This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/qxoyNmMUKUfyFkVyuAGZAM4YuT8.roa File: qxoyNmMUKUfyFkVyuAGZAM4YuT8.roa (raw, json) Hash identifier: 32HDKvNSzbAK7fB6zWT8id6Yo7qRMY5K04pfmrZY4Ms= Subject key identifier: AB:1A:32:36:63:14:29:47:F2:16:45:72:B8:01:99:00:CE:18:B9:3F Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978 Certificate serial: 019BBBE708973B9957A78CE444924715C89F Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/qxoyNmMUKUfyFkVyuAGZAM4YuT8.roa Signing time: Wed 14 Jan 2026 09:47:18 +0000 ROA not before: Wed 14 Jan 2026 09:47:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 31.10.128.0/17 maxlen: 17 31.10.128.0/18 maxlen: 18 31.10.192.0/18 maxlen: 18 46.126.0.0/15 maxlen: 15 46.126.0.0/16 maxlen: 16 46.127.0.0/16 maxlen: 16 46.140.0.0/16 maxlen: 16 46.140.0.0/17 maxlen: 17 46.140.128.0/17 maxlen: 17 62.2.0.0/16 maxlen: 16 62.2.0.0/17 maxlen: 17 62.2.128.0/17 maxlen: 17 77.56.0.0/14 maxlen: 14 77.56.0.0/15 maxlen: 15 77.58.0.0/15 maxlen: 15 80.218.0.0/15 maxlen: 15 80.218.0.0/16 maxlen: 16 80.219.0.0/16 maxlen: 16 81.7.224.0/19 maxlen: 19 81.7.224.0/20 maxlen: 20 81.7.240.0/20 maxlen: 20 84.20.32.0/20 maxlen: 20 84.20.32.0/21 maxlen: 21 84.20.40.0/21 maxlen: 21 84.20.48.0/21 maxlen: 21 84.20.48.0/22 maxlen: 22 84.20.52.0/22 maxlen: 22 84.72.0.0/15 maxlen: 16 84.73.0.0/16 maxlen: 16 84.74.0.0/16 maxlen: 17 84.74.128.0/17 maxlen: 17 178.82.0.0/16 maxlen: 17 194.29.0.0/19 maxlen: 19 194.29.0.0/20 maxlen: 20 194.29.16.0/20 maxlen: 20 195.202.192.0/18 maxlen: 18 195.202.192.0/19 maxlen: 19 195.202.224.0/19 maxlen: 19 212.47.160.0/19 maxlen: 19 212.47.160.0/20 maxlen: 20 212.47.176.0/20 maxlen: 20 213.193.64.0/18 maxlen: 18 213.193.64.0/19 maxlen: 19 213.193.96.0/19 maxlen: 19 217.162.0.0/16 maxlen: 16 217.162.0.0/17 maxlen: 17 217.162.128.0/17 maxlen: 17 217.168.32.0/19 maxlen: 19 217.168.32.0/20 maxlen: 20 217.168.48.0/20 maxlen: 20 2a00:e2c0::/32 maxlen: 32 2a00:e2c0::/33 maxlen: 33 2a00:e2c0:8000::/33 maxlen: 33 2a02:aa00::/27 maxlen: 27 2a02:aa00::/28 maxlen: 28 2a02:aa10::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:e7:08:97:3b:99:57:a7:8c:e4:44:92:47:15:c8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978 Validity Not Before: Jan 14 09:47:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab1a323663142947f2164572b8019900ce18b93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:fc:ab:33:28:49:39:e6:1c:81:95:4f:19: c9:34:eb:8b:1d:df:4e:c9:7b:09:91:a7:59:9e:0b: 3e:5e:0a:fe:ef:9d:2b:fc:29:cb:f2:46:c6:cf:59: 22:37:56:1b:43:37:4d:d7:14:9a:54:f1:0f:bf:4c: bd:aa:2f:a9:18:dc:03:80:12:1e:7c:f4:e3:e9:04: dc:99:c0:37:37:8b:74:62:43:51:f3:ef:20:6f:cd: 01:59:16:4d:8a:d5:d2:bb:f8:45:d2:a6:a4:9b:a4: a2:5e:49:14:f7:2c:e5:dc:25:9c:e2:ca:23:96:58: 4e:4f:dd:54:ae:5a:c0:ef:22:13:2f:a7:62:f5:27: 42:a5:8f:79:46:93:e3:a2:e0:5f:16:97:f8:9b:38: 33:c6:69:94:95:4f:bf:b7:82:23:0d:a3:d0:3e:eb: e5:34:ca:b9:d1:51:48:82:37:b7:7f:75:8e:f6:ca: b0:61:6a:74:67:17:9e:24:0b:a2:3d:0e:b6:12:4a: 54:bc:6b:df:10:3d:15:03:78:19:11:78:42:df:98: 61:b1:09:38:83:96:73:c5:56:6f:ff:f9:ab:6a:d3: 