This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/Q_Zn7NI6lsZly6zYVx5ISjrPChQ.roa File: Q_Zn7NI6lsZly6zYVx5ISjrPChQ.roa (raw, json) Hash identifier: gWG2uNDqwP4RF3btrRpyjXejBso2oQJiOb7vaAvc7tA= Subject key identifier: 43:F6:67:EC:D2:3A:96:C6:65:CB:AC:D8:57:1E:48:4A:3A:CF:0A:14 Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2 Certificate serial: 019B7D5BD79CFAFBA37359A3D8E58D099AB1 Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/Q_Zn7NI6lsZly6zYVx5ISjrPChQ.roa Signing time: Fri 02 Jan 2026 06:18:49 +0000 ROA not before: Fri 02 Jan 2026 06:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48988 IP address blocks: 5.253.228.0/23 maxlen: 24 108.174.78.0/24 maxlen: 24 111.88.140.0/22 maxlen: 24 198.13.184.0/21 maxlen: 24 213.148.0.0/20 maxlen: 24 213.148.24.0/22 maxlen: 24 2a13:8280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d7:9c:fa:fb:a3:73:59:a3:d8:e5:8d:09:9a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2 Validity Not Before: Jan 2 06:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43f667ecd23a96c665cbacd8571e484a3acf0a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9d:f2:39:4b:0b:b0:b2:d4:01:96:32:68:69: 49:ae:35:96:30:1a:59:0c:7c:c1:17:8f:5e:e0:de: 81:b6:4c:23:7f:e3:65:94:38:eb:7e:a8:1b:2c:95: c9:9d:c7:b8:ca:64:9c:ed:13:70:98:7b:a2:9a:ac: ee:89:1d:53:36:63:f1:8a:56:47:fa:1d:e6:6d:8a: ba:66:d3:03:f1:bb:40:48:f6:39:c4:24:22:cd:79: fa:3d:b8:4a:66:93:aa:7f:a7:e1:89:54:a9:f6:38: 7c:75:e6:db:cb:36:e5:91:a7:e7:aa:aa:97:cc:80: 7f:bb:74:4e:26:ee:5a:dd:40:d0:12:07:be:6d:6b: ae:29:1d:04:ec:13:85:07:7f:67:28:a0:7f:13:a2: d1:b3:d7:b4:a8:bd:3b:7e:ac:41:17:84:4c:a2:a6: e2:de:f8:40:20:50:e4:77:bf:c9:4e:a1:65:9d:c0: 73:24:3d:c9:ae:00:2e:be:79:c8:5d:4e:3b:7e:1e: e3:ea:cd:23:5f:d7:92:8d:88:c6:06:c3:ea:6e:7b: f1:ee:c9:00:de:a0:18:3d:07:cb:76:48:55:cc:10: f6:b3:68:f8:be:aa:b5:a4:ab:f5:be:da:e4:da:fe: d1:0d:d1:5d:9a:ff:1e:e9:c3:ab:ac:05:68:53:ba: 17:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F6:67:EC:D2:3A:96:C6:65:CB:AC:D8:57:1E:48:4A:3A:CF:0A:14 X509v3 Authority Key Identifier: keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/Q_Zn7NI6lsZly6zYVx5ISjrPChQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.228.0/23 108.174.78.0/24 111.88.140.0/22 198.13.184.0/21 213.148.0.0/20 213.148.24.0/22 IPv6: 2a13:8280::/32 Signature Algorithm: sha256WithRSAEncryption 3e:05:ba:14:1f:23:13:6d:df:38:2c:5f:32:06:d2:60:ae:3a: