This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa File: QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa (raw, json) Hash identifier: urP1bJFXb+aibHUz3y+1eQjAxhXGlX3kRZlCoVkKq8U= Subject key identifier: 41:93:80:E0:2C:3F:C0:96:C5:AA:7D:13:63:3B:CE:ED:E0:26:96:50 Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B7DCB266C1644C2592852C6D5859F0CB2 Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24785 IP address blocks: 213.207.0.0/24 maxlen: 24 213.207.3.0/24 maxlen: 24 213.207.4.0/24 maxlen: 24 213.207.7.0/24 maxlen: 24 213.207.8.0/24 maxlen: 24 213.207.9.0/24 maxlen: 24 213.207.11.0/24 maxlen: 24 213.207.12.0/24 maxlen: 24 213.207.15.0/24 maxlen: 24 213.207.16.0/24 maxlen: 24 213.207.17.0/24 maxlen: 24 213.207.18.0/24 maxlen: 24 213.207.19.0/24 maxlen: 24 217.170.0.0/19 maxlen: 19 217.170.0.0/24 maxlen: 24 217.170.9.0/24 maxlen: 24 217.170.10.0/24 maxlen: 24 217.170.11.0/24 maxlen: 24 217.170.18.0/24 maxlen: 24 217.170.19.0/24 maxlen: 24 217.170.20.0/24 maxlen: 24 217.170.22.0/24 maxlen: 24 217.170.23.0/24 maxlen: 24 2a02:10::/29 maxlen: 29 2a02:10:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:26:6c:16:44:c2:59:28:52:c6:d5:85:9f:0c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=419380e02c3fc096c5aa7d13633bceede0269650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:fe:52:b4:ca:f5:f9:7b:11:de:e8:4f:0a: 68:0a:bb:b6:b7:9a:1c:2c:29:1b:3f:11:d3:3e:4e: 35:8e:60:72:ee:f2:92:4d:87:7a:08:46:b5:97:ef: c1:1f:e0:01:e1:42:0b:1d:40:30:be:0a:c6:e5:8e: 41:a6:71:50:a5:2e:f5:7d:45:6b:60:d4:d7:1c:c0: 1a:9f:3f:29:17:e4:2b:df:09:32:e1:fb:41:ed:a2: c2:71:a5:ef:c2:07:49:ff:83:37:eb:89:53:5e:b9: a5:af:d7:74:c4:ef:26:cb:4e:f8:e4:d2:ae:31:20: 9f:e5:ff:7f:c5:cc:a6:56:63:79:da:95:52:e0:6b: 37:6e:3f:4e:63:75:ac:32:7d:d6:97:87:47:1a:2a: f4:64:83:35:a9:95:5f:ab:78:f2:59:56:37:1c:cf: b7:4b:9a:70:3a:08:fb:5b:4f:7d:eb:91:c9:19:b7: 71:45:2c:f6:c8:dd:2a:4d:f7:f8:9e:f2:ee:83:5d: 3e:41:58:0c:a0:c2:af:50:03:16:ff:aa:de:37:e1: 08:f9:56:10:0f:17:41:f1:cb:18:5b:80:c9:3c:10: 2e:eb:32:15:c9:f8:6b:34:ea:b8:47:ee:db:48:91: 52:ee:5e:6e:a2:2d:ba:88:10:77:3a:5b:fc:a8:5f: 6a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:93:80:E0:2C:3F:C0:96:C5:AA:7D:13:63:3B:CE:ED:E0:26:96:50 X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.207.0.0/24 213.207.3.0-213.207.4.255 