This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nqPTijel0sjI7aDXUGlt_Fde92Y.roa File: nqPTijel0sjI7aDXUGlt_Fde92Y.roa (raw, json) Hash identifier: DvyP8KdtRWSR0UYK0csDHSGyPp6NHpLrz6BEvzevg0c= Subject key identifier: 9E:A3:D3:8A:37:A5:D2:C8:C8:ED:A0:D7:50:69:6D:FC:57:5E:F7:66 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C1390AFD9101B23C2ACB024EB7D0 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nqPTijel0sjI7aDXUGlt_Fde92Y.roa Signing time: Thu 01 Jan 2026 18:17:49 +0000 ROA not before: Thu 01 Jan 2026 18:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13194 IP address blocks: 80.81.61.0/24 maxlen: 24 85.254.71.0/24 maxlen: 24 85.254.73.0/24 maxlen: 24 85.254.74.0/23 maxlen: 23 85.254.74.0/24 maxlen: 24 85.254.75.0/24 maxlen: 24 85.254.76.0/22 maxlen: 22 85.254.76.0/24 maxlen: 24 85.254.80.0/22 maxlen: 22 85.254.84.0/23 maxlen: 23 85.254.92.0/22 maxlen: 22 85.254.92.0/23 maxlen: 23 85.254.92.0/24 maxlen: 24 85.254.93.0/24 maxlen: 24 85.254.94.0/24 maxlen: 24 85.254.95.0/24 maxlen: 24 85.254.96.0/22 maxlen: 22 85.254.96.0/23 maxlen: 23 85.254.98.0/23 maxlen: 23 85.254.100.0/24 maxlen: 24 85.254.101.0/24 maxlen: 24 85.254.102.0/24 maxlen: 24 85.254.124.0/23 maxlen: 23 85.254.141.0/24 maxlen: 24 85.254.149.0/24 maxlen: 24 85.254.151.0/24 maxlen: 24 85.254.152.0/22 maxlen: 22 85.254.159.0/24 maxlen: 24 85.254.161.0/24 maxlen: 24 85.254.168.0/24 maxlen: 24 85.254.169.0/24 maxlen: 24 85.254.170.0/24 maxlen: 24 85.254.176.0/23 maxlen: 23 91.190.45.0/24 maxlen: 24 159.148.73.0/24 maxlen: 24 159.148.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c1:39:0a:fd:91:01:b2:3c:2a:cb:02:4e:b7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea3d38a37a5d2c8c8eda0d750696dfc575ef766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:1c:d0:53:dc:a9:b9:44:f9:14:7e:62:15: 2a:f9:ec:cb:94:88:5e:d6:64:3c:7b:a7:72:34:f0: f0:09:22:88:19:15:b6:18:23:56:3f:97:41:c0:00: de:9e:22:69:dd:25:e9:45:5e:2a:c3:14:2d:4d:bd: f8:51:8b:69:9a:c0:db:3d:a9:b8:2b:49:20:d3:39: c9:92:fe:59:24:3a:1f:7f:27:90:a6:a5:49:53:5e: 36:59:bc:0e:8a:03:d5:97:d9:03:73:6e:4f:a4:54: 95:b5:fd:97:0d:b9:51:4c:e6:f1:fe:04:28:15:d5: 79:9d:2d:30:ce:9f:a7:0c:cc:d9:d6:61:50:e2:26: 2e:3a:ec:c4:b7:71:4d:1e:50:a7:e5:79:af:3b:c5: 28:d1:2d:2c:8f:d0:8d:33:41:d0:3d:1f:96:53:cd: 8d:18:bc:8e:b3:fb:6b:f4:de:21:04:47:3d:02:62: 60:f1:c8:94:37:5f:75:2b:5d:7b:c4:f0:01:05:0b: a4:cd:0e:97:65:df:ca:e5:b8:3a:e5:43:a1:13:2e: fc:91:bc:1f:bd:6e:f2:da:26:f4:85:3c:a7:65:5a: 37:ed:46:ae:0f:ce:73:68:8c:21:cf:0d:91:69:10: 03:2c:9c:d8:98:f5:8f:0f:3c:83:a2:9e:df:0c:dd: 94:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A3:D3:8A:37:A5:D2:C8:C8:ED:A0:D7:50:69:6D:FC:57:5E:F7:66 