This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/qhahxJ4ekUegtdPupvRl0hdJVdQ.roa File: qhahxJ4ekUegtdPupvRl0hdJVdQ.roa (raw, json) Hash identifier: BvwZQto8PkxkN1W4xLx00uQHLy83/08b+xF1cw9+RFA= Subject key identifier: AA:16:A1:C4:9E:1E:91:47:A0:B5:D3:EE:A6:F4:65:D2:17:49:55:D4 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A2790E073D1513F8B5D62D42CB3D10 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/qhahxJ4ekUegtdPupvRl0hdJVdQ.roa Signing time: Thu 01 Jan 2026 08:17:52 +0000 ROA not before: Thu 01 Jan 2026 08:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33651 IP address blocks: 5.182.186.0/24 maxlen: 24 5.182.193.0/24 maxlen: 24 5.182.194.0/24 maxlen: 24 5.182.195.0/24 maxlen: 24 36.255.215.0/24 maxlen: 24 45.67.141.0/24 maxlen: 24 63.246.129.0/24 maxlen: 24 63.246.148.0/24 maxlen: 24 63.246.152.0/24 maxlen: 24 63.246.159.0/24 maxlen: 24 78.31.206.0/24 maxlen: 24 103.216.197.0/24 maxlen: 24 149.126.13.0/24 maxlen: 24 162.218.89.0/24 maxlen: 24 185.201.41.0/24 maxlen: 24 185.201.43.0/24 maxlen: 24 2a0c:1900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:79:0e:07:3d:15:13:f8:b5:d6:2d:42:cb:3d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa16a1c49e1e9147a0b5d3eea6f465d2174955d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:60:64:37:ef:de:57:5f:89:45:f1:12:2d: a7:f0:ed:2b:a6:0e:f1:e2:2b:ac:86:95:8d:99:42: ec:34:f1:7d:19:19:67:2a:02:2c:3f:c5:c6:56:57: 59:e7:cb:45:eb:77:1a:f4:77:3c:f2:c9:50:c6:38: 24:12:a5:20:1b:9d:56:1e:3d:e5:db:84:1c:08:76: 02:a4:0f:1f:65:ee:03:27:c4:7f:c8:4f:0c:58:a7: d6:49:2e:45:7f:cd:1a:f1:e8:76:01:63:e8:bb:34: cd:2a:50:49:71:8a:61:4c:40:c0:2e:a5:31:57:96: 9b:a5:f6:5d:14:d9:4d:ab:e3:e8:c7:6f:ca:3a:1b: 85:09:d3:ff:c1:e4:62:5e:b6:b2:37:9f:fb:42:9b: 20:ee:f8:a9:ab:1c:53:a2:f4:e6:b3:98:21:03:9c: 15:1e:77:cc:48:56:7d:be:1e:ed:ba:cc:ae:b5:42: 13:fe:e1:30:fb:23:ff:16:2e:37:f8:84:d4:de:77: bc:9f:02:0a:2d:d7:6c:f6:e5:eb:bf:c3:b0:16:02: 40:76:58:8f:82:09:03:dc:c5:ef:58:94:34:10:69: 1f:05:12:7d:37:b3:fd:af:cd:dd:0f:ef:ab:be:0a: d6:7d:39:2b:02:63:13:71:98:eb:35:08:e3:6f:ba: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:16:A1:C4:9E:1E:91:47:A0:B5:D3:EE:A6:F4:65:D2:17:49:55:D4 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/qhahxJ4ekUegtdPupvRl0hdJVdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.186.0/24 5.182.193.0-5.182.195.255 36.255.215.0/24 45.67.141.0/24 63.246.129.0/24 