This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ZQTannFkP-5BtCoC4rNxb39_GzA.roa File: ZQTannFkP-5BtCoC4rNxb39_GzA.roa (raw, json) Hash identifier: Z6dIqYa/UJxEz+NE+WkwcGKpccSTgGMnXVhg0miiBfU= Subject key identifier: 65:04:DA:9E:71:64:3F:EE:41:B4:2A:02:E2:B3:71:6F:7F:7F:1B:30 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80060840084F2C1278569C074A594A Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ZQTannFkP-5BtCoC4rNxb39_GzA.roa Signing time: Fri 02 Jan 2026 02:18:43 +0000 ROA not before: Fri 02 Jan 2026 02:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8376 IP address blocks: 80.10.8.0/21 maxlen: 24 80.10.16.0/20 maxlen: 24 80.10.32.0/21 maxlen: 24 80.10.48.0/20 maxlen: 24 80.10.64.0/20 maxlen: 24 80.10.144.0/21 maxlen: 24 80.10.168.0/21 maxlen: 24 81.52.144.0/21 maxlen: 24 81.52.152.0/21 maxlen: 24 81.52.224.0/21 maxlen: 24 81.253.96.0/21 maxlen: 24 81.253.104.0/21 maxlen: 24 81.253.112.0/21 maxlen: 24 81.253.240.0/20 maxlen: 24 90.84.64.0/21 maxlen: 24 90.84.72.0/21 maxlen: 24 90.84.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:06:08:40:08:4f:2c:12:78:56:9c:07:4a:59:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6504da9e71643fee41b42a02e2b3716f7f7f1b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:35:54:47:7a:97:cd:6f:7b:a1:79:0d:77:27: 09:dc:2a:85:d0:62:a2:6d:a9:c6:78:75:67:2d:e7: f8:75:e1:c6:4d:9a:06:b2:9a:fb:e5:18:d7:da:cb: 0e:1c:5a:10:64:6f:f8:66:b0:d1:f0:6c:ad:a6:35: 61:53:2b:21:62:c0:ec:cd:07:a2:1a:9d:dd:4f:88: cb:c8:d6:6a:ba:00:5d:76:a4:12:d1:f6:2c:8c:11: f3:92:59:b6:38:09:fc:df:27:40:2f:ac:17:b8:95: 0b:a0:86:1f:22:e9:9a:3c:bf:43:12:3e:3d:6e:db: 98:68:f0:f2:69:d2:7b:7e:48:71:b5:23:af:8f:89: 44:14:27:13:ef:31:a4:f9:53:a6:2d:a3:44:36:3d: d8:9c:c7:1d:b6:60:45:a9:c6:e0:b2:ea:50:ef:d0: 39:19:8e:f4:a8:61:56:df:2a:52:54:71:6a:68:02: 98:23:93:5d:e6:fd:22:a7:94:4b:1a:16:18:5b:66: 5b:f9:b3:0d:80:46:8f:f9:d8:bb:86:8c:55:f5:8c: 7a:e8:10:bc:28:05:db:8b:05:e5:a1:59:37:48:f0: 9a:e8:92:e6:f5:5e:4f:0b:91:3b:93:4d:85:82:a6: 6b:15:d7:2e:d7:f0:fe:7d:c7:92:19:67:d6:4e:86: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:04:DA:9E:71:64:3F:EE:41:B4:2A:02:E2:B3:71:6F:7F:7F:1B:30 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ZQTannFkP-5BtCoC4rNxb39_GzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.10.8.0-80.10.39.255 