This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/q_qYpFhmBQ8lhb7G0ETsROyhKrE.roa File: q_qYpFhmBQ8lhb7G0ETsROyhKrE.roa (raw, json) Hash identifier: b/eMO0NX0hh7yZAOvwUKNYnJNdSAmYoYt5B3IlaWmes= Subject key identifier: AB:FA:98:A4:58:66:05:0F:25:85:BE:C6:D0:44:EC:44:EC:A1:2A:B1 Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a Certificate serial: 019B7C11DB3863B3E5B499ED51DBF7317B36 Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/q_qYpFhmBQ8lhb7G0ETsROyhKrE.roa Signing time: Fri 02 Jan 2026 00:18:23 +0000 ROA not before: Fri 02 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210911 IP address blocks: 81.95.192.0/24 maxlen: 24 81.95.193.0/24 maxlen: 24 81.95.194.0/24 maxlen: 24 81.95.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:db:38:63:b3:e5:b4:99:ed:51:db:f7:31:7b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a Validity Not Before: Jan 2 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abfa98a45866050f2585bec6d044ec44eca12ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:36:91:93:81:d2:d9:a5:05:b5:e1:81:de: 3a:44:4e:2c:12:20:0e:0a:1d:a8:ee:f7:be:d3:c1: 2f:94:9a:79:b5:55:92:17:22:5e:de:16:9f:32:7d: 7f:27:9e:7a:20:f4:a8:f7:f9:5f:97:c2:6b:b4:1c: 64:0c:86:e0:a2:31:c8:27:e9:8f:79:d7:ec:4c:37: c7:26:4f:9b:5f:17:ad:73:e4:2a:8d:b2:43:5a:4e: c7:44:b5:a7:67:b4:85:3d:07:c8:73:f6:26:d7:28: 5c:ca:97:9d:c9:e4:90:78:ab:ca:bf:54:d2:a0:00: 56:d4:63:49:7b:ed:b4:3d:32:84:3f:b0:d2:7c:ed: c1:3a:7c:de:00:2a:e1:55:fd:d6:12:60:aa:96:25: 18:c4:f2:59:b8:51:ba:ee:1b:ba:74:27:ef:08:03: d9:36:de:46:11:3d:82:47:cf:27:00:58:66:d1:63: 92:b0:57:95:c6:d8:58:21:f8:18:e3:2e:2f:9c:8b: 8f:6e:4d:46:39:c8:70:e9:94:3d:1e:70:c9:56:ce: 45:9d:49:41:5c:69:11:39:50:a5:28:af:c2:63:b3: 6d:99:7f:96:b9:23:b5:ee:d3:f4:6d:4f:b6:88:12: f7:2f:a2:af:53:07:d7:83:aa:8c:bc:a1:8c:48:52: bd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FA:98:A4:58:66:05:0F:25:85:BE:C6:D0:44:EC:44:EC:A1:2A:B1 X509v3 Authority Key Identifier: keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/q_qYpFhmBQ8lhb7G0ETsROyhKrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.95.192.0-81.95.194.255 81.95.196.0/24 Signature Algorithm: sha256WithRSAEncryption 56:8b:da:90:72:fc:b5:c7:ff:b9:37:b0:3c:d7:6c:20:bb:3a: e6:67:70:36:22:5c:b2:07:dd:f2:52:a4:e0:60:d2:fe:aa:da: e9:87:50:dc:21:18:da:a2:3e:46:d3:01:1f:94:ca:ab:52:bc: 57:f2:2d:54:bf:9b:ff:ce:32:7e:64:89:7e:93:48:09:2b:e4: b1:d2:f9:fe:e7:69:8d:a5:dc:6d:34:7b:58:b7:a4:e7:24:8d: 0d:1e:06:95:d1:a5:bf:3d:ec:44:db:4c:6e:94:e9:da:6e:1a: 0f:0a:47:21:27:39:6f:f8:a4:36:a6:29:d0:06:f6:60:5c:a6: 78:58:d3:f5:b3:54:1e:11:11:39:82:66:26:ee:a7:75:8d:ef: 51:4d:d9:e9:9f:bc:43:96:39:8f:8f:78:c0:59:e2:df:30:f1: 7d:22:a6:7f:10:23:df:2c:06:83:3e:52:4d:46:e2:75:01:5a: 06:7e:2a:9e:28:d2:cc:4d:d7:5b:51:70:2c:7e:45:63:f7:25: 6c:d4:9e:ed:3c:17:5d:2a:9b:09:0f:17:f9:c4:34:fb:52:4c: c7:a8:e4:b2:bd:85:73:e9:43:a6:f7:cb:5f:0b:2a:b4:0e:cf: b5:23:9d:4e:3c:b8:66:fa:7d:c8:3d:39:c2:28:40:26:bd:a1: 8d:9d:de:cb -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8Eds4Y7PltJntUdv3MXs2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw Y2Q0NGEwHhcNMjYwMTAyMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmZhOThhNDU4NjYwNTBmMjU4NWJlYzZkMDQ0ZWM0NGVjYTEyYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB02kZOB0tmlBbXhgd46RE4sEiAO Ch2o7ve+08EvlJp5tVWSFyJe3hafMn1/J556IPSo9/lfl8JrtBxkDIbgojHIJ+mP edfsTDfHJk+bXxetc+QqjbJDWk7HRLWnZ7SFPQfIc/Ym1yhcypedyeSQeKvKv1TS oABW1GNJe+20PTKEP7DSfO3BOnzeACrhVf3WEmCqliUYxPJZuFG67hu6dCfvCAPZ Nt5GET2CR88nAFhm0WOSsFeVxthYIfgY4y4vnIuPbk1GOchw6ZQ9HnDJVs5FnUlB XGkROVClKK/CY7NtmX+WuSO17tP0bU+2iBL3L6KvUwfXg6qMvKGMSFK94QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKv6mKRYZgUPJYW+xtBE7ETsoSqxMB8GA1UdIwQY MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt MTk2ZTZmMzc1ZmQ2LzEvcV9xWXBGaG1CUThsaGI3RzBFVHNST3loS3JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2 LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAZRX8AD BABRX8IDBABRX8QwDQYJKoZIhvcNAQELBQADggEBAFaL2pBy/LXH/7k3sDzXbCC7 OuZncDYiXLIH3fJSpOBg0v6q2umHUNwhGNqiPkbTAR+UyqtSvFfyLVS/m//OMn5k iX6TSAkr5LHS+f7naY2l3G00e1i3pOckjQ0eBpXRpb897ETbTG6U6dpuGg8KRyEn OW/4pDamKdAG9mBcpnhY0/WzVB4RETmCZibup3WN71FN2emfvEOWOY+PeMBZ4t8w 8X0ipn8QI98sBoM+Uk1G4nUBWgZ+Kp4o0sxN11tRcCx+RWP3JWzUnu08F10qmwkP F/nENPtSTMeo5LK9hXPpQ6b3y18LKrQOz7UjnU48uGb6fcg9OcIoQCa9oY2d3ss= -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:58 2026 by rpki-client