This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QUlCQ7XHQYXPHiZjxC6ZxzOM_OE.roa File: QUlCQ7XHQYXPHiZjxC6ZxzOM_OE.roa (raw, json) Hash identifier: szlpUwqArVFbWxZkfU4NxbrnpzmV4M93cynn9b7vd+s= Subject key identifier: 41:49:42:43:B5:C7:41:85:CF:1E:26:63:C4:2E:99:C7:33:8C:FC:E1 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C800339EABF4E955959D1D3AC4EBB2C Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QUlCQ7XHQYXPHiZjxC6ZxzOM_OE.roa Signing time: Fri 02 Jan 2026 02:18:42 +0000 ROA not before: Fri 02 Jan 2026 02:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 80.12.76.0/24 maxlen: 24 80.12.79.0/24 maxlen: 24 80.12.96.0/22 maxlen: 24 80.12.96.0/23 maxlen: 24 80.12.98.0/24 maxlen: 24 81.52.128.0/21 maxlen: 24 81.52.136.0/22 maxlen: 24 81.52.140.0/23 maxlen: 24 81.52.160.0/24 maxlen: 24 81.52.166.0/23 maxlen: 24 81.52.168.0/23 maxlen: 24 81.52.176.0/20 maxlen: 24 81.52.190.0/24 maxlen: 24 81.52.201.0/24 maxlen: 24 81.52.202.0/24 maxlen: 24 81.52.236.0/22 maxlen: 24 90.84.48.0/20 maxlen: 24 90.84.128.0/20 maxlen: 24 90.84.148.0/24 maxlen: 24 90.84.151.0/24 maxlen: 24 90.84.159.0/24 maxlen: 24 90.84.255.0/24 maxlen: 24 193.251.128.0/19 maxlen: 24 193.251.148.0/23 maxlen: 23 193.251.160.0/20 maxlen: 24 193.251.169.0/24 maxlen: 24 193.251.220.0/22 maxlen: 24 193.251.240.0/20 maxlen: 24 193.252.113.0/24 maxlen: 24 193.252.226.0/24 maxlen: 24 193.253.158.0/23 maxlen: 23 2001:688::/32 maxlen: 48 2001:688:2::/48 maxlen: 48 2001:688:3::/48 maxlen: 48 2001:688:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:03:39:ea:bf:4e:95:59:59:d1:d3:ac:4e:bb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41494243b5c74185cf1e2663c42e99c7338cfce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:eb:12:1b:31:31:78:76:0d:76:d0:46:25: 74:39:85:ff:46:8c:8a:a8:8c:27:35:bb:25:4a:47: e5:05:3a:34:fa:f3:2b:ab:11:3c:ab:cf:88:a6:47: bb:0b:b1:63:b0:4e:fa:c9:54:f5:a3:bd:cf:d0:ca: c3:ac:c2:32:60:75:f5:4b:8b:26:d9:4f:cd:0e:82: d7:9c:b5:c2:99:4a:13:d2:c4:e1:1a:8a:8d:73:f6: 2c:f4:16:dd:6d:51:41:e1:c0:7f:1b:93:cf:08:42: 13:8b:5c:d0:d2:f7:bf:5f:e0:8b:78:cd:e8:19:bc: 0c:c1:b8:5e:b1:2c:ae:80:08:3d:08:84:9c:bb:26: 93:9c:41:4b:b7:25:84:be:a0:e4:70:f4:76:63:e1: 9c:c9:d7:af:ca:ca:1b:86:98:99:e0:7a:8b:37:ff: 22:47:78:40:ba:e5:fa:81:79:10:c1:c1:c7:ef:70: b6:a1:7c:8d:85:c3:eb:74:21:ae:53:d9:3b:ee:dd: ab:1a:17:a1:e4:c3:9e:11:dc:c1:f1:3d:a3:5a:74: 16:fe:89:88:7a:f7:d2:cc:ea:74:a1:68:61:ac:ed: ae:4b:d3:1b:23:42:4c:04:63:26:d6:54:66:43:49: 02:b9:db:e7:0f:17:3a:d3:50:e0:06:f8:6a:68:d0: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:49:42:43:B5:C7:41:85:CF:1E:26:63:C4:2E:99:C7:33:8C:FC:E1 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QUlCQ7XHQYXPHiZjxC6ZxzOM_OE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.12.76.0/24 