This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/Qjcz_PS0tGHgVp4sFdHi9YmmanQ.roa File: Qjcz_PS0tGHgVp4sFdHi9YmmanQ.roa (raw, json) Hash identifier: bNCXCGEDvdLCDKAMMYQGu7EJRHAHnyr4sSGJfowyZWg= Subject key identifier: 42:37:33:FC:F4:B4:B4:61:E0:56:9E:2C:15:D1:E2:F5:89:A6:6A:74 Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3 Certificate serial: 019B7F8269F03A0FA3076ACDFD711B664D84 Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/Qjcz_PS0tGHgVp4sFdHi9YmmanQ.roa Signing time: Fri 02 Jan 2026 16:20:11 +0000 ROA not before: Fri 02 Jan 2026 16:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25512 IP address blocks: 81.19.32.0/20 maxlen: 20 82.117.128.0/19 maxlen: 19 82.202.64.0/18 maxlen: 18 85.13.64.0/18 maxlen: 18 85.184.16.0/20 maxlen: 20 89.203.128.0/17 maxlen: 17 131.117.192.0/21 maxlen: 21 185.134.0.0/22 maxlen: 22 195.146.96.0/19 maxlen: 19 212.11.96.0/19 maxlen: 19 213.235.128.0/18 maxlen: 18 2001:1a48::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:69:f0:3a:0f:a3:07:6a:cd:fd:71:1b:66:4d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3 Validity Not Before: Jan 2 16:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=423733fcf4b4b461e0569e2c15d1e2f589a66a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:af:6d:a2:56:a0:d1:6a:a8:63:96:b4:c0: 07:a3:4a:6b:30:db:95:39:ec:f3:e6:bd:91:72:4b: 24:6e:16:55:26:53:cf:45:8b:44:af:e6:f2:92:e3: 19:8c:83:25:fe:b3:b3:c4:5b:cb:5e:21:e4:a8:b9: 3a:22:19:69:0b:62:ab:d7:88:f1:bf:9c:93:51:1e: 1a:dd:d8:e8:8f:79:3f:6c:a8:7b:c0:95:bb:73:8c: 35:ce:c7:d4:1d:61:85:5e:cd:06:81:d4:f2:bb:4e: 50:9c:41:59:a9:02:f7:fd:44:e3:b4:42:7e:fe:d7: 4b:d3:12:98:04:33:9f:47:38:c5:e7:a7:09:e3:d9: ec:66:01:2b:1c:4f:cc:cb:f4:d8:f9:d3:a9:cd:67: 31:73:8a:3d:a8:c1:0a:d6:e4:17:8b:79:eb:e1:73: 99:5e:af:ec:7a:ee:72:9a:06:85:5f:e9:53:08:c8: 02:64:f8:35:22:ea:70:eb:e7:a3:a3:ca:3f:f6:76: 16:bd:46:43:9f:15:7d:04:df:84:1e:98:42:3d:81: dc:d7:84:77:c5:90:27:a4:ac:e0:09:5b:30:b2:45: 5b:48:7c:2d:a6:35:07:61:43:18:a8:c0:06:5f:ea: 60:be:53:64:20:d0:3d:a3:38:14:fc:a4:e3:9b:34: 55:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:33:FC:F4:B4:B4:61:E0:56:9E:2C:15:D1:E2:F5:89:A6:6A:74 X509v3 Authority Key Identifier: keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/Qjcz_PS0tGHgVp4sFdHi9YmmanQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.32.0/20 82.117.128.0/19 82.202.64.0/18 85.13.64.0/18 85.184.16.0/20 89.203.128.0/17 131.117.192.0/21 185.134.0.0/22 195.146.96.0/19 212.11.96.0/19 