This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/QzF6zdAmWlqa8MJWx9j94DfMPOM.roa File: QzF6zdAmWlqa8MJWx9j94DfMPOM.roa (raw, json) Hash identifier: GR81IrpEx4ZIKShy/solAKxjvbcjUDvmJG95WKquc+s= Subject key identifier: 43:31:7A:CD:D0:26:5A:5A:9A:F0:C2:56:C7:D8:FD:E0:37:CC:3C:E3 Certificate issuer: /CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2 Certificate serial: 019B7C800B5DF0B41D88473C17DE76A96B8B Authority key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/QzF6zdAmWlqa8MJWx9j94DfMPOM.roa Signing time: Fri 02 Jan 2026 02:18:44 +0000 ROA not before: Fri 02 Jan 2026 02:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197204 IP address blocks: 46.29.8.0/21 maxlen: 24 91.224.204.0/23 maxlen: 24 91.231.161.0/24 maxlen: 24 185.18.108.0/22 maxlen: 24 185.78.116.0/24 maxlen: 24 185.78.117.0/24 maxlen: 24 185.78.118.0/24 maxlen: 24 185.78.119.0/24 maxlen: 24 185.105.168.0/22 maxlen: 24 185.251.148.0/22 maxlen: 24 2a01:4360::/32 maxlen: 48 2a03:5c80::/32 maxlen: 48 2a05:6980::/29 maxlen: 48 2a0c:1ac0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0b:5d:f0:b4:1d:88:47:3c:17:de:76:a9:6b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2 Validity Not Before: Jan 2 02:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43317acdd0265a5a9af0c256c7d8fde037cc3ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:40:f5:24:30:72:37:f2:ec:0f:86:2d:44: a0:fb:4f:2e:26:45:2f:a6:94:23:6d:97:e0:90:30: 16:77:22:74:f0:89:e2:aa:3e:af:8c:54:c5:50:8c: ec:7b:36:da:57:81:6b:e2:39:77:dd:cf:51:38:3a: e9:e6:c8:18:19:e2:f3:3f:ff:e7:79:7f:2e:58:29: 05:80:50:5d:21:e3:06:fd:c1:c9:e5:1a:52:72:16: 95:85:05:81:84:6a:ac:da:61:a5:49:d1:95:0d:c6: 09:e0:57:74:13:9b:94:32:d9:3f:0b:39:c0:6e:7f: 15:fc:5a:5d:11:db:8b:a2:b4:aa:dc:6e:7f:9a:08: f4:44:20:88:ed:ba:a4:57:81:24:24:b4:2e:a7:d8: b6:31:b3:48:e0:5f:8c:bf:c8:27:3d:ac:6c:6d:1b: 8c:e8:ff:12:b0:20:1d:ac:da:6d:fd:42:f2:38:0f: 2c:83:d4:6a:f4:c7:3c:dd:be:71:89:13:36:5d:39: ea:b3:56:53:d1:ea:c3:f5:73:d8:1a:1e:2e:2e:63: 68:1e:0d:1c:54:3b:a6:52:27:a2:50:b2:31:41:83: c0:2c:1b:85:0d:26:71:34:a3:ec:5d:14:a5:a9:82: d3:a5:d0:0a:1e:4d:c0:7a:ea:68:97:87:10:e3:b0: 90:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:31:7A:CD:D0:26:5A:5A:9A:F0:C2:56:C7:D8:FD:E0:37:CC:3C:E3 X509v3 Authority Key Identifier: keyid:F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/QzF6zdAmWlqa8MJWx9j94DfMPOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.8.0/21 91.224.204.0/23 91.231.161.0/24 185.18.108.0/22 185.78.116.0/22 185.105.168.0/22 185.251.148.0/22 IPv6: 2a01:4360::/32 2a03:5c80::/32 2a05:6980::/29 2a0c:1ac0::/29 Signature Algorithm: sha256WithRSAEncryption 