This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qzl22uWxNuPoUQMxYCP7dnzLEWY.roa File: qzl22uWxNuPoUQMxYCP7dnzLEWY.roa (raw, json) Hash identifier: fyAZ7Kgs9OXTDyrBPwZFks0KeK77oUd+1fCHYU6QUcQ= Subject key identifier: AB:39:76:DA:E5:B1:36:E3:E8:51:03:31:60:23:FB:76:7C:CB:11:66 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC1EA5212EBB0723B6C5E69C0E8CB Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qzl22uWxNuPoUQMxYCP7dnzLEWY.roa Signing time: Thu 01 Jan 2026 00:17:35 +0000 ROA not before: Thu 01 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61112 IP address blocks: 5.253.36.0/24 maxlen: 24 45.8.186.0/24 maxlen: 24 85.208.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c1:ea:52:12:eb:b0:72:3b:6c:5e:69:c0:e8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab3976dae5b136e3e85103316023fb767ccb1166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6e:31:49:cf:e6:a0:b4:38:2b:57:de:bd:a9: 2b:cb:d8:59:e6:2c:2d:48:84:88:34:10:59:19:5b: 4f:83:ac:68:8c:a4:81:b6:24:8a:51:20:74:f6:1d: 03:c0:7d:76:ed:a7:e8:cd:28:10:04:f8:9e:53:e0: cb:ab:53:67:bb:6a:e5:42:72:4f:fa:87:d4:71:d5: bb:8f:d0:a9:98:12:e3:b5:3e:70:27:3f:04:75:2f: 8a:03:70:f2:8d:42:cc:fe:bc:56:ae:91:ee:9d:7a: 01:c6:a1:68:e8:f1:90:d5:3e:bb:39:08:db:1f:12: d9:45:af:ad:90:25:48:7c:57:29:57:d3:e3:34:55: 70:c8:d5:c5:94:f2:43:4a:51:d5:38:6b:7b:cc:c8: ae:68:1b:99:05:7b:11:a5:ec:9b:46:ea:14:f4:74: e1:35:6a:ad:c2:50:4a:04:38:49:32:d8:64:48:bb: 9e:68:59:7b:8e:3e:74:a4:d1:f2:e6:9d:ca:65:aa: 97:d3:db:33:29:31:19:81:f6:53:5e:d3:1b:06:e7: 0b:d7:20:61:2d:99:be:c4:ec:34:2a:03:8e:92:2c: 20:bd:0f:77:fd:eb:56:e1:e8:29:96:8b:ad:7d:47: 8c:fe:c1:a3:c5:cc:17:ce:34:37:d0:49:88:97:3d: fc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:39:76:DA:E5:B1:36:E3:E8:51:03:31:60:23:FB:76:7C:CB:11:66 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qzl22uWxNuPoUQMxYCP7dnzLEWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.36.0/24 45.8.186.0/24 85.208.104.0/24 Signature Algorithm: sha256WithRSAEncryption cd:ce:b4:ce:5b:0a:57:75:b5:b5:06:9e:a9:68:21:69:2e:a2: 7e:c8:6f:35:f7:0a:a1:2b:2c:d9:66:46:11:97:22:05:5f:4b: 1b:79:b3:e9:8f:58:43:f5:9f:29:e5:36:e3:e4:a2:86:bc:f8: 0c:a0:47:fb:86:81:95:e1:1e:53:f7:05:54:f2:cf:29:cd:b7: 2b:e0:92:e2:b5:e5:f4:4c:85:52:43:3c:79:fc:63:5b:30:55: 44:fa:66:d6:86:50:d2:b4:25:c3:89:d4:f8:1a:25:d8:e8:4c: 3e:9a:8b:ac:9f:c5:3f:ed:39:89:dd:d0:92:1e:22:ea:f8:1c: 1f:d2:00:04:86:b4:8a:92:18:b9:3e:b6:88:47:f5:5d:6e:4c: cf:12:91:01:66:da:94:bc:d6:de:c0:2c:09:8f:ed:fd:b2:72: 6b:50:47:74:4e:b2:e4:31:ef:ee:99:0b:16:db:a0:dd:c9:c8: e8:cc:95:93:d5:ea:c9:99:5b:73:cd:8f:5f:94:b8:77:ab:3d: cc:15:3c:fd:bc:45:83:38:f4:d6:2b:38:07:60:5e:53:bb:08: 01:da:58:76:f6:f8:0d:ac:98:29:f1:00:48:88:59:e0:8f:43: bd:d6:46:8b:28:6c:ec:59:25:06:93:a0:ee:5a:c9:67:eb:dc: 59:4d:e7:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26sHqUhLrsHI7bF5pwOjLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjM5NzZkYWU1YjEzNmUzZTg1MTAzMzE2MDIzZmI3NjdjY2IxMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG4xSc/moLQ4K1fevakry9hZ5iwt SISINBBZGVtPg6xojKSBtiSKUSB09h0DwH127afozSgQBPieU+DLq1Nnu2rlQnJP +ofUcdW7j9CpmBLjtT5wJz8EdS+KA3DyjULM/rxWrpHunXoBxqFo6PGQ1T67OQjb HxLZRa+tkCVIfFcpV9PjNFVwyNXFlPJDSlHVOGt7zMiuaBuZBXsRpeybRuoU9HTh NWqtwlBKBDhJMthkSLueaFl7jj50pNHy5p3KZaqX09szKTEZgfZTXtMbBucL1yBh LZm+xOw0KgOOkiwgvQ93/etW4egploutfUeM/sGjxcwXzjQ30EmIlz38nwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKs5dtrlsTbj6FEDMWAj+3Z8yxFmMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvcXpsMjJ1V3hOdVBvVVFNeFlDUDdkbnpMRVdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf0kAwQA LQi6AwQAVdBoMA0GCSqGSIb3DQEBCwUAA4IBAQDNzrTOWwpXdbW1Bp6paCFpLqJ+ yG819wqhKyzZZkYRlyIFX0sbebPpj1hD9Z8p5Tbj5KKGvPgMoEf7hoGV4R5T9wVU 8s8pzbcr4JLiteX0TIVSQzx5/GNbMFVE+mbWhlDStCXDidT4GiXY6Ew+mousn8U/ 7TmJ3dCSHiLq+Bwf0gAEhrSKkhi5PraIR/VdbkzPEpEBZtqUvNbewCwJj+39snJr UEd0TrLkMe/umQsW26DdycjozJWT1erJmVtzzY9flLh3qz3MFTz9vEWDOPTWKzgH YF5TuwgB2lh29vgNrJgp8QBIiFngj0O91kaLKGzsWSUGk6DuWsln69xZTecl -----END CERTIFICATE-----Generated at Mon Jan 19 11:24:42 2026 by rpki-client