This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/QGU4wxB9l82WtX2GlBPNcSFE_oI.roa File: QGU4wxB9l82WtX2GlBPNcSFE_oI.roa (raw, json) Hash identifier: lXWG4OK0FlcLIlRlfiL6ejBSOQfloGthHWkReJ7gUs4= Subject key identifier: 40:65:38:C3:10:7D:97:CD:96:B5:7D:86:94:13:CD:71:21:44:FE:82 Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59 Certificate serial: 019B7DCB1AD8B6E7190F0210AF205574B360 Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/QGU4wxB9l82WtX2GlBPNcSFE_oI.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48324 IP address blocks: 37.17.224.0/21 maxlen: 21 88.82.224.0/19 maxlen: 19 89.44.8.0/24 maxlen: 24 185.10.70.0/24 maxlen: 24 185.30.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1a:d8:b6:e7:19:0f:02:10:af:20:55:74:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59 Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=406538c3107d97cd96b57d869413cd712144fe82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:e3:d8:65:41:ea:fa:0c:aa:df:b7:8e:9d: 73:e2:0e:41:5f:7b:38:4b:a9:46:14:c7:6c:66:ed: 87:71:09:1a:80:8f:f2:e7:fd:4b:18:8b:a6:90:81: b0:68:ed:a6:84:5d:a5:2a:53:c5:17:3f:fc:4d:76: 0a:6e:e4:fb:38:28:c0:69:49:a0:5a:43:94:96:5b: 64:69:22:0b:83:a4:e4:4f:11:81:1a:80:92:cc:a7: 20:11:01:a6:57:47:69:7c:53:fd:10:dd:d9:96:99: 6f:99:de:f9:c0:dc:87:85:6c:91:7c:fe:f4:40:2c: b7:ad:21:a7:3e:9a:e5:8f:47:c7:16:37:13:49:ba: 1e:cc:78:b7:17:cb:f1:01:8a:c6:0c:fd:f9:88:43: 86:a5:58:69:91:9e:26:8d:dc:94:32:60:24:4d:f4: ac:6a:5d:1c:46:9d:be:f9:c8:db:f2:0a:31:ac:a2: cf:ec:98:05:a1:83:75:23:0e:2c:5e:a2:ee:08:91: 3c:d3:7f:bf:aa:c9:b4:50:85:cf:11:7b:12:57:72: 82:00:81:0b:84:bd:e0:e0:3b:8d:5a:37:44:27:e2: 5a:aa:67:e3:43:17:19:ff:92:c2:8c:6b:6d:df:59: 01:48:7e:60:7e:83:a3:6c:48:5c:e9:5a:08:0b:a4: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:65:38:C3:10:7D:97:CD:96:B5:7D:86:94:13:CD:71:21:44:FE:82 X509v3 Authority Key Identifier: keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/QGU4wxB9l82WtX2GlBPNcSFE_oI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.17.224.0/21 88.82.224.0/19 89.44.8.0/24 185.10.70.0/24 185.30.32.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:de:5c:8c:e5:c6:f3:37:32:20:99:24:6a:25:a3:7c:e6:24: b8:c1:11:44:1d:b9:bf:ee:bc:c9:d5:8b:28:ad:49:27:b6:05: 5a:f9:4a:be:e7:5b:11:7f:7e:c9:bb:aa:eb:28:20:c9:bd:ab: 0b:a9:52:77:8e:25:ec:c4:1e:a0:00:82:fa:ab:5f:c5:09:a6: 32:3b:d9:e6:e0:e7:e6:3a:0f:c1:11:3c:bd:cc:61:cd:e1:43: f9:ec:87:9c:7c:e3:97:6c:6b:0f:f8:be:27:20:7c:1f:7d:f3: e3:64:5e:f2:c5:60:ef:d2:49:a5:5f:e6:6d:db:8e:dc:29:e8: 97:02:79:25:82:d5:e5:8f:76:36:b4:eb:f3:86:f4:dc:1c:00: 3f:d4:3e:2a:8c:7c:24:2b:8b:46:b2:66:11:fe:1c:e5:55:8f: f7:5d:a5:11:0a:a4:47:d2:74:29:93:ed:22:68:19:31:bb:db: 26:70:fd:43:9e:da:16:6b:fb:d2:02:46:40:34:85:59:2f:34: 3d:eb:31:0d:43:f8:e2:d0:cb:4a:13:61:d0:9c:fd:94:b7:32: 6e:f9:18:9f:d6:e5:77:9c:b4:cf:3c:ef:fe:1e:9f:7e:e9:f0: 50:64:01:bb:0a:32:83:95:6f:53:c3:39:48:96:86:7c:92:ad: 66:c5:50:e9 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9yxrYtucZDwIQryBVdLNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGZiMWRlYjA5ZTcyNDI1YjMwOWExNDE0OTE3ZGFmODkz YmVmNTkwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDY1MzhjMzEwN2Q5N2NkOTZiNTdkODY5NDEzY2Q3MTIxNDRmZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOHj2GVB6voMqt+3jp1z4g5BX3s4 S6lGFMdsZu2HcQkagI/y5/1LGIumkIGwaO2mhF2lKlPFFz/8TXYKbuT7OCjAaUmg WkOUlltkaSILg6TkTxGBGoCSzKcgEQGmV0dpfFP9EN3Zlplvmd75wNyHhWyRfP70 QCy3rSGnPprlj0fHFjcTSboezHi3F8vxAYrGDP35iEOGpVhpkZ4mjdyUMmAkTfSs al0cRp2++cjb8goxrKLP7JgFoYN1Iw4sXqLuCJE803+/qsm0UIXPEXsSV3KCAIEL hL3g4DuNWjdEJ+JaqmfjQxcZ/5LCjGtt31kBSH5gfoOjbEhc6VoIC6RKrwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEBlOMMQfZfNlrV9hpQTzXEhRP6CMB8GA1UdIwQY MBaAFAuPsd6wnnJCWzCaFBSRfa+JO+9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYzc2M2ItODNlNi00YmQxLWI5M2Et Zjg3ODVhNTgxMDZjLzEvUUdVNHd4QjlsODJXdFgyR2xCUE5jU0ZFX29JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mYzc2M2ItODNlNi00YmQxLWI5M2EtZjg3ODVhNTgxMDZj LzEvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDJRHgAwQF WFLgAwQAWSwIAwQAuQpGAwQCuR4gMA0GCSqGSIb3DQEBCwUAA4IBAQB+3lyM5cbz NzIgmSRqJaN85iS4wRFEHbm/7rzJ1YsorUkntgVa+Uq+51sRf37Ju6rrKCDJvasL qVJ3jiXsxB6gAIL6q1/FCaYyO9nm4OfmOg/BETy9zGHN4UP57IecfOOXbGsP+L4n IHwfffPjZF7yxWDv0kmlX+Zt247cKeiXAnklgtXlj3Y2tOvzhvTcHAA/1D4qjHwk K4tGsmYR/hzlVY/3XaURCqRH0nQpk+0iaBkxu9smcP1DntoWa/vSAkZANIVZLzQ9 6zENQ/ji0MtKE2HQnP2UtzJu+Rif1uV3nLTPPO/+Hp9+6fBQZAG7CjKDlW9TwzlI loZ8kq1mxVDp -----END CERTIFICATE-----Generated at Sun Jan 25 19:20:25 2026 by rpki-client