This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/QTFye-32ZtubZYZVN0cCrwUzz_s.roa File: QTFye-32ZtubZYZVN0cCrwUzz_s.roa (raw, json) Hash identifier: Ou06XDdFUhQ2dykgxmyAA0EVBWVZBiN7PQ/FvfPl2a0= Subject key identifier: 41:31:72:7B:ED:F6:66:DB:9B:65:86:55:37:47:02:AF:05:33:CF:FB Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877 Certificate serial: 019B7C7FDF67B4E9B359A38A5C8B46937A8D Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/QTFye-32ZtubZYZVN0cCrwUzz_s.roa Signing time: Fri 02 Jan 2026 02:18:33 +0000 ROA not before: Fri 02 Jan 2026 02:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20507 IP address blocks: 85.223.101.0/24 maxlen: 24 85.223.126.0/24 maxlen: 24 217.149.192.0/19 maxlen: 24 217.149.192.0/24 maxlen: 24 217.149.201.0/24 maxlen: 24 217.149.202.0/24 maxlen: 24 217.149.203.0/24 maxlen: 24 217.149.217.0/24 maxlen: 24 217.149.218.0/24 maxlen: 24 217.149.219.0/24 maxlen: 24 2a01:3a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:df:67:b4:e9:b3:59:a3:8a:5c:8b:46:93:7a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877 Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4131727bedf666db9b658655374702af0533cffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:c9:6c:b9:d4:b4:09:4c:66:0d:93:d8:e1: 59:95:73:5c:e0:69:2c:a8:ca:20:d7:bb:0c:1d:ca: 54:27:f8:74:36:50:09:c9:9a:55:d8:b1:37:c2:12: 84:b1:d8:c6:8f:9b:58:d9:f3:15:93:3d:a2:fd:2d: 46:9c:9f:45:7f:31:c6:82:3e:f9:12:0c:24:d7:21: 0e:85:2f:30:b1:ed:ea:6b:8e:3c:28:c1:28:c0:06: 39:e2:f4:25:f0:73:e9:1e:11:ae:c4:87:20:b7:19: e5:0b:35:10:7f:72:f7:1b:d5:be:49:21:80:a7:96: d4:c0:3e:ce:f8:dc:ed:7b:13:ce:37:22:a8:5b:1e: 8f:6c:4c:70:89:2a:8e:ac:d0:12:04:74:04:56:71: 82:0a:c0:9b:f0:16:2c:64:f0:65:9f:2b:f9:68:fd: b3:f7:0a:7c:2a:4d:ee:2b:08:8f:12:dc:12:a3:f7: 7c:09:a3:76:eb:12:40:26:5e:9b:d9:4a:a9:f5:40: df:ca:9a:f0:33:5a:9a:1f:23:c8:57:b6:4d:f4:9c: 4a:f6:30:e7:53:5f:13:7b:da:96:05:27:6a:3e:c9: cd:dd:3d:81:83:70:fa:b0:8a:da:13:fd:e2:5e:18: b8:70:78:72:c4:15:5c:43:f5:f3:62:04:4f:07:5e: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:31:72:7B:ED:F6:66:DB:9B:65:86:55:37:47:02:AF:05:33:CF:FB X509v3 Authority Key Identifier: keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/QTFye-32ZtubZYZVN0cCrwUzz_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.223.101.0/24 85.223.126.0/24 217.149.192.0/19 IPv6: 2a01:3a8::/32 Signature Algorithm: sha256WithRSAEncryption 4c:0d:44:c7:1b:dc:37:eb:14:63:17:87:c9:4b:a5:c8:c0:03: 9e:5d:28:7b:15:a9:e7:3c:e4:db:b5:98:13:23:46:83:93:91: 58:af:44:6a:fd:94:c2:4f:ee:cb:1c:dd:1a:1a:dd:05:63:69: 09:5d:03:ed:0d:7a:db:84:6b:43:15:2e:04:77:42:fb:dc:e1: 12:c9:38:bd:1c:14:b3:80:0e:a1:71:3e:72:b1:c2:70:a6:e5: 23:1b:6f:76:01:be:af:10:24:bd:91:30:be:b4:d0:88:8e:87: 13:51:2f:d3:ac:5e:bf:9e:96:37:4c:96:45:4e:c1:59:f1:ae: 1a:68:f5:e5:52:b4:7d:3b:bd:12:c1:69:d5:6f:4a:02:e4:a8: 8f:60:07:8b:95:33:36:95:04:81:65:30:06:6a:28:c7:00:f7: e1:9f:7f:32:ef:2d:2d:db:34:73:a1:d8:15:3a:af:27:56:e1: 62:26:14:82:47:1a:9c:74:f9:d7:ba:d5:09:99:48:28:aa:97: 0c:ee:c6:a4:27:20:4e:ec:81:36:5b:d6:b8:b9:d3:66:e3:57: e8:ec:a2:2a:23:aa:93:bd:cc:24:4d:1d:a7:17:9b:03:91:f2: 35:cc:86:df:e8:ca:be:4e:fe:4f:92:09:b3:ed:53:fc:42:92: da:78:12:3f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8f99ntOmzWaOKXItGk3qNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi MWE4NzcwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTMxNzI3YmVkZjY2NmRiOWI2NTg2NTUzNzQ3MDJhZjA1MzNjZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgPJbLnUtAlMZg2T2OFZlXNc4Gks qMog17sMHcpUJ/h0NlAJyZpV2LE3whKEsdjGj5tY2fMVkz2i/S1GnJ9FfzHGgj75 Egwk1yEOhS8wse3qa448KMEowAY54vQl8HPpHhGuxIcgtxnlCzUQf3L3G9W+SSGA p5bUwD7O+NztexPONyKoWx6PbExwiSqOrNASBHQEVnGCCsCb8BYsZPBlnyv5aP2z 9wp8Kk3uKwiPEtwSo/d8CaN26xJAJl6b2Uqp9UDfyprwM1qaHyPIV7ZN9JxK9jDn U18Te9qWBSdqPsnN3T2Bg3D6sIraE/3iXhi4cHhyxBVcQ/XzYgRPB17HyQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEExcnvt9mbbm2WGVTdHAq8FM8/7MB8GA1UdIwQY MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt ZjU1NWUyZTY4YTEwLzEvUVRGeWUtMzJadHViWllaVk4wY0Nyd1V6el9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAVd9lAwQA Vd9+AwQF2ZXAMA0EAgACMAcDBQAqAQOoMA0GCSqGSIb3DQEBCwUAA4IBAQBMDUTH G9w36xRjF4fJS6XIwAOeXSh7FannPOTbtZgTI0aDk5FYr0Rq/ZTCT+7LHN0aGt0F Y2kJXQPtDXrbhGtDFS4Ed0L73OESyTi9HBSzgA6hcT5yscJwpuUjG292Ab6vECS9 kTC+tNCIjocTUS/TrF6/npY3TJZFTsFZ8a4aaPXlUrR9O70SwWnVb0oC5KiPYAeL lTM2lQSBZTAGaijHAPfhn38y7y0t2zRzodgVOq8nVuFiJhSCRxqcdPnXutUJmUgo qpcM7sakJyBO7IE2W9a4udNm41fo7KIqI6qTvcwkTR2nF5sDkfI1zIbf6Mq+Tv5P kgmz7VP8QpLaeBI/ -----END CERTIFICATE-----Generated at Tue Jan 20 12:47:49 2026 by rpki-client