This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/Qt2hQ4RevVaZm2AH4M4cjkjQkRg.roa File: Qt2hQ4RevVaZm2AH4M4cjkjQkRg.roa (raw, json) Hash identifier: 8xydBfba/M/Ub2ObXv2KeRHR1VzUxMr8P/a+WAzcdIQ= Subject key identifier: 42:DD:A1:43:84:5E:BD:56:99:9B:60:07:E0:CE:1C:8E:48:D0:91:18 Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14 Certificate serial: 019B7C7F25FC76DD92F6C9D7CEF442018FC6 Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/Qt2hQ4RevVaZm2AH4M4cjkjQkRg.roa Signing time: Fri 02 Jan 2026 02:17:46 +0000 ROA not before: Fri 02 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 46.194.0.0/15 maxlen: 15 62.13.0.0/17 maxlen: 17 62.65.64.0/18 maxlen: 18 62.119.0.0/16 maxlen: 16 62.127.0.0/16 maxlen: 16 78.82.0.0/16 maxlen: 16 79.102.0.0/16 maxlen: 16 80.68.96.0/20 maxlen: 20 81.26.224.0/19 maxlen: 19 82.182.0.0/15 maxlen: 15 83.226.0.0/15 maxlen: 15 84.216.0.0/14 maxlen: 14 85.224.0.0/13 maxlen: 13 92.32.0.0/14 maxlen: 14 94.234.0.0/16 maxlen: 16 178.28.0.0/14 maxlen: 14 195.43.192.0/18 maxlen: 18 195.54.96.0/19 maxlen: 19 195.58.96.0/19 maxlen: 19 195.66.32.0/19 maxlen: 19 212.73.0.0/19 maxlen: 19 212.73.160.0/19 maxlen: 19 212.75.64.0/19 maxlen: 19 212.105.0.0/17 maxlen: 17 213.112.0.0/14 maxlen: 14 213.150.128.0/19 maxlen: 19 213.163.128.0/19 maxlen: 19 213.204.128.0/18 maxlen: 18 213.214.192.0/18 maxlen: 18 213.238.192.0/18 maxlen: 18 213.242.128.0/18 maxlen: 18 217.174.64.0/19 maxlen: 19 2a02:1400::/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:25:fc:76:dd:92:f6:c9:d7:ce:f4:42:01:8f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2347aaab2206c08128f543730064a145a3effa14 Validity Not Before: Jan 2 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42dda143845ebd56999b6007e0ce1c8e48d09118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:12:c0:da:dd:c1:da:11:1d:8c:40:c4:cb:36: 31:3a:78:6a:c7:e0:fc:f1:d5:a1:db:7e:ea:24:f8: 31:4c:ca:8f:b2:f5:8a:f0:13:28:0a:39:b7:92:fb: ed:dd:0b:63:65:8b:dc:d8:9c:cb:f8:d4:ab:0d:07: 56:44:e0:bf:92:57:3e:a4:53:5a:ca:c4:04:21:59: c2:12:01:81:87:b2:c9:4d:cf:ec:76:c0:1a:0b:f5: 1b:a6:49:40:5b:d6:69:2c:b7:2e:9b:a3:21:5f:0f: 05:fe:8f:21:0d:0e:f9:f6:a8:9c:ec:f8:0d:bf:d7: a0:a3:f2:5b:47:ee:a6:ad:ce:d2:bd:8a:60:66:1e: 54:2e:69:d0:b4:76:15:9b:f0:6b:5a:97:0c:f6:0c: ae:b0:65:84:cc:7f:83:a7:50:be:9e:74:7b:05:78: b2:41:e5:46:d7:12:5f:b3:3e:a1:91:22:a6:c8:7c: c7:10:89:19:37:c0:c1:58:e0:27:b4:78:66:6c:3b: 6f:00:d4:e2:4b:76:f8:f2:80:0c:38:f8:f2:a8:78: ff:1a:b3:72:17:4f:80:39:0c:73:01:9c:07:9a:1d: a6:c9:b7:2e:e9:f0:46:f8:29:e0:e0:b8:74:b8:25: 00:ed:0c:da:b4:45:7b:0e:f0:82:14:92:ed:5e:dd: 96:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DD:A1:43:84:5E:BD:56:99:9B:60:07:E0:CE:1C:8E:48:D0:91:18 X509v3 Authority Key Identifier: keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/Qt2hQ4RevVaZm2AH4M4cjkjQkRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.194.0.0/15 62.13.0.0/17 62.65.64.0/18 62.119.0.0/16 62.127.0.0/16 78.82.0.0/16 79.102.0.0/16 80.68.96.0/20 