This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/qzh2vh62kqjCq_kquaQFKN2dkjk.roa File: qzh2vh62kqjCq_kquaQFKN2dkjk.roa (raw, json) Hash identifier: z2SqtvBA5B+Uxlu9McSqz/3+lS4dmqsulgYELWekW6s= Subject key identifier: AB:38:76:BE:1E:B6:92:A8:C2:AB:F9:2A:B9:A4:05:28:DD:9D:92:39 Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b Certificate serial: 019B7A5B2C8287B8B3A232B213EBB15983DA Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/qzh2vh62kqjCq_kquaQFKN2dkjk.roa Signing time: Thu 01 Jan 2026 16:19:14 +0000 ROA not before: Thu 01 Jan 2026 16:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216154 IP address blocks: 45.10.172.0/23 maxlen: 23 45.10.172.0/24 maxlen: 24 45.10.173.0/24 maxlen: 24 45.88.172.0/22 maxlen: 22 45.114.60.0/22 maxlen: 22 80.74.24.0/21 maxlen: 21 84.252.102.0/23 maxlen: 23 88.218.120.0/22 maxlen: 22 89.46.131.0/24 maxlen: 24 89.150.34.0/23 maxlen: 23 89.150.41.0/24 maxlen: 24 89.150.59.0/24 maxlen: 24 91.132.56.0/22 maxlen: 22 91.132.224.0/24 maxlen: 24 103.54.16.0/22 maxlen: 22 103.90.72.0/23 maxlen: 23 103.90.74.0/23 maxlen: 23 103.90.74.0/24 maxlen: 24 103.90.75.0/24 maxlen: 24 103.137.248.0/22 maxlen: 22 185.200.176.0/22 maxlen: 22 188.241.196.0/23 maxlen: 23 2a0c:db40::/32 maxlen: 32 2a0c:db40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2c:82:87:b8:b3:a2:32:b2:13:eb:b1:59:83:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b Validity Not Before: Jan 1 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab3876be1eb692a8c2abf92ab9a40528dd9d9239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:a8:e6:19:18:e1:2e:d1:5e:52:07:59:40: 61:93:25:18:8b:e1:88:78:22:0e:e2:7e:a7:9d:a6: f8:eb:28:62:eb:e5:66:7f:c0:85:61:3d:00:8b:d2: 68:1a:75:76:cc:cb:e7:8b:4b:4a:da:bb:d3:2d:58: 34:61:b7:0b:9f:f4:9c:cb:6e:d1:28:51:ba:64:23: 03:d9:4c:c7:04:0e:b8:bd:8f:27:b4:59:21:54:ed: 61:35:d7:ee:09:3d:32:e2:21:7a:ed:03:a9:af:de: ef:7e:a1:81:82:ac:87:d6:5b:65:73:d5:0b:23:70: 72:d3:94:a3:0d:88:c9:56:38:70:cd:8b:df:3b:12: 4d:ab:a6:25:cb:7f:4f:71:ec:bd:cc:bc:82:9d:17: 59:35:71:92:ef:45:47:6f:0c:67:2e:f0:49:73:77: 8c:67:9f:2c:01:71:7c:ea:6a:a9:e6:ed:b3:1f:84: 32:e1:5b:6d:6e:60:d4:18:11:1c:7f:a6:6c:c4:f7: 70:b8:2f:05:77:c2:f9:e8:45:5b:c3:d8:ed:34:e3: 20:e9:10:16:57:1b:8a:2c:06:a1:f8:b2:89:c8:a6: 93:d5:77:21:71:0a:57:34:3d:a9:0d:b1:4e:14:57: 06:29:9b:0a:f9:4c:ac:79:6e:97:70:f8:92:87:80: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:38:76:BE:1E:B6:92:A8:C2:AB:F9:2A:B9:A4:05:28:DD:9D:92:39 X509v3 Authority Key Identifier: keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/qzh2vh62kqjCq_kquaQFKN2dkjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.172.0/23 45.88.172.0/22 45.114.60.0/22 80.74.24.0/21 84.252.102.0/23 