This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/QecGwK74B6zUHtUhTMCZnZhdc-I.roa File: QecGwK74B6zUHtUhTMCZnZhdc-I.roa (raw, json) Hash identifier: aKnsrMiz1TExOCFQauB98iUzX+RHG82R4UA+NNcGRUk= Subject key identifier: 41:E7:06:C0:AE:F8:07:AC:D4:1E:D5:21:4C:C0:99:9D:98:5D:73:E2 Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095 Certificate serial: 019B7834C449F339164C6B1655915DCEF42D Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/QecGwK74B6zUHtUhTMCZnZhdc-I.roa Signing time: Thu 01 Jan 2026 06:18:02 +0000 ROA not before: Thu 01 Jan 2026 06:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 24.132.0.0/16 maxlen: 16 24.132.0.0/17 maxlen: 17 24.132.128.0/17 maxlen: 17 31.151.0.0/16 maxlen: 16 31.151.0.0/17 maxlen: 17 31.151.128.0/17 maxlen: 17 46.129.0.0/16 maxlen: 16 46.129.0.0/17 maxlen: 17 46.129.128.0/17 maxlen: 17 62.100.0.0/18 maxlen: 18 62.108.0.0/19 maxlen: 19 62.108.0.0/20 maxlen: 20 62.108.16.0/20 maxlen: 20 62.163.0.0/16 maxlen: 16 62.163.0.0/17 maxlen: 17 62.163.128.0/17 maxlen: 17 62.194.0.0/15 maxlen: 15 62.194.0.0/16 maxlen: 16 62.195.0.0/16 maxlen: 16 77.248.0.0/14 maxlen: 14 77.248.0.0/15 maxlen: 15 77.250.0.0/15 maxlen: 15 80.56.0.0/15 maxlen: 15 80.56.0.0/16 maxlen: 16 80.57.0.0/16 maxlen: 16 80.85.32.0/20 maxlen: 20 80.113.0.0/16 maxlen: 16 80.113.0.0/17 maxlen: 17 80.113.128.0/17 maxlen: 17 80.248.32.0/20 maxlen: 20 80.248.32.0/21 maxlen: 21 80.248.40.0/21 maxlen: 21 81.175.64.0/18 maxlen: 18 81.175.64.0/19 maxlen: 19 81.175.96.0/19 maxlen: 19 84.41.128.0/17 maxlen: 17 88.211.128.0/18 maxlen: 18 89.98.0.0/15 maxlen: 15 89.98.0.0/16 maxlen: 16 89.99.0.0/16 maxlen: 16 89.220.0.0/17 maxlen: 17 92.108.0.0/14 maxlen: 14 92.108.0.0/15 maxlen: 15 92.110.0.0/15 maxlen: 15 95.96.0.0/15 maxlen: 15 95.96.0.0/16 maxlen: 16 95.97.0.0/16 maxlen: 16 178.84.0.0/15 maxlen: 15 178.84.0.0/16 maxlen: 16 178.85.0.0/16 maxlen: 16 185.94.92.0/22 maxlen: 22 185.137.200.0/22 maxlen: 22 185.137.200.0/23 maxlen: 23 185.137.202.0/23 maxlen: 23 195.18.64.0/18 maxlen: 18 212.67.160.0/19 maxlen: 19 212.83.64.0/19 maxlen: 19 212.83.64.0/20 maxlen: 20 212.83.80.0/20 maxlen: 20 212.178.32.0/19 maxlen: 19 212.178.32.0/20 maxlen: 20 212.178.48.0/20 maxlen: 20 212.187.0.0/17 maxlen: 17 212.187.0.0/18 maxlen: 18 212.187.64.0/18 maxlen: 18 213.34.0.0/19 maxlen: 19 213.34.0.0/20 maxlen: 20 213.34.16.0/20 maxlen: 20 213.46.0.0/16 maxlen: 16 213.46.0.0/17 maxlen: 17 213.46.128.0/17 maxlen: 17 213.93.0.0/16 maxlen: 16 213.93.0.0/17 maxlen: 17 213.93.128.0/17 maxlen: 17 213.124.160.0/19 maxlen: 19 213.124.160.0/20 maxlen: 20 213.124.176.0/20 maxlen: 20 213.124.192.0/18 maxlen: 18 213.124.192.0/19 maxlen: 19 213.124.224.0/19 maxlen: 19 213.126.128.0/17 maxlen: 17 213.126.128.0/18 maxlen: 18 213.126.192.0/18 maxlen: 18 