213.235.128.0/18 IPv6: 2001:1a48::/32 Signature Algorithm: sha256WithRSAEncryption 5b:39:b2:bd:b8:d5:5f:4b:cc:d7:a3:88:fc:c5:ad:c4:33:81: 4e:21:4c:75:3d:7e:ef:09:96:73:c5:42:79:cf:ed:c8:6d:9e: 98:4a:f9:d5:e2:6b:70:9d:a7:6f:e7:e2:68:43:3a:10:55:64: 61:36:06:66:1c:ab:e3:d0:4e:1d:57:81:d7:0d:b1:b4:ce:69: 4c:c8:10:f5:57:8b:04:86:2b:e6:0e:f4:08:f5:c6:ef:4c:d4: 2d:b6:2e:3a:04:67:1e:40:2f:66:98:64:59:34:1e:38:f6:62: 3c:b0:8f:43:54:1b:1e:b9:5c:12:27:47:4d:00:34:b5:bc:90: f3:95:21:f1:f4:f2:be:ca:e8:0f:59:9a:0a:be:f5:24:c7:fb: e8:55:21:5c:a5:bd:ab:89:ba:1e:86:54:f7:6f:61:d2:6f:05: 51:1b:4f:09:64:26:fd:d9:70:d2:77:d1:b9:78:ab:ab:45:d5: 63:5b:7e:5b:eb:0a:43:fb:26:e8:36:6f:26:81:2a:49:87:f7: 94:18:0a:f2:9c:83:29:c6:4a:fd:73:d0:05:48:e7:c5:07:8e: c3:72:74:66:4b:e4:87:0f:f0:a4:08:f3:95:d8:86:97:3b:26: 98:ec:2a:c6:09:6d:36:83:fe:a6:6c:e6:67:94:c0:64:28:34: 0d:db:64:e7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt/gmnwOg+jB2rN/XEbZk2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZWE1YWNiNDQ3YjJjZWI5MzJhMDNmMjkwMDgyZGM3NmY4 ZTQwZTMwHhcNMjYwMTAyMTYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjM3MzNmY2Y0YjRiNDYxZTA1NjllMmMxNWQxZTJmNTg5YTY2YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01SvbaJWoNFqqGOWtMAHo0prMNuV Oezz5r2RckskbhZVJlPPRYtEr+bykuMZjIMl/rOzxFvLXiHkqLk6IhlpC2Kr14jx v5yTUR4a3djoj3k/bKh7wJW7c4w1zsfUHWGFXs0GgdTyu05QnEFZqQL3/UTjtEJ+ /tdL0xKYBDOfRzjF56cJ49nsZgErHE/My/TY+dOpzWcxc4o9qMEK1uQXi3nr4XOZ Xq/seu5ymgaFX+lTCMgCZPg1Iupw6+ejo8o/9nYWvUZDnxV9BN+EHphCPYHc14R3 xZAnpKzgCVswskVbSHwtpjUHYUMYqMAGX+pgvlNkINA9ozgU/KTjmzRV2wIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFEI3M/z0tLRh4FaeLBXR4vWJpmp0MB8GA1UdIwQY MBaAFFDqWstEeyzrkyoD8pAILcdvjkDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUt NWNhOGFjMTgwOTZkLzEvUWpjel9QUzB0R0hnVnA0c0ZkSGk5WW1tYW5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUtNWNhOGFjMTgwOTZk LzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQEURMgAwQF UnWAAwQGUspAAwQGVQ1AAwQEVbgQAwQHWcuAAwQDg3XAAwQCuYYAAwQFw5JgAwQF 1AtgAwQG1euAMA0EAgACMAcDBQAgARpIMA0GCSqGSIb3DQEBCwUAA4IBAQBbObK9 uNVfS8zXo4j8xa3EM4FOIUx1PX7vCZZzxUJ5z+3IbZ6YSvnV4mtwnadv5+JoQzoQ VWRhNgZmHKvj0E4dV4HXDbG0zmlMyBD1V4sEhivmDvQI9cbvTNQtti46BGceQC9m mGRZNB449mI8sI9DVBseuVwSJ0dNADS1vJDzlSHx9PK+yugPWZoKvvUkx/voVSFc pb2riboehlT3b2HSbwVRG08JZCb92XDSd9G5eKurRdVjW35b6wpD+yboNm8mgSpJ h/eUGArynIMpxkr9c9AFSOfFB47DcnRmS+SHD/CkCPOV2IaXOyaY7CrGCW02g/6m bOZnlMBkKDQN22Tn -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:37 2026 by rpki-client