This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/QGWyZMZEDWndXF66DUb-_cMUkV4.roa File: QGWyZMZEDWndXF66DUb-_cMUkV4.roa (raw, json) Hash identifier: zrKxfGy5U0QaVBrkDGQlV7fiPOhFDa/FGROBClyRSz8= Subject key identifier: 40:65:B2:64:C6:44:0D:69:DD:5C:5E:BA:0D:46:FE:FD:C3:14:91:5E Certificate issuer: /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55 Certificate serial: 019B7A59E28E692AC36C424B0E004448EB9F Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/QGWyZMZEDWndXF66DUb-_cMUkV4.roa Signing time: Thu 01 Jan 2026 16:17:49 +0000 ROA not before: Thu 01 Jan 2026 16:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49890 IP address blocks: 95.140.240.0/20 maxlen: 24 2a0c:aac0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:e2:8e:69:2a:c3:6c:42:4b:0e:00:44:48:eb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55 Validity Not Before: Jan 1 16:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4065b264c6440d69dd5c5eba0d46fefdc314915e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:50:4c:70:a3:6d:b8:84:ac:bc:a3:28:0a: 2a:eb:26:58:4c:75:59:36:20:e1:5b:13:2b:c1:d8: 2a:f0:0a:7a:d0:b8:df:40:32:a7:2f:f1:c4:2f:67: 35:33:3a:cc:2f:54:c7:54:84:65:1f:6b:d0:28:0e: 96:9f:78:60:13:82:64:f9:d2:70:a1:aa:77:53:a6: 25:71:2c:1d:7e:3b:eb:a0:30:28:38:25:95:f0:5f: db:c0:f8:86:76:79:94:59:37:c3:73:54:27:8e:32: 02:78:b0:9c:1e:d8:23:52:f1:19:b7:7c:ca:73:58: 74:7e:1c:d3:77:87:45:1e:50:56:e3:2e:76:ec:4c: df:d1:43:fa:4d:1b:bf:ce:42:00:dd:84:da:3e:f7: 60:d1:99:fa:27:d7:07:6a:1f:75:05:c7:59:4d:bf: 67:c1:c9:a1:8a:d9:a3:4a:67:b8:81:4f:9f:ff:ef: 93:e5:a1:bd:7d:95:ce:42:c2:f1:e2:ac:7a:4c:6b: 43:0e:73:03:b8:4b:e4:20:0b:59:ad:d9:16:f0:bd: 95:e9:f6:8d:99:04:1d:c3:96:f1:06:08:20:7b:10: b7:bf:2c:c0:7d:73:5d:ae:60:3d:ec:1b:d1:bf:41: 66:12:3d:9e:1b:b4:75:25:00:27:52:0b:c3:6d:8f: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:65:B2:64:C6:44:0D:69:DD:5C:5E:BA:0D:46:FE:FD:C3:14:91:5E X509v3 Authority Key Identifier: keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/QGWyZMZEDWndXF66DUb-_cMUkV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.140.240.0/20 IPv6: 2a0c:aac0::/29 Signature Algorithm: sha256WithRSAEncryption 6f:03:6e:9b:be:6f:91:2f:10:ca:d8:ce:20:6a:2d:99:19:40: 91:78:fe:50:43:a2:a4:5c:5d:30:4b:d0:1d:a7:3f:64:b0:1b: ca:8f:65:77:2e:fb:d7:7e:4d:fc:3a:9e:1d:f2:c4:79:71:9e: 5d:a3:65:a0:9a:12:f0:7a:b5:82:e9:a4:c2:c6:47:66:a0:d1: 0a:cc:b1:ba:9b:5f:ce:69:7a:76:cb:04:f7:2b:f8:6b:fc:9c: ec:14:d7:dd:df:10:76:4b:f0:56:b0:66:91:2e:84:f9:24:8c: ba:7e:10:11:7a:7d:ae:d5:6e:62:75:d7:63:34:61:c1:00:76: 12:41:62:9d:7c:ec:ac:0e:c0:13:29:2a:31:a9:5b:70:24:df: 0d:db:ac:cf:57:a0:cb:38:54:50:3e:de:c9:bc:47:f9:a8:d3: 9d:f6:5b:fb:47:69:e3:1d:ce:34:b9:2b:ef:30:a8:82:b0:66: fb:aa:56:5e:1c:c8:12:cd:16:ab:05:7b:25:a9:36:49:45:18: 36:df:96:9e:89:52:3c:a5:92:94:fa:58:e3:51:3e:b1:aa:3e: 0c:19:4b:27:ea:dc:5a:00:4a:27:73:75:41:38:50:6f:c7:58: b4:33:13:92:a3:57:7f:73:42:12:17:af:9d:f2:df:f8:13:62: dc:21:ad:40 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WeKOaSrDbEJLDgBESOufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjc4YjY4MWI2NjE3ZmVkNzBjZTg2N2ZiOWE4YzZmMjVj ZmRhNTUwHhcNMjYwMTAxMTYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDY1YjI2NGM2NDQwZDY5ZGQ1YzVlYmEwZDQ2ZmVmZGMzMTQ5MTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBBQTHCjbbiErLyjKAoq6yZYTHVZ NiDhWxMrwdgq8Ap60LjfQDKnL/HEL2c1MzrML1THVIRlH2vQKA6Wn3hgE4Jk+dJw oap3U6YlcSwdfjvroDAoOCWV8F/bwPiGdnmUWTfDc1QnjjICeLCcHtgjUvEZt3zK c1h0fhzTd4dFHlBW4y527Ezf0UP6TRu/zkIA3YTaPvdg0Zn6J9cHah91BcdZTb9n wcmhitmjSme4gU+f/++T5aG9fZXOQsLx4qx6TGtDDnMDuEvkIAtZrdkW8L2V6faN mQQdw5bxBgggexC3vyzAfXNdrmA97BvRv0FmEj2eG7R1JQAnUgvDbY9aPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEBlsmTGRA1p3Vxeug1G/v3DFJFeMB8GA1UdIwQY MBaAFHD3i2gbZhf+1wzoZ/uajG8lz9pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2Et ODM3YjEwYzJjNjM2LzEvUUdXeVpNWkVEV25kWEY2NkRVYi1fY01Va1Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2EtODM3YjEwYzJjNjM2 LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEX4zwMA0E AgACMAcDBQMqDKrAMA0GCSqGSIb3DQEBCwUAA4IBAQBvA26bvm+RLxDK2M4gai2Z GUCReP5QQ6KkXF0wS9Adpz9ksBvKj2V3LvvXfk38Op4d8sR5cZ5do2WgmhLwerWC 6aTCxkdmoNEKzLG6m1/OaXp2ywT3K/hr/JzsFNfd3xB2S/BWsGaRLoT5JIy6fhAR en2u1W5idddjNGHBAHYSQWKdfOysDsATKSoxqVtwJN8N26zPV6DLOFRQPt7JvEf5 qNOd9lv7R2njHc40uSvvMKiCsGb7qlZeHMgSzRarBXslqTZJRRg235aeiVI8pZKU +ljjUT6xqj4MGUsn6txaAEonc3VBOFBvx1i0MxOSo1d/c0ISF6+d8t/4E2LcIa1A -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:58 2026 by rpki-client