This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa File: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (raw, json) Hash identifier: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg= Subject key identifier: AA:F0:D9:30:F8:0A:14:3E:E0:8B:94:38:E0:06:58:86:26:7E:F8:88 Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04 Certificate serial: 019B7F1574C6EAB1AAED84CFBCB56A09D55F Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15987 IP address blocks: 46.41.0.0/18 maxlen: 22 46.41.14.0/24 maxlen: 24 46.41.32.0/24 maxlen: 24 46.41.47.0/24 maxlen: 24 46.41.48.0/24 maxlen: 24 46.41.49.0/24 maxlen: 24 46.41.52.0/24 maxlen: 24 46.41.54.0/24 maxlen: 24 46.41.56.0/24 maxlen: 24 46.41.59.0/24 maxlen: 24 185.112.252.0/22 maxlen: 24 188.246.0.0/19 maxlen: 22 188.246.0.0/23 maxlen: 24 188.246.17.0/24 maxlen: 24 188.246.23.0/24 maxlen: 24 217.144.128.0/20 maxlen: 20 217.144.128.0/24 maxlen: 24 217.144.129.0/24 maxlen: 24 217.144.138.0/24 maxlen: 24 217.144.139.0/24 maxlen: 24 217.144.141.0/24 maxlen: 24 217.144.143.0/24 maxlen: 24 2a02:a00::/29 maxlen: 29 2a02:a00::/32 maxlen: 32 2a02:a00::/34 maxlen: 34 2a02:a00:d::/48 maxlen: 48 2a02:a00:f::/48 maxlen: 48 2a02:a00:1f::/48 maxlen: 48 2a02:a00:1009::/48 maxlen: 48 2a02:a00:1049::/48 maxlen: 48 2a02:a00:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:74:c6:ea:b1:aa:ed:84:cf:bc:b5:6a:09:d5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaf0d930f80a143ee08b9438e0065886267ef888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f1:dd:e4:8c:ad:5d:bb:15:aa:b2:7c:9c:65: 5a:e6:07:18:f7:03:c8:3a:94:1f:53:e7:fe:7a:a1: cf:0f:61:f8:c9:de:bf:e5:72:e8:68:66:18:6b:d4: 45:83:f0:72:d7:f3:67:02:a3:13:d2:8c:92:03:67: 5a:55:22:61:72:a6:17:98:fa:df:62:7a:63:e8:13: 37:f3:3d:33:3c:37:d0:45:8e:16:1a:20:cf:5a:4a: 25:6e:c7:a2:00:82:f5:0b:3d:33:16:dd:0c:95:11: 48:ee:e5:f4:11:92:83:0c:eb:fd:cc:0e:90:9d:6e: a0:01:8f:98:de:e3:86:fd:f0:ea:d9:bb:90:5b:2c: 65:c8:3b:39:62:09:43:a4:7a:b5:ff:b0:15:d3:ba: 72:80:99:41:ec:c4:52:23:63:21:6b:50:b3:a7:14: 5b:d1:69:71:64:50:58:25:eb:d9:72:61:30:90:c2: b0:2e:a5:b1:4e:fb:21:6a:b4:2c:97:97:f1:a8:e5: 29:1d:34:ac:e5:4d:1f:c8:b0:9f:be:96:5b:66:0a: ff:9e:5d:a9:4e:fd:8b:21:ec:23:df:e4:bd:b9:38: 0b:5e:11:a8:46:b8:ae:60:20:c3:a3:c8:96:c9:20: 0f:24:77:2a:15:ff:5e:21:dd:4a:7b:d7:54:50:b7: 05:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F0:D9:30:F8:0A:14:3E:E0:8B:94:38:E0:06:58:86:26:7E:F8:88 X509v3 Authority Key Identifier: keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.41.0.0/18 