This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/QdHInLlgS5JRpnU_JucTtPY8VJk.roa File: QdHInLlgS5JRpnU_JucTtPY8VJk.roa (raw, json) Hash identifier: QfoNmRCKJigBgYRu4CBAAOqEk87PTUk4h7GOHN5KHOs= Subject key identifier: 41:D1:C8:9C:B9:60:4B:92:51:A6:75:3F:26:E7:13:B4:F6:3C:54:99 Certificate issuer: /CN=cf40e25606651a075484c709fa766d80dad52d9c Certificate serial: 019B7B36689EBADC3199946AD4AF5631DB85 Authority key identifier: CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/QdHInLlgS5JRpnU_JucTtPY8VJk.roa Signing time: Thu 01 Jan 2026 20:18:41 +0000 ROA not before: Thu 01 Jan 2026 20:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25350 IP address blocks: 81.200.224.0/20 maxlen: 20 81.200.224.0/21 maxlen: 21 81.200.224.0/24 maxlen: 24 81.200.225.0/24 maxlen: 24 81.200.226.0/24 maxlen: 24 81.200.227.0/24 maxlen: 24 81.200.228.0/24 maxlen: 24 81.200.229.0/24 maxlen: 24 81.200.230.0/24 maxlen: 24 81.200.231.0/24 maxlen: 24 81.200.232.0/21 maxlen: 21 81.200.232.0/24 maxlen: 24 81.200.233.0/24 maxlen: 24 81.200.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:68:9e:ba:dc:31:99:94:6a:d4:af:56:31:db:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf40e25606651a075484c709fa766d80dad52d9c Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41d1c89cb9604b9251a6753f26e713b4f63c5499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:c4:84:ab:81:be:55:51:c3:bc:e0:7b:81: 09:be:a3:d3:64:9a:fc:2f:0b:00:0d:c7:15:38:91: 6f:3a:9a:dc:a0:dd:c6:a4:0e:4c:66:a2:12:ef:b1: 36:38:30:7b:60:b9:e7:c4:d7:e5:ae:bb:55:56:90: 3d:44:a9:68:0c:82:e7:81:02:6f:ce:ca:f2:9d:50: af:48:18:2b:d0:e5:92:6d:22:4c:7c:59:19:4f:1a: 24:c3:c6:c6:a2:e7:c8:7e:d5:6d:34:80:5d:16:3e: 47:11:e4:56:8f:30:a6:5e:57:40:95:0d:f9:a0:e4: 3e:7d:32:e7:fb:74:27:b9:f8:6b:2f:2b:f5:af:e4: 75:a0:d0:33:2e:99:b2:c1:aa:04:30:7c:e8:f1:c3: 01:70:f6:f8:17:0c:33:f2:b8:d7:9a:97:c9:73:36: f4:f1:ab:d9:ce:de:af:d0:f7:0e:2d:db:2e:1c:15: 42:05:cb:7a:08:a0:86:0c:6a:9d:6a:8a:ca:fe:28: 97:f6:da:c5:10:59:7f:91:9a:59:dc:4c:7d:a3:aa: 13:13:be:97:44:1e:b0:c5:d3:d2:68:60:5a:4b:91: a6:41:4b:17:7e:3c:60:a0:f3:3d:93:61:bd:f7:1f: 0a:b8:28:f6:8f:83:41:6e:61:9c:07:9c:f7:87:28: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D1:C8:9C:B9:60:4B:92:51:A6:75:3F:26:E7:13:B4:F6:3C:54:99 X509v3 Authority Key Identifier: keyid:CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/QdHInLlgS5JRpnU_JucTtPY8VJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.200.224.0/20 Signature Algorithm: