This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/QR0mWp5CB2k02nj5BSvnE7tpKAM.roa File: QR0mWp5CB2k02nj5BSvnE7tpKAM.roa (raw, json) Hash identifier: A8a1C7V27tTrnez+fuGaMRZjLBF20tyIIMaEIdlj6NQ= Subject key identifier: 41:1D:26:5A:9E:42:07:69:34:DA:78:F9:05:2B:E7:13:BB:69:28:03 Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Certificate serial: 019B7F1580EE1501C5722FF51A679549D907 Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/QR0mWp5CB2k02nj5BSvnE7tpKAM.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15580 IP address blocks: 91.206.86.0/24 maxlen: 24 185.55.192.0/24 maxlen: 24 193.8.188.0/24 maxlen: 24 193.58.216.0/24 maxlen: 24 193.58.222.0/23 maxlen: 23 193.58.222.0/24 maxlen: 24 193.58.223.0/24 maxlen: 24 193.194.6.0/23 maxlen: 23 193.194.10.0/23 maxlen: 23 193.194.10.0/24 maxlen: 24 193.194.11.0/24 maxlen: 24 193.194.12.0/22 maxlen: 22 194.127.0.0/18 maxlen: 18 194.127.0.0/24 maxlen: 24 194.127.1.0/24 maxlen: 24 194.127.2.0/24 maxlen: 24 194.127.3.0/24 maxlen: 24 194.127.4.0/24 maxlen: 24 194.127.5.0/24 maxlen: 24 194.127.9.0/24 maxlen: 24 194.127.9.64/27 maxlen: 27 194.127.9.224/27 maxlen: 27 194.127.10.0/24 maxlen: 24 194.127.11.0/24 maxlen: 24 194.127.12.0/24 maxlen: 24 194.127.13.0/24 maxlen: 24 194.127.14.0/24 maxlen: 24 194.127.15.0/24 maxlen: 24 194.127.16.0/24 maxlen: 24 194.127.17.0/24 maxlen: 24 194.127.19.0/24 maxlen: 24 194.127.20.0/24 maxlen: 24 194.127.21.0/24 maxlen: 24 194.127.22.0/24 maxlen: 24 194.127.23.0/24 maxlen: 24 194.127.24.0/23 maxlen: 23 194.127.26.0/23 maxlen: 23 194.127.26.0/24 maxlen: 24 194.127.27.0/24 maxlen: 24 194.127.28.0/24 maxlen: 24 194.127.29.0/24 maxlen: 24 194.127.30.0/24 maxlen: 24 194.127.31.0/24 maxlen: 24 194.127.32.0/22 maxlen: 24 194.127.32.0/24 maxlen: 24 194.127.33.0/24 maxlen: 24 194.127.34.0/24 maxlen: 24 194.127.35.0/24 maxlen: 24 194.127.64.0/24 maxlen: 24 194.127.65.0/24 maxlen: 24 194.127.66.0/24 maxlen: 24 194.127.67.0/24 maxlen: 24 194.127.72.0/24 maxlen: 24 194.127.73.0/24 maxlen: 24 194.127.74.0/24 maxlen: 24 194.127.75.0/24 maxlen: 24 194.127.76.0/24 maxlen: 24 194.127.81.0/24 maxlen: 24 194.127.88.0/24 maxlen: 24 194.127.89.0/24 maxlen: 24 2a01:6f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:80:ee:15:01:c5:72:2f:f5:1a:67:95:49:d9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=411d265a9e42076934da78f9052be713bb692803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5c:f0:96:b5:f8:89:33:27:32:b3:c8:22:8a: 19:04:07:c0:03:d3:67:2d:fb:d5:4c:02:da:e1:58: 81:3a:57:48:79:db:fe:a4:16:09:c2:6b:20:63:5d: 9c:ff:c2:c0:2a:b0:e8:ed:73:94:a5:a2:43:83:3b: 27:14:d6:a1:01:20:dd:a3:f1:7f:12:17:77:b7:dd: 27:49:06:81:b2:17:32:0c:d2:29:0b:61:e5:69:ff: 89:d7:93:e1:bd:53:e3:47:18:0f:33:68:47:90:32: df:67:7b:b3:3a:c7:41:2d:b0:55:76:69:a0:9a:36: fb:8a:a5:0d:bb:08:a6:ab:a2:6f:43:b3:3f:1d:a1: d3:0d:e4:8e:d7:a4:99:4c:e0:ca:0c:fc:bc:9d:fb: c5:b9:2c:f3:22:d2:95:fe:2d:7f:3f:01:ac:25:b4: 15:73:d7:9a:b1:10:6b:6e:36:af:7d:24:c4:40:c1: 0e:89:29:49:71:b8:ff:7c:7c:b3:31:e0:cd:33:72: 54:f5:dd:83:10:78:a1:18:67:39:05:da:76:8e:bb: 