This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/Qqt98OgHdyagvtzakVb3zNMmwKs.roa File: Qqt98OgHdyagvtzakVb3zNMmwKs.roa (raw, json) Hash identifier: BpO8bWnBPYn/bYjQyXDccWI2949LL94WM+S3q4wZu/4= Subject key identifier: 42:AB:7D:F0:E8:07:77:26:A0:BE:DC:DA:91:56:F7:CC:D3:26:C0:AB Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b Certificate serial: 019B77C7661CC749672C69077D8DA7BB6DCC Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/Qqt98OgHdyagvtzakVb3zNMmwKs.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41327 IP address blocks: 31.185.96.0/24 maxlen: 24 31.185.98.0/24 maxlen: 24 31.185.99.0/24 maxlen: 24 31.185.100.0/24 maxlen: 24 31.185.102.0/23 maxlen: 24 93.94.88.0/21 maxlen: 24 185.61.168.0/22 maxlen: 24 185.157.228.0/22 maxlen: 24 185.172.206.0/24 maxlen: 24 2a03:b020::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:66:1c:c7:49:67:2c:69:07:7d:8d:a7:bb:6d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42ab7df0e8077726a0bedcda9156f7ccd326c0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:d0:fb:31:3c:5e:e8:1c:f4:f8:47:1a:cc: 28:c4:25:0d:02:95:8d:2a:9c:e4:95:7f:20:99:15: 6a:f7:7a:fc:41:dd:7f:34:fc:72:2f:12:3c:48:59: f4:e3:a8:15:ae:8f:b6:d6:2b:11:a6:6e:f5:7e:2b: 5d:e0:28:4b:c5:84:1a:9a:8b:f4:82:8d:d3:d6:83: 3e:d5:e1:ec:63:86:c6:18:ea:95:90:ad:0b:20:74: fd:1d:b6:52:c6:26:db:11:0a:db:ca:28:f8:1f:74: 91:31:59:cc:59:c8:c3:37:78:91:9a:b1:23:9d:a2: b5:11:1e:4f:e7:5f:ac:49:bb:a3:df:ff:08:68:12: 01:b9:b0:eb:48:98:fb:e9:c9:3a:d9:99:c1:f2:78: 27:b6:82:83:80:6a:17:14:89:ef:fa:49:95:c4:51: d9:68:be:3d:6d:68:a7:c4:4d:0b:49:d6:9e:76:11: a0:c9:bf:1e:eb:b0:39:62:b6:6d:ff:88:2a:9d:a4: 81:0c:48:38:39:4f:db:ef:97:8b:cb:06:5e:24:63: 09:34:50:88:95:d8:bb:b0:ec:e6:d4:ed:a9:2e:3f: 31:71:f3:c5:0d:b3:93:54:75:cd:e9:6c:b1:0c:64: 18:a7:d6:68:d0:0b:41:7a:e4:9f:3f:ab:52:a6:76: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AB:7D:F0:E8:07:77:26:A0:BE:DC:DA:91:56:F7:CC:D3:26:C0:AB X509v3 Authority Key Identifier: keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/Qqt98OgHdyagvtzakVb3zNMmwKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.96.0/24 31.185.98.0-31.185.100.255 31.185.102.0/23 93.94.88.0/21 185.61.168.0/22 185.157.228.0/22 185.172.206.0/24 IPv6: 2a03:b020::/29 Signature Algorithm: sha256WithRSAEncryption 7c:88:94:5a:e0:d0:44:4f:ed:2a:04:f8:d3:14:c0:b5:e9:ac: 01:9d:e6:3a:80:e6:04:09:37:5c:c5:5f:c7:89:6f:15:29:21: 93:7c:58:94:07:70:8c:a4:54:1a:03:85:a5:ca:f4:9c:42:bf: ba:22:2d:bb:c7:9e:2f:f8:6a:24:8b:6b:0c:a5:61:cb:ee:28: df:ca:6f:4e:6b:4e:20:ad:06:e0:05:75:06:9d:23:f2:2d:8e: 4f:bc:27:cf:0e:66:0f:5b:a9:aa:6c:17:56:9b:b8:df:67:70: 33:cc:ed:e6:5f:13:a5:17:1e:81:13:14:7e:35:4b:35:6a:14: 20:15:2b:8a:24:00:0c:1d:2f:90:75:10:11:6d:25:47:89:8d: 25:bd:ca:76:5e:c2:41:3d:86:65:0c:5b:09:71:52:2c:07:e2: c8:d2:a7:2a:32:af:28:40:7b:9c:46:68:5e:e9:84:be:cb:fe: e7:a3:9f:d2:ec:92:7d:ee:50:a1:8e:78:65:84:f4:9f:95:c7: 56:07:de:ec:a8:fd:9f:e1:83:6a:27:6d:1d:ea:69:24:a3:10: ab:fd:cd:a6:de:4a:17:c6:6f:b4:96:80:f7:91:6f:78:50:cd: 1e:7d:9a:50:36:1f:19:01:12:4f:f5:fa:47:84:d7:73:66:a5: 3a:e6:a8:f0 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt3x2Ycx0lnLGkHfY2nu23MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2 OTY4MWIwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmFiN2RmMGU4MDc3NzI2YTBiZWRjZGE5MTU2ZjdjY2QzMjZjMGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08bQ+zE8Xugc9PhHGswoxCUNApWN KpzklX8gmRVq93r8Qd1/NPxyLxI8SFn046gVro+21isRpm71fitd4ChLxYQamov0 go3T1oM+1eHsY4bGGOqVkK0LIHT9HbZSxibbEQrbyij4H3SRMVnMWcjDN3iRmrEj naK1ER5P51+sSbuj3/8IaBIBubDrSJj76ck62ZnB8ngntoKDgGoXFInv+kmVxFHZ aL49bWinxE0LSdaedhGgyb8e67A5YrZt/4gqnaSBDEg4OU/b75eLywZeJGMJNFCI ldi7sOzm1O2pLj8xcfPFDbOTVHXN6WyxDGQYp9Zo0AtBeuSfP6tSpnYY2wIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFEKrffDoB3cmoL7c2pFW98zTJsCrMB8GA1UdIwQY MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct NjNiNTJhYTdmOGRhLzEvUXF0OThPZ0hkeWFndnR6YWtWYjN6Tk1td0tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQAH7lgMAwD BAEfuWIDBAAfuWQDBAEfuWYDBANdXlgDBAK5PagDBAK5neQDBAC5rM4wDQQCAAIw BwMFAyoDsCAwDQYJKoZIhvcNAQELBQADggEBAHyIlFrg0ERP7SoE+NMUwLXprAGd 5jqA5gQJN1zFX8eJbxUpIZN8WJQHcIykVBoDhaXK9JxCv7oiLbvHni/4aiSLawyl YcvuKN/Kb05rTiCtBuAFdQadI/Itjk+8J88OZg9bqapsF1abuN9ncDPM7eZfE6UX HoETFH41SzVqFCAVK4okAAwdL5B1EBFtJUeJjSW9ynZewkE9hmUMWwlxUiwH4sjS pyoyryhAe5xGaF7phL7L/uejn9Lskn3uUKGOeGWE9J+Vx1YH3uyo/Z/hg2onbR3q aSSjEKv9zabeShfGb7SWgPeRb3hQzR59mlA2HxkBEk/1+keE13NmpTrmqPA= -----END CERTIFICATE-----Generated at Mon Jan 19 18:25:29 2026 by rpki-client