This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/qrZor_4iuHhjWECNHuPoqjZgwRM.roa File: qrZor_4iuHhjWECNHuPoqjZgwRM.roa (raw, json) Hash identifier: jTjQTNz6GwiMBlghpXe7c+6S4Cn1ehIr1K8g9CB/9Fs= Subject key identifier: AA:B6:68:AF:FE:22:B8:78:63:58:40:8D:1E:E3:E8:AA:36:60:C1:13 Certificate issuer: /CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0 Certificate serial: 019B7C7F3D17F86F4179206F793C0D3D6105 Authority key identifier: D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/qrZor_4iuHhjWECNHuPoqjZgwRM.roa Signing time: Fri 02 Jan 2026 02:17:52 +0000 ROA not before: Fri 02 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44684 IP address blocks: 185.159.24.0/24 maxlen: 24 2a00:9b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:3d:17:f8:6f:41:79:20:6f:79:3c:0d:3d:61:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0 Validity Not Before: Jan 2 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aab668affe22b8786358408d1ee3e8aa3660c113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:be:cf:15:07:11:09:eb:9b:5f:da:60:95: 43:62:33:ea:a1:2f:3b:d2:26:0d:a8:69:5d:99:d5: cb:64:76:ce:02:b5:fc:5e:ee:17:d7:ba:3d:af:81: 4f:24:72:f8:64:1c:60:d7:10:4b:67:3f:34:84:a5: b5:b8:75:8c:bc:1c:3a:f2:c7:f8:5c:e6:19:87:9b: 37:43:3a:19:4d:25:95:21:98:f4:d8:35:5b:13:b3: 3c:31:02:da:22:70:b3:75:c8:b4:8b:c6:1d:67:a4: ec:26:cc:68:70:ba:68:78:84:30:4c:77:bc:30:4d: 07:31:74:d7:17:c0:90:6a:89:bc:62:00:a2:c3:8b: b1:06:b4:b7:2b:76:b1:fd:5f:b2:eb:48:fc:61:b5: 69:7f:cd:2a:41:b8:5e:33:e2:bc:35:fa:43:a2:dd: df:e5:c1:e7:96:f7:29:3e:65:b4:75:90:86:58:63: 0a:3f:d7:23:a7:e6:30:cb:05:18:e6:b9:36:d1:c0: e6:41:92:72:60:50:bf:e9:da:fc:69:c3:fb:e8:b3: a7:de:3d:35:f2:27:ee:c0:14:8c:7d:bd:d2:e7:cb: c2:ae:18:f6:dd:47:e9:27:7e:cf:fe:b4:63:d3:14: fa:fe:2d:68:18:df:90:3f:e4:e5:09:fe:a5:13:2e: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B6:68:AF:FE:22:B8:78:63:58:40:8D:1E:E3:E8:AA:36:60:C1:13 X509v3 Authority Key Identifier: keyid:D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/qrZor_4iuHhjWECNHuPoqjZgwRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.24.0/24 IPv6: 2a00:9b40::/48 Signature Algorithm: sha256WithRSAEncryption 5d:7a:b9:6c:6c:e6:6d:ca:74:f4:66:5c:98:3e:a2:33:d7:ab: ae:ce:3a:97:fb:f0:e0:49:d4:b2:52:30:7a:76:fe:54:2e:33: 3d:5a:24:10:a9:b0:43:b0:09:dd:eb:ba:dc:58:92:85:3e:31: 2e:a2:6c:ba:02:39:82:93:a4:cc:70:36:7c:2b:24:f4:1b:e3: d6:c2:d7:65:c5:29:b4:34:d0:b6:bc:34:51:3a:73:c6:b7:db: a6:02:a0:3e:37:e9:69:16:27:2d:e9:d3:ae:b9:85:fd:06:30: 1c:f0:b7:8c:0b:d6:18:91:68:c8:cb:08:8d:00:bf:76:b8:37: 70:95:f1:56:fb:16:65:1c:d9:a7:6a:c4:dc:30:bb:37:0b:e3: 64:a8:68:b5:71:95:4b:38:84:49:51:41:a7:a3:15:3c:e0:0d: af:30:93:bc:a6:b2:c9:58:fe:8b:c5:06:31:25:5c:d1:d0:33: 87:11:5f:16:c4:6c:d2:36:f9:4a:2b:f3:2e:83:ef:6d:cd:c4: 23:a5:fe:13:d9:41:07:33:56:0b:f4:ef:41:52:d7:70:db:01: 20:9a:61:f8:e5:74:42:7e:7f:cf:6f:dd:0f:d7:4b:3c:ab:d1: f9:7d:b6:b9:41:75:15:03:d1:bd:44:b5:c0:30:97:12:6f:44: ee:bf:6e:51 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8fz0X+G9BeSBveTwNPWEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YTU2ZTJkNjNhYzVkYTliZWQzNWRhMDFjYmZhZDIyNWYw NGJlYjAwHhcNMjYwMTAyMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWI2NjhhZmZlMjJiODc4NjM1ODQwOGQxZWUzZThhYTM2NjBjMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWi+zxUHEQnrm1/aYJVDYjPqoS87 0iYNqGldmdXLZHbOArX8Xu4X17o9r4FPJHL4ZBxg1xBLZz80hKW1uHWMvBw68sf4 XOYZh5s3QzoZTSWVIZj02DVbE7M8MQLaInCzdci0i8YdZ6TsJsxocLpoeIQwTHe8 ME0HMXTXF8CQaom8YgCiw4uxBrS3K3ax/V+y60j8YbVpf80qQbheM+K8NfpDot3f 5cHnlvcpPmW0dZCGWGMKP9cjp+YwywUY5rk20cDmQZJyYFC/6dr8acP76LOn3j01 8ifuwBSMfb3S58vCrhj23UfpJ37P/rRj0xT6/i1oGN+QP+TlCf6lEy7yzQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKq2aK/+Irh4Y1hAjR7j6Ko2YMETMB8GA1UdIwQY MBaAFNilbi1jrF2pvtNdoBy/rSJfBL6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMktWdUxXT3NYYW0tMDEyZ0hMLXRJbDhFdnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NDE3N2MtNWUzYi00ODM2LTg4Njct ZThkNDdiYmEyNWJmLzEvcXJab3JfNGl1SGhqV0VDTkh1UG9xalpnd1JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83NDE3N2MtNWUzYi00ODM2LTg4NjctZThkNDdiYmEyNWJm LzEvMktWdUxXT3NYYW0tMDEyZ0hMLXRJbDhFdnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuZ8YMA8E AgACMAkDBwAqAJtAAAAwDQYJKoZIhvcNAQELBQADggEBAF16uWxs5m3KdPRmXJg+ ojPXq67OOpf78OBJ1LJSMHp2/lQuMz1aJBCpsEOwCd3rutxYkoU+MS6ibLoCOYKT pMxwNnwrJPQb49bC12XFKbQ00La8NFE6c8a326YCoD436WkWJy3p0665hf0GMBzw t4wL1hiRaMjLCI0Av3a4N3CV8Vb7FmUc2adqxNwwuzcL42SoaLVxlUs4hElRQaej FTzgDa8wk7ymsslY/ovFBjElXNHQM4cRXxbEbNI2+Uor8y6D723NxCOl/hPZQQcz Vgv070FS13DbASCaYfjldEJ+f89v3Q/XSzyr0fl9trlBdRUD0b1EtcAwlxJvRO6/ blE= -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:36 2026 by rpki-client