24 87.107.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fb:9b:3e:71:43:47:ab:6e:3a:29:b3:3e:2a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9d5e68735e89c7cd8e523b0352718908323c387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:fc:db:36:b6:11:91:b9:cf:00:3d:59:0d: df:66:83:ca:40:22:e9:16:91:c6:1c:fc:0e:63:18: 2f:ee:79:41:12:3c:4d:5b:e9:bb:c2:5a:12:8f:72: 61:fa:31:4f:53:98:3f:3f:89:e9:c0:eb:c2:b0:93: 06:c3:50:35:3f:aa:cd:db:6d:8d:6d:2e:b6:b5:ea: 6d:3f:85:b7:96:c0:76:f1:bd:a7:7e:d6:77:9f:86: 17:bd:b1:1a:36:8c:a2:5a:df:ec:1e:1b:fd:25:31: c5:f7:15:fe:76:b9:b6:52:3c:ce:c5:6d:b2:03:e4: 16:0f:3d:67:90:e8:b0:d2:43:63:02:81:f4:21:4c: b7:bc:bd:f9:f3:7c:43:45:85:ae:f7:ff:67:d0:eb: cc:63:1a:19:96:47:f8:6c:bf:69:b1:02:3f:d9:f2: b9:fa:61:ef:2d:f0:80:06:08:3f:2a:83:33:b5:68: b7:e3:50:56:a3:02:af:66:df:0e:22:d9:76:27:87: 08:3d:c3:4d:37:7c:93:de:c1:07:cb:66:32:cb:85: b7:c3:19:d2:db:fd:03:82:24:5f:57:f9:e3:6b:0a: 9c:cc:33:97:73:44:b6:c9:bf:a7:4e:d2:3b:0c:5c: a3:ed:dc:2b:1e:c7:7f:9c:51:78:c7:37:7d:12:89: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D5:E6:87:35:E8:9C:7C:D8:E5:23:B0:35:27:18:90:83:23:C3:87 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qdXmhzXonHzY5SOwNScYkIMjw4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.126.0/23 81.12.24.0/22 81.12.30.0/23 87.107.6.0-87.107.9.255 87.107.108.0/22 87.107.144.0/24 87.107.152.0/23 87.107.166.0/23 87.107.174.0/23 Signature Algorithm: sha256WithRSAEncryption 63:84:80:ef:f9:ea:4d:ee:a3:6c:5a:d5:4b:8a:7e:bc:fa:f8: 83:50:40:30:52:4b:59:c7:7f:ae:13:97:ae:78:50:5d:26:d5: 47:57:90:92:5e:2e:04:30:b7:09:89:81:ea:23:63:aa:a3:7a: 01:5e:32:cd:41:86:3f:f3:ea:7d:08:88:4c:19:ea:ab:a1:3b: 24:98:98:67:08:c5:4a:ef:5e:74:22:84:c1:b9:68:0c:12:43: 4a:76:66:93:09:a0:6e:95:68:8c:65:33:09:ba:a3:cc:8c:3b: c6:f2:93:0d:8d:3c:84:c4:b3:45:0a:99:b4:fd:ae:df:d4:b2: 69:e5:43:36:bf:72:e8:f9:f0:ec:d8:d9:77:6a:fc:a6:15:5b: 76:73:2f:46:83:f4:a5:61:cf:33:c8:6f:e4:f9:c0:65:6d:c2: 98:0b:ec:66:22:ef:66:41:f8:04:0d:fd:76:07:a4:66:18:40: 03:6c:4e:e4:4a:81:86:9b:12:35:a9:f0:78:ef:7e:fb:87:78: 12:67:9f:72:2e:01:36:af:4e:76:38:36:90:b0:41:00:e9:2e: 94:f2:a1:e2:46:6f:dd:22:a6:51:a5:bc:2b:07:f9:8a:04:d3: 2d:ee:fe:13:60:6f:a9:25:27:9c:c3:d6:c7:d7:d1:db:17:f5: 50:7f:74:7f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt/FPubPnFDR6tuOimzPiqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWQ1ZTY4NzM1ZTg5YzdjZDhlNTIzYjAzNTI3MTg5MDgzMjNjMzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuf82za2EZG5zwA9WQ3fZoPKQCLp FpHGHPwOYxgv7nlBEjxNW+m7wloSj3Jh+jFPU5g/P4npwOvCsJMGw1A1P6rN222N bS62teptP4W3lsB28b2nftZ3n4YXvbEaNoyiWt/sHhv9JTHF9xX+drm2UjzOxW2y A+QWDz1nkOiw0kNjAoH0IUy3vL3583xDRYWu9/9n0OvMYxoZlkf4bL9psQI/2fK5 +mHvLfCABgg/KoMztWi341BWowKvZt8OItl2J4cIPcNNN3yT3sEHy2Yyy4W3wxnS 2/0DgiRfV/njawqczDOXc0S2yb+nTtI7DFyj7dwrHsd/nFF4xzd9EonSaQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFKnV5oc16Jx82OUjsDUnGJCDI8OHMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvcWRYbWh6WG9uSHpZNVNPd05TY1lrSU1qdzRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBPtx+AwQC UQwYAwQBUQweMAwDBAFXawYDBAFXawgDBAJXa2wDBABXa5ADBAFXa5gDBAFXa6YD BAFXa64wDQYJKoZIhvcNAQELBQADggEBAGOEgO/56k3uo2xa1UuKfrz6+INQQDBS S1nHf64Tl654UF0m1UdXkJJeLgQwtwmJgeojY6qjegFeMs1Bhj/z6n0IiEwZ6quh OySYmGcIxUrvXnQihMG5aAwSQ0p2ZpMJoG6VaIxlMwm6o8yMO8bykw2NPITEs0UK mbT9rt/UsmnlQza/cuj58OzY2Xdq/KYVW3ZzL0aD9KVhzzPIb+T5wGVtwpgL7GYi 72ZB+AQN/XYHpGYYQANsTuRKgYabEjWp8HjvfvuHeBJnn3IuATavTnY4NpCwQQDp LpTyoeJGb90iplGlvCsH+YoE0y3u/hNgb6klJ5zD1sfX0dsX9VB/dH8= -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:13 2026 by rpki-client