This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QC24amafYIiFlBtdr2WUg2xACfs.roa File: QC24amafYIiFlBtdr2WUg2xACfs.roa (raw, json) Hash identifier: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M= Subject key identifier: 40:2D:B8:6A:66:9F:60:88:85:94:1B:5D:AF:65:94:83:6C:40:09:FB Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c Certificate serial: 019B7EA6D20E7526C8483472EA369AA52030 Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QC24amafYIiFlBtdr2WUg2xACfs.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34430 IP address blocks: 37.220.144.0/23 maxlen: 24 37.220.146.0/24 maxlen: 24 45.145.196.0/22 maxlen: 24 81.18.240.0/20 maxlen: 24 188.95.168.0/21 maxlen: 24 193.43.89.0/24 maxlen: 24 195.242.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d2:0e:75:26:c8:48:34:72:ea:36:9a:a5:20:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=402db86a669f608885941b5daf6594836c4009fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:09:70:24:53:43:aa:a0:12:34:6a:90:a8: 20:39:61:64:80:27:6c:e6:53:b7:2d:b6:fa:57:19: ce:39:56:22:86:22:06:3e:bc:8e:39:35:df:68:1c: ac:3a:46:a6:2b:ed:c6:a1:36:ac:86:8c:c5:2d:e9: 2a:42:46:9c:63:f9:16:47:ed:56:1a:36:90:42:91: 58:42:b3:04:23:d0:f8:7c:c5:89:62:c8:48:66:20: 22:d5:90:3f:b5:7c:6f:e1:01:d9:33:3c:d7:9e:7e: c2:1e:3f:f0:da:ae:52:b1:e5:c1:36:9e:6b:cd:72: 7f:6c:84:3e:aa:74:35:1f:73:95:f7:ac:0e:e9:36: df:df:e1:41:e2:7e:ed:0d:9b:6e:3b:46:c4:07:3b: 1a:39:61:63:68:7b:36:db:34:44:a0:5c:ca:33:b0: 50:73:a9:0e:b5:12:f1:58:01:ef:cd:7a:da:64:e6: 16:ae:0c:74:ad:fe:88:85:9c:0e:e3:ef:a6:ad:68: 25:df:40:50:69:8c:f7:60:19:5e:7c:39:25:91:76: d9:6c:bf:7b:04:68:6f:00:d2:b3:ff:96:88:47:10: 4d:d8:3f:4e:2b:4e:b3:5e:c4:df:c7:05:83:24:58: 89:14:ee:ec:5a:e4:08:5d:3f:25:cc:c1:d9:ea:a9: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2D:B8:6A:66:9F:60:88:85:94:1B:5D:AF:65:94:83:6C:40:09:FB X509v3 Authority Key Identifier: keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QC24amafYIiFlBtdr2WUg2xACfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.220.144.0-37.220.146.255 45.145.196.0/22 81.18.240.0/20 188.95.168.0/21 193.43.89.0/24 195.242.96.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:f0:42:ef:59:de:33:38:27:4a:b3:94:fa:fa:64:6d:e0:61: ad:5c:7a:ce:01:34:d1:75:2c:36:95:34:fb:48:aa:f8:1c:eb: 81:2a:0b:e2:2a:a7:5d:16:52:0c:ba:f4:9d:14:c6:d5:8e:42: 21:ed:74:1e:a3:65:80:fe:ff:c2:d3:1f:08:30:3c:62:5c:07: bd:ab:e1:c1:f2:38:33:b0:89:f4:77:c1:fd:70:1f:0e:86:4f: 19:06:e6:4e:54:0f:7d:1e:c2:de:bd:87:3b:92:9f:62:90:81: 8d:21:d5:3c:42:b0:24:e5:e4:77:7a:49:be:29:52:cf:f7:79: 68:b7:12:62:7c:97:d3:1a:70:71:57:67:59:55:07:f4:df:e2: fd:aa:6d:d4:5d:c3:1c:79:d9:ea:b8:ed:a2:97:68:6f:e3:a0: e4:3a:b0:40:36:32:88:01:65:af:1c:9f:9c:e3:29:dd:a4:f0: 2e:a3:d5:d7:03:60:38:ab:6b:10:a2:cd:c3:57:cf:c6:4b:19: d3:03:46:05:8a:21:44:36:70:67:dc:0d:ce:09:de:4a:f3:88: fa:67:b0:88:23:1f:54:f4:f6:40:9b:ec:a6:b2:6d:53:18:cc: c6:d7:5d:0b:2b:4e:fe:53:4c:65:0c:d2:95:6d:84:c2:0d:b2: f2:31:45:80 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt+ptIOdSbISDRy6jaapSAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm NGNlM2MwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDJkYjg2YTY2OWY2MDg4ODU5NDFiNWRhZjY1OTQ4MzZjNDAwOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb0JcCRTQ6qgEjRqkKggOWFkgCds 5lO3Lbb6VxnOOVYihiIGPryOOTXfaBysOkamK+3GoTashozFLekqQkacY/kWR+1W GjaQQpFYQrMEI9D4fMWJYshIZiAi1ZA/tXxv4QHZMzzXnn7CHj/w2q5SseXBNp5r zXJ/bIQ+qnQ1H3OV96wO6Tbf3+FB4n7tDZtuO0bEBzsaOWFjaHs22zREoFzKM7BQ c6kOtRLxWAHvzXraZOYWrgx0rf6IhZwO4++mrWgl30BQaYz3YBlefDklkXbZbL97 BGhvANKz/5aIRxBN2D9OK06zXsTfxwWDJFiJFO7sWuQIXT8lzMHZ6qno5QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFEAtuGpmn2CIhZQbXa9llINsQAn7MB8GA1UdIwQY MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt Yjk4YTY5MDFlYTEwLzEvUUMyNGFtYWZZSWlGbEJ0ZHIyV1VnMnhBQ2ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAQl3JAD BAAl3JIDBAItkcQDBARREvADBAO8X6gDBADBK1kDBAHD8mAwDQYJKoZIhvcNAQEL BQADggEBADvwQu9Z3jM4J0qzlPr6ZG3gYa1ces4BNNF1LDaVNPtIqvgc64EqC+Iq p10WUgy69J0UxtWOQiHtdB6jZYD+/8LTHwgwPGJcB72r4cHyODOwifR3wf1wHw6G TxkG5k5UD30ewt69hzuSn2KQgY0h1TxCsCTl5Hd6Sb4pUs/3eWi3EmJ8l9MacHFX Z1lVB/Tf4v2qbdRdwxx52eq47aKXaG/joOQ6sEA2MogBZa8cn5zjKd2k8C6j1dcD YDiraxCizcNXz8ZLGdMDRgWKIUQ2cGfcDc4J3krziPpnsIgjH1T09kCb7KaybVMY zMbXXQsrTv5TTGUM0pVthMINsvIxRYA= -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:45 2026 by rpki-client