213.207.7.0-213.207.9.255 213.207.11.0-213.207.12.255 213.207.15.0-213.207.19.255 217.170.0.0/19 IPv6: 2a02:10::/29 Signature Algorithm: sha256WithRSAEncryption 1d:e8:b9:93:f5:7c:bd:16:bb:ad:82:3b:e0:f0:a6:ab:be:5b: 0f:1d:05:dd:c7:7e:b8:8f:05:67:bc:86:33:55:09:10:10:e9: 02:81:9a:c3:31:51:95:d6:96:0e:7b:ad:93:ac:bd:04:ad:07: 0d:ff:01:b2:85:ac:ed:21:17:54:6d:a9:7a:d1:54:0b:b8:af: e9:3a:74:09:8c:7c:c6:6f:87:0a:b7:b2:f3:bd:c7:42:4a:87: 15:a6:25:8e:e3:5d:e2:02:19:2d:d9:8e:90:ff:94:01:3d:5c: 55:c9:05:fc:eb:f8:8d:b0:1d:67:9a:df:db:1b:a2:e9:bb:bb: f3:47:24:76:7d:d5:6d:39:46:9f:6e:97:59:3c:ad:aa:75:36: b3:fa:fd:bc:8f:80:c5:76:40:b8:4e:5e:f9:a3:11:7d:f4:b2: de:e0:f6:7b:c5:21:38:97:85:ab:7c:71:d2:2a:93:25:a6:a0: 20:58:1a:47:aa:2f:23:95:90:74:eb:d2:a6:34:f5:ae:e5:91: f0:5f:08:2d:9e:88:ff:7f:60:e2:59:22:b8:b9:b2:db:6a:39: 89:7f:78:17:c1:da:d6:38:92:f9:52:17:32:50:2f:17:c2:53: 5f:28:70:19:16:47:2b:46:90:22:19:9d:6a:62:35:04:cf:48: 99:86:e0:47 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt9yyZsFkTCWShSxtWFnwyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTkzODBlMDJjM2ZjMDk2YzVhYTdkMTM2MzNiY2VlZGUwMjY5NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrP+UrTK9fl7Ed7oTwpoCru2t5oc LCkbPxHTPk41jmBy7vKSTYd6CEa1l+/BH+AB4UILHUAwvgrG5Y5BpnFQpS71fUVr YNTXHMAanz8pF+Qr3wky4ftB7aLCcaXvwgdJ/4M364lTXrmlr9d0xO8my0745NKu MSCf5f9/xcymVmN52pVS4Gs3bj9OY3WsMn3Wl4dHGir0ZIM1qZVfq3jyWVY3HM+3 S5pwOgj7W09965HJGbdxRSz2yN0qTff4nvLug10+QVgMoMKvUAMW/6reN+EI+VYQ DxdB8csYW4DJPBAu6zIVyfhrNOq4R+7bSJFS7l5uoi26iBB3Olv8qF9qZQIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFEGTgOAsP8CWxap9E2M7zu3gJpZQMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvUVpPQTRDd193SmJGcW4wVFl6dk83ZUFtbGxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQA1c8AMAwD BADVzwMDBADVzwQwDAMEANXPBwMEAdXPCDAMAwQA1c8LAwQA1c8MMAwDBADVzw8D BALVzxADBAXZqgAwDQQCAAIwBwMFAyoCABAwDQYJKoZIhvcNAQELBQADggEBAB3o uZP1fL0Wu62CO+Dwpqu+Ww8dBd3HfriPBWe8hjNVCRAQ6QKBmsMxUZXWlg57rZOs vQStBw3/AbKFrO0hF1RtqXrRVAu4r+k6dAmMfMZvhwq3svO9x0JKhxWmJY7jXeIC GS3ZjpD/lAE9XFXJBfzr+I2wHWea39sboum7u/NHJHZ91W05Rp9ul1k8rap1NrP6 /byPgMV2QLhOXvmjEX30st7g9nvFITiXhat8cdIqkyWmoCBYGkeqLyOVkHTr0qY0 9a7lkfBfCC2eiP9/YOJZIri5sttqOYl/eBfB2tY4kvlSFzJQLxfCU18ocBkWRytG kCIZnWpiNQTPSJmG4Ec= -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:50 2026 by rpki-client