This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/QZX4N0nFVU70Vj9ggeWrbayajWQ.roa File: QZX4N0nFVU70Vj9ggeWrbayajWQ.roa (raw, json) Hash identifier: fTLW/j3hk4V2QwQlXrG/uL9IIw5WAjCaWcGJ+gp3yXU= Subject key identifier: 41:95:F8:37:49:C5:55:4E:F4:56:3F:60:81:E5:AB:6D:AC:9A:8D:64 Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Certificate serial: 019B7C80D6F24B497E2A49EE6015D23F82D4 Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/QZX4N0nFVU70Vj9ggeWrbayajWQ.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25090 IP address blocks: 193.8.222.0/23 maxlen: 23 194.56.96.0/23 maxlen: 24 194.56.98.0/23 maxlen: 24 194.56.112.0/22 maxlen: 24 194.56.112.0/23 maxlen: 23 194.56.116.0/22 maxlen: 23 194.56.116.0/23 maxlen: 23 194.56.118.0/23 maxlen: 23 194.56.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d6:f2:4b:49:7e:2a:49:ee:60:15:d2:3f:82:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4195f83749c5554ef4563f6081e5ab6dac9a8d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:d8:57:35:1c:ac:81:65:2a:ee:60:35:66: a8:fd:13:6a:b0:fa:33:ef:59:55:ba:c3:02:1c:f5: c8:33:30:f7:10:c2:cc:f2:03:46:df:d5:4f:3d:d9: 32:09:89:1c:b2:70:f9:d1:24:e6:5f:79:9c:ca:cc: df:95:e0:f4:74:41:7e:be:4e:4a:f9:9c:53:96:c4: 55:9f:83:f7:e5:f4:74:8f:de:eb:bc:62:7f:b4:64: 78:e1:1f:14:12:47:8c:0c:8d:72:2f:4c:78:63:d4: b8:6c:87:04:f6:21:10:a1:07:f1:95:14:31:ea:5b: db:a3:87:72:79:3c:7e:34:b2:bc:04:ba:03:d8:94: 7e:71:84:e9:9d:72:25:38:22:95:52:e8:10:c2:86: a7:71:11:1a:b3:e1:80:fe:2f:06:f1:79:da:d4:aa: 07:0e:61:68:49:26:6d:98:d9:ba:d6:6f:52:11:23: 1a:43:ef:09:88:ca:c6:df:95:39:e0:ea:1c:87:3e: 64:fc:09:fb:4c:47:70:43:57:19:f7:ce:91:41:f4: 5e:13:7c:8d:c8:65:54:56:5b:46:ac:15:a3:eb:39: 89:b4:ba:a4:b0:80:f8:e1:3a:8d:4e:30:71:cc:b5: f9:50:be:f8:b7:c7:ed:af:79:42:06:7f:a8:1f:b0: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:95:F8:37:49:C5:55:4E:F4:56:3F:60:81:E5:AB:6D:AC:9A:8D:64 X509v3 Authority Key Identifier: keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/QZX4N0nFVU70Vj9ggeWrbayajWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.222.0/23 194.56.96.0/22 194.56.112.0-194.56.123.255 Signature Algorithm: sha256WithRSAEncryption 87:d2:bd:59:90:4a:9d:93:8f:35:68:ca:4c:4f:57:51:d1:cb: ed:ed:d6:34:49:7d:29:30:7f:11:73:46:50:11:e7:e9:7a:fc: 8f:02:4a:bb:56:0f:f5:72:c6:b6:27:8f:d5:f5:ab:65:40:41: 2d:11:c9:d7:c1:46:93:6d:bc:c5:b6:80:b6:82:ac:81:fd:67: c7:96:53:29:55:1d:28:85:f9:cc:56:1e:82:e0:4b:0b:c8:6f: b0:1b:ec:67:f9:e8:04:8c:11:69:cf:38:6d:cf:24:1a:e5:ad: 78:82:f8:44:4c:9d:d5:fa:55:29:31:5d:3f:48:34:b2:56:53: ec:cc:96:58:dd:d0:9c:10:ce:5e:82:46:ed:0a:90:b7:b8:b3: 05:e1:26:5d:14:4b:41:6b:8f:24:e8:8a:3b:42:5d:3e:6c:36: 70:aa:20:79:28:6c:a5:84:ce:dd:84:d4:ef:30:bd:4b:1d:db: 79:cd:41:ec:51:e3:38:e7:9c:1d:a7:8c:27:23:fe:fe:78:d8: 64:e4:7f:e4:a7:54:dd:8d:5c:3a:56:7e:07:aa:27:88:20:49: ec:14:3d:28:72:ae:d7:4d:13:cc:21:89:26:23:d9:d0:fe:72: b0:74:88:08:4a:84:4e:95:2a:01:1b:82:ed:83:ce:77:af:b1: 13:37:b6:3f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8gNbyS0l+KknuYBXSP4LUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx NTkzZWYwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTk1ZjgzNzQ5YzU1NTRlZjQ1NjNmNjA4MWU1YWI2ZGFjOWE4ZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM7YVzUcrIFlKu5gNWao/RNqsPoz 71lVusMCHPXIMzD3EMLM8gNG39VPPdkyCYkcsnD50STmX3mcyszfleD0dEF+vk5K +ZxTlsRVn4P35fR0j97rvGJ/tGR44R8UEkeMDI1yL0x4Y9S4bIcE9iEQoQfxlRQx 6lvbo4dyeTx+NLK8BLoD2JR+cYTpnXIlOCKVUugQwoancREas+GA/i8G8Xna1KoH DmFoSSZtmNm61m9SESMaQ+8JiMrG35U54Oochz5k/An7TEdwQ1cZ986RQfReE3yN yGVUVltGrBWj6zmJtLqksID44TqNTjBxzLX5UL74t8ftr3lCBn+oH7BJswIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFEGV+DdJxVVO9FY/YIHlq22smo1kMB8GA1UdIwQY MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt YjEwYTgzMmJjYTQzLzEvUVpYNE4wbkZWVTcwVmo5Z2dlV3JiYXlhaldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBwQjeAwQC wjhgMAwDBATCOHADBALCOHgwDQYJKoZIhvcNAQELBQADggEBAIfSvVmQSp2TjzVo ykxPV1HRy+3t1jRJfSkwfxFzRlAR5+l6/I8CSrtWD/VyxrYnj9X1q2VAQS0RydfB RpNtvMW2gLaCrIH9Z8eWUylVHSiF+cxWHoLgSwvIb7Ab7Gf56ASMEWnPOG3PJBrl rXiC+ERMndX6VSkxXT9INLJWU+zMlljd0JwQzl6CRu0KkLe4swXhJl0US0FrjyTo ijtCXT5sNnCqIHkobKWEzt2E1O8wvUsd23nNQexR4zjnnB2njCcj/v542GTkf+Sn VN2NXDpWfgeqJ4ggSewUPShyrtdNE8whiSYj2dD+crB0iAhKhE6VKgEbgu2Dznev sRM3tj8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:07 2026 by rpki-client