sha256WithRSAEncryption 94:dc:16:28:44:9e:bc:e3:49:43:80:ff:34:bf:41:44:5e:c4: df:45:50:8f:67:30:2f:f6:a5:4e:e6:e3:48:04:0a:09:32:7f: c3:c3:48:37:e8:e6:fb:e3:a8:6f:06:25:8a:b2:43:9f:3c:b7: 86:24:67:27:44:98:3d:23:e3:d2:99:d3:fd:6c:5d:cc:96:88: 9e:82:ed:f6:7a:99:f3:d3:03:33:51:43:9d:0a:52:03:cf:24: 22:c8:a9:94:3a:8f:5f:40:b0:e5:e1:89:1e:92:7b:ea:db:fc: be:f6:0c:a5:0d:a1:a0:75:f7:4c:f9:f2:04:63:02:df:40:c5: 96:34:af:29:25:04:c0:7c:73:ef:52:0e:4e:58:c7:c3:47:01: ea:01:c0:49:c5:f2:6c:3f:37:34:e0:41:aa:be:58:78:29:17: 84:61:bc:b8:8d:64:72:67:5b:aa:b0:22:4f:bc:68:80:b7:08: 39:90:f9:2d:3c:11:d2:4b:3f:cf:22:93:a2:17:99:e0:92:33: e2:6b:27:20:71:78:d6:34:78:c1:94:e0:36:9d:30:f8:15:be: f6:2f:18:49:a4:94:e2:cd:ea:d1:20:fc:b8:97:75:a8:63:a9: 4b:be:ae:7a:f3:2a:31:b0:2c:73:19:1e:1c:b6:0d:f1:cb:8f: 7b:33:52:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NmieutwxmZRq1K9WMduFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNDBlMjU2MDY2NTFhMDc1NDg0YzcwOWZhNzY2ZDgwZGFk NTJkOWMwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWQxYzg5Y2I5NjA0YjkyNTFhNjc1M2YyNmU3MTNiNGY2M2M1NDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQHEhKuBvlVRw7zge4EJvqPTZJr8 LwsADccVOJFvOprcoN3GpA5MZqIS77E2ODB7YLnnxNflrrtVVpA9RKloDILngQJv zsrynVCvSBgr0OWSbSJMfFkZTxokw8bGoufIftVtNIBdFj5HEeRWjzCmXldAlQ35 oOQ+fTLn+3QnufhrLyv1r+R1oNAzLpmywaoEMHzo8cMBcPb4Fwwz8rjXmpfJczb0 8avZzt6v0PcOLdsuHBVCBct6CKCGDGqdaorK/iiX9trFEFl/kZpZ3Ex9o6oTE76X RB6wxdPSaGBaS5GmQUsXfjxgoPM9k2G99x8KuCj2j4NBbmGcB5z3hyiLAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEHRyJy5YEuSUaZ1PybnE7T2PFSZMB8GA1UdIwQY MBaAFM9A4lYGZRoHVITHCfp2bYDa1S2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBEaVZnWmxHZ2RVaE1jSi1uWnRnTnJWTFp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83ZDVlMWMtOWQ3OS00YjM5LWI1NjAt ZTk5N2U1NThkNzNhLzEvUWRISW5MbGdTNUpScG5VX0p1Y1R0UFk4VkprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83ZDVlMWMtOWQ3OS00YjM5LWI1NjAtZTk5N2U1NThkNzNh LzEvejBEaVZnWmxHZ2RVaE1jSi1uWnRnTnJWTFp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUcjgMA0G CSqGSIb3DQEBCwUAA4IBAQCU3BYoRJ6840lDgP80v0FEXsTfRVCPZzAv9qVO5uNI BAoJMn/Dw0g36Ob746hvBiWKskOfPLeGJGcnRJg9I+PSmdP9bF3Mloiegu32epnz 0wMzUUOdClIDzyQiyKmUOo9fQLDl4Ykeknvq2/y+9gylDaGgdfdM+fIEYwLfQMWW NK8pJQTAfHPvUg5OWMfDRwHqAcBJxfJsPzc04EGqvlh4KReEYby4jWRyZ1uqsCJP vGiAtwg5kPktPBHSSz/PIpOiF5ngkjPiaycgcXjWNHjBlOA2nTD4Fb72LxhJpJTi zerRIPy4l3WoY6lLvq568yoxsCxzGR4ctg3xy497M1IG -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:19 2026 by rpki-client