9b:4f:95:a8:cb:c0:7a:a9:0e:1d:1e:af:f8:1b:75:7c:5d:2f: b8:a7:3d:83:06:d1:3e:c1:21:1b:d1:c0:cc:06:ee:13:d4:1e: 86:8e:97:95:2c:2b:f2:dd:99:e8:ab:0f:df:62:f9:4d:71:0f: 02:07:3a:71:a1:0b:fa:8e:fb:8d:e2:53:58:6c:e5:c9:52:de: c0:f2:11:7d:13:65:84:02:b8:45:40:bd:1f:e6:bc:4d:7d:3c: d8:6c:f6:80:cb:81:cb:4e:8f:c5:36:c0:2f:e9:09:fb:32:12: 7b:45:37:61:7e:8c:58:f7:b7:32:da:c6:71:88:94:4c:10:e4: 78:4d:5a:87:5b:6e:2d:ce:ff:0e:52:27:d0:50:0b:33:e9:28: 07:68:5f:4f:8c:0c:d9:85:f1:cb:7f:30:40:5f:6e:4b:96:3c: d7:19:f3:c3:1b:68:3e:2c:c9:f7:c4:56:07:53:fd:e4:bc:c4: b4:22:fd:0e:e7:7d:36:e2:3e:c9:54:04:0a:fb:ec:c9:9c:13: 85:ac:5d:8e:be:1f:c1:18:d9:ec:1d:c9:de:0e:14:1f:8a:e1: 31:d6:b1:d8:f1:0e:a2:28:fb:c7:31:b6:f9:65:19:c9:6c:47: 9e:5b:aa:1d:d6:6c:7b:d4:e5:c1:85:7d:ca:8b:b4:fd:0b:a1: 5e:3c:d0:94 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt8gAtd8LQdiEc8F952qWuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OThkODlmOTI1Mjk5YjUxZjNiYzgyYWNjZDhjNmI5NjJk Y2MyZTIwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzMxN2FjZGQwMjY1YTVhOWFmMGMyNTZjN2Q4ZmRlMDM3Y2MzY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz19A9SQwcjfy7A+GLUSg+08uJkUv ppQjbZfgkDAWdyJ08Iniqj6vjFTFUIzsezbaV4Fr4jl33c9RODrp5sgYGeLzP//n eX8uWCkFgFBdIeMG/cHJ5RpSchaVhQWBhGqs2mGlSdGVDcYJ4Fd0E5uUMtk/CznA bn8V/FpdEduLorSq3G5/mgj0RCCI7bqkV4EkJLQup9i2MbNI4F+Mv8gnPaxsbRuM 6P8SsCAdrNpt/ULyOA8sg9Rq9Mc83b5xiRM2XTnqs1ZT0erD9XPYGh4uLmNoHg0c VDumUieiULIxQYPALBuFDSZxNKPsXRSlqYLTpdAKHk3Aeupol4cQ47CQJwIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFEMxes3QJlpamvDCVsfY/eA3zDzjMB8GA1UdIwQY MBaAFPiY2J+SUpm1HzvIKszYxrli3MLiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KalluNUpTbWJVZk84Z3F6TmpHdVdMY3d1SS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvYjg4YTYwLWFhZjQtNDkxYS1hYjgy LWM1OTI5NDk5MWIyNS8xL1F6RjZ6ZEFtV2xxYThNSld4OWo5NERmTVBPTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWMvYjg4YTYwLWFhZjQtNDkxYS1hYjgyLWM1OTI5NDk5MWIy NS8xLzEtSmpZbjVKU21iVWZPOGdxek5qR3VXTGN3dUkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwZwYIKwYBBQUHAQcBAf8EWDBWMDAEAgABMCoDBAMuHQgD BAFb4MwDBABb56EDBAK5EmwDBAK5TnQDBAK5aagDBAK5+5QwIgQCAAIwHAMFACoB Q2ADBQAqA1yAAwUDKgVpgAMFAyoMGsAwDQYJKoZIhvcNAQELBQADggEBAJtPlajL wHqpDh0er/gbdXxdL7inPYMG0T7BIRvRwMwG7hPUHoaOl5UsK/LdmeirD99i+U1x DwIHOnGhC/qO+43iU1hs5clS3sDyEX0TZYQCuEVAvR/mvE19PNhs9oDLgctOj8U2 wC/pCfsyEntFN2F+jFj3tzLaxnGIlEwQ5HhNWodbbi3O/w5SJ9BQCzPpKAdoX0+M DNmF8ct/MEBfbkuWPNcZ88MbaD4syffEVgdT/eS8xLQi/Q7nfTbiPslUBAr77Mmc E4WsXY6+H8EY2ewdyd4OFB+K4THWsdjxDqIo+8cxtvllGclsR55bqh3WbHvU5cGF fcqLtP0LoV480JQ= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:17 2026 by rpki-client