This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/Qh3-2TMMaClcKooNJ3fndADjiYo.roa File: Qh3-2TMMaClcKooNJ3fndADjiYo.roa (raw, json) Hash identifier: OrsiroKPXNo2SdBOxZVVTepz1ZwF+w/R3aYOwgk/QnU= Subject key identifier: 42:1D:FE:D9:33:0C:68:29:5C:2A:8A:0D:27:77:E7:74:00:E3:89:8A Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1 Certificate serial: 019B7EA72EC16DB332A89366C4E06895F8CE Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/Qh3-2TMMaClcKooNJ3fndADjiYo.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39392 IP address blocks: 37.235.96.0/20 maxlen: 20 46.234.96.0/19 maxlen: 19 46.234.121.0/24 maxlen: 24 88.86.96.0/19 maxlen: 19 95.168.192.0/19 maxlen: 19 95.168.223.0/24 maxlen: 24 2a01:28::/32 maxlen: 32 2a01:28:eeee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2e:c1:6d:b3:32:a8:93:66:c4:e0:68:95:f8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1 Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=421dfed9330c68295c2a8a0d2777e77400e3898a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:c1:e9:b8:9e:70:0d:fe:15:c5:9c:7f:ed: e3:f3:76:56:47:a5:b6:14:33:e7:84:ef:5d:a5:ce: 54:1f:da:cd:f9:c2:73:85:3d:80:88:26:92:e3:7f: a5:5f:a4:f2:f2:3a:d0:ac:2d:ec:da:9f:a8:32:c7: 88:08:96:2d:a7:ff:91:3f:50:aa:8b:f0:88:f3:1c: 45:b6:3a:fb:80:8b:63:22:0d:6a:66:77:e7:b0:4c: 67:02:cf:15:b4:0d:54:a1:69:8d:07:53:62:29:4f: 99:2e:bd:fc:22:24:cc:59:e8:60:e8:da:5e:65:dd: 9f:5e:db:46:7e:c5:84:97:6e:80:d1:b1:2d:8e:70: 2a:4f:a2:4b:21:3a:cf:66:c4:27:6e:48:87:29:57: 78:64:c5:0c:36:25:4f:89:ae:be:b5:70:43:1c:15: 0e:39:5f:f3:27:a6:8d:e0:e4:f3:3c:36:a9:ea:61: 05:2b:12:e5:18:df:97:82:b7:e4:a2:1c:6e:6e:85: 59:1f:2a:8a:24:f9:f5:0f:7c:cd:e8:dc:a3:b1:e5: 94:e2:40:2b:49:6f:7b:86:f7:3e:18:d3:af:ba:aa: 12:49:4d:bf:f4:0c:89:fe:0a:3b:27:c9:d1:b8:ec: 75:14:0c:3d:71:93:6f:5a:c3:ce:0b:44:f8:ed:7e: d9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1D:FE:D9:33:0C:68:29:5C:2A:8A:0D:27:77:E7:74:00:E3:89:8A X509v3 Authority Key Identifier: keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/Qh3-2TMMaClcKooNJ3fndADjiYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.235.96.0/20 46.234.96.0/19 88.86.96.0/19 95.168.192.0/19 IPv6: 2a01:28::/32 Signature Algorithm: sha256WithRSAEncryption 67:ce:67:a6:b8:64:76:55:e3:ba:03:72:c6:2f:23:b6:78:f3: f0:8e:8f:e2:b7:67:7d:b5:9e:bc:92:cd:95:8a:de:37:a3:e2: 95:03:8a:c0:f6:2f:14:62:e9:4f:2d:78:bf:b1:90:28:ee:f8: 03:9c:a3:f9:be:88:df:5c:3b:01:4a:49:60:c1:98:0c:e2:18: ca:f4:fc:6e:6c:83:e3:d7:f7:3c:ee:ae:83:96:5f:96:96:b6: 58:60:65:ff:c1:64:0e:d9:f2:01:b2:f4:da:a9:4a:70:46:a9: 31:0e:b7:c5:9c:a0:c1:b7:15:3b:2f:b1:94:05:88:14:88:6f: 4f:81:6c:2c:ee:f8:f9:8d:16:31:4c:f4:9d:06:3b:2f:88:1d: e2:3f:38:ae:2d:77:52:be:de:a8:df:82:f6:96:b9:6b:e4:7d: cd:e7:66:ae:02:d5:05:d4:f6:0c:21:3c:e1:ba:75:b3:82:47: e8:0b:6b:a4:35:b3:cf:7f:01:56:9a:fb:7d:31:2b:13:2c:c2: f0:70:c7:6c:12:e6:f3:8a:42:21:67:dc:58:5c:8e:19:cc:51: 93:91:65:58:18:8d:e2:55:13:3b:78:b2:7f:83:bf:1d:36:3b: 0b:64:7e:ad:c7:34:6a:1e:19:0f:53:58:5a:59:7b:af:6b:0c: 38:5e:df:33 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+py7BbbMyqJNmxOBolfjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTRmNGE5YjZiN2ZkODJkZDZmMmZkYmYzOTNhYmVhZGQz NDdmZDEwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjFkZmVkOTMzMGM2ODI5NWMyYThhMGQyNzc3ZTc3NDAwZTM4OThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyfB6biecA3+FcWcf+3j83ZWR6W2 FDPnhO9dpc5UH9rN+cJzhT2AiCaS43+lX6Ty8jrQrC3s2p+oMseICJYtp/+RP1Cq i/CI8xxFtjr7gItjIg1qZnfnsExnAs8VtA1UoWmNB1NiKU+ZLr38IiTMWehg6Npe Zd2fXttGfsWEl26A0bEtjnAqT6JLITrPZsQnbkiHKVd4ZMUMNiVPia6+tXBDHBUO OV/zJ6aN4OTzPDap6mEFKxLlGN+XgrfkohxuboVZHyqKJPn1D3zN6NyjseWU4kAr SW97hvc+GNOvuqoSSU2/9AyJ/go7J8nRuOx1FAw9cZNvWsPOC0T47X7ZHwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFEId/tkzDGgpXCqKDSd353QA44mKMB8GA1UdIwQY MBaAFAWU9Km2t/2C3W8v2/OTq+rdNH/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEt YjZjYzRkNTcxMTdlLzEvUWgzLTJUTU1hQ2xjS29vTkozZm5kQURqaVlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEtYjZjYzRkNTcxMTdl LzEvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJetgAwQF LupgAwQFWFZgAwQFX6jAMA0EAgACMAcDBQAqAQAoMA0GCSqGSIb3DQEBCwUAA4IB AQBnzmemuGR2VeO6A3LGLyO2ePPwjo/it2d9tZ68ks2Vit43o+KVA4rA9i8UYulP LXi/sZAo7vgDnKP5vojfXDsBSklgwZgM4hjK9PxubIPj1/c87q6Dll+WlrZYYGX/ wWQO2fIBsvTaqUpwRqkxDrfFnKDBtxU7L7GUBYgUiG9PgWws7vj5jRYxTPSdBjsv iB3iPziuLXdSvt6o34L2lrlr5H3N52auAtUF1PYMITzhunWzgkfoC2ukNbPPfwFW mvt9MSsTLMLwcMdsEubzikIhZ9xYXI4ZzFGTkWVYGI3iVRM7eLJ/g78dNjsLZH6t xzRqHhkPU1haWXuvaww4Xt8z -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:35 2026 by rpki-client