185.112.252.0/22 188.246.0.0/19 217.144.128.0/20 IPv6: 2a02:a00::/29 Signature Algorithm: sha256WithRSAEncryption 25:30:47:d9:a5:1b:79:34:b4:de:ca:e5:c0:0e:a8:fe:a6:21: e6:97:2f:77:8b:32:65:f7:9d:6d:fd:b1:df:af:c3:d3:d5:53: d7:ef:a9:fc:64:85:cd:9b:a7:59:62:07:a6:31:6c:79:3e:8e: 5a:19:af:f8:54:96:23:44:c4:df:05:b9:65:43:b9:93:d0:fd: 76:85:6f:7b:2b:83:a9:bd:9a:8a:8c:7b:28:74:73:ba:1d:ea: f7:e3:c7:e3:59:c0:41:b7:0f:75:c5:57:64:8c:46:4e:81:ca: b7:2f:bd:3e:fa:7e:a1:03:50:44:04:67:a4:4b:a5:52:03:1c: d8:5a:5e:63:64:50:ae:b8:76:06:ab:6f:e6:cc:12:53:a7:9b: 59:2f:c3:86:f9:24:dc:e4:d0:01:26:fe:37:a0:0a:87:78:bf: c8:61:9f:69:5e:e4:a7:fe:ce:08:c9:5e:39:09:49:7a:c4:f4: 47:35:fc:90:b1:3b:42:6c:bf:d7:3c:b1:c1:22:98:a2:81:82: 97:82:16:3b:be:47:75:75:96:b9:a7:0a:8e:e4:64:92:b9:40: 67:e6:07:ee:ee:55:95:f1:a0:d8:d3:cc:e4:a6:49:58:87:db: af:30:4c:05:7b:cb:0e:47:19:d2:87:1f:40:82:f8:9f:dd:a0: 4a:75:6a:e5 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/FXTG6rGq7YTPvLVqCdVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZWRkNmIwZTM2ZjRiZDhmMWQ1N2UyNmNjMWMyZDE4YzY5 OTNjMDQwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWYwZDkzMGY4MGExNDNlZTA4Yjk0MzhlMDA2NTg4NjI2N2VmODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvHd5IytXbsVqrJ8nGVa5gcY9wPI OpQfU+f+eqHPD2H4yd6/5XLoaGYYa9RFg/By1/NnAqMT0oySA2daVSJhcqYXmPrf Ynpj6BM38z0zPDfQRY4WGiDPWkolbseiAIL1Cz0zFt0MlRFI7uX0EZKDDOv9zA6Q nW6gAY+Y3uOG/fDq2buQWyxlyDs5YglDpHq1/7AV07pygJlB7MRSI2Mha1CzpxRb 0WlxZFBYJevZcmEwkMKwLqWxTvsharQsl5fxqOUpHTSs5U0fyLCfvpZbZgr/nl2p Tv2LIewj3+S9uTgLXhGoRriuYCDDo8iWySAPJHcqFf9eId1Ke9dUULcFUwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKrw2TD4ChQ+4IuUOOAGWIYmfviIMB8GA1UdIwQY MBaAFF3t1rDjb0vY8dV+JswcLRjGmTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODkt YzY5ODcxZjVkMzA1LzEvcXZEWk1QZ0tGRDdnaTVRNDRBWlloaVotLUlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODktYzY5ODcxZjVkMzA1 LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGLikAAwQC uXD8AwQFvPYAAwQE2ZCAMA0EAgACMAcDBQMqAgoAMA0GCSqGSIb3DQEBCwUAA4IB AQAlMEfZpRt5NLTeyuXADqj+piHmly93izJl951t/bHfr8PT1VPX76n8ZIXNm6dZ YgemMWx5Po5aGa/4VJYjRMTfBbllQ7mT0P12hW97K4OpvZqKjHsodHO6Her348fj WcBBtw91xVdkjEZOgcq3L70++n6hA1BEBGekS6VSAxzYWl5jZFCuuHYGq2/mzBJT p5tZL8OG+STc5NABJv43oAqHeL/IYZ9pXuSn/s4IyV45CUl6xPRHNfyQsTtCbL/X PLHBIpiigYKXghY7vkd1dZa5pwqO5GSSuUBn5gfu7lWV8aDY08zkpklYh9uvMEwF e8sORxnShx9Agvif3aBKdWrl -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:27 2026 by rpki-client