a5:05:fa:b8:cf:bd:54:26:4e:aa:c5:7c:6c:a2:06:60:ca:a3: 59:db:2f:a5:62:ec:7a:ea:fd:12:da:db:a4:52:76:69:c5:01: ac:60:38:68:b2:b9:1e:ee:83:73:bf:28:85:55:2d:71:05:ad: 57:0b:a0:0f:06:25:3b:2c:65:76:8d:0a:08:a0:7d:71:49:7d: 69:1b:5f:c6:c7:fe:58:29:5b:5d:af:81:fb:64:86:82:af:55: 10:dc:a0:2c:e7:34:76:37:7a:31:1b:51:3f:ca:bc:cc:f0:5c: 22:c2:76:d5:b0:d6:3c:46:24:f0:ec:eb:b2:99:a1:7d:73:20: 13:04:e9:80:4b:54:3b:69:3b:ae:6b:3a:1b:60:7f:a3:0b:8c: 87:21:f2:1e:f2:64:e4:7f:57:a3:3c:e7:48:33:c9:f9:1c:5e: 26:31:a9:7e:c3:35:27:2a:3e:e0:84:1c:30:02:8f:0d:2e:72: 39:86:6e:cc:9a:f1:f4:5f:34:0f:ae:e6:50:f2:4b:7d:78:80: 39:00:16:7f:e0:95:57:c7:3f:d8:2a:85:bd:c2:09:b9:81:fe: f7:ef:87:8c:8a:30:82:55:f5:b6:ba:74:25:78:c1:8c:49:ec: 37:9d:2d:4c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt9W9ec+vujc1mj2OWNCZqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0M2QyYzhkYTgzZjVjM2M5NGFlOTQwYTBlZmQyYTc3MTRm ZjkwZTIwHhcNMjYwMTAyMDYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2Y2NjdlY2QyM2E5NmM2NjVjYmFjZDg1NzFlNDg0YTNhY2YwYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp3yOUsLsLLUAZYyaGlJrjWWMBpZ DHzBF49e4N6Btkwjf+NllDjrfqgbLJXJnce4ymSc7RNwmHuimqzuiR1TNmPxilZH +h3mbYq6ZtMD8btASPY5xCQizXn6PbhKZpOqf6fhiVSp9jh8debbyzblkafnqqqX zIB/u3ROJu5a3UDQEge+bWuuKR0E7BOFB39nKKB/E6LRs9e0qL07fqxBF4RMoqbi 3vhAIFDkd7/JTqFlncBzJD3JrgAuvnnIXU47fh7j6s0jX9eSjYjGBsPqbnvx7skA 3qAYPQfLdkhVzBD2s2j4vqq1pKv1vtrk2v7RDdFdmv8e6cOrrAVoU7oXfwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFEP2Z+zSOpbGZcus2FceSEo6zwoUMB8GA1UdIwQY MBaAFAQ9LI2oP1w8lK6UCg79KncU/5DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYzRjMjUtZTU1Mi00ZDBjLTk1ZWUt M2JiYzY2MWI0Y2M1LzEvUV9abjdOSTZsc1pseTZ6WVZ4NUlTanJQQ2hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lYzRjMjUtZTU1Mi00ZDBjLTk1ZWUtM2JiYzY2MWI0Y2M1 LzEvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBBf3kAwQA bK5OAwQCb1iMAwQDxg24AwQE1ZQAAwQC1ZQYMA0EAgACMAcDBQAqE4KAMA0GCSqG SIb3DQEBCwUAA4IBAQA+BboUHyMTbd84LF8yBtJgrjqlBfq4z71UJk6qxXxsogZg yqNZ2y+lYux66v0S2tukUnZpxQGsYDhosrke7oNzvyiFVS1xBa1XC6APBiU7LGV2 jQoIoH1xSX1pG1/Gx/5YKVtdr4H7ZIaCr1UQ3KAs5zR2N3oxG1E/yrzM8FwiwnbV sNY8RiTw7OuymaF9cyATBOmAS1Q7aTuuazobYH+jC4yHIfIe8mTkf1ejPOdIM8n5 HF4mMal+wzUnKj7ghBwwAo8NLnI5hm7MmvH0XzQPruZQ8kt9eIA5ABZ/4JVXxz/Y KoW9wgm5gf7374eMijCCVfW2unQleMGMSew3nS1M -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:05 2026 by rpki-client