This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/qz5i0x4xJkfmTe6dozsZBG3TPU0.roa File: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (raw, json) Hash identifier: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ= Subject key identifier: AB:3E:62:D3:1E:31:26:47:E6:4D:EE:9D:A3:3B:19:04:6D:D3:3D:4D Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c Certificate serial: 019B77C6FF2470FBA2E4E7660DC46F23EA93 Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/qz5i0x4xJkfmTe6dozsZBG3TPU0.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39280 IP address blocks: 46.228.176.0/20 maxlen: 20 46.228.176.0/21 maxlen: 21 46.228.184.0/21 maxlen: 21 81.21.80.0/20 maxlen: 20 81.21.80.0/21 maxlen: 21 81.21.88.0/21 maxlen: 21 93.184.224.0/20 maxlen: 20 93.184.224.0/21 maxlen: 21 93.184.232.0/21 maxlen: 21 185.41.200.0/22 maxlen: 22 185.41.200.0/23 maxlen: 23 185.41.202.0/23 maxlen: 23 2a03:ba40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ff:24:70:fb:a2:e4:e7:66:0d:c4:6f:23:ea:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab3e62d31e312647e64dee9da33b19046dd33d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:7d:e1:ee:9d:28:c2:d3:a6:6d:3d:dc:29: e4:e3:4d:11:f0:4b:b1:12:0e:b6:b3:6a:17:8a:2c: 09:9b:32:7e:b0:09:2b:9c:89:16:47:b5:02:a6:4b: 9b:e7:c8:70:7e:a2:ba:9d:d0:d3:7a:f8:41:37:40: c6:72:dc:6e:b3:af:a2:b7:72:15:6b:35:d9:5c:b2: e8:01:a4:4e:f1:eb:46:04:2d:f7:3c:10:7c:6e:78: 14:45:5f:a0:21:cd:d4:07:ee:00:c9:d5:10:ee:df: ab:3a:e2:45:48:c4:c0:24:6b:63:8e:2f:d6:7d:af: 03:3b:89:37:a8:b1:bf:c2:d6:d1:3a:8f:0c:76:bb: 31:4c:66:e1:1d:e2:a4:21:34:64:c1:9e:aa:38:f2: 35:e6:39:d3:f5:d9:24:d6:ac:c3:23:ad:65:8f:05: fb:ab:bb:0f:d9:2e:27:fa:2d:6f:13:74:1a:88:a3: 57:26:79:7a:22:9e:cf:8e:1e:e2:22:ed:1b:6a:e1: 0d:32:8a:4c:57:ac:7e:d9:be:4f:6c:2a:26:6e:6b: a8:48:f2:c0:df:8c:11:80:9f:38:e9:ed:ac:0d:33: 4d:98:d4:eb:e3:7a:e5:5c:c1:d7:14:c9:71:c7:2f: 9b:b3:37:7d:e1:45:8c:58:b5:eb:11:71:2a:b1:41: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3E:62:D3:1E:31:26:47:E6:4D:EE:9D:A3:3B:19:04:6D:D3:3D:4D X509v3 Authority Key Identifier: keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/qz5i0x4xJkfmTe6dozsZBG3TPU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.176.0/20 81.21.80.0/20 93.184.224.0/20 185.41.200.0/22 IPv6: 2a03:ba40::/32 Signature Algorithm: sha256WithRSAEncryption 3a:00:92:3e:67:c2:15:2e:bf:06:af:4f:21:f0:04:ed:65:9a: da:85:b0:44:f9:b6:48:07:fd:c4:f4:b5:ce:10:b3:b0:e8:dc: f1:c4:2f:05:4d:4d:f4:5a:c4:78:d8:d7:54:11:e9:49:c7:08: e6:ee:c1:ae:c8:30:5c:69:dd:4e:fe:99:4d:8c:a4:ee:7a:70: 80:fe:48:8c:89:9b:8c:09:5d:00:88:ae:ed:65:f5:c2:5f:2c: 7a:c1:f1:b9:42:75:a0:df:77:95:92:cb:9e:18:4a:74:6f:0a: 67:41:71:c7:63:4d:7f:bd:36:33:fb:09:69:09:f3:6f:9a:7e: 12:cc:2d:b4:40:ff:90:cd:5d:ed:c9:39:34:08:35:c2:bb:35: 20:21:a7:ad:16:8b:82:ac:0c:d3:68:35:a0:62:d5:7f:01:df: 88:72:5f:15:38:18:23:67:f7:33:bd:e9:39:f6:6d:87:b3:d2: 55:34:c5:46:17:0b:12:88:28:21:bf:9b:ab:33:83:06:65:4c: d5:24:00:1e:0e:bd:55:4a:10:99:4b:ae:99:64:47:40:01:02: 2c:4c:ee:96:7a:ce:59:40:86:3b:d6:c2:e4:eb:cd:52:60:67: 3a:32:b8:ce:46:57:1d:22:bf:31:9a:dc:1e:ec:f0:09:c4:f3: 60:b6:01:ca -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3xv8kcPui5OdmDcRvI+qTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGRkMmQwNmQ5MjBlNDAzOTMzZmRiMmNkMTk4NDg5MzU1 MjU3OWMwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjNlNjJkMzFlMzEyNjQ3ZTY0ZGVlOWRhMzNiMTkwNDZkZDMzZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPl94e6dKMLTpm093Cnk400R8Eux Eg62s2oXiiwJmzJ+sAkrnIkWR7UCpkub58hwfqK6ndDTevhBN0DGctxus6+it3IV azXZXLLoAaRO8etGBC33PBB8bngURV+gIc3UB+4AydUQ7t+rOuJFSMTAJGtjji/W fa8DO4k3qLG/wtbROo8MdrsxTGbhHeKkITRkwZ6qOPI15jnT9dkk1qzDI61ljwX7 q7sP2S4n+i1vE3QaiKNXJnl6Ip7Pjh7iIu0bauENMopMV6x+2b5PbCombmuoSPLA 34wRgJ846e2sDTNNmNTr43rlXMHXFMlxxy+bszd94UWMWLXrEXEqsUGKIwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKs+YtMeMSZH5k3unaM7GQRt0z1NMB8GA1UdIwQY MBaAFI1N0tBtkg5AOTP9ss0ZhIk1UlecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQt MzJmZjMxY2VlYzhiLzEvcXo1aTB4NHhKa2ZtVGU2ZG96c1pCRzNUUFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQtMzJmZjMxY2VlYzhi LzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQELuSwAwQE URVQAwQEXbjgAwQCuSnIMA0EAgACMAcDBQAqA7pAMA0GCSqGSIb3DQEBCwUAA4IB AQA6AJI+Z8IVLr8Gr08h8ATtZZrahbBE+bZIB/3E9LXOELOw6NzxxC8FTU30WsR4 2NdUEelJxwjm7sGuyDBcad1O/plNjKTuenCA/kiMiZuMCV0AiK7tZfXCXyx6wfG5 QnWg33eVksueGEp0bwpnQXHHY01/vTYz+wlpCfNvmn4SzC20QP+QzV3tyTk0CDXC uzUgIaetFouCrAzTaDWgYtV/Ad+Icl8VOBgjZ/czvek59m2Hs9JVNMVGFwsSiCgh v5urM4MGZUzVJAAeDr1VShCZS66ZZEdAAQIsTO6Wes5ZQIY71sLk681SYGc6MrjO RlcdIr8xmtwe7PAJxPNgtgHK -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:48 2026 by rpki-client