This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/QwjI9r7a2pDJl4SH-zP4_MS33u4.roa File: QwjI9r7a2pDJl4SH-zP4_MS33u4.roa (raw, json) Hash identifier: bSmeKVnFfKZeWV365Q9L/iPPC38ofNznGL3ccvCiNk8= Subject key identifier: 43:08:C8:F6:BE:DA:DA:90:C9:97:84:87:FB:33:F8:FC:C4:B7:DE:EE Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15C86A26CF7FD76F00FC45693B9522 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/QwjI9r7a2pDJl4SH-zP4_MS33u4.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215298 IP address blocks: 195.76.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c8:6a:26:cf:7f:d7:6f:00:fc:45:69:3b:95:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4308c8f6bedada90c9978487fb33f8fcc4b7deee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:82:1f:68:7c:b7:d6:2d:c5:e2:61:20:f6: 66:1a:d6:7a:90:d2:66:cc:b2:55:84:25:c0:d1:7c: 3e:97:9a:76:8f:09:1d:3b:18:06:8b:6e:48:bd:35: 5f:27:aa:2b:43:18:b1:29:23:85:c9:d8:52:46:b9: a6:72:74:00:0c:e9:4f:e0:db:27:c7:e4:e6:6f:4a: e0:2f:61:dc:17:de:33:8e:d4:ed:32:5f:9a:c3:f2: f4:69:d8:ac:bb:58:ed:b5:45:7a:31:46:76:d5:5c: 95:15:83:e2:3c:1d:89:e5:17:c4:7e:82:ab:4b:32: 22:28:bf:bb:1d:db:70:57:dc:fd:83:2b:8e:77:51: 40:63:a8:e4:8e:21:82:87:5b:ec:47:85:ed:b0:5a: 5a:35:90:0a:54:73:27:e8:b4:3b:b0:26:02:40:c0: 0a:73:24:56:89:bd:96:0d:59:75:a2:86:f3:b3:6d: df:32:be:b9:3b:c6:df:c4:07:1a:ef:f6:ec:26:08: 71:d4:4f:93:48:4c:df:d3:16:29:51:fc:3a:f0:c2: 21:17:e5:e2:c6:9d:71:0d:94:14:b7:5e:aa:fa:0b: 0c:ee:53:d6:77:78:bd:dd:4e:d3:09:71:7e:bc:e7: 88:27:70:49:43:ab:ec:40:d5:a3:f2:f1:65:0b:1b: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:C8:F6:BE:DA:DA:90:C9:97:84:87:FB:33:F8:FC:C4:B7:DE:EE X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/QwjI9r7a2pDJl4SH-zP4_MS33u4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.76.120.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:d9:16:4e:53:44:38:e7:b5:46:e9:ed:f9:23:ae:17:40:f1: 10:cd:9a:9b:61:1c:ce:52:49:e1:02:3d:61:5d:cb:de:1a:8a: 9f:48:9d:1d:5d:78:28:98:a9:55:9e:99:d9:a0:64:b3:66:a6: b6:6e:07:92:6b:d5:e7:61:de:a4:5a:8e:b4:60:9d:c9:45:30: 86:c6:f7:18:ee:60:f6:99:c7:d5:9e:09:4a:88:91:6e:1b:3e: 9f:6e:8a:21:85:15:09:49:11:91:02:77:70:36:c0:f8:61:1d: 46:62:d1:7e:84:b2:67:ed:72:42:cd:9e:4d:93:a4:ab:af:1d: 81:50:a5:4a:64:6b:15:90:9c:cf:80:9b:78:7f:53:5e:7e:6e: 9d:03:87:f0:23:04:11:48:3d:ce:97:8a:c6:32:0e:37:12:ce: 6e:e1:f1:d0:9b:15:62:04:ec:94:a7:6e:e2:af:9c:ea:8f:32: 16:75:38:44:b3:b4:c6:1b:34:a6:cc:f9:58:ae:b4:ff:48:3b: a5:27:ca:53:b8:2c:86:e9:7d:8c:48:ea:ce:cc:d9:f7:96:a9: ed:2d:82:b4:93:f7:b8:5c:43:4c:37:3a:9a:0b:6a:01:16:88: 78:4e:34:2d:57:54:fd:56:0c:8a:f7:5c:cf:8c:32:d4:ba:a0: ba:19:38:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FchqJs9/128A/EVpO5UiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzA4YzhmNmJlZGFkYTkwYzk5Nzg0ODdmYjMzZjhmY2M0YjdkZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy6CH2h8t9YtxeJhIPZmGtZ6kNJm zLJVhCXA0Xw+l5p2jwkdOxgGi25IvTVfJ6orQxixKSOFydhSRrmmcnQADOlP4Nsn x+Tmb0rgL2HcF94zjtTtMl+aw/L0adisu1jttUV6MUZ21VyVFYPiPB2J5RfEfoKr SzIiKL+7HdtwV9z9gyuOd1FAY6jkjiGCh1vsR4XtsFpaNZAKVHMn6LQ7sCYCQMAK cyRWib2WDVl1oobzs23fMr65O8bfxAca7/bsJghx1E+TSEzf0xYpUfw68MIhF+Xi xp1xDZQUt16q+gsM7lPWd3i93U7TCXF+vOeIJ3BJQ6vsQNWj8vFlCxu0cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEMIyPa+2tqQyZeEh/sz+PzEt97uMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvUXdqSTlyN2EycERKbDRTSC16UDRfTVMzM3U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0x4MA0G CSqGSIb3DQEBCwUAA4IBAQBK2RZOU0Q457VG6e35I64XQPEQzZqbYRzOUknhAj1h XcveGoqfSJ0dXXgomKlVnpnZoGSzZqa2bgeSa9XnYd6kWo60YJ3JRTCGxvcY7mD2 mcfVnglKiJFuGz6fboohhRUJSRGRAndwNsD4YR1GYtF+hLJn7XJCzZ5Nk6Srrx2B UKVKZGsVkJzPgJt4f1Nefm6dA4fwIwQRSD3Ol4rGMg43Es5u4fHQmxViBOyUp27i r5zqjzIWdThEs7TGGzSmzPlYrrT/SDulJ8pTuCyG6X2MSOrOzNn3lqntLYK0k/e4 XENMNzqaC2oBFoh4TjQtV1T9VgyK91zPjDLUuqC6GTgW -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:29 2026 by rpki-client