88.218.120.0/22 89.46.131.0/24 89.150.34.0/23 89.150.41.0/24 89.150.59.0/24 91.132.56.0/22 91.132.224.0/24 103.54.16.0/22 103.90.72.0/22 103.137.248.0/22 185.200.176.0/22 188.241.196.0/23 IPv6: 2a0c:db40::/32 Signature Algorithm: sha256WithRSAEncryption 63:21:5b:b3:eb:94:0f:a5:01:e6:dd:cb:73:6e:e0:c8:a8:f9: 2a:cb:02:08:71:29:46:df:c9:ba:10:87:c3:5c:77:98:05:13: 50:d5:d2:68:cf:a5:30:29:f2:71:e4:d4:54:4b:f3:a9:fa:8f: 0c:7d:11:d6:fc:a4:87:a6:34:f4:ff:31:68:a9:f6:01:f2:ec: b7:fc:cb:11:c3:76:25:53:1c:31:95:74:0d:5e:f2:06:c7:a5: a3:91:40:1b:50:8a:60:5a:0f:46:2d:21:5a:26:f8:f9:a6:6e: 28:51:c3:90:97:2b:2f:30:f8:11:63:70:eb:4e:a5:2f:e9:f9: fc:58:58:fd:50:1c:f8:a5:7b:54:47:f0:3e:58:06:19:9b:bf: 3d:aa:37:a3:a2:f7:ed:38:e2:0b:75:75:26:16:fe:b7:35:75: 74:2d:df:a4:b4:3c:b1:a7:0c:76:b6:c8:3f:5b:7c:d0:ce:3b: d4:ba:73:72:92:3a:fc:88:3b:c4:9e:9d:00:17:a5:ed:f5:44: b4:b4:76:2c:5e:f3:07:18:c5:36:d0:d6:30:ba:a6:06:21:b1: 51:01:d7:83:53:ff:31:83:70:a0:9d:6b:14:bc:49:af:55:dd: e1:e8:86:2c:8c:60:64:cc:3f:50:08:a4:29:6b:a9:3a:c9:c9: 95:07:59:d2 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAZt6WyyCh7izojKyE+uxWYPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMWEzZjRhZjk0YTU4MGViOWU3YjU4NTQyYTAwODRiMjFj MmIwOWIwHhcNMjYwMTAxMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjM4NzZiZTFlYjY5MmE4YzJhYmY5MmFiOWE0MDUyOGRkOWQ5MjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRSo5hkY4S7RXlIHWUBhkyUYi+GI eCIO4n6nnab46yhi6+Vmf8CFYT0Ai9JoGnV2zMvni0tK2rvTLVg0YbcLn/Scy27R KFG6ZCMD2UzHBA64vY8ntFkhVO1hNdfuCT0y4iF67QOpr97vfqGBgqyH1ltlc9UL I3By05SjDYjJVjhwzYvfOxJNq6Yly39Pcey9zLyCnRdZNXGS70VHbwxnLvBJc3eM Z58sAXF86mqp5u2zH4Qy4VttbmDUGBEcf6ZsxPdwuC8Fd8L56EVbw9jtNOMg6RAW VxuKLAah+LKJyKaT1XchcQpXND2pDbFOFFcGKZsK+UyseW6XcPiSh4Bn+wIDAQAB o4ICeTCCAnUwHQYDVR0OBBYEFKs4dr4etpKowqv5KrmkBSjdnZI5MB8GA1UdIwQY MBaAFLIaP0r5SlgOuee1hUKgCEshwrCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYt NTEyOTE3MmI2OTY2LzEvcXpoMnZoNjJrcWpDcV9rcXVhUUZLTjJka2prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYtNTEyOTE3MmI2OTY2 LzEvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAS0KrAME Ai1YrAMEAi1yPAMEA1BKGAMEAVT8ZgMEAljaeAMEAFkugwMEAVmWIgMEAFmWKQME AFmWOwMEAluEOAMEAFuE4AMEAmc2EAMEAmdaSAMEAmeJ+AMEArnIsAMEAbzxxDAN BAIAAjAHAwUAKgzbQDANBgkqhkiG9w0BAQsFAAOCAQEAYyFbs+uUD6UB5t3Lc27g yKj5KssCCHEpRt/JuhCHw1x3mAUTUNXSaM+lMCnyceTUVEvzqfqPDH0R1vykh6Y0 9P8xaKn2AfLst/zLEcN2JVMcMZV0DV7yBselo5FAG1CKYFoPRi0hWib4+aZuKFHD kJcrLzD4EWNw606lL+n5/FhY/VAc+KV7VEfwPlgGGZu/Pao3o6L37TjiC3V1Jhb+ tzV1dC3fpLQ8sacMdrbIP1t80M471LpzcpI6/Ig7xJ6dABel7fVEtLR2LF7zBxjF NtDWMLqmBiGxUQHXg1P/MYNwoJ1rFLxJr1Xd4eiGLIxgZMw/UAikKWupOsnJlQdZ 0g== -----END CERTIFICATE-----Generated at Mon Jan 26 12:23:33 2026 by rpki-client