This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qntg1S1q8IUuplDtPNGNHcC1hRo.roa File: qntg1S1q8IUuplDtPNGNHcC1hRo.roa (raw, json) Hash identifier: vf5DWr6jU/kw9BghF/AIO8x5h5M4M+X/6nzOZFpL9B4= Subject key identifier: AA:7B:60:D5:2D:6A:F0:85:2E:A6:50:ED:3C:D1:8D:1D:C0:B5:85:1A Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A9C644CD3A817252165D7835D2B99 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qntg1S1q8IUuplDtPNGNHcC1hRo.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 37.98.144.0/21 maxlen: 24 37.98.144.0/22 maxlen: 24 37.252.24.0/21 maxlen: 24 77.93.128.0/19 maxlen: 24 77.107.64.0/18 maxlen: 24 79.99.72.0/21 maxlen: 24 79.99.144.0/21 maxlen: 24 80.240.80.0/20 maxlen: 24 81.5.128.0/18 maxlen: 24 81.168.0.0/17 maxlen: 24 82.152.0.0/15 maxlen: 24 82.152.0.0/16 maxlen: 24 82.163.0.0/19 maxlen: 24 85.159.128.0/21 maxlen: 24 89.28.232.0/21 maxlen: 24 89.31.232.0/21 maxlen: 24 89.213.48.0/20 maxlen: 24 89.213.64.0/18 maxlen: 24 89.213.192.0/18 maxlen: 24 95.130.96.0/21 maxlen: 24 109.176.0.0/16 maxlen: 24 158.255.8.0/21 maxlen: 24 185.20.32.0/22 maxlen: 24 185.20.34.0/24 maxlen: 24 185.20.35.0/24 maxlen: 24 185.24.84.0/24 maxlen: 24 185.24.86.0/23 maxlen: 24 185.101.44.0/22 maxlen: 24 193.27.212.0/23 maxlen: 24 194.105.64.0/19 maxlen: 24 195.128.138.0/24 maxlen: 24 212.38.64.0/19 maxlen: 24 213.130.128.0/19 maxlen: 24 213.152.32.0/19 maxlen: 24 213.210.0.0/18 maxlen: 24 213.218.208.0/20 maxlen: 24 213.218.224.0/19 maxlen: 24 217.144.144.0/20 maxlen: 24 217.145.64.0/20 maxlen: 24 2001:1a90::/32 maxlen: 48 2a00:c60::/32 maxlen: 48 2a00:1c40::/29 maxlen: 48 2a02:21f8::/32 maxlen: 48 2a02:6f80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9c:64:4c:d3:a8:17:25:21:65:d7:83:5d:2b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa7b60d52d6af0852ea650ed3cd18d1dc0b5851a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:b7:5a:71:9f:f0:78:81:8b:89:7e:ae:90: 6e:81:ae:fa:d4:27:df:bf:30:58:9a:26:5d:31:f5: d7:55:98:1b:6c:30:fb:3f:76:32:e0:f8:3e:86:d0: 95:50:86:de:d1:57:d6:21:0e:81:d5:24:5c:98:51: e6:71:c4:31:9e:9d:18:6f:55:e0:87:b0:5d:fb:16: 53:66:12:69:a4:c8:90:41:ad:1a:d5:4b:bf:97:bd: 2f:b9:37:b2:c2:bc:8d:9b:f8:05:ba:7d:8c:d4:c0: da:e9:fa:d7:2f:d0:41:06:78:1a:82:d8:4f:9e:89: fb:1f:fe:e6:14:f5:52:1e:fa:36:b0:1a:13:d8:b5: 8f:94:48:ad:68:a4:01:2a:dd:38:19:4b:b6:d2:b8: e1:50:0f:c9:b7:e7:9e:92:ba:51:b9:e8:25:b9:80: bc:56:e0:67:43:8b:ea:ac:32:26:7c:16:cb:d0:55: b8:fe:54:84:56:bd:98:14:37:08:17:0d:8a:77:9c: 05:3b:34:16:4f:f6:32:82:48:0e:b2:1b:84:18:64: 3a:d9:21:0c:fd:b6:40:e0:98:4b:03:7d:f4:07:73: 57:83:7f:12:fe:2b:c5:19:8c:e4:07:b1:bc:c5:9e: 59:7e:a8:67:79:d8:d1:f8:24:e6:f6:83:a3:86:8f: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7B:60:D5:2D:6A:F0:85:2E:A6:50:ED:3C:D1:8D:1D:C0:B5:85:1A X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qntg1S1q8IUuplDtPNGNHcC1hRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.144.0/21 37.252.24.0/21 77.93.128.0/19 77.107.64.0/18 79.99.72.0/21 79.99.144.0/21 