63.246.148.0/24 63.246.152.0/24 63.246.159.0/24 78.31.206.0/24 103.216.197.0/24 149.126.13.0/24 162.218.89.0/24 185.201.41.0/24 185.201.43.0/24 IPv6: 2a0c:1900::/29 Signature Algorithm: sha256WithRSAEncryption 9b:f6:2c:97:cc:81:75:cd:57:da:7f:31:24:ef:e1:12:c3:75: 1d:f1:a2:86:ec:9c:e3:2c:26:4c:8d:ae:f2:89:16:5f:83:46: 43:a4:dd:32:f8:b7:df:f7:53:96:7a:77:66:08:fc:5e:f4:1f: 3a:af:c0:a8:ae:4d:46:38:ca:72:60:d1:1e:e0:cc:83:14:1c: 38:6c:fb:8e:ed:60:6d:72:e0:c2:cb:ff:ab:e3:b2:2b:a1:44: 9f:47:77:dd:a9:51:99:c6:58:00:70:2d:6e:f2:31:75:cc:0d: 45:ae:c6:38:04:7c:f9:52:cc:e5:41:1d:27:0c:3e:c1:e4:c4: e4:d3:55:03:f0:f0:e9:a1:34:b5:85:95:bb:e9:f0:ff:7e:17: 52:58:dc:74:9f:a7:bd:dc:21:68:e5:35:1b:06:86:2e:ea:ad: 03:5b:53:ef:19:27:6a:7b:86:d0:d6:72:1f:d0:d2:24:40:98: e1:b9:c3:e7:69:f6:63:7c:87:30:6e:91:a9:23:2e:ef:12:2c: 63:a9:56:4d:41:5a:a5:78:45:1e:44:0e:0e:14:b7:47:89:0b: 14:1e:51:bc:21:9e:19:ca:13:77:18:69:ab:fb:93:43:cc:98: 24:8e:9d:15:a4:e6:b8:1b:75:7b:2e:bf:fb:d4:a2:c1:d8:28: dd:a5:ff:f9 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt4onkOBz0VE/i11i1Cyz0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTE2YTFjNDllMWU5MTQ3YTBiNWQzZWVhNmY0NjVkMjE3NDk1NWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyhgZDfv3ldfiUXxEi2n8O0rpg7x 4iushpWNmULsNPF9GRlnKgIsP8XGVldZ58tF63ca9Hc88slQxjgkEqUgG51WHj3l 24QcCHYCpA8fZe4DJ8R/yE8MWKfWSS5Ff80a8eh2AWPouzTNKlBJcYphTEDALqUx V5abpfZdFNlNq+Pox2/KOhuFCdP/weRiXrayN5/7Qpsg7vipqxxTovTms5ghA5wV HnfMSFZ9vh7tusyutUIT/uEw+yP/Fi43+ITU3ne8nwIKLdds9uXrv8OwFgJAdliP ggkD3MXvWJQ0EGkfBRJ9N7P9r83dD++rvgrWfTkrAmMTcZjrNQjjb7oEmwIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFKoWocSeHpFHoLXT7qb0ZdIXSVXUMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvcWhhaHhKNGVrVWVndGRQdXB2UmwwaGRKVmRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAAW2ujAM AwQABbbBAwQCBbbAAwQAJP/XAwQALUONAwQAP/aBAwQAP/aUAwQAP/aYAwQAP/af AwQATh/OAwQAZ9jFAwQAlX4NAwQAotpZAwQAuckpAwQAuckrMA0EAgACMAcDBQMq DBkAMA0GCSqGSIb3DQEBCwUAA4IBAQCb9iyXzIF1zVfafzEk7+ESw3Ud8aKG7Jzj LCZMja7yiRZfg0ZDpN0y+Lff91OWendmCPxe9B86r8Cork1GOMpyYNEe4MyDFBw4 bPuO7WBtcuDCy/+r47IroUSfR3fdqVGZxlgAcC1u8jF1zA1FrsY4BHz5UszlQR0n DD7B5MTk01UD8PDpoTS1hZW76fD/fhdSWNx0n6e93CFo5TUbBoYu6q0DW1PvGSdq e4bQ1nIf0NIkQJjhucPnafZjfIcwbpGpIy7vEixjqVZNQVqleEUeRA4OFLdHiQsU HlG8IZ4ZyhN3GGmr+5NDzJgkjp0VpOa4G3V7Lr/71KLB2Cjdpf/5 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:06 2026 by rpki-client