This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/QxwdEpVgo81_-mwIpi91_VPBVXk.roa File: QxwdEpVgo81_-mwIpi91_VPBVXk.roa (raw, json) Hash identifier: W+b58r8ZTGE9pnt5zsRnperhoba0alTWik9Mki5Rn8o= Subject key identifier: 43:1C:1D:12:95:60:A3:CD:7F:FA:6C:08:A6:2F:75:FD:53:C1:55:79 Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Certificate serial: 019B7C12708A6EF56978200FB9B1616C77A4 Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/QxwdEpVgo81_-mwIpi91_VPBVXk.roa Signing time: Fri 02 Jan 2026 00:19:01 +0000 ROA not before: Fri 02 Jan 2026 00:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1301 IP address blocks: 163.62.72.0/21 maxlen: 21 163.62.80.0/22 maxlen: 22 163.62.92.0/22 maxlen: 22 163.62.96.0/21 maxlen: 21 163.62.112.0/22 maxlen: 22 163.62.116.0/24 maxlen: 24 163.62.118.0/23 maxlen: 23 163.62.120.0/21 maxlen: 21 163.62.128.0/23 maxlen: 23 163.62.132.0/22 maxlen: 22 163.62.240.0/20 maxlen: 20 163.114.20.0/22 maxlen: 22 163.116.0.0/21 maxlen: 21 163.116.8.0/22 maxlen: 22 192.54.192.0/23 maxlen: 23 192.196.12.0/23 maxlen: 23 192.196.36.0/22 maxlen: 22 192.196.40.0/22 maxlen: 22 192.196.70.0/23 maxlen: 23 192.196.72.0/23 maxlen: 23 192.196.90.0/23 maxlen: 23 192.196.92.0/23 maxlen: 23 192.196.98.0/23 maxlen: 23 192.196.114.0/23 maxlen: 23 192.196.118.0/23 maxlen: 23 192.196.120.0/22 maxlen: 22 192.196.124.0/23 maxlen: 23 192.196.140.0/22 maxlen: 22 192.196.148.0/23 maxlen: 23 2a00:7e40::/36 maxlen: 36 2a00:7e40:7000::/64 maxlen: 64 2a00:7e40:9ac1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:70:8a:6e:f5:69:78:20:0f:b9:b1:61:6c:77:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=431c1d129560a3cd7ffa6c08a62f75fd53c15579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cf:f3:fd:d6:50:2c:02:97:6f:05:74:d6:df: 09:51:d0:d2:c7:7b:70:55:d0:5d:ee:9c:10:c0:c3: 75:be:b3:2b:95:92:4b:96:ee:bf:b3:fd:14:19:6b: 19:60:2c:7b:66:3d:fc:14:6e:48:0d:13:33:90:f5: cb:89:e8:32:48:3f:f4:7c:00:2d:64:5a:b3:51:bf: 84:03:c3:03:83:bd:76:78:9d:ed:f9:19:21:06:d6: 26:a8:30:c2:ff:a4:40:ed:a2:aa:10:a3:fe:c6:6f: 9a:04:94:ab:4a:03:02:66:e0:d4:cf:a4:d7:6a:86: c1:05:0d:b5:a7:c0:71:e1:d8:9d:c9:92:6b:77:ea: a1:cd:d2:47:18:9e:dd:2f:e5:2c:5b:44:37:e4:6d: 31:56:17:ef:e6:4b:2b:c8:a7:e4:f1:09:49:7f:63: 51:c7:1f:ee:90:2a:7d:2a:f3:9f:a5:a6:17:5d:f8: b7:e8:43:c5:f5:fd:78:8a:02:83:e1:a1:54:09:5b: e2:a3:ae:e7:a7:92:96:9b:5a:a6:e7:c6:5c:10:10: 37:b4:96:59:5c:e0:95:cc:55:08:2a:92:12:a0:64: 86:f8:33:65:b5:03:47:03:7e:a2:54:a8:e6:ce:3f: 95:89:a2:0c:0f:8e:1f:54:77:ae:64:fd:fc:73:f4: 41:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1C:1D:12:95:60:A3:CD:7F:FA:6C:08:A6:2F:75:FD:53:C1:55:79 X509v3 Authority Key Identifier: keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/QxwdEpVgo81_-mwIpi91_VPBVXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.62.72.0-163.62.83.255 163.62.92.0-163.62.103.255 163.62.112.0-163.62.116.255 