This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/QpvjAwQSAb8QSXvmrNvnntEyY3U.roa File: QpvjAwQSAb8QSXvmrNvnntEyY3U.roa (raw, json) Hash identifier: kfrZqFmtZDVQw+aY5msr/17RkeBACSLnC7rxObwL8MY= Subject key identifier: 42:9B:E3:03:04:12:01:BF:10:49:7B:E6:AC:DB:E7:9E:D1:32:63:75 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019BD5A46F3DF3FCD0D49A854CCC4B4FB03A Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/QpvjAwQSAb8QSXvmrNvnntEyY3U.roa Signing time: Mon 19 Jan 2026 09:44:41 +0000 ROA not before: Mon 19 Jan 2026 09:44:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199527 IP address blocks: 80.81.39.0/24 maxlen: 24 83.223.157.0/24 maxlen: 24 85.254.12.0/24 maxlen: 24 85.254.13.0/24 maxlen: 24 85.254.14.0/24 maxlen: 24 85.254.15.0/24 maxlen: 24 91.190.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:a4:6f:3d:f3:fc:d0:d4:9a:85:4c:cc:4b:4f:b0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 19 09:44:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=429be303041201bf10497be6acdbe79ed1326375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:10:df:19:55:98:3f:e1:f4:05:f2:36:08: 32:e8:8e:06:d4:e0:54:83:1e:23:40:4b:5a:04:41: 0b:6c:b4:13:74:ba:18:51:34:0e:f4:e2:96:b6:f5: 0b:3e:b6:4d:c9:34:7a:be:9a:c0:fe:81:03:7a:d2: c2:10:b9:49:5a:15:1c:a9:b1:1a:ee:a4:28:c1:a5: dd:66:70:ff:19:a2:25:60:6b:9f:21:d6:99:ad:02: 05:bc:43:64:a9:af:c4:ee:a5:c6:28:25:f6:f0:63: 93:fd:27:54:c4:cf:4a:06:28:b8:a9:fa:70:fb:e4: 97:b9:7d:00:48:5d:8d:3c:3a:6c:ba:22:3c:af:d8: 1d:58:59:1d:97:2f:5e:6a:49:f2:a8:5a:c0:23:4f: 64:ec:bf:39:d3:35:31:4a:ea:66:84:de:71:67:d1: 95:6f:3d:62:c0:54:0b:b2:fc:2b:c2:f5:1b:4a:07: a3:7c:f4:ee:de:a3:49:35:e9:0d:20:27:09:7c:e1: 87:16:a6:b8:6e:de:11:ce:0d:93:4b:78:a2:f0:9e: a5:f6:31:65:c3:eb:0c:e7:4a:1b:6b:29:2a:a6:f2: ad:d0:df:3e:7e:23:49:d3:d5:15:ca:4f:5f:36:13: 76:ed:c4:1a:59:d5:2f:41:6e:f5:45:93:5f:dc:98: 13:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9B:E3:03:04:12:01:BF:10:49:7B:E6:AC:DB:E7:9E:D1:32:63:75 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/QpvjAwQSAb8QSXvmrNvnntEyY3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.39.0/24 83.223.157.0/24 85.254.12.0/22 91.190.61.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:cc:38:27:70:a6:b9:9c:68:35:73:ed:33:d4:6c:ba:a7:70: 67:0f:d7:4d:6a:5d:f7:1a:e8:e3:a9:3d:72:d8:96:0e:94:68: c0:b1:24:e3:b8:ec:1d:96:53:41:01:d8:e7:f4:7c:36:8f:e5: ca:4e:e1:6f:3c:a1:bd:64:55:48:4e:ab:b3:c3:3c:54:7a:68: 9b:9e:03:36:7c:da:bc:ee:f2:98:e0:cc:55:7c:e2:ec:bb:c9: e1:00:c4:6b:be:08:df:c4:59:23:af:50:1e:b4:de:74:55:75: aa:27:be:2f:85:91:df:b5:fd:cb:cd:a4:cc:ab:ec:61:b5:bc: 3f:78:5d:d0:86:0f:78:66:51:26:33:bb:c8:86:9c:66:e2:59: 74:b4:b4:57:53:44:e7:5e:72:b1:a3:55:16:2c:8c:dd:cc:59: da:d5:17:e5:f1:ae:13:21:f3:9f:81:a7:19:5b:87:b7:24:fb: 0c:ca:8a:5e:2b:b7:50:d9:f4:8d:95:37:88:44:e0:47:28:cb: 9e:5c:de:f4:b2:3f:fd:ba:f4:93:36:08:08:ac:34:d8:35:8a: ec:24:d7:bb:16:b5:d7:07:48:9a:3a:d5:37:d2:9e:c5:c0:32: ff:70:f7:cf:1e:f5:55:13:00:e1:d5:19:bc:52:79:23:c2:b5: 9a:7a:7b:da -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvVpG898/zQ1JqFTMxLT7A6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTE5MDk0NDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjliZTMwMzA0MTIwMWJmMTA0OTdiZTZhY2RiZTc5ZWQxMzI2Mzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut8Q3xlVmD/h9AXyNggy6I4G1OBU gx4jQEtaBEELbLQTdLoYUTQO9OKWtvULPrZNyTR6vprA/oEDetLCELlJWhUcqbEa 7qQowaXdZnD/GaIlYGufIdaZrQIFvENkqa/E7qXGKCX28GOT/SdUxM9KBii4qfpw ++SXuX0ASF2NPDpsuiI8r9gdWFkdly9eaknyqFrAI09k7L850zUxSupmhN5xZ9GV bz1iwFQLsvwrwvUbSgejfPTu3qNJNekNICcJfOGHFqa4bt4Rzg2TS3ii8J6l9jFl w+sM50obaykqpvKt0N8+fiNJ09UVyk9fNhN27cQaWdUvQW71RZNf3JgToQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEKb4wMEEgG/EEl75qzb557RMmN1MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvUXB2akF3UVNBYjhRU1h2bXJOdm5udEV5WTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUFEnAwQA U9+dAwQCVf4MAwQAW749MA0GCSqGSIb3DQEBCwUAA4IBAQCfzDgncKa5nGg1c+0z 1Gy6p3BnD9dNal33GujjqT1y2JYOlGjAsSTjuOwdllNBAdjn9Hw2j+XKTuFvPKG9 ZFVITquzwzxUemibngM2fNq87vKY4MxVfOLsu8nhAMRrvgjfxFkjr1AetN50VXWq J74vhZHftf3LzaTMq+xhtbw/eF3Qhg94ZlEmM7vIhpxm4ll0tLRXU0TnXnKxo1UW LIzdzFna1Rfl8a4TIfOfgacZW4e3JPsMyopeK7dQ2fSNlTeIROBHKMueXN70sj/9 uvSTNggIrDTYNYrsJNe7FrXXB0iaOtU30p7FwDL/cPfPHvVVEwDh1Rm8UnkjwrWa enva -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:45 2026 by rpki-client