This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/QZYePRxM0mJaSAeUZyFdlg4Y3j8.roa File: QZYePRxM0mJaSAeUZyFdlg4Y3j8.roa (raw, json) Hash identifier: Wq16h2TiQPpMic9yFlGNnTcF/OWQfdzHJMLMT4XQ2ds= Subject key identifier: 41:96:1E:3D:1C:4C:D2:62:5A:48:07:94:67:21:5D:96:0E:18:DE:3F Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7 Certificate serial: 019B7C116D30D163FCAD58814EFBC39AB944 Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/QZYePRxM0mJaSAeUZyFdlg4Y3j8.roa Signing time: Fri 02 Jan 2026 00:17:55 +0000 ROA not before: Fri 02 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207308 IP address blocks: 194.38.224.0/19 maxlen: 19 194.38.224.0/20 maxlen: 20 194.38.240.0/20 maxlen: 20 2a06:d581:2000::/36 maxlen: 36 2a06:d581:2000::/37 maxlen: 37 2a06:d581:2800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:6d:30:d1:63:fc:ad:58:81:4e:fb:c3:9a:b9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7 Validity Not Before: Jan 2 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41961e3d1c4cd2625a48079467215d960e18de3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:de:48:b3:7e:27:3f:c3:d5:96:68:d2:1d: 7b:e7:6f:23:40:80:15:b3:4d:09:2d:1a:54:ec:90: 55:95:29:1d:a7:2d:ef:c3:5c:45:43:5d:70:07:6c: 4b:5e:ff:df:73:66:79:19:21:08:1a:1b:9f:bc:94: 6d:bf:c2:5f:e6:f5:cf:d0:85:66:07:76:98:c0:83: 08:32:e8:f3:95:00:c3:b4:39:b2:56:15:ad:f6:2b: ed:6a:29:8b:ba:26:fb:f8:1d:7f:7e:4d:57:b3:e1: 9d:5e:36:65:4c:43:55:c1:25:5f:94:2a:e1:90:50: 28:11:0b:8b:af:a3:95:ee:23:dc:df:85:34:8e:44: a1:21:d8:61:67:0a:72:c1:75:40:51:aa:4b:39:fa: 0d:9d:1e:c9:00:9c:dd:3e:71:32:1b:48:6a:03:69: 4d:e3:da:4f:b0:51:73:fa:46:dd:f9:dc:45:3d:8d: 27:35:cb:b2:1f:21:82:cd:0a:fa:e6:5c:58:d3:4c: cb:76:86:7a:c5:be:e3:5c:90:9a:8d:39:5c:db:b6: fc:e8:64:94:38:62:5b:13:f0:95:95:c2:37:e2:50: 59:b8:6c:6d:b0:9f:5b:87:71:82:25:91:dd:1a:bb: ff:bc:e7:09:08:c9:fd:00:69:90:14:58:99:a0:c8: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:96:1E:3D:1C:4C:D2:62:5A:48:07:94:67:21:5D:96:0E:18:DE:3F X509v3 Authority Key Identifier: keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/QZYePRxM0mJaSAeUZyFdlg4Y3j8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.224.0/19 IPv6: 2a06:d581:2000::/36 Signature Algorithm: sha256WithRSAEncryption 0f:d4:90:59:8a:e3:0a:ae:5e:60:5a:38:50:5c:84:2a:16:5b: 32:db:bc:9d:aa:ea:6e:bf:da:cf:d1:00:c7:18:ff:5e:d2:70: 4b:00:9f:a4:68:81:25:67:4b:6f:9c:c7:04:92:49:40:fb:9a: 88:4d:44:33:a8:6b:3d:98:de:85:a0:0a:9d:73:42:65:54:8c: 94:ba:f7:27:3f:43:47:fa:8a:85:a3:83:6a:e5:60:50:ec:de: c7:a3:15:78:a8:58:55:41:82:e1:fb:6d:f2:a4:48:7f:c7:1d: b7:74:ee:e7:fa:be:9c:a3:f8:de:03:eb:6d:9f:08:8d:75:1c: 9b:c7:d1:7d:2b:4d:4f:cd:3a:62:73:b5:40:47:2b:f3:d1:da: d6:bc:04:f8:db:cc:e5:1d:6d:a9:ad:bc:ec:70:14:95:8a:f5: e9:82:5d:fd:31:1a:44:d8:3e:55:6e:d0:de:fb:25:6b:09:db: fb:11:3a:11:ca:37:fa:71:c8:c8:a9:f3:01:54:9f:1b:59:97: d5:bc:28:2f:bf:8f:4b:6b:8f:ed:36:ab:22:52:07:99:1d:52: 4f:99:ec:70:ad:6b:c8:ba:37:fa:e1:3a:d6:23:81:d2:6e:67: 1e:f8:cc:82:25:64:e2:d1:88:06:77:3e:c4:e2:98:16:ca:14: 7e:18:30:3c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt8EW0w0WP8rViBTvvDmrlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTdlZDA4YjhlOWU4ZWVmNWY4M2UzY2NiMjY3NDVmOGIz ODg1ZTcwHhcNMjYwMTAyMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTk2MWUzZDFjNGNkMjYyNWE0ODA3OTQ2NzIxNWQ5NjBlMThkZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMLeSLN+Jz/D1ZZo0h17528jQIAV s00JLRpU7JBVlSkdpy3vw1xFQ11wB2xLXv/fc2Z5GSEIGhufvJRtv8Jf5vXP0IVm B3aYwIMIMujzlQDDtDmyVhWt9ivtaimLuib7+B1/fk1Xs+GdXjZlTENVwSVflCrh kFAoEQuLr6OV7iPc34U0jkShIdhhZwpywXVAUapLOfoNnR7JAJzdPnEyG0hqA2lN 49pPsFFz+kbd+dxFPY0nNcuyHyGCzQr65lxY00zLdoZ6xb7jXJCajTlc27b86GSU OGJbE/CVlcI34lBZuGxtsJ9bh3GCJZHdGrv/vOcJCMn9AGmQFFiZoMjtiQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFEGWHj0cTNJiWkgHlGchXZYOGN4/MB8GA1UdIwQY MBaAFLqn7Qi46eju9fg+PMsmdF+LOIXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjct OGE5NmYwM2JjNjE3LzEvUVpZZVBSeE0wbUphU0FlVVp5RmRsZzRZM2o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjctOGE5NmYwM2JjNjE3 LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQFwibgMA4E AgACMAgDBgQqBtWBIDANBgkqhkiG9w0BAQsFAAOCAQEAD9SQWYrjCq5eYFo4UFyE KhZbMtu8narqbr/az9EAxxj/XtJwSwCfpGiBJWdLb5zHBJJJQPuaiE1EM6hrPZje haAKnXNCZVSMlLr3Jz9DR/qKhaODauVgUOzex6MVeKhYVUGC4ftt8qRIf8cdt3Tu 5/q+nKP43gPrbZ8IjXUcm8fRfStNT806YnO1QEcr89Ha1rwE+NvM5R1tqa287HAU lYr16YJd/TEaRNg+VW7Q3vslawnb+xE6Eco3+nHIyKnzAVSfG1mX1bwoL7+PS2uP 7TarIlIHmR1ST5nscK1ryLo3+uE61iOB0m5nHvjMgiVk4tGIBnc+xOKYFsoUfhgw PA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:41 2026 by rpki-client