81.26.224.0/19 82.182.0.0/15 83.226.0.0/15 84.216.0.0/14 85.224.0.0/13 92.32.0.0/14 94.234.0.0/16 178.28.0.0/14 195.43.192.0/18 195.54.96.0/19 195.58.96.0/19 195.66.32.0/19 212.73.0.0/19 212.73.160.0/19 212.75.64.0/19 212.105.0.0/17 213.112.0.0/14 213.150.128.0/19 213.163.128.0/19 213.204.128.0/18 213.214.192.0/18 213.238.192.0/18 213.242.128.0/18 217.174.64.0/19 IPv6: 2a02:1400::/26 Signature Algorithm: sha256WithRSAEncryption 1b:0d:86:15:8b:e6:be:cf:44:f7:0e:32:11:cb:81:a1:a3:e6: 69:4a:58:d2:fa:ef:ff:8a:cb:88:90:12:b9:59:04:04:da:69: 4b:87:b5:dd:34:41:30:54:47:ac:d8:b9:45:72:a0:64:06:3d: 3f:51:c0:67:b5:4c:57:2b:f3:7c:26:6d:0a:92:78:d8:d8:da: d9:3f:f9:fb:1d:20:c9:38:18:2e:7b:04:2c:03:2a:d5:03:28: 13:7f:66:8b:d0:8e:24:37:54:56:c6:4c:6e:5e:dd:18:c0:bd: 13:c4:04:e8:44:d6:4e:c3:1b:0c:2e:d0:38:37:bd:94:13:8b: 13:ed:3f:4b:0d:a8:05:db:11:65:36:93:93:8d:e5:44:93:0f: 91:26:83:d1:ea:8c:83:c2:f3:94:ee:e1:49:6f:56:b0:ea:b6: fb:51:c7:74:1d:6e:e5:c8:da:a6:97:ea:e0:c8:0e:45:88:43: 73:12:ea:f5:fc:6a:78:cf:96:b3:5d:e4:e2:7d:67:6e:99:0c: 0b:eb:92:07:d5:ee:42:48:7c:35:de:2a:aa:26:5b:2b:e8:d2: 0e:90:aa:b5:a6:6e:8f:2f:c2:29:a8:ae:62:c3:ad:13:f6:b2: 0c:ad:69:99:dc:7f:34:b6:91:14:d9:84:40:b7:cd:b4:b5:ac: 0b:74:de:c0 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgISAZt8fyX8dt2S9snXzvRCAY/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDdhYWFiMjIwNmMwODEyOGY1NDM3MzAwNjRhMTQ1YTNl ZmZhMTQwHhcNMjYwMTAyMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmRkYTE0Mzg0NWViZDU2OTk5YjYwMDdlMGNlMWM4ZTQ4ZDA5MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghLA2t3B2hEdjEDEyzYxOnhqx+D8 8dWh237qJPgxTMqPsvWK8BMoCjm3kvvt3QtjZYvc2JzL+NSrDQdWROC/klc+pFNa ysQEIVnCEgGBh7LJTc/sdsAaC/UbpklAW9ZpLLcum6MhXw8F/o8hDQ759qic7PgN v9ego/JbR+6mrc7SvYpgZh5ULmnQtHYVm/BrWpcM9gyusGWEzH+Dp1C+nnR7BXiy QeVG1xJfsz6hkSKmyHzHEIkZN8DBWOAntHhmbDtvANTiS3b48oAMOPjyqHj/GrNy F0+AOQxzAZwHmh2mybcu6fBG+Cng4Lh0uCUA7QzatEV7DvCCFJLtXt2WUQIDAQAB o4ICyjCCAsYwHQYDVR0OBBYEFELdoUOEXr1WmZtgB+DOHI5I0JEYMB8GA1UdIwQY MBaAFCNHqqsiBsCBKPVDcwBkoUWj7/oUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQt NzU4NDA2NjFlYWY1LzEvUXQyaFE0UmV2VmFabTJBSDRNNGNqa2pRa1JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQtNzU4NDA2NjFlYWY1 LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCBugQCAAEwgbMDAwEu wgMEBz4NAAMEBj5BQAMDAD53AwMAPn8DAwBOUgMDAE9mAwQEUERgAwQFURrgAwMB UrYDAwFT4gMDAlTYAwMDVeADAwJcIAMDAF7qAwMCshwDBAbDK8ADBAXDNmADBAXD OmADBAXDQiADBAXUSQADBAXUSaADBAXUS0ADBAfUaQADAwLVcAMEBdWWgAMEBdWj gAMEBtXMgAMEBtXWwAMEBtXuwAMEBtXygAMEBdmuQDANBAIAAjAHAwUGKgIUADAN BgkqhkiG9w0BAQsFAAOCAQEAGw2GFYvmvs9E9w4yEcuBoaPmaUpY0vrv/4rLiJAS uVkEBNppS4e13TRBMFRHrNi5RXKgZAY9P1HAZ7VMVyvzfCZtCpJ42Nja2T/5+x0g yTgYLnsELAMq1QMoE39mi9COJDdUVsZMbl7dGMC9E8QE6ETWTsMbDC7QODe9lBOL E+0/Sw2oBdsRZTaTk43lRJMPkSaD0eqMg8LzlO7hSW9WsOq2+1HHdB1u5cjappfq 4MgORYhDcxLq9fxqeM+Ws13k4n1nbpkMC+uSB9XuQkh8Nd4qqiZbK+jSDpCqtaZu jy/CKaiuYsOtE/ayDK1pmdx/NLaRFNmEQLfNtLWsC3TewA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:24 2026 by rpki-client