This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lqCu78LtvHJishdD6N4eR-R7RIM.roa File: lqCu78LtvHJishdD6N4eR-R7RIM.roa (raw, json) Hash identifier: iKTkz66NrpLAcH4+xiDnu+/37wuOGvm5ZNIxFMyUSUw= Subject key identifier: 96:A0:AE:EF:C2:ED:BC:72:62:B2:17:43:E8:DE:1E:47:E4:7B:44:83 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6CFEB5D2A23054F1E368E69BA1CF2 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lqCu78LtvHJishdD6N4eR-R7RIM.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212607 IP address blocks: 5.10.248.0/24 maxlen: 24 5.10.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cf:eb:5d:2a:23:05:4f:1e:36:8e:69:ba:1c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96a0aeefc2edbc7262b21743e8de1e47e47b4483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:04:d4:55:07:bf:71:27:ff:5a:5a:44:77: d4:60:25:50:78:95:89:b4:f9:ff:71:dc:e9:e3:3a: 5b:0b:2a:8a:47:14:e9:8a:3a:a4:24:30:3e:17:40: b9:8e:f2:9e:8b:12:f8:7a:88:ba:ad:97:d3:1b:27: ff:5b:14:53:d4:2a:ad:f9:e9:a5:be:5b:8a:da:d2: 6e:18:5a:02:56:56:ee:3d:7c:89:9a:41:9e:b3:31: c3:d3:29:dd:69:bc:b3:7f:62:9b:aa:7c:aa:76:1e: fa:e8:b1:a8:0a:49:46:16:f8:09:de:87:90:2d:36: 6a:0a:da:8e:ab:b5:57:37:3e:c5:08:2f:5e:8a:63: 03:4a:89:f3:f3:08:17:35:02:44:3d:61:4f:6e:17: 25:6f:d7:54:b5:fd:ec:0d:56:81:47:11:91:7d:f5: 06:5d:1d:7c:f4:b4:0a:82:7b:8d:04:82:49:50:c5: 83:a0:4f:db:82:1f:3a:29:ea:d6:db:e7:28:69:ab: f2:cf:31:a6:d5:93:47:a7:51:c9:3e:75:9f:1b:53: 80:a6:18:25:1c:dc:4b:12:80:bb:56:ec:30:2f:65: 2a:2a:e3:42:b2:08:2b:d4:7b:1f:80:53:84:b5:dc: cd:3b:cc:fb:0f:24:c9:bb:f0:56:e5:5f:42:e1:f3: 72:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A0:AE:EF:C2:ED:BC:72:62:B2:17:43:E8:DE:1E:47:E4:7B:44:83 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lqCu78LtvHJishdD6N4eR-R7RIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.248.0/23 Signature Algorithm: sha256WithRSAEncryption 73:2e:a2:12:a7:ef:f1:d0:08:18:b5:11:0e:27:56:ee:be:90: c8:d6:26:dd:33:22:58:27:45:3b:a7:6c:cf:da:0e:60:50:51: 2f:c4:f3:b6:4f:83:bf:43:d8:98:5e:cc:f2:c7:11:a2:a2:f8: e3:29:d1:60:c2:ba:d5:a7:33:6f:8c:f8:ab:4b:ae:e0:45:5d: a1:42:44:ef:d1:59:d1:d7:37:d2:7a:a0:69:26:d6:52:da:3f: 5b:8d:8c:f5:40:c8:fc:ef:44:a1:b2:ff:7b:fa:ed:ac:0a:ef: da:6f:b0:48:17:42:ac:bd:9c:ab:35:37:2d:11:a6:41:ed:b6: 14:b4:28:06:a0:60:61:f7:f1:35:03:e7:02:0b:c0:84:92:11: 4b:25:d9:4e:a0:d0:32:8d:a3:43:5c:60:e9:21:fb:4f:7b:6d: ed:31:90:34:37:8d:1e:5e:77:4c:a1:fe:5c:21:b2:4a:cb:5e: 5c:a0:84:bd:cc:dc:2c:b6:8a:64:73:c6:d7:e1:76:86:57:0a: bf:98:aa:1d:37:d8:35:0c:ad:6b:ca:fa:a2:f8:d2:6e:19:fe: 37:ec:da:14:a2:60:ca:f2:7e:b2:04:70:55:2d:36:0f:8b:f6: af:f3:37:50:ce:0d:41:54:d6:10:d2:3d:99:f5:79:e7:67:bc: e7:43:36:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xs/rXSojBU8eNo5puhzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmEwYWVlZmMyZWRiYzcyNjJiMjE3NDNlOGRlMWU0N2U0N2I0NDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoegE1FUHv3En/1paRHfUYCVQeJWJ tPn/cdzp4zpbCyqKRxTpijqkJDA+F0C5jvKeixL4eoi6rZfTGyf/WxRT1Cqt+eml vluK2tJuGFoCVlbuPXyJmkGeszHD0yndabyzf2Kbqnyqdh766LGoCklGFvgJ3oeQ LTZqCtqOq7VXNz7FCC9eimMDSonz8wgXNQJEPWFPbhclb9dUtf3sDVaBRxGRffUG XR189LQKgnuNBIJJUMWDoE/bgh86KerW2+coaavyzzGm1ZNHp1HJPnWfG1OAphgl HNxLEoC7VuwwL2UqKuNCsggr1HsfgFOEtdzNO8z7DyTJu/BW5V9C4fNynwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJagru/C7bxyYrIXQ+jeHkfke0SDMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvbHFDdTc4THR2SEppc2hkRDZONGVSLVI3UklNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBQr4MA0G CSqGSIb3DQEBCwUAA4IBAQBzLqISp+/x0AgYtREOJ1buvpDI1ibdMyJYJ0U7p2zP 2g5gUFEvxPO2T4O/Q9iYXszyxxGiovjjKdFgwrrVpzNvjPirS67gRV2hQkTv0VnR 1zfSeqBpJtZS2j9bjYz1QMj870Shsv97+u2sCu/ab7BIF0KsvZyrNTctEaZB7bYU tCgGoGBh9/E1A+cCC8CEkhFLJdlOoNAyjaNDXGDpIftPe23tMZA0N40eXndMof5c IbJKy15coIS9zNwstopkc8bX4XaGVwq/mKodN9g1DK1ryvqi+NJuGf437NoUomDK 8n6yBHBVLTYPi/av8zdQzg1BVNYQ0j2Z9XnnZ7znQzY4 -----END CERTIFICATE-----Generated at Wed Jan 21 12:17:58 2026 by rpki-client