80.240.80.0/20 81.5.128.0/18 81.168.0.0/17 82.152.0.0/15 82.163.0.0/19 85.159.128.0/21 89.28.232.0/21 89.31.232.0/21 89.213.48.0-89.213.127.255 89.213.192.0/18 95.130.96.0/21 109.176.0.0/16 158.255.8.0/21 185.20.32.0/22 185.24.84.0/24 185.24.86.0/23 185.101.44.0/22 193.27.212.0/23 194.105.64.0/19 195.128.138.0/24 212.38.64.0/19 213.130.128.0/19 213.152.32.0/19 213.210.0.0/18 213.218.208.0-213.218.255.255 217.144.144.0/20 217.145.64.0/20 IPv6: 2001:1a90::/32 2a00:c60::/32 2a00:1c40::/29 2a02:21f8::/32 2a02:6f80::/29 Signature Algorithm: sha256WithRSAEncryption a8:38:be:62:30:bb:af:e8:1f:31:e2:9a:88:9b:4b:81:e3:37: 08:46:28:2d:1d:2b:81:80:f2:16:6b:1c:38:04:b2:8d:7d:8e: 80:d0:c2:27:b5:39:db:ae:1e:8a:6e:94:9c:24:e8:95:3a:ec: f8:6d:96:8a:c3:76:d1:57:9a:8d:de:4d:b7:29:76:09:07:a9: d4:11:44:c1:e5:ca:71:78:6e:61:13:e1:48:ac:8c:b7:e1:8b: 68:f2:69:ae:cc:8d:17:30:48:c7:80:71:f1:e1:c0:46:86:9c: 0d:46:73:41:cd:7f:3d:59:98:c5:07:3b:03:94:7d:9e:00:ad: 99:7b:0e:c8:1a:09:cb:7b:f4:10:55:c1:83:78:f9:26:4d:9d: bd:56:54:91:17:e1:1d:25:28:fb:9c:26:d3:27:0b:6a:a0:8f: 83:82:6b:98:09:9e:9d:0d:33:ee:f0:8a:18:c3:3a:7c:84:a0: 89:a5:18:92:e9:42:28:91:36:c8:0d:8a:b3:8f:34:cd:df:46: 2b:73:5f:98:2e:b4:0b:9d:3b:03:af:94:2e:6d:d6:5c:03:59: f3:e2:c0:1a:81:aa:18:44:8c:ea:4f:ce:97:31:7f:e1:aa:46: 77:1d:f2:89:2b:da:ac:9b:ff:ae:76:3b:3d:1f:ed:c0:7d:6c: 0a:b1:e7:af -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISAZt6WpxkTNOoFyUhZdeDXSuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTdiNjBkNTJkNmFmMDg1MmVhNjUwZWQzY2QxOGQxZGMwYjU4NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQC3WnGf8HiBi4l+rpBuga761Cff vzBYmiZdMfXXVZgbbDD7P3Yy4Pg+htCVUIbe0VfWIQ6B1SRcmFHmccQxnp0Yb1Xg h7Bd+xZTZhJppMiQQa0a1Uu/l70vuTeywryNm/gFun2M1MDa6frXL9BBBngagthP non7H/7mFPVSHvo2sBoT2LWPlEitaKQBKt04GUu20rjhUA/Jt+eekrpRuegluYC8 VuBnQ4vqrDImfBbL0FW4/lSEVr2YFDcIFw2Kd5wFOzQWT/YygkgOshuEGGQ62SEM /bZA4JhLA330B3NXg38S/ivFGYzkB7G8xZ5ZfqhnedjR+CTm9oOjho/qeQIDAQAB o4IDCTCCAwUwHQYDVR0OBBYEFKp7YNUtavCFLqZQ7TzRjR3AtYUaMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvcW50ZzFTMXE4SVV1cGxEdFBOR05IY0MxaFJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHQYIKwYBBQUHAQcBAf8EggEMMIIBCDCB2gQCAAEwgdMD BAMlYpADBAMl/BgDBAVNXYADBAZNa0ADBANPY0gDBANPY5ADBARQ8FADBAZRBYAD BAdRqAADAwFSmAMEBVKjAAMEA1WfgAMEA1kc6AMEA1kf6DAMAwQEWdUwAwQHWdUA AwQGWdXAAwQDX4JgAwMAbbADBAOe/wgDBAK5FCADBAC5GFQDBAG5GFYDBAK5ZSwD BAHBG9QDBAXCaUADBADDgIoDBAXUJkADBAXVgoADBAXVmCADBAbV0gAwCwMEBNXa 0AMDANXaAwQE2ZCQAwQE2ZFAMCkEAgACMCMDBQAgARqQAwUAKgAMYAMFAyoAHEAD BQAqAiH4AwUDKgJvgDANBgkqhkiG9w0BAQsFAAOCAQEAqDi+YjC7r+gfMeKaiJtL geM3CEYoLR0rgYDyFmscOASyjX2OgNDCJ7U5264eim6UnCTolTrs+G2WisN20Vea jd5Ntyl2CQep1BFEweXKcXhuYRPhSKyMt+GLaPJprsyNFzBIx4Bx8eHARoacDUZz Qc1/PVmYxQc7A5R9ngCtmXsOyBoJy3v0EFXBg3j5Jk2dvVZUkRfhHSUo+5wm0ycL aqCPg4JrmAmenQ0z7vCKGMM6fISgiaUYkulCKJE2yA2Ks480zd9GK3NfmC60C507 A6+ULm3WXANZ8+LAGoGqGESM6k/OlzF/4apGdx3yiSvarJv/rnY7PR/twH1sCrHn rw== -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:12 2026 by rpki-client