This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa File: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (raw, json) Hash identifier: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w= Subject key identifier: 41:83:9D:FA:FF:FC:7B:C1:AA:65:A5:9A:66:7E:0D:B1:1C:2B:CC:21 Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Certificate serial: 019B7C7FEBBA892AD1556CC1E1C1B56D7B20 Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa Signing time: Fri 02 Jan 2026 02:18:36 +0000 ROA not before: Fri 02 Jan 2026 02:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41810 IP address blocks: 80.240.64.0/24 maxlen: 24 80.240.65.0/24 maxlen: 24 80.240.66.0/24 maxlen: 24 80.240.67.0/24 maxlen: 24 80.240.68.0/24 maxlen: 24 80.240.69.0/24 maxlen: 24 80.240.70.0/24 maxlen: 24 80.240.71.0/24 maxlen: 24 80.240.72.0/24 maxlen: 24 80.240.73.0/24 maxlen: 24 80.240.74.0/24 maxlen: 24 80.240.75.0/24 maxlen: 24 80.240.76.0/24 maxlen: 24 80.240.77.0/24 maxlen: 24 80.240.78.0/24 maxlen: 24 82.167.128.0/21 maxlen: 21 82.167.136.0/21 maxlen: 21 82.167.176.0/22 maxlen: 22 82.167.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:eb:ba:89:2a:d1:55:6c:c1:e1:c1:b5:6d:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41839dfafffc7bc1aa65a59a667e0db11c2bcc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ef:2f:42:38:b8:6c:df:d8:db:ae:d3:f3:a6: 6b:96:7b:76:a6:ea:32:72:52:36:1c:57:19:a6:55: 50:24:00:71:97:ca:82:99:4c:54:90:07:f4:aa:46: 1a:cc:82:a3:98:5a:3a:93:5b:43:d5:12:01:7e:c1: c6:6f:4f:15:5d:f6:e0:e9:53:d0:ce:b2:b8:7c:be: 1d:c5:15:99:81:f1:2e:a8:e7:e7:d3:87:27:ba:31: e0:55:6d:4e:0b:b1:1e:31:0d:30:36:56:8a:69:60: 86:1b:1d:05:87:22:a9:f8:7b:34:a4:ff:c6:72:0f: 2e:75:35:26:cc:47:1a:98:04:4c:aa:d3:56:9d:82: bf:ee:47:84:a2:5e:19:ab:a8:f0:1a:73:8a:c6:4e: 7a:8b:76:a9:da:95:92:9e:d0:9b:16:d9:6c:74:5d: 2b:ef:59:5e:f3:e9:0b:99:ce:20:6c:70:e1:a2:bf: de:be:d0:cd:28:46:75:b1:24:7f:23:07:e5:19:9d: 23:71:4a:55:9a:57:13:20:b9:7c:99:7d:42:80:de: 68:61:8a:4e:e8:5a:f0:28:ef:23:c1:b9:40:ae:9e: 14:a9:da:15:4a:14:ed:d8:5a:76:80:13:66:f5:c9: 51:8c:bb:2c:c1:e6:0d:c9:d1:33:ce:aa:89:1f:bc: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:83:9D:FA:FF:FC:7B:C1:AA:65:A5:9A:66:7E:0D:B1:1C:2B:CC:21 X509v3 Authority Key Identifier: keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.64.0-80.240.78.255 82.167.128.0/20 82.167.176.0/22 82.167.184.0/21 Signature Algorithm: sha256WithRSAEncryption 38:69:ee:1a:e7:4a:d6:c7:0f:fc:27:35:a4:02:02:e5:7b:1e: b1:ca:20:8a:4a:98:5a:a2:e1:89:62:e3:2e:1b:2d:39:cd:1b: 72:1d:e7:b8:f8:68:ad:bf:90:f4:02:d5:9d:07:1f:2c:67:63: d5:18:ce:a3:50:69:1d:2e:34:b2:f8:60:9e:8d:d5:b8:0a:49: 30:38:c9:c7:c0:dd:b0:73:1d:0b:ab:f1:84:c6:70:41:ad:0c: 95:27:cd:e1:1b:5d:a5:43:40:34:de:7a:cf:09:07:dd:60:b1: 34:a5:4e:da:9b:f2:39:4a:cd:39:49:4f:c1:23:45:c8:2e:c6: d4:f2:47:22:f3:4d:a8:cf:b4:70:5f:8a:80:7b:8a:72:a0:6b: 32:5e:7a:f5:40:d0:9b:26:07:1d:ca:84:4b:0d:38:d3:6d:89: e6:f5:6c:8d:be:eb:33:be:52:1a:7f:6a:4e:99:03:a3:0b:f4: 37:20:57:da:7a:bc:4e:42:47:0e:e8:51:a4:72:7c:82:a0:9d: a5:82:f7:c7:16:be:e2:26:dc:ad:13:4b:b7:ad:23:de:bb:e1: 5f:5a:c8:8e:65:fe:23:08:80:2a:dc:1f:76:d0:bd:39:4c:77: dd:96:27:20:f6:bf:10:3b:23:21:e1:00:21:41:b5:b2:b8:f7: 8c:19:f6:b2 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8f+u6iSrRVWzB4cG1bXsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5Y2QyMThhYmNkZjY2ZTc5NTAwYWI5MTNjZDIxY2YwNmU0 MDVkNGUwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTgzOWRmYWZmZmM3YmMxYWE2NWE1OWE2NjdlMGRiMTFjMmJjYzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO8vQji4bN/Y267T86Zrlnt2puoy clI2HFcZplVQJABxl8qCmUxUkAf0qkYazIKjmFo6k1tD1RIBfsHGb08VXfbg6VPQ zrK4fL4dxRWZgfEuqOfn04cnujHgVW1OC7EeMQ0wNlaKaWCGGx0FhyKp+Hs0pP/G cg8udTUmzEcamARMqtNWnYK/7keEol4Zq6jwGnOKxk56i3ap2pWSntCbFtlsdF0r 71le8+kLmc4gbHDhor/evtDNKEZ1sSR/IwflGZ0jcUpVmlcTILl8mX1CgN5oYYpO 6FrwKO8jwblArp4UqdoVShTt2Fp2gBNm9clRjLssweYNydEzzqqJH7wXOQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFEGDnfr//HvBqmWlmmZ+DbEcK8whMB8GA1UdIwQY MBaAFAnNIYq832bnlQCrkTzSHPBuQF1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2Qt NGMxOWVjNWI1N2NhLzEvUVlPZC12XzhlOEdxWmFXYVpuNE5zUndyekNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2QtNGMxOWVjNWI1N2Nh LzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAZQ8EAD BABQ8E4DBARSp4ADBAJSp7ADBANSp7gwDQYJKoZIhvcNAQELBQADggEBADhp7hrn StbHD/wnNaQCAuV7HrHKIIpKmFqi4Yli4y4bLTnNG3Id57j4aK2/kPQC1Z0HHyxn Y9UYzqNQaR0uNLL4YJ6N1bgKSTA4ycfA3bBzHQur8YTGcEGtDJUnzeEbXaVDQDTe es8JB91gsTSlTtqb8jlKzTlJT8EjRcguxtTyRyLzTajPtHBfioB7inKgazJeevVA 0JsmBx3KhEsNONNtieb1bI2+6zO+Uhp/ak6ZA6ML9DcgV9p6vE5CRw7oUaRyfIKg naWC98cWvuIm3K0TS7etI9674V9ayI5l/iMIgCrcH3bQvTlMd92WJyD2vxA7IyHh ACFBtbK494wZ9rI= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:56 2026 by rpki-client