This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/qx8ZrK3WQLJkbH55xMHBPltKk88.roa File: qx8ZrK3WQLJkbH55xMHBPltKk88.roa (raw, json) Hash identifier: jcmV2sIKz7lybDK1rHLrSEaabC9BpZRW23JHTDg1hhU= Subject key identifier: AB:1F:19:AC:AD:D6:40:B2:64:6C:7E:79:C4:C1:C1:3E:5B:4A:93:CF Certificate issuer: /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7 Certificate serial: 019B7EA666CE5E44C650695839005F3180F5 Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/qx8ZrK3WQLJkbH55xMHBPltKk88.roa Signing time: Fri 02 Jan 2026 12:19:53 +0000 ROA not before: Fri 02 Jan 2026 12:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198154 IP address blocks: 95.128.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:66:ce:5e:44:c6:50:69:58:39:00:5f:31:80:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7 Validity Not Before: Jan 2 12:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab1f19acadd640b2646c7e79c4c1c13e5b4a93cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:13:84:27:fd:8a:39:65:d0:21:72:91:87:83: 41:92:8f:f1:ef:b7:a1:a1:32:54:8b:e6:e7:e1:23: 8a:cb:b2:74:b9:34:ac:db:08:43:42:4f:a8:b6:e3: c3:08:f0:66:24:fc:ae:c0:7a:52:b3:18:46:6f:9b: e8:aa:6d:89:57:a3:54:22:8d:f6:0a:67:bc:b0:e2: a0:b0:3b:af:d9:c1:d1:6a:ff:bc:93:1c:64:64:0f: dc:00:6b:35:d8:c1:bd:1a:50:34:94:4c:3f:ba:fd: 9f:0d:e3:50:0b:00:09:7b:b8:c5:57:fd:cc:7d:af: ff:e1:75:8b:d6:4c:4b:66:f3:58:b4:96:45:e1:59: ca:0d:9f:f2:93:a4:0a:84:e2:f5:42:03:aa:c4:c2: 61:55:97:7a:ae:46:55:03:03:b7:49:46:15:6a:95: d1:b5:2f:60:24:6d:0d:b2:23:d2:7c:97:a8:22:15: 53:18:04:3a:5a:ec:47:0e:21:96:f3:55:58:2c:82: 0a:5f:06:6d:df:61:d9:7f:fa:4c:c9:d7:83:d3:0f: 7f:a0:6d:b3:e9:58:ea:d6:c3:71:97:8b:e6:83:c8: 70:7d:94:9d:29:9a:3a:79:f0:4b:7b:8a:74:83:c8: 36:77:79:8e:07:64:65:d0:7f:a2:30:ab:39:4c:38: 53:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1F:19:AC:AD:D6:40:B2:64:6C:7E:79:C4:C1:C1:3E:5B:4A:93:CF X509v3 Authority Key Identifier: keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/qx8ZrK3WQLJkbH55xMHBPltKk88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.196.0/24 Signature Algorithm: sha256WithRSAEncryption 50:ae:3f:3f:bb:2c:65:97:a0:6d:a1:85:96:80:eb:0a:bc:3c: a7:0e:75:56:9d:50:a8:f0:78:ce:89:8b:42:25:f6:22:98:cb: 57:f9:95:e9:e8:ea:83:14:6c:2e:fe:8a:e5:27:6c:f1:49:0c: de:37:4f:32:97:10:e4:e9:ca:0a:20:da:27:40:dd:b4:1c:19: a1:65:f8:d3:09:55:3b:89:ae:85:54:88:34:42:4c:c0:b4:02: ba:14:a3:ac:8e:81:c0:29:28:99:f9:aa:3d:60:8b:7e:f7:cf: 00:16:0a:e2:a6:b2:78:dc:e6:9e:bb:48:c8:14:0b:0d:76:43: 5b:2a:fe:6b:56:b8:9c:4c:da:c5:15:e7:50:f6:dc:73:92:be: b6:15:ae:1b:dd:1a:49:b4:6b:00:44:e1:9c:e4:8d:c2:61:ce: 00:b8:76:60:e3:98:5c:d1:0f:05:f3:93:70:1b:e0:1f:70:ab: be:4e:42:8e:c4:83:3a:86:76:1c:a2:db:92:93:bc:cb:58:eb: 6e:1c:fd:d5:58:72:46:2c:bb:ba:f3:8f:e3:74:4e:69:e0:3a: 50:fe:83:a0:c0:4f:2b:1d:ff:d4:5f:97:40:55:46:ab:cf:e7: 60:46:2b:8a:79:19:6d:64:84:a6:6e:7e:f4:0f:9c:36:08:cc: 07:b3:dd:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmbOXkTGUGlYOQBfMYD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTFhN2I4ZWU4NDQwNTIyYjBiNTUzMGM4NWRjZTFkNzNm OTY3YjcwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjFmMTlhY2FkZDY0MGIyNjQ2YzdlNzljNGMxYzEzZTViNGE5M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hOEJ/2KOWXQIXKRh4NBko/x77eh oTJUi+bn4SOKy7J0uTSs2whDQk+otuPDCPBmJPyuwHpSsxhGb5voqm2JV6NUIo32 Cme8sOKgsDuv2cHRav+8kxxkZA/cAGs12MG9GlA0lEw/uv2fDeNQCwAJe7jFV/3M fa//4XWL1kxLZvNYtJZF4VnKDZ/yk6QKhOL1QgOqxMJhVZd6rkZVAwO3SUYVapXR tS9gJG0NsiPSfJeoIhVTGAQ6WuxHDiGW81VYLIIKXwZt32HZf/pMydeD0w9/oG2z 6Vjq1sNxl4vmg8hwfZSdKZo6efBLe4p0g8g2d3mOB2Rl0H+iMKs5TDhTywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKsfGayt1kCyZGx+ecTBwT5bSpPPMB8GA1UdIwQY MBaAFCeRp7juhEBSKwtVMMhdzh1z+We3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVHbnVPNkVRRklyQzFVd3lGM09IWFA1WjdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xM2I0YmMtMTk3ZS00MGE2LWI4NDUt OWVjZDhjYzUwYTg4LzEvcXg4WnJLM1dRTEprYkg1NXhNSEJQbHRLazg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xM2I0YmMtMTk3ZS00MGE2LWI4NDUtOWVjZDhjYzUwYTg4 LzEvSjVHbnVPNkVRRklyQzFVd3lGM09IWFA1WjdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DEMA0G CSqGSIb3DQEBCwUAA4IBAQBQrj8/uyxll6BtoYWWgOsKvDynDnVWnVCo8HjOiYtC JfYimMtX+ZXp6OqDFGwu/orlJ2zxSQzeN08ylxDk6coKINonQN20HBmhZfjTCVU7 ia6FVIg0QkzAtAK6FKOsjoHAKSiZ+ao9YIt+988AFgriprJ43Oaeu0jIFAsNdkNb Kv5rVricTNrFFedQ9txzkr62Fa4b3RpJtGsAROGc5I3CYc4AuHZg45hc0Q8F85Nw G+AfcKu+TkKOxIM6hnYcotuSk7zLWOtuHP3VWHJGLLu684/jdE5p4DpQ/oOgwE8r Hf/UX5dAVUarz+dgRiuKeRltZISmbn70D5w2CMwHs91O -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:52 2026 by rpki-client