This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QTBrBqA4dfpvXWxS7rT_7u9s7D4.roa File: QTBrBqA4dfpvXWxS7rT_7u9s7D4.roa (raw, json) Hash identifier: q1cvbnS2EQ1ubs0CiHOn356KC8JU+HVZsADsbW7PiwQ= Subject key identifier: 41:30:6B:06:A0:38:75:FA:6F:5D:6C:52:EE:B4:FF:EE:EF:6C:EC:3E Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019BBD5BA8814F56E6D517B6F0681D6AE102 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QTBrBqA4dfpvXWxS7rT_7u9s7D4.roa Signing time: Wed 14 Jan 2026 16:34:19 +0000 ROA not before: Wed 14 Jan 2026 16:34:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 62.76.227.0/24 maxlen: 24 185.72.10.0/24 maxlen: 24 192.124.190.0/24 maxlen: 24 193.124.4.0/24 maxlen: 24 193.124.7.0/24 maxlen: 24 193.124.18.0/24 maxlen: 24 193.124.89.0/24 maxlen: 24 193.124.205.0/24 maxlen: 24 193.124.226.0/24 maxlen: 24 194.58.58.0/24 maxlen: 24 194.58.155.0/24 maxlen: 24 194.58.223.0/24 maxlen: 24 194.87.33.0/24 maxlen: 24 194.87.52.0/24 maxlen: 24 194.87.53.0/24 maxlen: 24 194.87.59.0/24 maxlen: 24 194.87.61.0/24 maxlen: 24 194.87.75.0/24 maxlen: 24 194.87.78.0/24 maxlen: 24 194.87.119.0/24 maxlen: 24 194.87.126.0/24 maxlen: 24 194.87.136.0/24 maxlen: 24 194.87.152.0/24 maxlen: 24 194.87.169.0/24 maxlen: 24 194.87.179.0/24 maxlen: 24 194.87.193.0/24 maxlen: 24 194.87.194.0/24 maxlen: 24 194.87.195.0/24 maxlen: 24 194.87.212.0/24 maxlen: 24 194.87.228.0/24 maxlen: 24 194.87.229.0/24 maxlen: 24 194.87.231.0/24 maxlen: 24 194.135.24.0/24 maxlen: 24 195.133.19.0/24 maxlen: 24 195.133.24.0/23 maxlen: 23 195.133.29.0/24 maxlen: 24 195.133.35.0/24 maxlen: 24 195.133.40.0/23 maxlen: 23 195.133.50.0/23 maxlen: 23 195.133.57.0/24 maxlen: 24 195.133.58.0/24 maxlen: 24 195.133.92.0/23 maxlen: 23 212.192.241.0/24 maxlen: 24 212.192.242.0/24 maxlen: 24 212.192.247.0/24 maxlen: 24 212.192.249.0/24 maxlen: 24 212.193.0.0/24 maxlen: 24 212.193.26.0/23 maxlen: 23 2a01:57c0::/29 maxlen: 29 2a0c:ff40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:5b:a8:81:4f:56:e6:d5:17:b6:f0:68:1d:6a:e1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 14 16:34:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41306b06a03875fa6f5d6c52eeb4ffeeef6cec3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:f0:a7:f8:b3:21:5e:53:a6:ed:8d:46:9b: ed:e5:81:ec:2a:2e:23:f7:3c:e5:f3:74:06:b7:23: a6:c1:f1:4a:e3:23:37:e2:4e:17:4b:45:21:d2:6d: 80:e2:3a:4f:75:36:61:b1:58:4f:bd:1a:69:67:78: 61:a4:55:3c:25:a3:12:eb:ad:47:dd:bd:6e:61:cc: f6:8c:2a:3c:bb:0b:a4:af:78:0e:a7:ca:78:c5:88: ec:b3:75:15:fa:aa:c3:d6:64:db:f5:eb:2c:5c:a6: 06:d9:6a:e1:81:e9:0d:fd:da:0c:6b:cd:d6:af:3a: cd:cc:9b:b8:b3:db:47:a5:6a:06:0d:7e:53:13:e6: 14:63:cf:06:24:71:6d:34:2d:01:35:a7:c3:e8:61: f8:4e:32:0f:d4:69:a9:db:c3:f8:e2:9f:de:e4:dd: a4:12:a8:7c:38:34:6e:38:8e:df:8e:6c:bf:84:77: 54:49:2c:02:83:4e:ae:1a:9a:e0:a2:f1:a8:b5:e7: 5a:d2:3b:ed:a2:48:b3:d9:dd:35:4c:e4:c2:18:ae: 3c:ae:31:66:f1:e6:4c:2b:37:1d:03:4f:70:c4:3d: 35:9d:bf:77:6a:50:6b:53:8a:d8:26:b5:51:de:b1: fc:80:6f:cd:4d:0f:ab:cf:c0:ec:32:ce:51:7d:47: dd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:30:6B:06:A0:38:75:FA:6F:5D:6C:52:EE:B4:FF:EE:EF:6C:EC:3E X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QTBrBqA4dfpvXWxS7rT_7u9s7D4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.227.0/24 185.72.10.0/24 