This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa File: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (raw, json) Hash identifier: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI= Subject key identifier: 41:ED:44:4C:AC:10:04:06:04:94:DF:2A:0A:65:FE:65:A3:3C:50:7C Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E388E4C90F2B8F7271ACE0A75BB5048 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13237 IP address blocks: 62.4.64.0/19 maxlen: 24 62.4.64.0/22 maxlen: 24 62.80.96.0/19 maxlen: 24 62.93.192.0/18 maxlen: 24 80.86.160.0/19 maxlen: 24 80.252.32.0/20 maxlen: 20 81.209.128.0/17 maxlen: 24 82.98.200.0/21 maxlen: 24 82.98.208.0/20 maxlen: 24 82.98.224.0/21 maxlen: 24 82.197.128.0/19 maxlen: 24 83.124.0.0/14 maxlen: 24 83.125.45.0/24 maxlen: 24 83.125.71.0/24 maxlen: 24 83.133.0.0/16 maxlen: 24 83.137.80.0/21 maxlen: 21 84.207.0.0/16 maxlen: 24 84.207.205.0/24 maxlen: 24 84.207.210.0/24 maxlen: 24 84.207.225.0/24 maxlen: 24 84.207.226.0/24 maxlen: 24 84.207.228.0/24 maxlen: 24 84.207.229.0/24 maxlen: 24 84.207.231.0/24 maxlen: 24 84.207.240.0/24 maxlen: 24 185.99.80.0/22 maxlen: 22 185.250.87.0/24 maxlen: 24 217.19.32.0/20 maxlen: 20 217.71.96.0/20 maxlen: 24 217.112.144.0/20 maxlen: 24 217.112.144.0/21 maxlen: 24 2001:7f0::/29 maxlen: 48 2001:7f0::/32 maxlen: 48 2001:7f0:4020::/48 maxlen: 48 2001:1618::/29 maxlen: 48 2001:4d40::/29 maxlen: 48 2001:4d40::/32 maxlen: 48 2a00:cc0::/29 maxlen: 48 2a00:cc0::/32 maxlen: 48 2a00:cc0:4:1::/64 maxlen: 64 2a00:fa0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8e:4c:90:f2:b8:f7:27:1a:ce:0a:75:bb:50:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41ed444cac1004060494df2a0a65fe65a33c507c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:63:10:64:ae:ee:76:b0:d6:d5:96:14:2f: 24:be:fe:35:3d:f6:71:7e:c3:bd:5e:75:b3:8d:d0: 1b:4c:0f:29:bc:c9:8d:fa:5d:89:ca:1e:8e:8c:f8: 38:35:3b:bf:40:1a:6d:b5:20:cd:f9:2f:7c:e5:08: eb:f9:1a:36:a6:e5:8d:07:8f:6f:e9:2f:c0:7c:f6: 14:79:db:f3:a5:44:9c:62:25:76:2e:53:c1:51:14: 02:6f:8d:d8:2d:86:51:b5:51:6b:27:87:06:6f:95: 47:20:38:d8:c3:b2:9f:25:5a:7f:74:0c:23:b8:b5: 34:66:53:b8:f5:85:c7:0c:b7:e1:3c:48:a1:2f:35: 20:dd:7e:11:fd:05:7c:a0:57:57:9e:58:b9:98:45: 42:c7:c0:e7:e1:24:e6:c8:e2:7b:90:6e:8a:14:02: 67:a0:b6:f4:b4:ce:ab:c4:74:1a:a8:54:ab:c2:7f: 4b:01:03:a5:52:2c:6a:f6:f5:2d:d5:5e:9c:67:84: 0c:12:74:0d:b8:21:7b:a9:82:d5:9d:bd:60:fb:d7: 39:6b:35:43:83:3b:ca:50:39:c7:bc:f6:ca:31:8b: 32:3d:97:47:19:53:b6:2a:95:d9:6f:31:4c:07:11: 73:de:8b:e8:26:e4:45:c1:51:8c:17:6c:e0:c6:09: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:ED:44:4C:AC:10:04:06:04:94:DF:2A:0A:65:FE:65:A3:3C:50:7C