This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qfQMZchAHhAyOdl3mXgzwUrpBxY.roa File: qfQMZchAHhAyOdl3mXgzwUrpBxY.roa (raw, json) Hash identifier: vASEQLm08dVrfRq1NJLaLRqWtgEMXK7lP6xVfGKmCRo= Subject key identifier: A9:F4:0C:65:C8:40:1E:10:32:39:D9:77:99:78:33:C1:4A:E9:07:16 Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b Certificate serial: 019B7CEE3CA51965A653D6845B3E78ED9A05 Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qfQMZchAHhAyOdl3mXgzwUrpBxY.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35297 IP address blocks: 188.95.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3c:a5:19:65:a6:53:d6:84:5b:3e:78:ed:9a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9f40c65c8401e103239d977997833c14ae90716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:f1:68:9e:03:6b:95:78:b1:f8:f6:e1:31: da:6b:7c:4b:55:0e:f4:d9:ad:03:d6:64:b7:df:dd: a1:9a:54:13:34:3d:4f:56:ca:0d:95:8b:89:f2:7b: 06:c7:71:40:b7:8e:6a:59:f4:1c:89:3c:4f:37:6a: 0b:31:da:8e:6e:1e:36:27:d1:53:9f:91:0a:02:98: af:e0:bc:37:b4:4e:da:31:25:37:9f:34:13:6d:a5: cf:5e:57:3b:8b:32:f0:70:65:25:44:01:fc:38:a8: ea:41:1c:f5:89:40:f6:a3:5a:c9:0e:bf:a9:39:96: 9d:5c:1d:3e:2a:5d:2f:b0:7a:c2:40:83:4c:b8:cb: 74:8e:80:70:db:05:bc:7b:b4:94:11:fb:f4:a5:a4: 29:67:fa:03:c2:7e:fd:0c:82:36:15:3b:cf:86:5c: 94:f6:c1:b0:b2:e4:c8:49:b7:d8:4a:87:d6:a6:3b: 7c:82:f3:cd:c1:05:7e:94:88:a3:61:cc:a8:34:de: 21:6a:a6:66:12:50:6d:0b:55:1f:59:0a:bc:cb:c8: 36:60:15:a5:7e:7f:e4:2a:88:cf:ea:f7:78:ae:00: 0f:55:95:f6:75:9e:23:69:92:ae:9a:18:bb:9b:cc: 91:1b:90:da:b6:50:60:9f:d1:39:d2:ad:99:f0:aa: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F4:0C:65:C8:40:1E:10:32:39:D9:77:99:78:33:C1:4A:E9:07:16 X509v3 Authority Key Identifier: keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qfQMZchAHhAyOdl3mXgzwUrpBxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.197.0/24 Signature Algorithm: sha256WithRSAEncryption 61:75:ab:51:9f:90:c2:a3:af:ce:c3:7a:91:23:02:72:5b:20: 57:34:b7:d9:d7:46:8a:45:ec:f0:c9:df:d9:ed:a1:a9:f9:88: 8d:32:2a:ea:fc:01:fc:aa:e8:34:0e:23:46:9f:51:be:24:69: 64:1a:e4:21:dd:7a:17:23:f6:4d:93:5f:82:e3:6d:da:49:06: 40:83:d9:7c:d6:f6:72:55:b1:4c:1d:eb:61:0f:d8:84:b2:f1: 26:dd:51:e9:3e:23:8b:25:89:54:82:4e:21:b0:da:69:84:5f: f1:27:35:d3:b8:c3:6b:d4:28:93:5b:f1:77:7e:0d:e6:94:e0: a7:d5:41:56:ba:e5:25:1b:94:21:99:95:b6:42:c7:e6:7c:3f: 3d:ad:30:c5:5d:72:81:a8:cc:13:70:69:63:27:02:05:ec:29: c6:7e:bb:eb:d8:be:71:1d:a6:b3:50:aa:d0:24:ec:cc:c4:5c: 0a:83:6c:68:32:92:5c:20:fd:ab:f9:78:da:09:ac:2f:59:65: 14:73:44:8e:af:79:b0:be:f5:e6:21:ef:9b:2f:4a:e8:e0:e9: 23:44:f1:07:80:79:c3:f4:2e:76:40:5e:75:2e:5a:f6:39:fb: 21:df:01:b4:51:a0:81:f2:51:5b:e6:29:fb:44:8e:62:64:9d: 84:e6:2c:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jylGWWmU9aEWz547ZoFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj MTE2M2IwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWY0MGM2NWM4NDAxZTEwMzIzOWQ5Nzc5OTc4MzNjMTRhZTkwNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8/xaJ4Da5V4sfj24THaa3xLVQ70 2a0D1mS3392hmlQTND1PVsoNlYuJ8nsGx3FAt45qWfQciTxPN2oLMdqObh42J9FT n5EKApiv4Lw3tE7aMSU3nzQTbaXPXlc7izLwcGUlRAH8OKjqQRz1iUD2o1rJDr+p OZadXB0+Kl0vsHrCQINMuMt0joBw2wW8e7SUEfv0paQpZ/oDwn79DII2FTvPhlyU 9sGwsuTISbfYSofWpjt8gvPNwQV+lIijYcyoNN4haqZmElBtC1UfWQq8y8g2YBWl fn/kKojP6vd4rgAPVZX2dZ4jaZKumhi7m8yRG5DatlBgn9E50q2Z8KqNawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKn0DGXIQB4QMjnZd5l4M8FK6QcWMB8GA1UdIwQY MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt N2JlYmJiNzBjMDUwLzEvcWZRTVpjaEFIaEF5T2RsM21YZ3p3VXJwQnhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF/FMA0G CSqGSIb3DQEBCwUAA4IBAQBhdatRn5DCo6/Ow3qRIwJyWyBXNLfZ10aKRezwyd/Z 7aGp+YiNMirq/AH8qug0DiNGn1G+JGlkGuQh3XoXI/ZNk1+C423aSQZAg9l81vZy VbFMHethD9iEsvEm3VHpPiOLJYlUgk4hsNpphF/xJzXTuMNr1CiTW/F3fg3mlOCn 1UFWuuUlG5QhmZW2QsfmfD89rTDFXXKBqMwTcGljJwIF7CnGfrvr2L5xHaazUKrQ JOzMxFwKg2xoMpJcIP2r+XjaCawvWWUUc0SOr3mwvvXmIe+bL0ro4OkjRPEHgHnD 9C52QF51Llr2Ofsh3wG0UaCB8lFb5in7RI5iZJ2E5iyJ -----END CERTIFICATE-----Generated at Mon Jan 26 23:23:14 2026 by rpki-client