192.124.190.0/24 193.124.4.0/24 193.124.7.0/24 193.124.18.0/24 193.124.89.0/24 193.124.205.0/24 193.124.226.0/24 194.58.58.0/24 194.58.155.0/24 194.58.223.0/24 194.87.33.0/24 194.87.52.0/23 194.87.59.0/24 194.87.61.0/24 194.87.75.0/24 194.87.78.0/24 194.87.119.0/24 194.87.126.0/24 194.87.136.0/24 194.87.152.0/24 194.87.169.0/24 194.87.179.0/24 194.87.193.0-194.87.195.255 194.87.212.0/24 194.87.228.0/23 194.87.231.0/24 194.135.24.0/24 195.133.19.0/24 195.133.24.0/23 195.133.29.0/24 195.133.35.0/24 195.133.40.0/23 195.133.50.0/23 195.133.57.0-195.133.58.255 195.133.92.0/23 212.192.241.0-212.192.242.255 212.192.247.0/24 212.192.249.0/24 212.193.0.0/24 212.193.26.0/23 IPv6: 2a01:57c0::/29 2a0c:ff40::/29 Signature Algorithm: sha256WithRSAEncryption 05:84:2e:ea:84:b4:bc:53:6b:f5:ad:e3:71:c6:42:c9:8f:56: 70:ed:96:e2:5a:e5:c2:67:5d:9c:21:51:61:de:c2:e2:e7:5a: d0:01:19:59:fb:f7:02:8b:0e:20:0b:ab:d4:d6:e4:b4:88:fd: c3:82:91:ab:f1:f3:95:90:be:65:0f:9a:d7:54:8b:77:dd:2f: df:cd:b3:c4:99:b0:18:9d:96:a1:06:a0:3e:7d:a5:45:9a:df: 1d:a4:f5:ed:0f:63:f8:32:5d:f9:1e:8a:71:7f:ba:10:68:35: 33:2b:d2:4c:8c:a6:fb:4e:94:72:3f:d0:01:d0:99:07:42:92: 74:55:7d:70:9b:9b:05:b3:ca:1a:bb:95:4b:7e:d8:41:b5:e9: 10:ef:9b:fe:98:7d:ab:20:58:92:26:5f:6c:18:31:ce:6d:b1: bc:5e:1f:1c:7d:b9:41:c4:96:d4:44:c2:11:1a:ca:33:ba:31: 14:d4:6e:78:f6:1e:b6:7f:9f:f8:ff:4d:7b:e1:87:42:71:58: 36:6a:d5:66:2c:e4:35:8e:0e:72:bb:4b:fc:cf:6f:fa:e1:26: 35:9e:03:a3:3f:04:b3:bd:33:03:b0:11:d5:e2:9c:34:57:70: f7:64:e6:0c:80:56:5c:2c:39:37:21:18:a9:60:7e:72:8c:22: 8e:cd:c9:21 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgISAZu9W6iBT1bm1Re28GgdauECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTE0MTYzNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTMwNmIwNmEwMzg3NWZhNmY1ZDZjNTJlZWI0ZmZlZWVmNmNlYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb3wp/izIV5Tpu2NRpvt5YHsKi4j 9zzl83QGtyOmwfFK4yM34k4XS0Uh0m2A4jpPdTZhsVhPvRppZ3hhpFU8JaMS661H 3b1uYcz2jCo8uwukr3gOp8p4xYjss3UV+qrD1mTb9essXKYG2WrhgekN/doMa83W rzrNzJu4s9tHpWoGDX5TE+YUY88GJHFtNC0BNafD6GH4TjIP1Gmp28P44p/e5N2k Eqh8ODRuOI7fjmy/hHdUSSwCg06uGprgovGoteda0jvtokiz2d01TOTCGK48rjFm 8eZMKzcdA09wxD01nb93alBrU4rYJrVR3rH8gG/NTQ+rz8DsMs5RfUfdTQIDAQAB o4IDNzCCAzMwHQYDVR0OBBYEFEEwawagOHX6b11sUu60/+7vbOw+MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvUVRCckJxQTRkZnB2WFd4UzdyVF83dTlzN0Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBSwYIKwYBBQUHAQcBAf8EggE6MIIBNjCCARwEAgABMIIB FAMEAD5M4wMEALlICgMEAMB8vgMEAMF8BAMEAMF8BwMEAMF8EgMEAMF8WQMEAMF8 zQMEAMF84gMEAMI6OgMEAMI6mwMEAMI63wMEAMJXIQMEAcJXNAMEAMJXOwMEAMJX PQMEAMJXSwMEAMJXTgMEAMJXdwMEAMJXfgMEAMJXiAMEAMJXmAMEAMJXqQMEAMJX szAMAwQAwlfBAwQCwlfAAwQAwlfUAwQBwlfkAwQAwlfnAwQAwocYAwQAw4UTAwQB w4UYAwQAw4UdAwQAw4UjAwQBw4UoAwQBw4UyMAwDBADDhTkDBADDhToDBAHDhVww DAMEANTA8QMEANTA8gMEANTA9wMEANTA+QMEANTBAAMEAdTBGjAUBAIAAjAOAwUD KgFXwAMFAyoM/0AwDQYJKoZIhvcNAQELBQADggEBAAWELuqEtLxTa/Wt43HGQsmP VnDtluJa5cJnXZwhUWHewuLnWtABGVn79wKLDiALq9TW5LSI/cOCkavx85WQvmUP mtdUi3fdL9/Ns8SZsBidlqEGoD59pUWa3x2k9e0PY/gyXfkeinF/uhBoNTMr0kyM pvtOlHI/0AHQmQdCknRVfXCbmwWzyhq7lUt+2EG16RDvm/6YfasgWJImX2wYMc5t sbxeHxx9uUHEltREwhEayjO6MRTUbnj2HrZ/n/j/TXvhh0JxWDZq1WYs5DWODnK7 S/zPb/rhJjWeA6M/BLO9MwOwEdXinDRXcPdk5gyAVlwsOTchGKlgfnKMIo7NySE= -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:03 2026 by rpki-client