This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qws81Gwvl9e98hIFr9iUkrzN3gc.roa File: qws81Gwvl9e98hIFr9iUkrzN3gc.roa (raw, json) Hash identifier: pqzLho97arYSK9b+VZLL6AAiN771mECIqAoBjIaWav4= Subject key identifier: AB:0B:3C:D4:6C:2F:97:D7:BD:F2:12:05:AF:D8:94:92:BC:CD:DE:07 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15B33549DAE57747A79C082D93441D Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qws81Gwvl9e98hIFr9iUkrzN3gc.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2134 IP address blocks: 195.76.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b3:35:49:da:e5:77:47:a7:9c:08:2d:93:44:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab0b3cd46c2f97d7bdf21205afd89492bccdde07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:25:96:f6:29:03:f3:6e:08:9d:1f:a8:d7: 82:2a:ef:7c:8f:24:d5:47:68:3a:1d:18:5e:93:fb: fc:f8:34:af:dc:88:03:d4:65:bd:5b:57:48:a1:8e: 7d:22:87:9e:4f:c2:8d:d0:f0:03:c4:fd:b5:d3:ec: da:e8:ba:ad:2a:0a:4a:9c:5b:76:61:09:88:6d:2a: ee:91:cb:da:19:d0:ff:0e:07:ea:fe:6a:68:71:fd: 30:be:b5:e3:6e:76:07:3f:54:52:57:fe:ab:fb:cd: 1d:80:a1:6d:1c:91:dd:a6:ce:09:39:06:95:d1:1c: bc:ab:c3:46:80:41:4f:0d:3c:8b:b0:26:c5:7f:b8: a2:e9:bc:30:a4:8a:c0:cd:d5:56:8b:11:f7:2c:76: d4:d3:a4:fc:33:90:5b:9f:4a:ec:45:83:f1:51:4f: ee:1f:45:54:a3:e4:60:61:0e:57:34:fa:5a:52:63: a4:e8:34:ca:a6:39:97:16:3a:b1:7e:1e:00:1a:84: 06:30:37:6d:98:c3:b0:d4:cc:25:26:46:67:1e:58: b8:c7:20:1a:41:1f:ee:76:05:65:35:0d:06:18:67: c1:a2:a0:d9:7c:45:59:d7:14:0d:05:31:12:1b:ae: 57:08:9b:22:73:fd:f6:85:90:cb:9f:d9:b1:55:c9: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0B:3C:D4:6C:2F:97:D7:BD:F2:12:05:AF:D8:94:92:BC:CD:DE:07 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qws81Gwvl9e98hIFr9iUkrzN3gc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.76.19.0/24 Signature Algorithm: sha256WithRSAEncryption b1:c2:dc:81:6c:1d:d3:23:e0:d3:57:b1:73:70:73:fc:f2:f9: c6:66:16:13:19:1c:40:ec:9d:d5:6c:8f:73:21:c7:1a:36:f4: 8f:eb:11:4d:2e:9b:ab:b4:26:b2:4f:9f:c1:d4:f5:99:d3:89: bf:38:61:73:05:76:29:30:fb:00:89:0b:f5:9a:a1:65:30:1b: 8f:24:e6:26:c1:ac:5f:27:c4:0e:54:3c:da:ca:63:c5:6e:60: 68:fd:49:33:a9:d0:15:9c:d6:f7:be:6d:ca:b0:be:30:1d:1c: 66:9f:12:c4:f0:56:be:98:3d:ef:04:94:84:a6:8c:d1:e3:46: 8a:06:31:34:2b:2c:7a:96:54:aa:18:da:96:7d:34:96:b7:ad: e3:82:97:f4:3e:81:ac:a8:8c:28:00:8c:b0:b8:1c:66:ac:07: 26:cd:e7:8a:f3:36:e4:f7:fd:f5:1c:26:49:46:a4:c7:61:ef: 0c:a9:cc:2a:ef:cd:38:99:ed:f8:d0:49:44:4e:b4:ec:45:4b: 9a:2c:d7:56:67:8a:48:9e:2a:26:c6:27:2c:95:20:63:cd:5c: 8d:c9:a0:0d:82:0d:68:da:76:33:db:0b:f6:de:71:b1:49:e1: e1:f4:1f:e4:34:ad:7f:b7:4a:74:48:32:67:8b:c3:1c:04:c5: 20:b8:5a:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FbM1Sdrld0ennAgtk0QdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjBiM2NkNDZjMmY5N2Q3YmRmMjEyMDVhZmQ4OTQ5MmJjY2RkZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8QllvYpA/NuCJ0fqNeCKu98jyTV R2g6HRhek/v8+DSv3IgD1GW9W1dIoY59IoeeT8KN0PADxP210+za6LqtKgpKnFt2 YQmIbSrukcvaGdD/Dgfq/mpocf0wvrXjbnYHP1RSV/6r+80dgKFtHJHdps4JOQaV 0Ry8q8NGgEFPDTyLsCbFf7ii6bwwpIrAzdVWixH3LHbU06T8M5Bbn0rsRYPxUU/u H0VUo+RgYQ5XNPpaUmOk6DTKpjmXFjqxfh4AGoQGMDdtmMOw1MwlJkZnHli4xyAa QR/udgVlNQ0GGGfBoqDZfEVZ1xQNBTESG65XCJsic/32hZDLn9mxVckliwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKsLPNRsL5fXvfISBa/YlJK8zd4HMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvcXdzODFHd3ZsOWU5OGhJRnI5aVVrcnpOM2djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0wTMA0G CSqGSIb3DQEBCwUAA4IBAQCxwtyBbB3TI+DTV7FzcHP88vnGZhYTGRxA7J3VbI9z IccaNvSP6xFNLpurtCayT5/B1PWZ04m/OGFzBXYpMPsAiQv1mqFlMBuPJOYmwaxf J8QOVDzaymPFbmBo/UkzqdAVnNb3vm3KsL4wHRxmnxLE8Fa+mD3vBJSEpozR40aK BjE0Kyx6llSqGNqWfTSWt63jgpf0PoGsqIwoAIywuBxmrAcmzeeK8zbk9/31HCZJ RqTHYe8Mqcwq7804me340ElETrTsRUuaLNdWZ4pIniomxicslSBjzVyNyaANgg1o 2nYz2wv23nGxSeHh9B/kNK1/t0p0SDJni8McBMUguFqY -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:30 2026 by rpki-client