This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/qtg18Q1n5Jfx1gK-KfQtl08To-k.roa File: qtg18Q1n5Jfx1gK-KfQtl08To-k.roa (raw, json) Hash identifier: oG53ITscWjNRdxBTzyirX6KiMhTU+HEToywwA4a+H6Q= Subject key identifier: AA:D8:35:F1:0D:67:E4:97:F1:D6:02:BE:29:F4:2D:97:4F:13:A3:E9 Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF2764E6DE6BBBE9D2D50EBCB73A1DE Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/qtg18Q1n5Jfx1gK-KfQtl08To-k.roa Signing time: Fri 02 Jan 2026 18:22:35 +0000 ROA not before: Fri 02 Jan 2026 18:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197184 IP address blocks: 82.119.88.0/23 maxlen: 23 82.119.89.0/24 maxlen: 24 85.14.8.0/22 maxlen: 22 85.14.8.0/24 maxlen: 24 85.14.9.0/24 maxlen: 24 85.14.10.0/24 maxlen: 24 85.14.11.0/24 maxlen: 24 85.14.52.0/22 maxlen: 22 85.14.52.0/23 maxlen: 23 85.14.52.0/24 maxlen: 24 85.14.53.0/24 maxlen: 24 85.14.54.0/23 maxlen: 23 85.14.54.0/24 maxlen: 24 85.14.55.0/24 maxlen: 24 89.252.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:76:4e:6d:e6:bb:be:9d:2d:50:eb:cb:73:a1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aad835f10d67e497f1d602be29f42d974f13a3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:9f:ff:93:86:a6:74:5a:90:92:83:5e:85: e0:92:5b:44:ec:64:6a:2a:26:f2:07:ad:2a:47:a1: 23:ea:2b:cf:c0:70:43:51:8e:25:59:47:c1:e1:d4: 42:40:09:1a:ec:6f:a6:bd:a3:b9:e4:4b:f8:cc:6a: 03:1c:16:18:70:c4:f7:b6:6f:e5:4f:d6:d6:97:5b: 24:c1:5f:ac:6e:fc:0e:a0:bd:7a:79:56:ca:c5:40: 34:e0:99:e1:c7:b3:34:96:ed:47:8f:8d:ec:cf:53: 7d:33:25:2b:db:f1:15:5d:10:bd:9c:37:ce:8a:e5: ba:5e:ea:00:7f:ff:c7:b6:52:1d:bc:02:7b:81:cb: 4c:87:99:11:44:32:d4:06:ef:75:87:47:de:e9:ee: f4:28:c6:67:fa:b3:60:40:f4:87:c5:d0:c9:72:7d: f2:d3:4c:70:29:09:55:51:dc:3e:f7:e1:3c:79:a7: 2f:e3:07:5d:ad:33:1d:ae:c5:fc:cb:a1:7b:28:25: 7a:be:7c:0e:16:8c:a4:b6:7b:9d:92:dd:ce:07:2f: d9:6d:c9:12:87:e9:b1:62:58:ac:64:02:c1:d3:8c: b0:b7:dc:3b:ee:cc:bb:9e:49:51:c5:af:b7:1e:c8: 2d:9b:bc:2e:2f:5a:20:f4:95:e7:6f:a3:c1:1d:21: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D8:35:F1:0D:67:E4:97:F1:D6:02:BE:29:F4:2D:97:4F:13:A3:E9 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/qtg18Q1n5Jfx1gK-KfQtl08To-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.88.0/23 85.14.8.0/22 85.14.52.0/22 89.252.222.0/24 Signature Algorithm: sha256WithRSAEncryption 30:4c:b5:5d:da:21:51:de:aa:8d:b4:27:b8:e1:f3:6f:aa:89: d7:e2:c7:a1:54:eb:57:9a:76:6a:58:25:97:d3:c4:4f:41:30: 4b:c3:8a:fc:f3:ba:ff:9c:62:8a:f6:04:cc:93:fe:f0:27:60: 05:fd:c1:5f:4f:d7:63:b1:4f:88:f2:73:2c:56:18:ff:0c:3e: f5:cb:c8:6d:3e:1a:0a:6b:1d:ef:7c:1b:5e:69:c5:4e:4e:6b: b8:e4:ed:d8:b2:a7:ea:73:9e:da:20:77:4c:d7:c6:1f:30:7c: d0:90:2d:2d:2f:fb:6a:51:54:b1:37:e4:52:61:df:47:03:4c: c9:20:56:e4:28:e8:11:1f:b4:e4:83:9a:77:1d:81:cf:c7:f1: 9b:27:2f:99:86:aa:9b:c4:e9:e6:6f:f1:9d:d2:e6:bb:82:c9: 95:8a:95:d0:59:62:df:60:d6:1f:f7:c6:6e:c4:a3:0a:84:1a: b8:d5:d8:56:f5:e5:00:f1:23:a0:1c:7b:3a:9b:35:7a:23:e2: 28:4f:bc:c0:23:94:6f:68:7c:5c:28:b5:1c:a2:8c:4e:e6:84: 49:5b:02:d3:5b:c6:aa:c3:90:87:8e:12:20:83:20:dd:d0:c6: cb:d7:e0:64:47:15:c8:ff:c2:05:f2:b4:e3:cb:5a:ee:e9:c4: 6e:34:d5:31 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/8nZObea7vp0tUOvLc6HeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWQ4MzVmMTBkNjdlNDk3ZjFkNjAyYmUyOWY0MmQ5NzRmMTNhM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9Sf/5OGpnRakJKDXoXgkltE7GRq KibyB60qR6Ej6ivPwHBDUY4lWUfB4dRCQAka7G+mvaO55Ev4zGoDHBYYcMT3tm/l T9bWl1skwV+sbvwOoL16eVbKxUA04Jnhx7M0lu1Hj43sz1N9MyUr2/EVXRC9nDfO iuW6XuoAf//HtlIdvAJ7gctMh5kRRDLUBu91h0fe6e70KMZn+rNgQPSHxdDJcn3y 00xwKQlVUdw+9+E8eacv4wddrTMdrsX8y6F7KCV6vnwOFoyktnudkt3OBy/ZbckS h+mxYlisZALB04ywt9w77sy7nklRxa+3Hsgtm7wuL1og9JXnb6PBHSFiAwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKrYNfENZ+SX8dYCvin0LZdPE6PpMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvcXRnMThRMW41SmZ4MWdLLUtmUXRsMDhUby1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBUndYAwQC VQ4IAwQCVQ40AwQAWfzeMA0GCSqGSIb3DQEBCwUAA4IBAQAwTLVd2iFR3qqNtCe4 4fNvqonX4sehVOtXmnZqWCWX08RPQTBLw4r887r/nGKK9gTMk/7wJ2AF/cFfT9dj sU+I8nMsVhj/DD71y8htPhoKax3vfBteacVOTmu45O3Ysqfqc57aIHdM18YfMHzQ kC0tL/tqUVSxN+RSYd9HA0zJIFbkKOgRH7Tkg5p3HYHPx/GbJy+ZhqqbxOnmb/Gd 0ua7gsmVipXQWWLfYNYf98ZuxKMKhBq41dhW9eUA8SOgHHs6mzV6I+IoT7zAI5Rv aHxcKLUcooxO5oRJWwLTW8aqw5CHjhIggyDd0MbL1+BkRxXI/8IF8rTjy1ru6cRu NNUx -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:29 2026 by rpki-client