163.62.118.0-163.62.129.255 163.62.132.0/22 163.62.240.0/20 163.114.20.0/22 163.116.0.0-163.116.11.255 192.54.192.0/23 192.196.12.0/23 192.196.36.0-192.196.43.255 192.196.70.0-192.196.73.255 192.196.90.0-192.196.93.255 192.196.98.0/23 192.196.114.0/23 192.196.118.0-192.196.125.255 192.196.140.0/22 192.196.148.0/23 IPv6: 2a00:7e40::/36 2a00:7e40:7000::/64 2a00:7e40:9ac1::/48 Signature Algorithm: sha256WithRSAEncryption 63:79:a0:32:17:c9:da:28:e7:2d:52:28:0f:2f:23:d4:d2:68: 3d:b7:72:c5:eb:ad:fd:78:e3:06:05:15:7a:d0:54:e8:ff:4c: 4c:35:5b:50:c5:5b:4b:c3:1b:b9:c3:45:3a:94:fe:21:b3:10: cd:ae:0c:b3:ef:8e:19:f4:2d:27:ce:da:b4:a2:ce:24:83:a1: bc:5a:25:16:50:4c:bb:85:61:d5:de:a7:57:68:d7:27:28:42: 50:24:52:9c:37:44:c2:0c:11:f3:96:8c:2b:f6:17:8e:35:82: 68:eb:7d:73:fa:d7:da:15:b9:60:ae:9d:56:2f:7e:d5:26:43: ea:dc:67:d9:b7:01:cf:18:0b:c7:0d:56:5d:66:19:30:e6:eb: b6:3c:aa:49:d5:af:bc:89:45:c8:30:47:24:30:95:04:f9:eb: 27:b7:5f:9b:c9:49:9f:a9:3b:f4:b9:fd:cc:30:5c:66:f2:25: a6:44:8d:39:ff:00:7c:dc:40:78:e6:0e:22:57:8b:dc:fa:17: 6b:df:6c:9d:bf:5b:00:51:f4:63:f5:3a:e8:4b:58:73:56:e2: 73:d8:c1:e4:0f:73:6a:32:b7:9a:4b:04:44:e5:83:18:59:0c: 58:7a:8a:8b:ca:09:d6:cf:7a:8e:77:2f:55:1c:28:75:6e:37: 1c:5e:f8:ab -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt8EnCKbvVpeCAPubFhbHekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz ODc0YzYwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzFjMWQxMjk1NjBhM2NkN2ZmYTZjMDhhNjJmNzVmZDUzYzE1NTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s/z/dZQLAKXbwV01t8JUdDSx3tw VdBd7pwQwMN1vrMrlZJLlu6/s/0UGWsZYCx7Zj38FG5IDRMzkPXLiegySD/0fAAt ZFqzUb+EA8MDg712eJ3t+RkhBtYmqDDC/6RA7aKqEKP+xm+aBJSrSgMCZuDUz6TX aobBBQ21p8Bx4didyZJrd+qhzdJHGJ7dL+UsW0Q35G0xVhfv5ksryKfk8QlJf2NR xx/ukCp9KvOfpaYXXfi36EPF9f14igKD4aFUCVvio67np5KWm1qm58ZcEBA3tJZZ XOCVzFUIKpISoGSG+DNltQNHA36iVKjmzj+ViaIMD44fVHeuZP38c/RB/wIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFEMcHRKVYKPNf/psCKYvdf1TwVV5MB8GA1UdIwQY MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt Y2U1OTUyMmVmNjZmLzEvUXh3ZEVwVmdvODFfLW13SXBpOTFfVlBCVlhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH0BggrBgEFBQcBBwEB/wSB5DCB4TCBugQCAAEwgbMwDAME A6M+SAMEAqM+UDAMAwQCoz5cAwQDoz5gMAwDBASjPnADBACjPnQwDAMEAaM+dgME AaM+gAMEAqM+hAMEBKM+8AMEAqNyFDALAwMCo3QDBAKjdAgDBAHANsADBAHAxAww DAMEAsDEJAMEAsDEKDAMAwQBwMRGAwQBwMRIMAwDBAHAxFoDBAHAxFwDBAHAxGID BAHAxHIwDAMEAcDEdgMEAcDEfAMEAsDEjAMEAcDElDAiBAIAAjAcAwYEKgB+QAAD CQAqAH5AcAAAAAMHACoAfkCawTANBgkqhkiG9w0BAQsFAAOCAQEAY3mgMhfJ2ijn LVIoDy8j1NJoPbdyxeut/XjjBgUVetBU6P9MTDVbUMVbS8MbucNFOpT+IbMQza4M s++OGfQtJ87atKLOJIOhvFolFlBMu4Vh1d6nV2jXJyhCUCRSnDdEwgwR85aMK/YX jjWCaOt9c/rX2hW5YK6dVi9+1SZD6txn2bcBzxgLxw1WXWYZMObrtjyqSdWvvIlF yDBHJDCVBPnrJ7dfm8lJn6k79Ln9zDBcZvIlpkSNOf8AfNxAeOYOIleL3PoXa99s nb9bAFH0Y/U66EtYc1bic9jB5A9zajK3mksEROWDGFkMWHqKi8oJ1s96jncvVRwo dW43HF74qw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:09 2026 by rpki-client