213.127.0.0/16 maxlen: 16 213.127.0.0/17 maxlen: 17 213.127.128.0/17 maxlen: 17 213.160.192.0/19 maxlen: 19 213.160.192.0/20 maxlen: 20 213.160.208.0/20 maxlen: 20 213.160.248.0/21 maxlen: 21 213.160.248.0/22 maxlen: 22 213.160.252.0/22 maxlen: 22 217.17.128.0/20 maxlen: 20 217.63.128.0/18 maxlen: 18 217.63.128.0/19 maxlen: 19 217.63.160.0/19 maxlen: 19 217.102.0.0/17 maxlen: 17 217.102.0.0/18 maxlen: 18 217.102.64.0/18 maxlen: 18 217.103.0.0/16 maxlen: 16 217.103.0.0/17 maxlen: 17 217.103.128.0/17 maxlen: 17 217.104.128.0/17 maxlen: 17 217.104.128.0/18 maxlen: 18 217.104.192.0/18 maxlen: 18 217.105.0.0/18 maxlen: 18 217.105.0.0/19 maxlen: 19 217.105.32.0/19 maxlen: 19 217.105.224.0/19 maxlen: 19 217.105.224.0/20 maxlen: 20 217.105.240.0/20 maxlen: 20 217.112.112.0/20 maxlen: 20 2a02:938::/29 maxlen: 29 2a02:a200::/27 maxlen: 27 2a02:a200::/28 maxlen: 28 2a02:a210::/28 maxlen: 28 2a03:4aa0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c4:49:f3:39:16:4c:6b:16:55:91:5d:ce:f4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41e706c0aef807acd41ed5214cc0999d985d73e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:cd:3d:00:86:30:a9:e3:15:19:f7:09:6c: d0:fd:e9:17:29:db:c6:1e:aa:d0:77:48:ea:d1:1e: 45:13:8d:4c:ca:5e:89:9e:85:01:59:60:97:ff:39: 30:e1:74:68:30:04:e1:e0:1f:dc:83:46:2f:93:28: 4c:ff:5d:90:18:c2:9b:a7:c0:e3:8a:15:6e:85:29: 3b:1b:41:54:87:65:b3:a7:c2:5c:81:99:e8:da:6f: 02:17:7a:6f:9a:97:5a:f1:bc:e0:ce:da:ff:8b:52: 6f:4d:31:63:35:82:7e:20:e4:30:bb:75:19:76:57: 82:f6:db:61:a6:dc:80:79:5c:de:4c:17:9b:94:7e: 16:d7:fa:d7:40:86:97:d7:11:37:af:39:b7:41:3e: aa:01:1d:93:93:19:7b:ed:81:69:a1:22:90:31:97: b5:4e:5d:0e:53:7e:4a:69:e1:d9:2d:2f:24:2a:ca: 19:00:32:07:fc:cf:71:bc:93:47:e6:c5:bd:7b:20: 18:59:97:cc:b4:c9:3f:26:f6:d4:6e:58:cd:5a:09: ea:69:02:55:f6:b6:83:c5:6e:1c:eb:ea:d3:41:b8: d3:b6:ce:44:a4:04:60:fd:af:18:70:6d:c8:17:4d: 98:6b:9b:30:01:da:dc:2f:6b:1a:17:7e:8a:ce:5e: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E7:06:C0:AE:F8:07:AC:D4:1E:D5:21:4C:C0:99:9D:98:5D:73:E2 X509v3 Authority Key Identifier: keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/QecGwK74B6zUHtUhTMCZnZhdc-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.132.0.0/16 31.151.0.0/16 46.129.0.0/16 62.100.0.0/18 62.108.0.0/19 62.163.0.0/16 62.194.0.0/15 77.248.0.0/14 80.56.0.0/15 80.85.32.0/20 80.113.0.0/16 80.248.32.0/20 81.175.64.0/18 84.41.128.0/17 88.211.128.0/18 89.98.0.0/15 89.220.0.0/17 92.108.0.0/14 95.96.0.0/15 178.84.0.0/15 185.94.92.0/22 185.137.200.0/22 195.18.64.0/18 212.67.160.0/19 212.83.64.0/19 212.178.32.0/19 212.187.0.0/17 213.34.0.0/19 213.46.0.0/16 213.93.0.0/16 213.124.160.0-213.124.255.255 213.126.128.0-213.127.255.255 213.160.192.0/19 213.160.248.0/21 217.17.128.0/20 217.63.128.0/18 217.102.0.0/17 