This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QYDXufPeVwDCm1RormqOaW0LIZs.roa File: QYDXufPeVwDCm1RormqOaW0LIZs.roa (raw, json) Hash identifier: dNYzfRpqOHJ0gRS3j1JSvv783SnzU/25HfeDXzUUBWs= Subject key identifier: 41:80:D7:B9:F3:DE:57:00:C2:9B:54:68:AE:6A:8E:69:6D:0B:21:9B Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B9374B9C33B2088092546AFA239A1DC4E Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QYDXufPeVwDCm1RormqOaW0LIZs.roa Signing time: Tue 06 Jan 2026 13:17:39 +0000 ROA not before: Tue 06 Jan 2026 13:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 62.76.227.0/24 maxlen: 24 185.72.10.0/24 maxlen: 24 192.124.190.0/24 maxlen: 24 193.124.4.0/24 maxlen: 24 193.124.7.0/24 maxlen: 24 193.124.89.0/24 maxlen: 24 193.124.205.0/24 maxlen: 24 193.124.226.0/24 maxlen: 24 194.58.58.0/24 maxlen: 24 194.58.155.0/24 maxlen: 24 194.58.223.0/24 maxlen: 24 194.87.33.0/24 maxlen: 24 194.87.52.0/24 maxlen: 24 194.87.53.0/24 maxlen: 24 194.87.59.0/24 maxlen: 24 194.87.61.0/24 maxlen: 24 194.87.75.0/24 maxlen: 24 194.87.78.0/24 maxlen: 24 194.87.119.0/24 maxlen: 24 194.87.126.0/24 maxlen: 24 194.87.136.0/24 maxlen: 24 194.87.152.0/24 maxlen: 24 194.87.169.0/24 maxlen: 24 194.87.179.0/24 maxlen: 24 194.87.193.0/24 maxlen: 24 194.87.194.0/24 maxlen: 24 194.87.195.0/24 maxlen: 24 194.87.212.0/24 maxlen: 24 194.87.228.0/24 maxlen: 24 194.87.229.0/24 maxlen: 24 194.87.231.0/24 maxlen: 24 194.135.24.0/24 maxlen: 24 195.133.19.0/24 maxlen: 24 195.133.24.0/23 maxlen: 23 195.133.29.0/24 maxlen: 24 195.133.35.0/24 maxlen: 24 195.133.40.0/23 maxlen: 23 195.133.50.0/23 maxlen: 23 195.133.57.0/24 maxlen: 24 195.133.58.0/24 maxlen: 24 195.133.92.0/23 maxlen: 23 212.192.241.0/24 maxlen: 24 212.192.242.0/24 maxlen: 24 212.192.247.0/24 maxlen: 24 212.192.249.0/24 maxlen: 24 212.193.0.0/24 maxlen: 24 212.193.26.0/23 maxlen: 23 2a01:57c0::/29 maxlen: 29 2a0c:ff40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:74:b9:c3:3b:20:88:09:25:46:af:a2:39:a1:dc:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 6 13:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4180d7b9f3de5700c29b5468ae6a8e696d0b219b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:39:6d:f5:d4:7d:5c:3c:58:83:ff:db:7b: 28:f3:f0:c5:ee:82:5e:27:70:ac:2b:20:67:86:c9: 47:91:fa:90:2f:1b:66:70:ad:2b:39:41:57:0f:9e: 9b:1e:b4:ae:12:47:b8:89:ae:c8:3e:6b:96:54:23: 86:b1:85:2d:fb:3f:f1:5d:02:b9:22:7e:dc:34:68: e5:64:eb:17:3b:07:8c:dc:5a:24:66:14:0a:61:94: ae:9b:92:28:d1:49:f8:1b:4e:0d:63:c1:d5:0a:c3: b9:b9:10:f2:23:e0:22:b1:a6:58:23:a3:09:cb:88: b6:47:40:0b:06:f3:ef:7e:33:65:7c:01:3c:8e:cf: 97:bb:c4:c5:db:fb:8f:ea:20:cf:7d:ae:06:77:05: b1:11:d4:a0:51:b4:a3:ca:f3:8e:9f:5e:79:db:31: 7b:2f:c7:79:68:78:51:d2:27:73:5a:22:33:32:db: 9d:82:4b:fd:fa:aa:a7:41:44:85:58:7f:f0:f1:f9: 5d:3a:2b:8d:21:99:8f:10:ef:11:74:8b:d0:9f:3f: 89:96:3b:ae:8d:04:51:9a:a0:36:24:c7:01:d0:83: 87:8c:82:9c:7d:c8:2f:7c:3f:66:9c:61:e4:9d:b9: 7f:f5:d6:ec:3c:9d:7e:e4:d4:30:e9:de:09:f2:9c: e0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:80:D7:B9:F3:DE:57:00:C2:9B:54:68:AE:6A:8E:69:6D:0B:21:9B X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QYDXufPeVwDCm1RormqOaW0LIZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.227.0/24 185.72.10.0/24 192.124.190.0/24 