This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QKOZwaS5nVGjcbRgV0cdwYdKozY.roa File: QKOZwaS5nVGjcbRgV0cdwYdKozY.roa (raw, json) Hash identifier: K5mSOnZbPWW6NVigSd32k5W9Rl+UWS1rVGHVehEMm28= Subject key identifier: 40:A3:99:C1:A4:B9:9D:51:A3:71:B4:60:57:47:1D:C1:87:4A:A3:36 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346F0B0E828CAD1A9FB1D37470B660 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QKOZwaS5nVGjcbRgV0cdwYdKozY.roa Signing time: Thu 01 Jan 2026 06:17:40 +0000 ROA not before: Thu 01 Jan 2026 06:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56630 IP address blocks: 192.36.41.0/24 maxlen: 24 192.36.61.0/24 maxlen: 24 192.71.26.0/24 maxlen: 24 192.121.163.0/24 maxlen: 24 192.121.171.0/24 maxlen: 24 194.68.225.0/24 maxlen: 24 194.71.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6f:0b:0e:82:8c:ad:1a:9f:b1:d3:74:70:b6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40a399c1a4b99d51a371b46057471dc1874aa336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:a9:f7:07:05:e0:d8:8e:aa:6c:68:6d:ba: 7f:55:49:eb:fe:cb:b3:b6:c2:5a:33:c3:4d:d8:e2: e5:80:5b:69:f4:d2:1a:62:60:94:b7:de:b9:bd:57: 93:96:71:1c:00:d7:3b:99:93:9d:dd:84:f8:fa:30: 27:0a:c6:22:b1:ed:9f:6d:2d:a0:e9:78:15:55:79: a5:fa:66:98:f5:f7:15:fd:50:51:8c:be:c2:b6:3e: 58:d5:da:38:d3:b5:e8:8e:1c:01:d2:65:c9:e8:47: 0e:80:7d:4c:97:9b:bf:6d:11:9c:24:36:4d:7d:77: e1:75:5e:d2:2a:6a:6f:6d:6d:bf:ee:05:98:e1:b0: 0c:83:4f:0d:fc:aa:31:3e:8e:5c:56:a7:a1:7f:91: c0:2e:9b:8d:94:ac:e8:8f:0b:33:c2:73:d0:af:61: 0e:6a:e0:67:75:e5:25:99:bc:af:2f:86:e9:a7:17: 83:85:c2:96:0b:38:d9:b6:e1:28:3c:26:bf:a4:c0: 18:a5:5c:f3:e2:d4:cb:4a:b4:e6:e7:2c:78:3b:a2: fa:38:33:22:3e:1e:68:ac:fa:f1:bf:a6:91:8c:42: e7:56:95:2b:bf:a1:9b:02:f1:01:c9:2c:c9:6a:40: fc:c3:c1:6a:37:61:48:fc:d6:a7:0d:cf:c0:5b:c0: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A3:99:C1:A4:B9:9D:51:A3:71:B4:60:57:47:1D:C1:87:4A:A3:36 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QKOZwaS5nVGjcbRgV0cdwYdKozY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.41.0/24 192.36.61.0/24 192.71.26.0/24 192.121.163.0/24 192.121.171.0/24 194.68.225.0/24 194.71.107.0/24 Signature Algorithm: sha256WithRSAEncryption c1:d6:7a:2c:4e:85:c5:63:f2:40:7b:15:70:8f:45:e7:08:da: 2c:5a:16:aa:5b:e4:24:f3:6e:fd:54:b1:25:8b:5b:5a:67:fc: 06:08:ba:01:55:67:fa:ec:33:da:40:7f:b0:9a:f2:8f:20:9b: 57:e8:6a:41:8b:3f:f6:98:f1:6e:b6:09:4f:03:15:d5:25:f3: 35:b3:e8:a7:80:86:0f:b9:ce:ca:37:9a:90:ab:57:6c:cd:ef: d4:e3:f6:b5:d2:87:e8:3c:b1:9b:34:b4:3c:55:36:60:3b:bb: 53:3c:95:75:bc:5b:79:d8:ce:23:28:77:7c:be:7d:78:a7:50: 53:c0:7c:27:a1:a4:28:d0:08:d4:dd:cb:25:40:c7:27:35:de: d9:4f:97:c9:a7:b5:8c:00:45:24:fb:70:e5:4d:9e:9a:9d:1a: 6d:b5:44:30:ea:7f:d4:b8:6b:7a:a2:3f:66:7f:1a:c3:b1:3d: 4e:c9:60:05:7a:b5:47:03:db:75:6a:9b:45:cb:de:97:0b:3f: d9:ad:30:06:8b:aa:e8:1a:52:f9:b0:54:31:ba:0d:aa:bb:7d: f4:a1:0e:ef:ea:ac:0b:bc:13:48:e1:0a:41:68:85:af:a7:4f: 53:1c:d2:56:b0:44:39:98:ef:bb:f0:3f:b1:46:2c:a4:9e:6b: 0e:a4:80:a8 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4NG8LDoKMrRqfsdN0cLZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGEzOTljMWE0Yjk5ZDUxYTM3MWI0NjA1NzQ3MWRjMTg3NGFhMzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rCp9wcF4NiOqmxobbp/VUnr/suz tsJaM8NN2OLlgFtp9NIaYmCUt965vVeTlnEcANc7mZOd3YT4+jAnCsYise2fbS2g 6XgVVXml+maY9fcV/VBRjL7Ctj5Y1do407XojhwB0mXJ6EcOgH1Ml5u/bRGcJDZN fXfhdV7SKmpvbW2/7gWY4bAMg08N/KoxPo5cVqehf5HALpuNlKzojwszwnPQr2EO auBndeUlmbyvL4bppxeDhcKWCzjZtuEoPCa/pMAYpVzz4tTLSrTm5yx4O6L6ODMi Ph5orPrxv6aRjELnVpUrv6GbAvEBySzJakD8w8FqN2FI/NanDc/AW8D8rQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFECjmcGkuZ1Ro3G0YFdHHcGHSqM2MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUUtPWndhUzVuVkdqY2JSZ1YwY2R3WWRLb3pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAwCQpAwQA wCQ9AwQAwEcaAwQAwHmjAwQAwHmrAwQAwkThAwQAwkdrMA0GCSqGSIb3DQEBCwUA A4IBAQDB1nosToXFY/JAexVwj0XnCNosWhaqW+Qk8279VLEli1taZ/wGCLoBVWf6 7DPaQH+wmvKPIJtX6GpBiz/2mPFutglPAxXVJfM1s+ingIYPuc7KN5qQq1dsze/U 4/a10ofoPLGbNLQ8VTZgO7tTPJV1vFt52M4jKHd8vn14p1BTwHwnoaQo0AjU3csl QMcnNd7ZT5fJp7WMAEUk+3DlTZ6anRpttUQw6n/UuGt6oj9mfxrDsT1OyWAFerVH A9t1aptFy96XCz/ZrTAGi6roGlL5sFQxug2qu330oQ7v6qwLvBNI4QpBaIWvp09T HNJWsEQ5mO+78D+xRiyknmsOpICo -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:15 2026 by rpki-client