80.12.79.0/24 80.12.96.0/22 81.52.128.0-81.52.141.255 81.52.160.0/24 81.52.166.0-81.52.169.255 81.52.176.0/20 81.52.201.0-81.52.202.255 81.52.236.0/22 90.84.48.0/20 90.84.128.0/20 90.84.148.0/24 90.84.151.0/24 90.84.159.0/24 90.84.255.0/24 193.251.128.0-193.251.175.255 193.251.220.0/22 193.251.240.0/20 193.252.113.0/24 193.252.226.0/24 193.253.158.0/23 IPv6: 2001:688::/32 Signature Algorithm: sha256WithRSAEncryption 86:4b:94:51:e7:fd:4b:26:ae:f9:57:8e:c2:11:e8:f1:49:50: bb:90:e9:61:dd:ab:d5:00:f4:36:af:7d:19:31:32:85:17:27: 89:21:ce:17:63:ad:90:3d:df:2f:d7:52:59:e0:c2:85:54:a3: 43:94:f0:19:41:fa:e7:50:ef:f4:c6:c4:fb:ef:ff:25:cf:62: 72:21:8d:85:0d:1a:4b:3e:ca:1d:17:5c:33:e7:58:76:8d:5b: 9e:a1:51:d6:7c:94:26:52:de:0c:fc:67:51:be:64:fe:17:bd: 0e:ae:5e:3c:b7:5f:d8:41:2e:e2:86:b3:c7:8c:80:b7:d1:a0: 71:a1:1e:61:7c:44:5e:b2:4f:3d:4d:9f:d4:6c:0c:65:a3:e3: f1:1e:b6:98:11:b5:34:a2:e0:c6:0c:12:74:ee:1d:5a:0c:4e: 15:f7:c3:3f:e4:6d:8c:2a:92:8c:0d:3d:16:5f:5b:31:fd:18: 69:ae:c2:fa:aa:72:bb:d4:f4:f4:93:08:56:58:f2:d2:67:f9: dc:db:17:4e:60:0b:58:64:5a:07:a5:20:54:b7:56:c3:d7:29: af:09:99:7f:76:82:cf:b7:45:e2:32:d9:5e:3a:ec:76:7a:af: 13:87:b6:b3:d2:a0:6a:ee:07:27:29:ee:5a:8f:24:df:ac:ca: ee:02:0e:f0 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8gAM56r9OlVlZ0dOsTrssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTQ5NDI0M2I1Yzc0MTg1Y2YxZTI2NjNjNDJlOTljNzMzOGNmY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7PrEhsxMXh2DXbQRiV0OYX/RoyK qIwnNbslSkflBTo0+vMrqxE8q8+Ipke7C7FjsE76yVT1o73P0MrDrMIyYHX1S4sm 2U/NDoLXnLXCmUoT0sThGoqNc/Ys9BbdbVFB4cB/G5PPCEITi1zQ0ve/X+CLeM3o GbwMwbhesSyugAg9CIScuyaTnEFLtyWEvqDkcPR2Y+GcydevysobhpiZ4HqLN/8i R3hAuuX6gXkQwcHH73C2oXyNhcPrdCGuU9k77t2rGheh5MOeEdzB8T2jWnQW/omI evfSzOp0oWhhrO2uS9MbI0JMBGMm1lRmQ0kCudvnDxc601DgBvhqaNBtFwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEFJQkO1x0GFzx4mY8QumcczjPzhMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvUVVsQ1E3WEhRWVhQSGlaanhDNlp4ek9NX09FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHKBggrBgEFBQcBBwEB/wSBujCBtzCBpQQCAAEwgZ4DBABQ DEwDBABQDE8DBAJQDGAwDAMEB1E0gAMEAVE0jAMEAFE0oDAMAwQBUTSmAwQBUTSo AwQEUTSwMAwDBABRNMkDBABRNMoDBAJRNOwDBARaVDADBARaVIADBABaVJQDBABa VJcDBABaVJ8DBABaVP8wDAMEB8H7gAMEBMH7oAMEAsH73AMEBMH78AMEAMH8cQME AMH84gMEAcH9njANBAIAAjAHAwUAIAEGiDANBgkqhkiG9w0BAQsFAAOCAQEAhkuU Uef9Syau+VeOwhHo8UlQu5DpYd2r1QD0Nq99GTEyhRcniSHOF2OtkD3fL9dSWeDC hVSjQ5TwGUH651Dv9MbE++//Jc9iciGNhQ0aSz7KHRdcM+dYdo1bnqFR1nyUJlLe DPxnUb5k/he9Dq5ePLdf2EEu4oazx4yAt9GgcaEeYXxEXrJPPU2f1GwMZaPj8R62 mBG1NKLgxgwSdO4dWgxOFffDP+RtjCqSjA09Fl9bMf0Yaa7C+qpyu9T09JMIVljy 0mf53NsXTmALWGRaB6UgVLdWw9cprwmZf3aCz7dF4jLZXjrsdnqvE4e2s9Kgau4H JynuWo8k36zK7gIO8A== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:21 2026 by rpki-client