This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/qmzQIGHE-UPS6KYpQ-lO-Kh-fAA.roa File: qmzQIGHE-UPS6KYpQ-lO-Kh-fAA.roa (raw, json) Hash identifier: Nfcf0dxf81UBVMjoGjSg559+Hju5Dln2RKJKCrFeGVU= Subject key identifier: AA:6C:D0:20:61:C4:F9:43:D2:E8:A6:29:43:E9:4E:F8:A8:7E:7C:00 Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba Certificate serial: 019B7F84C092CA9D73FE5883FEF43A346C27 Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/qmzQIGHE-UPS6KYpQ-lO-Kh-fAA.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39926 IP address blocks: 195.95.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c0:92:ca:9d:73:fe:58:83:fe:f4:3a:34:6c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa6cd02061c4f943d2e8a62943e94ef8a87e7c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4f:db:99:15:e4:f6:ec:58:40:f1:3a:ca:2d: ab:be:2b:d2:6c:37:0e:0a:30:bd:b8:51:64:b7:09: e8:04:92:04:db:39:c3:bb:08:af:4d:dc:12:00:5f: 7e:f6:cb:bc:2f:5f:60:39:96:f0:4f:35:c1:67:f2: cb:5c:7b:f3:b5:18:86:23:5d:e2:33:5d:b4:ef:e1: fe:05:0b:7b:ac:19:39:be:f7:6b:9c:37:82:69:73: 98:b6:96:e1:93:43:f2:2f:f0:90:31:ec:ad:f5:11: fc:86:b2:b0:8c:56:f7:38:87:21:25:af:b8:d8:4e: 60:40:b1:68:ce:98:1a:3d:7e:bf:cd:2d:cb:ce:47: ac:9a:13:ed:46:4d:5c:62:88:e9:2a:46:98:dd:17: 84:81:84:fa:5f:d9:7b:83:2f:d0:d8:65:11:5e:10: 09:75:66:01:b5:9f:f2:e4:3d:e7:a6:c5:b2:74:60: 77:98:6e:75:1f:90:06:d5:1b:fb:2c:e3:65:e7:35: 96:43:bb:ea:7d:58:6e:c6:40:7f:e7:5c:d3:e6:8d: b9:79:cd:64:18:e4:5b:09:f1:fc:e5:19:b5:38:4e: 8f:37:e0:2c:0e:02:95:58:cd:7e:c5:7f:84:a8:31: 78:d6:f4:ad:52:7d:80:30:e2:50:ee:65:42:8f:77: 4f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6C:D0:20:61:C4:F9:43:D2:E8:A6:29:43:E9:4E:F8:A8:7E:7C:00 X509v3 Authority Key Identifier: keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/qmzQIGHE-UPS6KYpQ-lO-Kh-fAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.142.0/24 Signature Algorithm: sha256WithRSAEncryption b7:0b:14:69:3d:e9:59:50:11:f9:99:1f:f6:68:79:35:4c:84: 6f:82:2f:93:ca:36:c8:04:2d:2b:d8:eb:c0:f6:b7:ad:69:df: 47:14:41:76:40:3b:40:6b:9f:80:47:da:2c:16:40:9c:48:f9: 5f:7b:73:27:c8:f4:b9:4b:b4:78:fb:83:4c:8d:a8:b9:bf:9e: ec:5c:c9:0c:82:29:1f:0b:db:90:37:a7:49:19:f5:51:ec:5c: dd:a5:a6:d4:82:0d:b5:b1:ac:2e:ab:f2:22:22:78:85:bf:31: e4:42:b5:32:ae:be:c5:21:df:1a:d7:12:6c:98:b8:39:c8:a1: 78:75:a9:68:86:e0:f2:2f:6c:8a:91:6f:3b:c0:e4:81:03:c1: b8:f4:ac:ac:0c:9a:ce:ad:24:85:02:fc:31:4e:da:d3:88:3d: 72:29:42:97:97:a4:50:a0:d4:d8:5a:66:b3:bd:06:7d:27:28: 3f:17:ce:9a:52:3c:7a:33:fc:37:08:80:93:74:74:db:f4:ac: 69:8f:a1:79:bf:7f:43:98:ff:94:7f:62:03:5d:12:bb:02:4b: 4e:fa:7b:57:25:9a:18:d9:ff:c4:49:60:54:4d:dc:85:99:3b: 3e:b0:00:e3:ca:79:f0:2b:96:de:4d:23:aa:74:6c:4c:66:64: 3b:71:ae:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMCSyp1z/liD/vQ6NGwnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxM2NkYmM0YjRkZTU0OTVlZTYxMzE3ZDJlNzM3YzJjM2Y3 ZjgzYmEwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTZjZDAyMDYxYzRmOTQzZDJlOGE2Mjk0M2U5NGVmOGE4N2U3YzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U/bmRXk9uxYQPE6yi2rvivSbDcO CjC9uFFktwnoBJIE2znDuwivTdwSAF9+9su8L19gOZbwTzXBZ/LLXHvztRiGI13i M1207+H+BQt7rBk5vvdrnDeCaXOYtpbhk0PyL/CQMeyt9RH8hrKwjFb3OIchJa+4 2E5gQLFozpgaPX6/zS3LzkesmhPtRk1cYojpKkaY3ReEgYT6X9l7gy/Q2GURXhAJ dWYBtZ/y5D3npsWydGB3mG51H5AG1Rv7LONl5zWWQ7vqfVhuxkB/51zT5o25ec1k GORbCfH85Rm1OE6PN+AsDgKVWM1+xX+EqDF41vStUn2AMOJQ7mVCj3dP9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKps0CBhxPlD0uimKUPpTviofnwAMB8GA1UdIwQY MBaAFDE828S03lSV7mExfS5zfCw/f4O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85ZmQ1N2MtOTBlZi00NGIwLTkzZTQt ZmU1YWVkNTlhN2Q5LzEvcW16UUlHSEUtVVBTNktZcFEtbE8tS2gtZkFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny85ZmQ1N2MtOTBlZi00NGIwLTkzZTQtZmU1YWVkNTlhN2Q5 LzEvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1+OMA0G CSqGSIb3DQEBCwUAA4IBAQC3CxRpPelZUBH5mR/2aHk1TIRvgi+TyjbIBC0r2OvA 9retad9HFEF2QDtAa5+AR9osFkCcSPlfe3MnyPS5S7R4+4NMjai5v57sXMkMgikf C9uQN6dJGfVR7FzdpabUgg21sawuq/IiIniFvzHkQrUyrr7FId8a1xJsmLg5yKF4 dalohuDyL2yKkW87wOSBA8G49KysDJrOrSSFAvwxTtrTiD1yKUKXl6RQoNTYWmaz vQZ9Jyg/F86aUjx6M/w3CICTdHTb9Kxpj6F5v39DmP+Uf2IDXRK7AktO+ntXJZoY 2f/ESWBUTdyFmTs+sADjynnwK5beTSOqdGxMZmQ7ca71 -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:07 2026 by rpki-client