193.124.4.0/24 193.124.7.0/24 193.124.89.0/24 193.124.205.0/24 193.124.226.0/24 194.58.58.0/24 194.58.155.0/24 194.58.223.0/24 194.87.33.0/24 194.87.52.0/23 194.87.59.0/24 194.87.61.0/24 194.87.75.0/24 194.87.78.0/24 194.87.119.0/24 194.87.126.0/24 194.87.136.0/24 194.87.152.0/24 194.87.169.0/24 194.87.179.0/24 194.87.193.0-194.87.195.255 194.87.212.0/24 194.87.228.0/23 194.87.231.0/24 194.135.24.0/24 195.133.19.0/24 195.133.24.0/23 195.133.29.0/24 195.133.35.0/24 195.133.40.0/23 195.133.50.0/23 195.133.57.0-195.133.58.255 195.133.92.0/23 212.192.241.0-212.192.242.255 212.192.247.0/24 212.192.249.0/24 212.193.0.0/24 212.193.26.0/23 IPv6: 2a01:57c0::/29 2a0c:ff40::/29 Signature Algorithm: sha256WithRSAEncryption 63:b6:c6:e3:77:75:d4:22:c7:af:61:90:8d:2c:8d:60:a6:2a: 15:7f:89:cd:52:98:90:fb:c3:45:a1:b0:f3:e5:76:67:3f:60: 89:db:ba:87:52:11:00:04:08:c7:a5:84:61:96:32:55:09:ea: 9c:b3:85:24:a2:7b:af:84:3a:29:83:5b:65:c7:8e:29:b2:14: 8f:13:11:fa:46:4f:9c:62:93:b4:71:52:61:74:a8:02:4c:b8: f7:7e:77:12:1e:10:37:e4:3f:f1:de:c6:be:21:0d:aa:24:58: e0:5e:cd:52:f0:b2:76:c2:00:36:bc:76:1e:3d:ab:30:86:3b: 67:8c:e1:ea:d4:74:51:6f:87:90:69:3a:94:2b:42:55:1f:c5: 0e:1a:ae:a1:c7:0c:38:70:8d:90:d0:1f:68:70:48:59:69:8d: e8:2f:95:b5:5d:7a:0a:9c:a6:2d:0d:06:ac:4d:52:2e:cd:fc: bf:63:35:ed:df:80:a3:47:22:75:b5:c4:ea:44:82:80:ef:b7: bd:8e:71:1f:66:b3:16:6c:87:b8:b0:62:fd:b7:c4:60:3c:e1: 4f:63:b6:7a:76:0f:dd:8a:a7:79:c5:b8:b6:81:97:1e:f6:24: ca:a2:52:5b:9f:e7:82:ff:d8:75:27:ea:b1:08:11:2b:e2:67: 7e:87:86:c4 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgISAZuTdLnDOyCICSVGr6I5odxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTA2MTMxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTgwZDdiOWYzZGU1NzAwYzI5YjU0NjhhZTZhOGU2OTZkMGIyMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO85bfXUfVw8WIP/23so8/DF7oJe J3CsKyBnhslHkfqQLxtmcK0rOUFXD56bHrSuEke4ia7IPmuWVCOGsYUt+z/xXQK5 In7cNGjlZOsXOweM3FokZhQKYZSum5Io0Un4G04NY8HVCsO5uRDyI+AisaZYI6MJ y4i2R0ALBvPvfjNlfAE8js+Xu8TF2/uP6iDPfa4GdwWxEdSgUbSjyvOOn1552zF7 L8d5aHhR0idzWiIzMtudgkv9+qqnQUSFWH/w8fldOiuNIZmPEO8RdIvQnz+Jljuu jQRRmqA2JMcB0IOHjIKcfcgvfD9mnGHknbl/9dbsPJ1+5NQw6d4J8pzgKQIDAQAB o4IDMTCCAy0wHQYDVR0OBBYEFEGA17nz3lcAwptUaK5qjmltCyGbMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvUVlEWHVmUGVWd0RDbTFSb3JtcU9hVzBMSVpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBRQYIKwYBBQUHAQcBAf8EggE0MIIBMDCCARYEAgABMIIB DgMEAD5M4wMEALlICgMEAMB8vgMEAMF8BAMEAMF8BwMEAMF8WQMEAMF8zQMEAMF8 4gMEAMI6OgMEAMI6mwMEAMI63wMEAMJXIQMEAcJXNAMEAMJXOwMEAMJXPQMEAMJX SwMEAMJXTgMEAMJXdwMEAMJXfgMEAMJXiAMEAMJXmAMEAMJXqQMEAMJXszAMAwQA wlfBAwQCwlfAAwQAwlfUAwQBwlfkAwQAwlfnAwQAwocYAwQAw4UTAwQBw4UYAwQA w4UdAwQAw4UjAwQBw4UoAwQBw4UyMAwDBADDhTkDBADDhToDBAHDhVwwDAMEANTA 8QMEANTA8gMEANTA9wMEANTA+QMEANTBAAMEAdTBGjAUBAIAAjAOAwUDKgFXwAMF AyoM/0AwDQYJKoZIhvcNAQELBQADggEBAGO2xuN3ddQix69hkI0sjWCmKhV/ic1S mJD7w0WhsPPldmc/YInbuodSEQAECMelhGGWMlUJ6pyzhSSie6+EOimDW2XHjimy FI8TEfpGT5xik7RxUmF0qAJMuPd+dxIeEDfkP/Hexr4hDaokWOBezVLwsnbCADa8 dh49qzCGO2eM4erUdFFvh5BpOpQrQlUfxQ4arqHHDDhwjZDQH2hwSFlpjegvlbVd egqcpi0NBqxNUi7N/L9jNe3fgKNHInW1xOpEgoDvt72OcR9msxZsh7iwYv23xGA8 4U9jtnp2D92Kp3nFuLaBlx72JMqiUluf54L/2HUn6rEIESviZ36HhsQ= -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:11 2026 by rpki-client