85:a1:e5:72:d4:4b:d0:15:fc:a9:48:bc:60:b4:90: 74:b5:fa:3c:ef:4c:78:12:49:eb:e0:12:81:bf:e4: ca:8a:ee:c4:c1:c1:c7:76:0a:e9:52:56:6c:e9:95: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1D:26:5A:9E:42:07:69:34:DA:78:F9:05:2B:E7:13:BB:69:28:03 X509v3 Authority Key Identifier: keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/QR0mWp5CB2k02nj5BSvnE7tpKAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.86.0/24 185.55.192.0/24 193.8.188.0/24 193.58.216.0/24 193.58.222.0/23 193.194.6.0/23 193.194.10.0-193.194.15.255 194.127.0.0-194.127.67.255 194.127.72.0-194.127.76.255 194.127.81.0/24 194.127.88.0/23 IPv6: 2a01:6f8::/32 Signature Algorithm: sha256WithRSAEncryption b8:a7:10:46:06:b9:f7:87:10:b2:39:09:95:ef:33:cf:6d:fe: 51:2f:75:5e:35:1f:fe:66:23:6b:06:b3:96:31:ae:a8:8f:e4: 10:71:c7:2f:9b:2a:11:87:07:12:21:8c:3c:47:a9:e3:89:ef: 57:17:a7:0d:05:25:c7:65:b3:f4:0d:58:61:6d:fd:c6:9d:d1: 0b:ed:a9:52:b8:61:dd:61:14:d6:b4:b5:42:0a:b6:a5:d5:fb: 86:11:aa:70:16:84:d3:ff:3f:61:16:08:9f:b7:20:37:6f:40: 79:59:c2:eb:be:86:88:19:fd:dc:e4:0d:9b:4a:12:90:18:1e: 19:ee:91:67:a0:4b:2b:7d:96:be:81:f9:5e:6a:0f:83:5e:c5: b8:17:19:f5:ea:ad:71:93:77:91:c9:cf:56:b4:97:fc:d7:1a: ca:1f:50:40:cc:66:71:f3:83:9a:b2:ec:cf:36:55:f2:5c:10: f1:e0:76:48:6e:53:83:ac:d8:00:8f:95:0c:81:87:47:60:e7: 56:f9:76:7e:5a:46:76:c8:52:f0:df:2b:20:b4:37:f3:cb:82: aa:40:bf:f2:bf:53:26:2f:86:43:e3:d4:4a:24:ae:cb:ae:82: d9:64:53:dc:fc:7c:d5:06:20:cf:44:d9:8f:82:5c:82:f2:0d: e7:cb:d7:78 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZt/FYDuFQHFci/1GmeVSdkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4 ZDQ3OWYwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTFkMjY1YTllNDIwNzY5MzRkYTc4ZjkwNTJiZTcxM2JiNjkyODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lzwlrX4iTMnMrPIIooZBAfAA9Nn LfvVTALa4ViBOldIedv+pBYJwmsgY12c/8LAKrDo7XOUpaJDgzsnFNahASDdo/F/ Ehd3t90nSQaBshcyDNIpC2Hlaf+J15PhvVPjRxgPM2hHkDLfZ3uzOsdBLbBVdmmg mjb7iqUNuwimq6JvQ7M/HaHTDeSO16SZTODKDPy8nfvFuSzzItKV/i1/PwGsJbQV c9easRBrbjavfSTEQMEOiSlJcbj/fHyzMeDNM3JU9d2DEHihGGc5Bdp2jruFoeVy 1EvQFfypSLxgtJB0tfo870x4Eknr4BKBv+TKiu7EwcHHdgrpUlZs6ZWnJwIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFEEdJlqeQgdpNNp4+QUr5xO7aSgDMB8GA1UdIwQY MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt YjE2NmFlMmVmMjg3LzEvUVIwbVdwNUNCMmswMm5qNUJTdm5FN3RwS0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3 LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwXwQCAAEwWQMEAFvOVgME ALk3wAMEAMEIvAMEAME62AMEAcE63gMEAcHCBjAMAwQBwcIKAwQEwcIAMAsDAwDC fwMEAsJ/QDAMAwQDwn9IAwQAwn9MAwQAwn9RAwQBwn9YMA0EAgACMAcDBQAqAQb4 MA0GCSqGSIb3DQEBCwUAA4IBAQC4pxBGBrn3hxCyOQmV7zPPbf5RL3VeNR/+ZiNr BrOWMa6oj+QQcccvmyoRhwcSIYw8R6njie9XF6cNBSXHZbP0DVhhbf3GndEL7alS uGHdYRTWtLVCCral1fuGEapwFoTT/z9hFgiftyA3b0B5WcLrvoaIGf3c5A2bShKQ GB4Z7pFnoEsrfZa+gfleag+DXsW4Fxn16q1xk3eRyc9WtJf81xrKH1BAzGZx84Oa suzPNlXyXBDx4HZIblODrNgAj5UMgYdHYOdW+XZ+WkZ2yFLw3ysgtDfzy4KqQL/y v1MmL4ZD49RKJK7LroLZZFPc/HzVBiDPRNmPglyC8g3ny9d4 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:53 2026 by rpki-client