This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qIZ_ZaB6TzhZuHfr7aUAlncOP1s.roa File: qIZ_ZaB6TzhZuHfr7aUAlncOP1s.roa (raw, json) Hash identifier: /tMfjvzyTkrwy4N1+R8pH5GBvEEKUUsk7aLYbAhAWuU= Subject key identifier: A8:86:7F:65:A0:7A:4F:38:59:B8:77:EB:ED:A5:00:96:77:0E:3F:5B Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79107070155EA166DFE6A180852E4312 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qIZ_ZaB6TzhZuHfr7aUAlncOP1s.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214036 IP address blocks: 31.210.50.0/24 maxlen: 24 77.92.145.0/24 maxlen: 24 78.135.93.0/24 maxlen: 24 188.132.129.0/24 maxlen: 24 188.132.153.0/24 maxlen: 24 188.132.183.0/24 maxlen: 24 188.132.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:70:70:15:5e:a1:66:df:e6:a1:80:85:2e:43:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8867f65a07a4f3859b877ebeda50096770e3f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:3d:2f:00:ca:a8:64:0a:ce:0b:2c:2a:9c: a0:d0:f7:90:0b:9f:27:bb:97:29:34:56:ea:63:f7: d8:fd:54:60:0b:94:3a:a1:59:97:2d:72:24:70:2c: 82:73:e7:fe:d0:21:d5:4c:84:ad:f0:07:a9:c9:53: c9:13:bd:f8:a0:40:bb:55:fc:ee:82:e9:fb:1f:d1: c4:f2:58:1e:82:ad:1c:23:04:27:27:14:e2:60:d6: 4d:0a:62:a3:3a:53:66:50:ad:54:f1:e1:10:ce:93: d2:7c:b1:b8:87:22:57:83:c5:e1:7f:da:90:81:d9: d3:fe:5b:c3:27:06:2c:8e:ba:20:f7:18:fb:dc:a3: 4f:3f:9c:eb:d9:c2:99:6a:fd:e3:69:cb:30:67:59: 09:2a:f8:6b:ee:b6:b0:0c:e1:8c:40:fb:6c:63:2e: bf:28:10:6e:0a:2f:4a:50:af:3a:ab:ef:85:27:5b: 6e:50:51:1b:df:6c:6a:ec:a2:5c:a9:87:17:eb:0e: 48:7b:26:53:3e:e2:fb:9a:f0:57:3b:1b:8b:2a:a2: a7:69:ed:1c:38:73:17:34:70:dd:57:73:43:78:fb: 8e:9c:fe:2b:5e:d9:5b:70:91:2c:b0:7f:43:3a:1f: 5c:8f:f3:d1:a7:85:17:b0:88:45:1f:ce:6b:52:ed: 07:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:86:7F:65:A0:7A:4F:38:59:B8:77:EB:ED:A5:00:96:77:0E:3F:5B X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qIZ_ZaB6TzhZuHfr7aUAlncOP1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.50.0/24 77.92.145.0/24 78.135.93.0/24 188.132.129.0/24 188.132.153.0/24 188.132.183.0-188.132.184.255 Signature Algorithm: sha256WithRSAEncryption 65:d3:9c:b4:b3:ed:c6:91:bc:ac:23:51:d5:c7:f3:6d:fa:0d: 87:b4:8e:7e:4c:e6:7a:da:bf:c5:eb:f2:dc:33:2f:3c:df:6c: 67:13:42:a7:00:b8:fd:43:9b:38:49:06:5d:22:ba:35:a3:3c: e6:fc:28:a3:18:34:31:4c:42:da:f6:a5:37:ba:c0:64:84:9a: f2:85:9c:03:34:49:82:1f:e2:c4:68:56:04:f9:67:04:43:87: be:1d:74:5c:a4:39:86:1f:34:fe:cf:c4:55:d9:85:bd:86:2f: 86:c2:34:92:28:9c:29:8c:11:dc:31:91:db:e4:19:e3:51:11: a1:7e:06:34:24:2b:9b:53:25:15:11:fd:cc:8a:0a:a5:80:5e: e8:5f:23:2c:9f:8d:e0:ca:44:34:cc:5b:c8:a1:5a:8d:02:32: 55:8e:1b:24:4e:4f:67:eb:74:46:2b:ec:4b:08:62:60:31:dc: 00:28:a7:df:6c:82:ef:c4:e6:25:65:60:56:d5:49:14:44:61: e6:da:01:55:a6:bc:70:96:79:ec:bf:c8:d4:41:95:a8:85:d0: 2d:39:32:57:99:ce:1a:45:25:4a:7a:b4:1e:82:22:b3:b7:4a: 5a:26:50:a9:5a:8c:74:25:e1:95:75:5f:94:fc:79:11:33:a1: d3:28:b9:71 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt5EHBwFV6hZt/moYCFLkMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODg2N2Y2NWEwN2E0ZjM4NTliODc3ZWJlZGE1MDA5Njc3MGUzZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjo9LwDKqGQKzgssKpyg0PeQC58n u5cpNFbqY/fY/VRgC5Q6oVmXLXIkcCyCc+f+0CHVTISt8AepyVPJE734oEC7Vfzu gun7H9HE8lgegq0cIwQnJxTiYNZNCmKjOlNmUK1U8eEQzpPSfLG4hyJXg8Xhf9qQ gdnT/lvDJwYsjrog9xj73KNPP5zr2cKZav3jacswZ1kJKvhr7rawDOGMQPtsYy6/ KBBuCi9KUK86q++FJ1tuUFEb32xq7KJcqYcX6w5IeyZTPuL7mvBXOxuLKqKnae0c OHMXNHDdV3NDePuOnP4rXtlbcJEssH9DOh9cj/PRp4UXsIhFH85rUu0H5wIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFKiGf2Wgek84Wbh36+2lAJZ3Dj9bMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvcUlaX1phQjZUemhadUhmcjdhVUFsbmNPUDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAH9IyAwQA TVyRAwQAToddAwQAvISBAwQAvISZMAwDBAC8hLcDBAC8hLgwDQYJKoZIhvcNAQEL BQADggEBAGXTnLSz7caRvKwjUdXH8236DYe0jn5M5nrav8Xr8twzLzzfbGcTQqcA uP1DmzhJBl0iujWjPOb8KKMYNDFMQtr2pTe6wGSEmvKFnAM0SYIf4sRoVgT5ZwRD h74ddFykOYYfNP7PxFXZhb2GL4bCNJIonCmMEdwxkdvkGeNREaF+BjQkK5tTJRUR /cyKCqWAXuhfIyyfjeDKRDTMW8ihWo0CMlWOGyROT2frdEYr7EsIYmAx3AAop99s gu/E5iVlYFbVSRREYebaAVWmvHCWeey/yNRBlaiF0C05MleZzhpFJUp6tB6CIrO3 SlomUKlajHQl4ZV1X5T8eREzodMouXE= -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:43 2026 by rpki-client