This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa File: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (raw, json) Hash identifier: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4= Subject key identifier: 2A:AA:E3:D4:8D:67:84:17:22:0E:42:A4:08:66:CD:1D:98:4D:4C:C6 Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC78C2B2224683F692ACEA2E8A6F5F4 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41689 IP address blocks: 5.202.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8c:2b:22:24:68:3f:69:2a:ce:a2:e8:a6:f5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aaae3d48d678417220e42a40866cd1d984d4cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:8d:39:63:97:4a:9c:22:67:1e:01:ca:9b: 76:3d:cb:99:ab:3d:09:de:e4:3d:fa:75:87:d5:2e: 35:be:58:4e:07:ba:39:03:d6:57:75:3b:f1:60:cd: 33:5a:56:0b:e3:58:19:8d:5f:22:da:12:5b:e8:38: 2c:63:b6:4d:55:c3:0e:d8:bc:60:4d:70:89:83:29: 0d:bb:72:d3:9a:c0:3b:2f:09:e2:25:22:a6:20:b1: be:28:cc:91:eb:cb:7f:ea:6d:eb:de:fd:49:f8:b1: 8e:c8:2c:fb:b4:57:5c:c6:bb:17:20:cf:b9:18:e6: e5:b3:94:e2:02:9d:7c:4f:9d:29:9e:15:3d:63:8e: 65:32:c4:59:d2:30:21:f2:ea:62:62:4b:23:8e:17: f7:53:10:bc:28:8c:24:ef:17:ad:54:e4:3d:e0:64: ee:c5:ab:e2:ba:31:b8:56:28:d0:79:10:ff:02:3e: 7c:4b:15:d1:dc:23:24:51:7d:fb:95:06:8c:15:9e: ce:25:82:8b:62:92:9a:c9:c1:b8:1f:ca:d4:b6:cd: 8e:b5:e3:2e:42:a0:74:96:e4:b3:dd:d2:74:aa:38: 62:18:bb:d9:03:8d:53:05:1c:05:b6:b2:98:5b:02: a8:6e:d4:8c:71:8d:e3:cf:c0:89:45:4a:56:0d:9d: 3b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AA:E3:D4:8D:67:84:17:22:0E:42:A4:08:66:CD:1D:98:4D:4C:C6 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.202.135.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:e8:4b:93:10:1a:2a:5b:dc:25:5b:a1:a1:a9:f1:f9:e7:6a: 4b:80:46:2f:a4:ae:78:17:1e:7a:06:95:6b:93:5d:fa:54:ee: 46:61:0c:86:73:72:d9:b7:99:65:7d:f2:0a:42:86:1b:d1:40: 9f:4a:d6:12:b6:d0:c8:da:68:1f:dc:39:1e:65:43:7c:a8:00: f6:36:32:67:4a:d0:53:11:d7:ad:41:31:84:c1:00:ef:f0:2d: 41:a9:f4:25:8f:7e:ee:ed:ef:90:2a:11:3b:e4:24:d5:1e:5d: 57:6f:f5:17:d2:10:f1:2a:41:f0:4d:ef:2f:52:5c:2e:ee:fb: 51:66:8e:7f:d2:ee:a1:6d:22:2f:86:c7:ca:aa:2f:3e:65:27: 98:5b:bb:77:ae:f5:f1:37:4f:c8:89:31:a0:3e:a7:0c:75:cf: 47:21:fe:81:b0:fa:6d:44:a6:82:dc:bc:24:9e:0c:40:d4:8c: ae:a3:8e:34:2d:ee:31:24:61:11:7a:31:19:e3:c8:57:9a:5f: df:80:60:cb:c2:92:16:fa:73:bd:e1:fe:53:eb:d4:e0:39:1a: e8:2e:63:27:b9:f6:1d:a8:45:a2:f2:b2:1a:4e:dd:f8:26:bf: 21:2d:60:8c:01:d3:62:a5:f8:78:f1:64:53:3f:38:5f:86:f2: e2:5c:d1:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4wrIiRoP2kqzqLopvX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWFhZTNkNDhkNjc4NDE3MjIwZTQyYTQwODY2Y2QxZDk4NGQ0Y2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq2NOWOXSpwiZx4Bypt2PcuZqz0J 3uQ9+nWH1S41vlhOB7o5A9ZXdTvxYM0zWlYL41gZjV8i2hJb6DgsY7ZNVcMO2Lxg TXCJgykNu3LTmsA7LwniJSKmILG+KMyR68t/6m3r3v1J+LGOyCz7tFdcxrsXIM+5 GObls5TiAp18T50pnhU9Y45lMsRZ0jAh8upiYksjjhf3UxC8KIwk7xetVOQ94GTu xaviujG4VijQeRD/Aj58SxXR3CMkUX37lQaMFZ7OJYKLYpKaycG4H8rUts2OteMu QqB0luSz3dJ0qjhiGLvZA41TBRwFtrKYWwKobtSMcY3jz8CJRUpWDZ07bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCqq49SNZ4QXIg5CpAhmzR2YTUzGMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvS3FyajFJMW5oQmNpRGtLa0NHYk5IWmhOVE1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABcqHMA0G CSqGSIb3DQEBCwUAA4IBAQB+6EuTEBoqW9wlW6GhqfH552pLgEYvpK54Fx56BpVr k136VO5GYQyGc3LZt5llffIKQoYb0UCfStYSttDI2mgf3DkeZUN8qAD2NjJnStBT EdetQTGEwQDv8C1BqfQlj37u7e+QKhE75CTVHl1Xb/UX0hDxKkHwTe8vUlwu7vtR Zo5/0u6hbSIvhsfKqi8+ZSeYW7t3rvXxN0/IiTGgPqcMdc9HIf6BsPptRKaC3Lwk ngxA1Iyuo440Le4xJGERejEZ48hXml/fgGDLwpIW+nO94f5T69TgORroLmMnufYd qEWi8rIaTt34Jr8hLWCMAdNipfh48WRTPzhfhvLiXNFK -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:15 2026 by rpki-client