This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QZpOJMLxlJiY5GQ1rQgs1SNsimg.roa File: QZpOJMLxlJiY5GQ1rQgs1SNsimg.roa (raw, json) Hash identifier: /qvtVd1S67G22sI9goTW79cQnSWlwGWhyntkNwAyihc= Subject key identifier: 41:9A:4E:24:C2:F1:94:98:98:E4:64:35:AD:08:2C:D5:23:6C:8A:68 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84E337A0E90403872BFD52A1097C39 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QZpOJMLxlJiY5GQ1rQgs1SNsimg.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50181 IP address blocks: 80.85.48.0/21 maxlen: 24 92.52.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e3:37:a0:e9:04:03:87:2b:fd:52:a1:09:7c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=419a4e24c2f1949898e46435ad082cd5236c8a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:01:72:c7:78:a0:ff:79:d5:1a:26:40:f7: d6:02:47:87:0c:c1:f2:eb:bc:63:6b:e1:ca:ee:bb: c4:f9:3d:57:46:b2:4b:56:46:06:b8:2d:5d:50:b6: 8e:d4:52:15:ec:3d:8f:9b:48:ce:3a:92:da:d1:80: 48:c3:5e:f5:7b:2e:2e:0f:3b:81:f7:6e:19:3d:6f: 79:cc:2b:8e:76:c2:70:f1:f7:83:87:94:95:1b:4a: 2c:99:37:dc:2d:de:5d:fe:81:66:7f:b3:30:f3:9a: 83:4c:75:c9:c8:0d:39:b2:7a:94:7a:7f:25:d9:e9: 0d:6d:18:45:a4:5d:cd:79:22:7a:70:37:5c:a4:9c: df:b0:01:90:9a:62:d8:b4:c7:be:d5:1b:c5:95:1f: d3:45:b1:01:40:19:f9:19:a5:f2:c2:a2:e7:33:3c: 1a:aa:ad:fc:3e:de:bc:5f:73:a3:67:bf:e6:57:1a: f3:48:c4:46:9f:1b:11:38:d5:f2:da:ab:67:87:6e: 57:b5:5e:83:ae:84:18:4a:42:30:08:6e:39:99:5d: 51:ff:69:b4:05:68:28:f2:06:7b:66:4c:d3:94:bb: cc:b3:84:b7:0c:9a:70:bb:76:0b:0d:86:44:8c:8d: d5:c7:50:01:cc:de:2c:3a:e1:d1:de:55:8e:d5:dd: 8a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9A:4E:24:C2:F1:94:98:98:E4:64:35:AD:08:2C:D5:23:6C:8A:68 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QZpOJMLxlJiY5GQ1rQgs1SNsimg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.85.48.0/21 92.52.220.0/24 Signature Algorithm: sha256WithRSAEncryption 07:b9:b2:93:92:5c:db:6c:b6:6a:80:ea:b8:b9:00:df:25:37: b4:a1:5d:de:ef:e2:92:28:67:fd:fd:cf:82:8d:f9:9b:32:db: 4e:f5:17:06:53:35:5d:7c:9e:ff:8e:6e:d1:ad:bc:f2:de:a9: 6d:b2:44:83:35:98:54:dd:6e:56:27:62:4e:e6:38:96:17:cd: e0:36:ed:78:ed:bd:75:12:8d:64:e7:4e:a9:de:6c:34:0e:8c: 08:25:9e:b9:41:c0:0b:d6:77:d9:fb:67:90:fb:29:40:bb:41: 61:94:c9:63:59:01:b2:1e:0e:7f:7f:1b:6d:60:d5:69:64:a7: 92:6b:a4:51:12:c3:84:ff:7b:11:33:25:25:75:a3:65:3d:40: a2:0b:6a:5e:81:8c:10:f4:fa:c8:53:88:67:4d:cf:34:a7:f3: 7e:d5:06:9e:f2:44:37:99:e9:5c:dd:39:9e:ad:2f:24:e5:9c: 7f:bd:e4:75:8d:2e:58:39:82:fe:f3:18:72:5d:36:5d:3e:4e: 23:5d:3a:a5:f1:02:b8:d7:9e:62:cd:06:f2:16:83:e7:da:8d: d9:36:c9:8f:cb:02:38:25:6d:e4:54:31:02:45:bc:5a:b9:a4: 93:83:f2:aa:57:81:bc:36:ff:45:b2:96:0f:70:ed:56:fe:08: 0a:f7:02:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hOM3oOkEA4cr/VKhCXw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTlhNGUyNGMyZjE5NDk4OThlNDY0MzVhZDA4MmNkNTIzNmM4YTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz00Bcsd4oP951RomQPfWAkeHDMHy 67xja+HK7rvE+T1XRrJLVkYGuC1dULaO1FIV7D2Pm0jOOpLa0YBIw171ey4uDzuB 924ZPW95zCuOdsJw8feDh5SVG0osmTfcLd5d/oFmf7Mw85qDTHXJyA05snqUen8l 2ekNbRhFpF3NeSJ6cDdcpJzfsAGQmmLYtMe+1RvFlR/TRbEBQBn5GaXywqLnMzwa qq38Pt68X3OjZ7/mVxrzSMRGnxsRONXy2qtnh25XtV6DroQYSkIwCG45mV1R/2m0 BWgo8gZ7ZkzTlLvMs4S3DJpwu3YLDYZEjI3Vx1ABzN4sOuHR3lWO1d2KjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEGaTiTC8ZSYmORkNa0ILNUjbIpoMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvUVpwT0pNTHhsSmlZNUdRMXJRZ3MxU05zaW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDUFUwAwQA XDTcMA0GCSqGSIb3DQEBCwUAA4IBAQAHubKTklzbbLZqgOq4uQDfJTe0oV3e7+KS KGf9/c+CjfmbMttO9RcGUzVdfJ7/jm7Rrbzy3qltskSDNZhU3W5WJ2JO5jiWF83g Nu147b11Eo1k506p3mw0DowIJZ65QcAL1nfZ+2eQ+ylAu0FhlMljWQGyHg5/fxtt YNVpZKeSa6RREsOE/3sRMyUldaNlPUCiC2pegYwQ9PrIU4hnTc80p/N+1Qae8kQ3 melc3TmerS8k5Zx/veR1jS5YOYL+8xhyXTZdPk4jXTql8QK4155izQbyFoPn2o3Z NsmPywI4JW3kVDECRbxauaSTg/KqV4G8Nv9FspYPcO1W/ggK9wL3 -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:39 2026 by rpki-client