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nqPTijel0sjI7aDXUGlt_Fde92Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.61.0/24 85.254.71.0/24 85.254.73.0-85.254.85.255 85.254.92.0-85.254.102.255 85.254.124.0/23 85.254.141.0/24 85.254.149.0/24 85.254.151.0-85.254.155.255 85.254.159.0/24 85.254.161.0/24 85.254.168.0-85.254.170.255 85.254.176.0/23 91.190.45.0/24 159.148.73.0/24 159.148.249.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:77:e3:71:ab:0c:b9:4f:45:49:17:dc:47:9a:a9:61:d0:77: 70:19:0a:7d:a4:4a:7b:4e:be:b5:b3:3c:6a:0c:d7:c3:9a:64: 3c:39:69:d7:ca:75:28:9e:0b:6e:67:25:7c:5c:27:ab:cf:09: 5d:05:b5:30:23:68:be:59:62:7f:00:43:4e:83:69:5b:c2:48: 5f:75:36:89:df:98:02:67:ae:5d:d5:73:55:6f:1d:1e:a7:da: 92:90:ba:27:33:fb:f8:37:af:d9:70:4f:9d:1e:2a:2f:bb:05: 5a:07:9d:d8:b7:5a:a8:9b:14:24:cb:f1:22:3b:f7:dd:ca:6b: 5e:41:a5:c2:c4:32:f3:c2:1e:60:80:bf:56:20:7b:e6:4a:60: b6:9b:8c:ac:db:68:bf:24:eb:19:90:55:f3:93:cc:c2:e5:7c: 80:dd:62:e8:e0:56:08:14:d1:42:d6:20:ef:de:93:4a:f4:f3: 8a:51:2d:8d:f8:82:bf:97:18:4e:06:53:78:6e:ab:2f:9d:36: 3d:3d:29:b8:67:02:ca:6c:d6:cc:c8:b9:48:24:f9:2b:04:be: b5:9a:97:39:01:2d:c8:34:0d:75:79:34:af:dd:e8:f4:bb:8a: 99:45:80:60:3c:50:f6:66:18:fd:e1:0e:d7:8c:31:d2:79:d2: 7e:da:2b:c5 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt6x8E5Cv2RAbI8KssCTrfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWEzZDM4YTM3YTVkMmM4YzhlZGEwZDc1MDY5NmRmYzU3NWVmNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVgc0FPcqblE+RR+YhUq+ezLlIhe 1mQ8e6dyNPDwCSKIGRW2GCNWP5dBwADeniJp3SXpRV4qwxQtTb34UYtpmsDbPam4 K0kg0znJkv5ZJDoffyeQpqVJU142WbwOigPVl9kDc25PpFSVtf2XDblRTObx/gQo FdV5nS0wzp+nDMzZ1mFQ4iYuOuzEt3FNHlCn5XmvO8Uo0S0sj9CNM0HQPR+WU82N GLyOs/tr9N4hBEc9AmJg8ciUN191K117xPABBQukzQ6XZd/K5bg65UOhEy78kbwf vW7y2ib0hTynZVo37UauD85zaIwhzw2RaRADLJzYmPWPDzyDop7fDN2UcQIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFJ6j04o3pdLIyO2g11BpbfxXXvdmMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvbnFQVGlqZWwwc2pJN2FEWFVHbHRfRmRlOTJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEAFBR PQMEAFX+RzAMAwQAVf5JAwQBVf5UMAwDBAJV/lwDBABV/mYDBAFV/nwDBABV/o0D BABV/pUwDAMEAFX+lwMEAlX+mAMEAFX+nwMEAFX+oTAMAwQDVf6oAwQAVf6qAwQB Vf6wAwQAW74tAwQAn5RJAwQAn5T5MA0GCSqGSIb3DQEBCwUAA4IBAQAqd+Nxqwy5 T0VJF9xHmqlh0HdwGQp9pEp7Tr61szxqDNfDmmQ8OWnXynUongtuZyV8XCerzwld BbUwI2i+WWJ/AENOg2lbwkhfdTaJ35gCZ65d1XNVbx0ep9qSkLonM/v4N6/ZcE+d HiovuwVaB53Yt1qomxQky/EiO/fdymteQaXCxDLzwh5ggL9WIHvmSmC2m4ys22i/ JOsZkFXzk8zC5XyA3WLo4FYIFNFC1iDv3pNK9POKUS2N+IK/lxhOBlN4bqsvnTY9 PSm4ZwLKbNbMyLlIJPkrBL61mpc5AS3INA11eTSv3ej0u4qZRYBgPFD2Zhj94Q7X jDHSedJ+2ivF -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:15 2026 by rpki-client