217.103.0.0/16 217.104.128.0-217.105.63.255 217.105.224.0/19 217.112.112.0/20 IPv6: 2a02:938::/29 2a02:a200::/27 2a03:4aa0::/29 Signature Algorithm: sha256WithRSAEncryption 46:89:29:4e:84:d7:f6:02:31:86:03:7a:39:76:07:62:dd:df: c0:7b:d1:1e:4d:29:3d:95:32:6f:41:dc:52:f0:77:02:fe:73: 78:e5:5b:e9:36:40:94:16:74:37:85:a2:38:e9:61:15:bb:09: 05:d8:12:9b:c0:90:1c:1c:ba:39:34:c7:ef:cd:8d:d0:1e:1b: a8:36:e3:0c:31:9f:ce:9f:de:07:85:bc:e9:d7:2a:44:b5:ce: 77:c6:9f:e0:cc:53:19:1a:43:63:4c:b8:7b:1d:0d:ad:83:c5: 66:08:a7:73:42:06:86:2c:3a:a9:3a:e9:71:98:36:8c:28:2a: 6e:5d:07:50:87:cb:fe:3a:b8:39:49:e4:50:90:ef:ed:2d:79: 3e:89:16:7f:d9:f7:05:58:59:59:4a:23:0e:0b:1a:cb:31:ea: e8:da:96:d4:86:6e:1d:a2:37:66:8e:4c:0d:eb:0a:60:42:bf: 77:ca:30:7a:fc:a8:44:2a:fd:b4:0a:eb:7e:4a:e9:f8:5e:15: 5e:81:1b:4b:6f:e7:17:a3:72:ba:89:de:ec:e6:45:79:f6:71: 0d:97:df:18:74:ec:db:56:64:9b:85:f1:a5:5c:b6:85:74:24: 76:ea:93:53:2e:d5:81:00:14:e0:8f:45:0b:50:22:f8:96:8e: 0e:39:d9:9b -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgISAZt4NMRJ8zkWTGsWVZFdzvQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj MmEwOTUwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWU3MDZjMGFlZjgwN2FjZDQxZWQ1MjE0Y2MwOTk5ZDk4NWQ3M2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7LNPQCGMKnjFRn3CWzQ/ekXKdvG HqrQd0jq0R5FE41Myl6JnoUBWWCX/zkw4XRoMATh4B/cg0YvkyhM/12QGMKbp8Dj ihVuhSk7G0FUh2Wzp8JcgZno2m8CF3pvmpda8bzgztr/i1JvTTFjNYJ+IOQwu3UZ dleC9tthptyAeVzeTBeblH4W1/rXQIaX1xE3rzm3QT6qAR2Tkxl77YFpoSKQMZe1 Tl0OU35KaeHZLS8kKsoZADIH/M9xvJNH5sW9eyAYWZfMtMk/JvbUbljNWgnqaQJV 9raDxW4c6+rTQbjTts5EpARg/a8YcG3IF02Ya5swAdrcL2saF36Kzl4FuQIDAQAB o4IDJjCCAyIwHQYDVR0OBBYEFEHnBsCu+Aes1B7VIUzAmZ2YXXPiMB8GA1UdIwQY MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct MDRkNzRmMzY4Njk4LzEvUWVjR3dLNzRCNnpVSHRVaFRNQ1puWmhkYy1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4 LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOgYIKwYBBQUHAQcBAf8EggEpMIIBJTCCAQQEAgABMIH9 AwMAGIQDAwAflwMDAC6BAwQGPmQAAwQFPmwAAwMAPqMDAwE+wgMDAk34AwMBUDgD BARQVSADAwBQcQMEBFD4IAMEBlGvQAMEB1QpgAMEBljTgAMDAVliAwQHWdwAAwMC XGwDAwFfYAMDAbJUAwQCuV5cAwQCuYnIAwQGwxJAAwQF1EOgAwQF1FNAAwQF1LIg AwQH1LsAAwQF1SIAAwMA1S4DAwDVXTALAwQF1XygAwMA1XwwCwMEB9V+gAMDB9UA AwQF1aDAAwQD1aD4AwQE2RGAAwQG2T+AAwQH2WYAAwMA2WcwDAMEB9logAMEBtlp AAMEBdlp4AMEBNlwcDAbBAIAAjAVAwUDKgIJOAMFBSoCogADBQMqA0qgMA0GCSqG SIb3DQEBCwUAA4IBAQBGiSlOhNf2AjGGA3o5dgdi3d/Ae9EeTSk9lTJvQdxS8HcC /nN45VvpNkCUFnQ3haI46WEVuwkF2BKbwJAcHLo5NMfvzY3QHhuoNuMMMZ/On94H hbzp1ypEtc53xp/gzFMZGkNjTLh7HQ2tg8VmCKdzQgaGLDqpOulxmDaMKCpuXQdQ h8v+Org5SeRQkO/tLXk+iRZ/2fcFWFlZSiMOCxrLMero2pbUhm4dojdmjkwN6wpg Qr93yjB6/KhEKv20Cut+Sun4XhVegRtLb+cXo3K6id7s5kV59nENl98YdOzbVmSb hfGlXLaFdCR26pNTLtWBABTgj0ULUCL4lo4OOdmb -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:38 2026 by rpki-client