This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/qlmNQ-9zOW868sPccu5bMWQJyWY.roa File: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (raw, json) Hash identifier: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434= Subject key identifier: AA:59:8D:43:EF:73:39:6F:3A:F2:C3:DC:72:EE:5B:31:64:09:C9:66 Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e Certificate serial: 019B7DCAF9D497B16D7212FA21FCF52B7195 Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/qlmNQ-9zOW868sPccu5bMWQJyWY.roa Signing time: Fri 02 Jan 2026 08:20:12 +0000 ROA not before: Fri 02 Jan 2026 08:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198504 IP address blocks: 195.94.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f9:d4:97:b1:6d:72:12:fa:21:fc:f5:2b:71:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e Validity Not Before: Jan 2 08:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa598d43ef73396f3af2c3dc72ee5b316409c966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:2f:e4:f4:60:89:a2:77:19:f0:0c:be:28: ff:bf:12:63:da:fb:a2:e9:e1:80:0a:5b:7f:72:1f: b5:06:78:66:57:0b:40:61:9a:e8:df:56:97:58:30: ab:91:74:e3:e3:31:6c:dc:cf:0f:14:89:6e:c4:f0: 45:f7:20:7d:79:8e:36:e4:db:46:cd:0d:42:53:a8: 68:43:5a:b8:c8:cf:f1:56:de:85:cc:f1:4d:64:b0: 32:f6:bf:e2:c2:8e:9b:b7:22:af:05:4f:2c:24:7f: 79:1c:d7:89:3f:a1:e6:09:88:6f:3c:70:27:83:cb: 0c:de:d7:a4:b6:85:46:a2:24:73:79:4d:c6:e2:77: 67:5c:57:d8:cb:01:3d:2c:ba:8f:f7:d5:3f:f4:aa: be:86:fa:07:29:60:08:a5:47:1d:b8:ad:b5:8c:6c: c6:c3:aa:be:25:e8:a9:fa:99:e5:bc:bf:c3:47:f1: 0f:34:6e:61:b1:31:2f:59:8f:a2:07:68:72:12:ab: 45:af:b0:68:6c:24:db:5d:20:93:16:0e:c5:de:f5: e2:73:55:ab:46:e8:4b:44:e4:da:4c:8e:8d:03:24: 77:fd:90:03:7b:3a:35:03:81:14:63:f2:73:cf:87: 73:e9:eb:5a:77:46:c2:8e:61:08:9e:6b:5b:37:22: f0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:59:8D:43:EF:73:39:6F:3A:F2:C3:DC:72:EE:5B:31:64:09:C9:66 X509v3 Authority Key Identifier: keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/qlmNQ-9zOW868sPccu5bMWQJyWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.94.26.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:2c:0a:a4:f9:d4:fb:df:2c:ca:99:15:70:63:54:bf:1b:11: ac:b1:01:d5:c1:84:80:3f:bf:92:f2:66:a6:1c:66:d4:fa:72: 77:80:38:9d:c2:3b:f6:70:87:2e:68:ba:31:01:d8:74:42:62: b2:f7:54:7d:35:97:d0:2f:f5:64:de:60:f9:e1:21:a5:e5:8a: e2:27:62:65:dc:2f:62:08:b4:cd:06:d3:1b:94:47:d3:7a:16: 5c:bc:e9:d2:9e:68:a0:3e:6c:81:6b:11:4d:f4:42:2a:f8:c8: 2d:5e:79:64:86:4a:8a:30:0a:a9:ec:d5:9d:51:73:83:06:58: 3a:2f:4f:86:8c:7b:93:0c:a6:0d:35:36:a4:30:ad:90:18:e7: 6b:59:c8:6c:aa:25:e2:05:39:23:8d:fd:09:8c:f5:51:c3:6a: 5a:23:c2:65:bd:ad:6c:5d:bd:7e:e3:16:ac:87:10:dd:ba:22: 0c:d9:bb:df:9c:77:78:c2:d3:5d:d7:de:3e:83:b7:e5:9c:52: 44:fe:82:e9:50:8c:96:10:91:20:33:93:c9:54:6d:30:c7:d1: c3:9a:95:c0:87:84:83:0b:8a:9a:da:03:4e:f5:b6:9c:ae:66: e8:70:6d:ec:52:ad:83:90:a2:13:18:c4:b6:ed:ef:71:9b:cc: e1:5a:3e:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yvnUl7FtchL6Ifz1K3GVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw NDU2OGUwHhcNMjYwMTAyMDgyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTU5OGQ0M2VmNzMzOTZmM2FmMmMzZGM3MmVlNWIzMTY0MDljOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkov5PRgiaJ3GfAMvij/vxJj2vui 6eGAClt/ch+1BnhmVwtAYZro31aXWDCrkXTj4zFs3M8PFIluxPBF9yB9eY425NtG zQ1CU6hoQ1q4yM/xVt6FzPFNZLAy9r/iwo6btyKvBU8sJH95HNeJP6HmCYhvPHAn g8sM3tektoVGoiRzeU3G4ndnXFfYywE9LLqP99U/9Kq+hvoHKWAIpUcduK21jGzG w6q+Jeip+pnlvL/DR/EPNG5hsTEvWY+iB2hyEqtFr7BobCTbXSCTFg7F3vXic1Wr RuhLROTaTI6NAyR3/ZADezo1A4EUY/Jzz4dz6etad0bCjmEInmtbNyLwnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKpZjUPvczlvOvLD3HLuWzFkCclmMB8GA1UdIwQY MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt ZTk1YTI0OTYxNTdlLzEvcWxtTlEtOXpPVzg2OHNQY2N1NWJNV1FKeVdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw14aMA0G CSqGSIb3DQEBCwUAA4IBAQBaLAqk+dT73yzKmRVwY1S/GxGssQHVwYSAP7+S8mam HGbU+nJ3gDidwjv2cIcuaLoxAdh0QmKy91R9NZfQL/Vk3mD54SGl5YriJ2Jl3C9i CLTNBtMblEfTehZcvOnSnmigPmyBaxFN9EIq+MgtXnlkhkqKMAqp7NWdUXODBlg6 L0+GjHuTDKYNNTakMK2QGOdrWchsqiXiBTkjjf0JjPVRw2paI8Jlva1sXb1+4xas hxDduiIM2bvfnHd4wtNd194+g7flnFJE/oLpUIyWEJEgM5PJVG0wx9HDmpXAh4SD C4qa2gNO9bacrmbocG3sUq2DkKITGMS27e9xm8zhWj6g -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:35 2026 by rpki-client