This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/Qg_NIv-RM7UnjRckECfyRZCTx8A.roa File: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (raw, json) Hash identifier: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8= Subject key identifier: 42:0F:CD:22:FF:91:33:B5:27:8D:17:24:10:27:F2:45:90:93:C7:C0 Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef Certificate serial: 019B7D5B50BCED6E79802017A65D04F06D0E Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/Qg_NIv-RM7UnjRckECfyRZCTx8A.roa Signing time: Fri 02 Jan 2026 06:18:15 +0000 ROA not before: Fri 02 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39923 IP address blocks: 95.214.28.0/22 maxlen: 22 95.214.28.0/23 maxlen: 23 95.214.28.0/24 maxlen: 24 95.214.29.0/24 maxlen: 24 95.214.30.0/23 maxlen: 23 95.214.30.0/24 maxlen: 24 95.214.31.0/24 maxlen: 24 2001:67c:2d64::/48 maxlen: 48 2001:67c:2d64:cca::/64 maxlen: 64 2001:67c:2d64:ccb::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:50:bc:ed:6e:79:80:20:17:a6:5d:04:f0:6d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef Validity Not Before: Jan 2 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=420fcd22ff9133b5278d17241027f2459093c7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:f7:66:03:80:cf:56:ff:3f:92:68:5d:b3: a3:cb:dc:b3:f5:db:2e:d5:59:c4:ef:52:36:00:f3: 9b:54:98:61:68:cd:95:5b:d0:08:07:52:e0:00:b1: 87:2a:5c:e1:a3:d0:c0:6c:67:78:ab:99:5c:77:2a: e8:97:1a:fa:a4:75:28:27:80:de:54:ca:b3:8a:6b: fa:55:68:56:46:46:ce:c3:96:d4:4b:52:6d:ec:82: 4a:bc:18:17:2d:f3:c4:74:b6:95:8e:3a:f0:7a:12: b5:65:02:20:e7:83:54:00:34:58:44:b2:8b:15:44: 1e:30:49:95:b0:36:06:5e:19:3c:1e:94:65:97:0c: 1d:5a:91:40:d7:72:59:bc:b6:ce:16:c2:51:02:6e: a4:b7:d9:2b:69:c8:f5:6d:fb:0b:f2:7e:02:3f:b6: 16:7f:91:8d:b3:41:0e:c5:a0:7f:c6:3b:33:41:1f: b9:22:91:20:cb:cb:a0:06:17:70:4a:ef:d4:00:43: fe:aa:22:27:d1:b8:89:33:8a:3f:3b:ed:9f:40:ba: 5d:29:9a:e2:fa:57:4b:f4:6e:ae:86:a3:a3:ef:98: c4:9b:00:ca:04:1d:05:d4:42:15:bd:2e:ce:2c:b2: 96:b2:0e:4b:90:31:84:8b:0e:9b:f1:8b:35:52:2b: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0F:CD:22:FF:91:33:B5:27:8D:17:24:10:27:F2:45:90:93:C7:C0 X509v3 Authority Key Identifier: keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/Qg_NIv-RM7UnjRckECfyRZCTx8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.28.0/22 IPv6: 2001:67c:2d64::/48 Signature Algorithm: sha256WithRSAEncryption 65:a6:d3:1a:c8:30:d1:41:5e:15:d3:95:0d:be:0a:f6:cd:4d: 9d:0a:94:91:90:29:93:ad:c0:47:25:78:54:75:f7:8d:e1:16: 8e:ac:41:5d:b6:a3:87:d0:07:20:79:1d:b6:ab:cf:02:43:bd: 7e:2a:46:ab:9d:a0:81:79:de:bf:c6:02:af:4f:44:f5:e9:d2: 06:0d:58:87:08:59:7d:a8:17:7a:c5:61:12:f9:34:02:88:97: 98:39:10:d2:e9:1e:7f:26:bf:41:e9:ff:2f:83:f5:ed:41:17: be:9c:a6:a3:75:1a:13:e9:f1:1f:a5:c2:13:8e:07:b2:89:5f: ed:78:c1:f6:de:b3:ec:4d:36:06:9b:65:2e:ed:43:9c:26:b2: 76:55:af:59:c4:18:37:02:8b:8e:a8:79:a9:78:f4:12:0f:f0: 21:13:76:8d:d5:d6:24:eb:fb:8f:22:bd:58:9d:c5:b7:43:a5: 2b:f3:47:39:24:61:af:91:94:bc:ab:b8:5a:84:76:f6:b6:6b: 93:15:4f:91:ce:dd:d1:8b:a1:91:e1:66:1d:37:5d:47:a0:9f: ec:bf:c1:47:6f:10:04:86:76:bf:4e:42:31:67:90:e2:f6:0b: 2d:3f:56:48:3d:e7:03:f3:d7:62:c5:41:9f:3a:a1:63:be:15: 6d:8d:43:de -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9W1C87W55gCAXpl0E8G0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2 YTg1ZWYwHhcNMjYwMTAyMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjBmY2QyMmZmOTEzM2I1Mjc4ZDE3MjQxMDI3ZjI0NTkwOTNjN2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL/3ZgOAz1b/P5JoXbOjy9yz9dsu 1VnE71I2APObVJhhaM2VW9AIB1LgALGHKlzho9DAbGd4q5lcdyrolxr6pHUoJ4De VMqzimv6VWhWRkbOw5bUS1Jt7IJKvBgXLfPEdLaVjjrwehK1ZQIg54NUADRYRLKL FUQeMEmVsDYGXhk8HpRllwwdWpFA13JZvLbOFsJRAm6kt9kracj1bfsL8n4CP7YW f5GNs0EOxaB/xjszQR+5IpEgy8ugBhdwSu/UAEP+qiIn0biJM4o/O+2fQLpdKZri +ldL9G6uhqOj75jEmwDKBB0F1EIVvS7OLLKWsg5LkDGEiw6b8Ys1UiuqTQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEIPzSL/kTO1J40XJBAn8kWQk8fAMB8GA1UdIwQY MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt YzdlZjg2ODJkNjdkLzEvUWdfTkl2LVJNN1VualJja0VDZnlSWkNUeDhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCX9YcMA8E AgACMAkDBwAgAQZ8LWQwDQYJKoZIhvcNAQELBQADggEBAGWm0xrIMNFBXhXTlQ2+ CvbNTZ0KlJGQKZOtwEcleFR1943hFo6sQV22o4fQByB5HbarzwJDvX4qRqudoIF5 3r/GAq9PRPXp0gYNWIcIWX2oF3rFYRL5NAKIl5g5ENLpHn8mv0Hp/y+D9e1BF76c pqN1GhPp8R+lwhOOB7KJX+14wfbes+xNNgabZS7tQ5wmsnZVr1nEGDcCi46oeal4 9BIP8CETdo3V1iTr+48ivVidxbdDpSvzRzkkYa+RlLyruFqEdva2a5MVT5HO3dGL oZHhZh03XUegn+y/wUdvEASGdr9OQjFnkOL2Cy0/Vkg95wPz12LFQZ86oWO+FW2N Q94= -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:28 2026 by rpki-client