This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/QZoElNh2G2nwMP88BsRDda3tDUQ.roa File: QZoElNh2G2nwMP88BsRDda3tDUQ.roa (raw, json) Hash identifier: Z+CRbrBSzZz6HmMemjR2fLmNJfImRQn2RnMbj7m1gdQ= Subject key identifier: 41:9A:04:94:D8:76:1B:69:F0:30:FF:3C:06:C4:43:75:AD:ED:0D:44 Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323 Certificate serial: 019B7C7F2C388264FBB8F5E5B9B853D59FA2 Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/QZoElNh2G2nwMP88BsRDda3tDUQ.roa Signing time: Fri 02 Jan 2026 02:17:47 +0000 ROA not before: Fri 02 Jan 2026 02:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8535 IP address blocks: 80.252.0.0/20 maxlen: 20 193.42.228.0/22 maxlen: 22 194.149.228.0/22 maxlen: 22 2a02:bd8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:2c:38:82:64:fb:b8:f5:e5:b9:b8:53:d5:9f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323 Validity Not Before: Jan 2 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=419a0494d8761b69f030ff3c06c44375aded0d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:70:bd:e6:bc:ec:fc:e2:1b:5d:1f:dd:bd: d3:2c:04:3e:75:76:5c:f6:0b:38:fd:1d:fd:32:e2: e5:10:25:63:b2:6d:4d:cb:db:39:5c:0e:cb:79:5d: a4:65:3c:e1:93:3d:09:1f:5c:a8:74:01:04:13:14: e2:b6:d9:f4:8b:08:e7:d7:3a:bf:63:1c:9b:af:f4: eb:8f:8f:79:3c:b4:96:6f:06:8f:4e:0f:38:62:0b: 78:0b:e1:3b:6e:5d:cb:8c:f3:14:47:55:01:b3:78: 58:d0:00:93:c2:d8:02:d5:25:b1:42:a4:76:10:64: 0f:8f:bc:f2:30:c0:45:1a:09:3b:26:b7:e2:9a:8b: bb:d2:05:44:ed:dc:7d:4a:45:54:bb:c4:33:f2:fc: 7f:10:b1:01:38:d4:9c:05:f9:2a:89:d7:2e:90:51: 96:1e:53:4e:bf:74:80:35:72:a1:13:9f:bb:81:06: 58:48:06:ac:a1:02:65:82:87:8c:b2:79:48:db:80: fb:3c:23:5c:7b:d0:2c:12:f4:e9:5b:22:80:2f:95: f7:8e:fb:90:ea:ff:c4:6f:3a:79:fb:e6:3b:da:81: a2:57:a2:1a:6a:bc:e7:05:9d:26:09:a1:37:0c:2b: c2:38:c0:c2:dd:c8:1d:a1:0a:60:c6:60:28:ac:8a: b4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9A:04:94:D8:76:1B:69:F0:30:FF:3C:06:C4:43:75:AD:ED:0D:44 X509v3 Authority Key Identifier: keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/QZoElNh2G2nwMP88BsRDda3tDUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.252.0.0/20 193.42.228.0/22 194.149.228.0/22 IPv6: 2a02:bd8::/32 Signature Algorithm: sha256WithRSAEncryption 8d:c5:63:b5:2d:8e:e4:7b:c4:11:f6:53:62:d9:c1:21:f4:21: 5c:8f:39:b3:f7:5e:9c:4c:14:02:87:1e:0e:81:30:11:0b:91: bf:5c:85:14:30:d5:5b:a5:c9:38:9c:87:aa:91:3e:a8:f7:a6: d2:e6:3d:ec:10:a7:af:02:7f:0a:2a:04:3d:af:0d:77:95:7c: c5:a3:17:05:e8:8d:77:af:3f:a1:63:e1:e3:40:65:41:66:aa: 56:d6:22:f0:9a:7b:1f:17:f2:42:9f:32:b8:4f:ed:1c:c6:d6: 47:54:2c:d5:83:e7:92:e4:6f:2b:b3:e8:4f:3a:05:d1:d6:12: 4b:ad:de:7a:5e:dc:64:f5:55:61:9a:f3:f6:31:d9:d2:df:58: 6a:87:e9:70:25:1b:f0:ac:5f:ec:43:07:82:7d:7f:3a:17:8d: d0:0d:6e:19:c5:c4:3a:04:9c:2c:0f:85:0d:67:57:28:fb:d6: f3:e9:67:8a:cd:45:b0:18:5a:09:f0:85:74:16:a6:d7:89:34: e5:b1:95:e7:2a:3f:28:5b:e8:31:bb:0b:cb:98:b2:77:44:fd: 5b:05:55:70:7a:88:e4:32:d0:76:5d:e0:a2:98:a5:f8:c4:d7: e1:48:5b:78:9b:4c:a3:5c:c1:cd:be:e0:a7:f5:05:d5:98:f9: 1e:b5:84:3b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8fyw4gmT7uPXlubhT1Z+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGEzMjI3OGNlN2I0Y2IyMDVkZmNjYWQ3ODYwMTRhM2Iw YWUzMjMwHhcNMjYwMTAyMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTlhMDQ5NGQ4NzYxYjY5ZjAzMGZmM2MwNmM0NDM3NWFkZWQwZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02Zwvea87PziG10f3b3TLAQ+dXZc 9gs4/R39MuLlECVjsm1Ny9s5XA7LeV2kZTzhkz0JH1yodAEEExTittn0iwjn1zq/ Yxybr/Trj495PLSWbwaPTg84Ygt4C+E7bl3LjPMUR1UBs3hY0ACTwtgC1SWxQqR2 EGQPj7zyMMBFGgk7Jrfimou70gVE7dx9SkVUu8Qz8vx/ELEBONScBfkqidcukFGW HlNOv3SANXKhE5+7gQZYSAasoQJlgoeMsnlI24D7PCNce9AsEvTpWyKAL5X3jvuQ 6v/Ebzp5++Y72oGiV6IaarznBZ0mCaE3DCvCOMDC3cgdoQpgxmAorIq07wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEGaBJTYdhtp8DD/PAbEQ3Wt7Q1EMB8GA1UdIwQY MBaAFOJKMieM57TLIF38yteGAUo7CuMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNjQ4NmItYjdiNy00M2EyLWJiMjct NzdhYjA1ZTBjZjYyLzEvUVpvRWxOaDJHMm53TVA4OEJzUkRkYTN0RFVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8zNjQ4NmItYjdiNy00M2EyLWJiMjctNzdhYjA1ZTBjZjYy LzEvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUPwAAwQC wSrkAwQCwpXkMA0EAgACMAcDBQAqAgvYMA0GCSqGSIb3DQEBCwUAA4IBAQCNxWO1 LY7ke8QR9lNi2cEh9CFcjzmz916cTBQChx4OgTARC5G/XIUUMNVbpck4nIeqkT6o 96bS5j3sEKevAn8KKgQ9rw13lXzFoxcF6I13rz+hY+HjQGVBZqpW1iLwmnsfF/JC nzK4T+0cxtZHVCzVg+eS5G8rs+hPOgXR1hJLrd56Xtxk9VVhmvP2MdnS31hqh+lw JRvwrF/sQweCfX86F43QDW4ZxcQ6BJwsD4UNZ1co+9bz6WeKzUWwGFoJ8IV0FqbX iTTlsZXnKj8oW+gxuwvLmLJ3RP1bBVVweojkMtB2XeCimKX4xNfhSFt4m0yjXMHN vuCn9QXVmPketYQ7 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:19 2026 by rpki-client