7b:ba:65:d2:ba:f0:77:eb:ff:8c:8a:2d:a8:72:b0: bf:04:3d:03:60:5f:84:b3:eb:25:11:84:15:76:ce: b6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:32:36:63:14:29:47:F2:16:45:72:B8:01:99:00:CE:18:B9:3F X509v3 Authority Key Identifier: keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/qxoyNmMUKUfyFkVyuAGZAM4YuT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.128.0/17 46.126.0.0/15 46.140.0.0/16 62.2.0.0/16 77.56.0.0/14 80.218.0.0/15 81.7.224.0/19 84.20.32.0-84.20.55.255 84.72.0.0-84.74.255.255 178.82.0.0/16 194.29.0.0/19 195.202.192.0/18 212.47.160.0/19 213.193.64.0/18 217.162.0.0/16 217.168.32.0/19 IPv6: 2a00:e2c0::/32 2a02:aa00::/27 Signature Algorithm: sha256WithRSAEncryption 2a:f7:1f:ef:1e:4a:52:ba:aa:56:b2:fc:46:95:0a:0f:77:b1: 93:b2:c2:81:63:20:f7:92:3f:d9:52:cd:f6:68:ac:ae:55:d3: 7f:c9:31:89:b9:27:3c:bb:d8:e8:e0:2d:39:e8:d0:8b:ae:01: 85:eb:c1:6f:96:64:07:eb:cc:49:01:b7:03:8e:3e:ae:b6:ea: 2f:b6:ea:fb:80:ca:a4:6a:59:ba:d1:c9:0e:21:a5:a3:a0:b9: 3f:52:e0:18:92:3b:81:bb:f9:42:75:c1:5b:b3:64:20:7a:2f: 42:87:2f:09:4f:aa:fa:78:24:6c:3a:a6:cb:df:8c:20:cd:1d: 26:34:72:22:32:cd:d3:94:5e:2e:94:e6:94:d1:6c:e4:ec:66: 85:4f:d5:4d:05:f2:a9:14:e6:e7:9c:32:57:aa:fb:92:c0:67: c3:e6:5e:99:4f:17:1f:40:98:d4:8a:f4:42:50:79:da:ab:40: 10:8e:5b:20:72:62:00:e0:5d:a8:aa:9e:10:92:3e:30:0f:82: 52:8d:1b:6f:89:50:a9:0a:c3:54:33:5b:90:ff:6a:d3:fc:f4: 59:8f:2e:4a:13:8c:40:13:0e:9e:74:12:bf:ff:55:03:ec:08: 57:86:53:68:7d:1d:62:78:64:79:74:3b:bd:27:84:1a:7b:a0: 90:58:45:48 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZu75wiXO5lXp4zkRJJHFcifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl ZGU5NzgwHhcNMjYwMTE0MDk0NzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjFhMzIzNjYzMTQyOTQ3ZjIxNjQ1NzJiODAxOTkwMGNlMThiOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7r8qzMoSTnmHIGVTxnJNOuLHd9O yXsJkadZngs+Xgr+750r/CnL8kbGz1kiN1YbQzdN1xSaVPEPv0y9qi+pGNwDgBIe fPTj6QTcmcA3N4t0YkNR8+8gb80BWRZNitXSu/hF0qakm6SiXkkU9yzl3CWc4soj llhOT91UrlrA7yITL6di9SdCpY95RpPjouBfFpf4mzgzxmmUlU+/t4IjDaPQPuvl NMq50VFIgje3f3WO9sqwYWp0ZxeeJAuiPQ62EkpUvGvfED0VA3gZEXhC35hhsQk4 g5ZzxVZv//mratN7umXSuvB36/+Mii2ocrC/BD0DYF+Es+slEYQVds62SwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFKsaMjZjFClH8hZFcrgBmQDOGLk/MB8GA1UdIwQY MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt NDZhNDNlZjAyMjFiLzEvcXhveU5tTVVLVWZ5RmtWeXVBR1pBTTRZdVQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBtBAIAATBnAwQHHwqA AwMBLn4DAwAujAMDAD4CAwMCTTgDAwFQ2gMEBVEH4DAMAwQFVBQgAwQDVBQwMAoD AwNUSAMDAFRKAwMAslIDBAXCHQADBAbDysADBAXUL6ADBAbVwUADAwDZogMEBdmo IDAUBAIAAjAOAwUAKgDiwAMFBSoCqgAwDQYJKoZIhvcNAQELBQADggEBACr3H+8e SlK6qlay/EaVCg93sZOywoFjIPeSP9lSzfZorK5V03/JMYm5Jzy72OjgLTno0Iuu AYXrwW+WZAfrzEkBtwOOPq626i+26vuAyqRqWbrRyQ4hpaOguT9S4BiSO4G7+UJ1 wVuzZCB6L0KHLwlPqvp4JGw6psvfjCDNHSY0ciIyzdOUXi6U5pTRbOTsZoVP1U0F 8qkU5uecMleq+5LAZ8PmXplPFx9AmNSK9EJQedqrQBCOWyByYgDgXaiqnhCSPjAP glKNG2+JUKkKw1QzW5D/atP89FmPLkoTjEATDp50Er//VQPsCFeGU2h9HWJ4ZHl0 O70nhBp7oJBYRUg= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:34 2026 by rpki-client