80.10.48.0-80.10.79.255 80.10.144.0/21 80.10.168.0/21 81.52.144.0/20 81.52.224.0/21 81.253.96.0-81.253.119.255 81.253.240.0/20 90.84.64.0/19 Signature Algorithm: sha256WithRSAEncryption 03:d3:4d:f3:66:96:c9:25:b1:80:0a:aa:b5:1d:4e:6b:ec:c1: 5d:06:55:44:fb:8b:94:87:55:cb:ef:35:d5:72:1a:79:10:5a: e8:91:73:a6:02:d2:45:a8:51:2d:bb:24:f5:98:a4:23:f5:53: 8c:1a:cc:df:a1:d2:78:6d:1f:58:67:3e:60:8c:41:7e:5a:7b: 39:7b:7f:4e:63:28:64:9c:2a:90:69:21:1f:d9:9b:39:ba:a6: 7b:20:ed:5e:66:d9:98:bd:a6:09:53:d4:b8:7b:2a:bb:64:41: b4:ed:62:47:f3:b7:29:ff:60:09:29:1e:79:00:13:9d:c3:d7: dc:36:c9:eb:eb:13:b1:f5:90:7d:26:b5:7d:a1:b8:05:e7:c3: 88:69:44:54:9a:52:28:fb:d9:2a:9c:b5:91:0e:16:48:4e:0b: b9:19:54:f6:8f:17:1e:7f:e0:03:93:64:a9:41:54:e8:e8:25: 6f:aa:4e:f9:50:50:62:17:a9:22:e1:20:cc:6e:34:25:2a:f5: c2:62:b3:4e:9f:f2:5a:60:cf:ac:fb:59:fc:7b:f8:e8:b8:43: f0:f0:22:b0:8b:87:8f:ce:74:b3:53:0d:c6:96:2f:2b:ff:df: 2d:f1:6d:d3:4e:5c:a6:a5:81:fa:8d:3c:e8:0a:13:93:f5:1b: 50:4b:7d:bd -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt8gAYIQAhPLBJ4VpwHSllKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTA0ZGE5ZTcxNjQzZmVlNDFiNDJhMDJlMmIzNzE2ZjdmN2YxYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DVUR3qXzW97oXkNdycJ3CqF0GKi banGeHVnLef4deHGTZoGspr75RjX2ssOHFoQZG/4ZrDR8GytpjVhUyshYsDszQei Gp3dT4jLyNZqugBddqQS0fYsjBHzklm2OAn83ydAL6wXuJULoIYfIumaPL9DEj49 btuYaPDyadJ7fkhxtSOvj4lEFCcT7zGk+VOmLaNENj3YnMcdtmBFqcbgsupQ79A5 GY70qGFW3ypSVHFqaAKYI5Nd5v0ip5RLGhYYW2Zb+bMNgEaP+di7hoxV9Yx66BC8 KAXbiwXloVk3SPCa6JLm9V5PC5E7k02FgqZrFdcu1/D+fceSGWfWToYRTwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFGUE2p5xZD/uQbQqAuKzcW9/fxswMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvWlFUYW5uRmtQLTVCdENvQzRyTnhiMzlfR3pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOMAwDBANQCggD BANQCiAwDAMEBFAKMAMEBFAKQAMEA1AKkAMEA1AKqAMEBFE0kAMEA1E04DAMAwQF Uf1gAwQDUf1wAwQEUf3wAwQFWlRAMA0GCSqGSIb3DQEBCwUAA4IBAQAD003zZpbJ JbGACqq1HU5r7MFdBlVE+4uUh1XL7zXVchp5EFrokXOmAtJFqFEtuyT1mKQj9VOM GszfodJ4bR9YZz5gjEF+Wns5e39OYyhknCqQaSEf2Zs5uqZ7IO1eZtmYvaYJU9S4 eyq7ZEG07WJH87cp/2AJKR55ABOdw9fcNsnr6xOx9ZB9JrV9obgF58OIaURUmlIo +9kqnLWRDhZITgu5GVT2jxcef+ADk2SpQVTo6CVvqk75UFBiF6ki4SDMbjQlKvXC YrNOn/JaYM+s+1n8e/jouEPw8CKwi4ePznSzUw3Gli8r/98t8W3TTlympYH6jTzo ChOT9RtQS329 -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:22 2026 by rpki-client