X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.4.64.0/19 62.80.96.0/19 62.93.192.0/18 80.86.160.0/19 80.252.32.0/20 81.209.128.0/17 82.98.200.0-82.98.231.255 82.197.128.0/19 83.124.0.0/14 83.133.0.0/16 83.137.80.0/21 84.207.0.0/16 185.99.80.0/22 185.250.87.0/24 217.19.32.0/20 217.71.96.0/20 217.112.144.0/20 IPv6: 2001:7f0::/29 2001:1618::/29 2001:4d40::/29 2a00:cc0::/29 2a00:fa0::/32 Signature Algorithm: sha256WithRSAEncryption 9c:6b:f6:5b:c3:7e:4e:c6:c3:6c:5f:60:a7:1b:2e:46:43:ab: 22:b5:c0:2c:57:eb:20:28:1b:b8:30:c8:7a:5c:98:43:b7:ff: 7e:45:bb:8e:d3:42:44:14:c1:82:37:13:30:3b:59:57:54:85: 6a:fa:f3:74:88:43:7a:83:fb:a4:eb:6c:58:7f:1f:bb:66:dc: bd:f9:ff:6c:3c:4a:3b:e3:43:07:f7:12:1f:b8:57:33:a4:20: a7:82:b7:8c:40:92:2d:fc:3d:17:25:09:fd:04:50:d8:d1:3b: 75:f3:b3:3c:56:cb:63:a1:b8:f7:c7:85:d7:7b:f8:c9:91:7c: 49:03:52:a3:9a:15:44:78:8c:af:20:d9:6c:ee:b6:16:4a:81: af:02:8c:16:f2:e7:7a:c5:bc:f1:4d:b0:57:47:bb:44:ce:d3: e8:1c:4c:fb:9c:d8:8b:a7:88:34:86:38:76:87:be:f1:78:7e: e3:90:37:1f:7f:82:d9:a4:b6:35:19:b9:a9:8d:95:86:3a:d7: 02:e9:22:04:c3:76:99:4d:03:57:36:14:f1:88:77:eb:2a:6a: d7:0e:17:68:14:f4:8b:a7:30:41:5d:b8:11:27:80:9a:9d:aa: da:4a:f2:e0:93:c2:18:8d:02:49:1d:70:2b:69:c7:2c:94:f1: 59:38:13:70 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZt+OI5MkPK49ycazgp1u1BIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWVkNDQ0Y2FjMTAwNDA2MDQ5NGRmMmEwYTY1ZmU2NWEzM2M1MDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWpjEGSu7naw1tWWFC8kvv41PfZx fsO9XnWzjdAbTA8pvMmN+l2Jyh6OjPg4NTu/QBpttSDN+S985Qjr+Ro2puWNB49v 6S/AfPYUedvzpUScYiV2LlPBURQCb43YLYZRtVFrJ4cGb5VHIDjYw7KfJVp/dAwj uLU0ZlO49YXHDLfhPEihLzUg3X4R/QV8oFdXnli5mEVCx8Dn4STmyOJ7kG6KFAJn oLb0tM6rxHQaqFSrwn9LAQOlUixq9vUt1V6cZ4QMEnQNuCF7qYLVnb1g+9c5azVD gzvKUDnHvPbKMYsyPZdHGVO2KpXZbzFMBxFz3ovoJuRFwVGMF2zgxgmvMQIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFEHtREysEAQGBJTfKgpl/mWjPFB8MB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvUWUxRVRLd1FCQVlFbE44cUNtWC1aYU04VUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjBxBAIAATBrAwQFPgRA AwQFPlBgAwQGPl3AAwQFUFagAwQEUPwgAwQHUdGAMAwDBANSYsgDBANSYuADBAVS xYADAwJTfAMDAFOFAwQDU4lQAwMAVM8DBAK5Y1ADBAC5+lcDBATZEyADBATZR2AD BATZcJAwKQQCAAIwIwMFAyABB/ADBQMgARYYAwUDIAFNQAMFAyoADMADBQAqAA+g MA0GCSqGSIb3DQEBCwUAA4IBAQCca/Zbw35OxsNsX2CnGy5GQ6sitcAsV+sgKBu4 MMh6XJhDt/9+RbuO00JEFMGCNxMwO1lXVIVq+vN0iEN6g/uk62xYfx+7Zty9+f9s PEo740MH9xIfuFczpCCngreMQJIt/D0XJQn9BFDY0Tt187M8Vstjobj3x4XXe/jJ kXxJA1KjmhVEeIyvINls7rYWSoGvAowW8ud6xbzxTbBXR7tEztPoHEz7nNiLp4g0 hjh2h77xeH7jkDcff4LZpLY1GbmpjZWGOtcC6SIEw3aZTQNXNhTxiHfrKmrXDhdo FPSLpzBBXbgRJ4CanaraSvLgk8IYjQJJHXAraccslPFZOBNw -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:02 2026 by rpki-client