This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nqt-ko2S0ML5Oqqzbm9wf0NcpS0.roa File: nqt-ko2S0ML5Oqqzbm9wf0NcpS0.roa (raw, json) Hash identifier: lr8csymr0VI8kt26gzo+lTBc2318SXgcNfQZ00w2Pss= Subject key identifier: 9E:AB:7E:92:8D:92:D0:C2:F9:3A:AA:B3:6E:6F:70:7F:43:5C:A5:2D Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80BB93FAC8E6CC4B282AC030D3146D Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nqt-ko2S0ML5Oqqzbm9wf0NcpS0.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400175 IP address blocks: 88.216.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bb:93:fa:c8:e6:cc:4b:28:2a:c0:30:d3:14:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eab7e928d92d0c2f93aaab36e6f707f435ca52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:bb:70:e7:44:71:d1:9d:4d:76:3c:87:c7: da:51:87:53:0b:2c:6f:f9:0b:30:26:d6:61:15:0b: c7:72:3b:27:37:b8:4e:65:62:96:f0:10:9b:30:eb: 90:e3:d3:40:3d:df:0b:ad:02:c2:a6:19:50:ad:12: 8f:7d:32:8d:f0:8c:e4:a0:c3:84:87:fb:35:73:21: e6:bf:c9:94:1c:a1:74:7b:86:1a:35:16:ec:bb:44: 95:da:eb:fe:88:db:2c:4e:1b:3e:d7:35:ca:7c:b6: d5:e8:d1:17:e0:80:7f:50:4b:e7:1f:12:13:97:d4: 0d:7a:e6:98:1b:9f:2d:b4:c3:66:ce:82:ab:69:91: d3:1e:99:be:b3:52:ba:31:26:24:a2:00:d4:65:0b: 6c:6e:13:15:84:ac:1c:22:61:cc:77:23:4a:59:fc: 86:b1:d8:ef:e8:fe:be:04:f0:58:a6:0a:07:95:4d: 6e:78:39:3d:f0:db:ae:88:3e:f4:4a:30:8f:a5:fc: e5:8d:ef:a0:03:9b:dd:3a:11:63:bb:b5:75:4d:dc: c5:45:01:7c:8c:06:96:ba:30:36:d2:0d:df:44:34: 4a:b3:47:31:29:c9:ce:ca:fc:0f:9d:8c:40:e4:37: 5f:1f:c4:bb:ce:24:ef:58:78:5a:78:8d:bf:84:35: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AB:7E:92:8D:92:D0:C2:F9:3A:AA:B3:6E:6F:70:7F:43:5C:A5:2D X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nqt-ko2S0ML5Oqqzbm9wf0NcpS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.2.0/24 Signature Algorithm: sha256WithRSAEncryption a0:11:13:69:09:22:e1:1b:00:3d:78:37:88:d1:ee:dd:b7:b5: a7:da:ef:28:54:7c:f9:ab:8b:fc:d4:74:e9:c1:94:a2:84:81: 1b:f8:fc:9b:d5:db:cf:b8:77:15:34:ad:e3:7c:b5:cc:f5:a2: a8:01:7a:3d:cc:7c:b6:c0:e5:02:84:64:a6:0b:b4:e7:5b:8b: e9:1e:eb:5f:fe:15:97:69:14:f4:36:3c:c2:62:c0:82:14:07: 8c:6b:9f:40:63:5f:f7:33:16:72:b7:64:f4:99:8a:9d:83:c4: f5:ae:e6:a8:bd:2a:de:62:cf:23:c3:89:56:90:92:88:62:05: 39:ef:53:44:69:20:37:79:92:fa:fd:5e:83:11:61:a8:64:fd: c7:44:19:6c:43:03:82:8c:84:ba:e3:69:17:3a:94:f5:94:cc: 0e:f9:de:ab:fb:18:12:7f:17:4c:22:9a:fe:e9:b6:68:91:dd: 02:76:86:c7:de:07:b2:c5:8f:59:17:15:7d:2c:34:3d:1c:78: 52:ac:d6:ad:3a:9b:3b:90:1d:b7:d8:7d:4d:dc:6c:6c:4a:02: c4:2a:e1:42:87:16:0d:b8:82:09:c9:01:5e:3b:07:58:b0:ab: 18:2f:be:c4:ac:b1:87:70:0e:b0:19:61:16:04:e9:5b:b4:60: 61:44:e3:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLuT+sjmzEsoKsAw0xRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWFiN2U5MjhkOTJkMGMyZjkzYWFhYjM2ZTZmNzA3ZjQzNWNhNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHG7cOdEcdGdTXY8h8faUYdTCyxv +QswJtZhFQvHcjsnN7hOZWKW8BCbMOuQ49NAPd8LrQLCphlQrRKPfTKN8IzkoMOE h/s1cyHmv8mUHKF0e4YaNRbsu0SV2uv+iNssThs+1zXKfLbV6NEX4IB/UEvnHxIT l9QNeuaYG58ttMNmzoKraZHTHpm+s1K6MSYkogDUZQtsbhMVhKwcImHMdyNKWfyG sdjv6P6+BPBYpgoHlU1ueDk98NuuiD70SjCPpfzlje+gA5vdOhFju7V1TdzFRQF8 jAaWujA20g3fRDRKs0cxKcnOyvwPnYxA5DdfH8S7ziTvWHhaeI2/hDVfwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ6rfpKNktDC+Tqqs25vcH9DXKUtMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvbnF0LWtvMlMwTUw1T3FxemJtOXdmME5jcFMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNgCMA0G CSqGSIb3DQEBCwUAA4IBAQCgERNpCSLhGwA9eDeI0e7dt7Wn2u8oVHz5q4v81HTp wZSihIEb+Pyb1dvPuHcVNK3jfLXM9aKoAXo9zHy2wOUChGSmC7TnW4vpHutf/hWX aRT0NjzCYsCCFAeMa59AY1/3MxZyt2T0mYqdg8T1ruaovSreYs8jw4lWkJKIYgU5 71NEaSA3eZL6/V6DEWGoZP3HRBlsQwOCjIS642kXOpT1lMwO+d6r+xgSfxdMIpr+ 6bZokd0CdobH3geyxY9ZFxV9LDQ9HHhSrNatOps7kB232H1N3GxsSgLEKuFChxYN uIIJyQFeOwdYsKsYL77ErLGHcA6wGWEWBOlbtGBhROM9 -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:02 2026 by rpki-client