This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Qt-feGoA8-9E6Dhl7ZscFkTMSKI.roa File: Qt-feGoA8-9E6Dhl7ZscFkTMSKI.roa (raw, json) Hash identifier: trEGbh/W18kqxNXY/PaAExVg1jfIAWPTVVeIDtCCH4s= Subject key identifier: 42:DF:9F:78:6A:00:F3:EF:44:E8:38:65:ED:9B:1C:16:44:CC:48:A2 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F2CE503AAACA65FAE56E61931E70 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Qt-feGoA8-9E6Dhl7ZscFkTMSKI.roa Signing time: Thu 01 Jan 2026 20:18:11 +0000 ROA not before: Thu 01 Jan 2026 20:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 95.170.19.0/24 maxlen: 24 95.170.22.0/24 maxlen: 24 95.170.23.0/24 maxlen: 24 95.170.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f2:ce:50:3a:aa:ca:65:fa:e5:6e:61:93:1e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42df9f786a00f3ef44e83865ed9b1c1644cc48a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:14:6b:2c:1b:c7:55:7a:c7:60:48:42:2a: fb:f1:8c:e7:9e:28:f0:36:3e:8c:b7:23:ce:0e:11: 1d:0b:43:29:20:ae:68:7a:46:7a:cf:54:0b:7d:9f: 6a:df:24:02:f7:23:80:6f:42:0d:a4:22:77:ca:51: 58:d1:b1:cc:db:46:22:99:68:1b:2a:55:d0:b1:7d: 47:0c:01:43:d7:01:09:88:8a:3d:17:4e:f6:3e:01: be:c1:6f:f5:f8:8c:8d:90:a8:b9:b3:4e:8a:13:64: 91:fe:eb:7f:1e:ac:c5:da:d4:80:33:23:dd:06:24: 8b:1d:64:c7:78:5a:42:12:45:c8:1f:1b:90:2c:0c: 99:82:e6:38:43:11:e7:62:8f:3e:c1:57:57:8a:ba: bb:91:6c:eb:08:42:f4:d5:ca:01:16:f8:4b:d9:cd: 39:3d:ef:73:74:fc:a2:79:df:85:e0:93:4b:d4:94: a7:78:da:48:04:38:5c:13:e1:80:22:90:a7:4c:0f: 60:9a:35:2c:be:e5:7c:35:9a:22:e6:2c:1e:83:da: b6:fa:e1:63:84:c8:72:13:a6:72:03:98:54:05:b8: 4e:87:93:33:70:73:ac:b4:91:63:15:0f:39:76:b3: b4:1b:b0:58:2b:c6:c7:e0:f6:02:99:41:55:a4:f1: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DF:9F:78:6A:00:F3:EF:44:E8:38:65:ED:9B:1C:16:44:CC:48:A2 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Qt-feGoA8-9E6Dhl7ZscFkTMSKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.19.0/24 95.170.22.0/23 95.170.28.0/24 Signature Algorithm: sha256WithRSAEncryption 51:50:a5:27:cc:61:ac:f5:b2:34:07:46:c8:32:0c:d8:aa:59: d0:92:dd:35:e7:3d:a0:4b:bf:81:64:13:00:31:0a:9d:3f:34: 29:c5:30:6c:7a:38:c4:b2:1f:82:18:cb:c5:1f:95:c7:35:3e: 00:84:4e:9c:b0:d6:a0:65:e8:28:4e:1f:99:bf:bb:53:38:33: 57:64:85:d7:66:40:24:53:5f:7a:9c:eb:22:6a:c1:82:0b:7e: 72:a9:11:e9:df:2c:ef:8f:d6:c5:fd:31:1c:68:98:5c:da:60: 6d:ca:b8:5b:d3:67:36:20:60:9b:68:0a:f2:15:db:ee:b2:d1: 9a:fd:e8:a9:ec:b2:0f:a1:08:de:6c:3a:38:4a:b4:ec:19:9d: 6b:6a:e7:88:95:a6:cb:5f:71:70:d6:9c:67:b1:8d:40:f7:ad: 18:3f:71:60:42:8e:64:3e:3d:a6:f2:4d:fa:d5:d4:c7:1a:2e: 2e:d7:f6:fd:fe:8c:96:d5:85:2c:b2:c6:aa:d5:e3:e5:d8:8f: fd:31:69:35:55:cf:6b:d5:70:43:96:f4:35:31:c5:e3:04:df: fd:8d:fb:b7:5b:8e:4f:99:98:e0:f5:aa:30:26:2f:95:72:38: 3f:e4:c1:1a:0d:e5:1f:a5:3d:6f:7d:72:4b:9e:51:94:aa:ac: 8e:d5:f8:81 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NfLOUDqqymX65W5hkx5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmRmOWY3ODZhMDBmM2VmNDRlODM4NjVlZDliMWMxNjQ0Y2M0OGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6sUaywbx1V6x2BIQir78Yznnijw Nj6MtyPODhEdC0MpIK5oekZ6z1QLfZ9q3yQC9yOAb0INpCJ3ylFY0bHM20YimWgb KlXQsX1HDAFD1wEJiIo9F072PgG+wW/1+IyNkKi5s06KE2SR/ut/HqzF2tSAMyPd BiSLHWTHeFpCEkXIHxuQLAyZguY4QxHnYo8+wVdXirq7kWzrCEL01coBFvhL2c05 Pe9zdPyied+F4JNL1JSneNpIBDhcE+GAIpCnTA9gmjUsvuV8NZoi5iweg9q2+uFj hMhyE6ZyA5hUBbhOh5MzcHOstJFjFQ85drO0G7BYK8bH4PYCmUFVpPGyBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFELfn3hqAPPvROg4Ze2bHBZEzEiiMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvUXQtZmVHb0E4LTlFNkRobDdac2NGa1RNU0tJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX6oTAwQB X6oWAwQAX6ocMA0GCSqGSIb3DQEBCwUAA4IBAQBRUKUnzGGs9bI0B0bIMgzYqlnQ kt015z2gS7+BZBMAMQqdPzQpxTBsejjEsh+CGMvFH5XHNT4AhE6csNagZegoTh+Z v7tTODNXZIXXZkAkU196nOsiasGCC35yqRHp3yzvj9bF/TEcaJhc2mBtyrhb02c2 IGCbaAryFdvustGa/eip7LIPoQjebDo4SrTsGZ1raueIlabLX3Fw1pxnsY1A960Y P3FgQo5kPj2m8k361dTHGi4u1/b9/oyW1YUsssaq1ePl2I/9MWk1Vc9r1XBDlvQ1 McXjBN/9jfu3W45PmZjg9aowJi+Vcjg/5MEaDeUfpT1vfXJLnlGUqqyO1fiB -----END CERTIFICATE-----Generated at Mon Jan 12 00:53:40 2026 by rpki-client