This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/qysmFDTPSaS-7X_DP__MLr3spSg.roa File: qysmFDTPSaS-7X_DP__MLr3spSg.roa (raw, json) Hash identifier: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ= Subject key identifier: AB:2B:26:14:34:CF:49:A4:BE:ED:7F:C3:3F:FF:CC:2E:BD:EC:A5:28 Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Certificate serial: 019B78A356940166393378F57F48A412713B Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/qysmFDTPSaS-7X_DP__MLr3spSg.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51849 IP address blocks: 194.107.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:56:94:01:66:39:33:78:f5:7f:48:a4:12:71:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab2b261434cf49a4beed7fc33fffcc2ebdeca528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bd:3e:a2:cd:d5:77:95:a2:36:4f:a8:15:af: d6:29:b7:59:68:56:97:e3:4a:7e:6b:da:f9:f9:6e: c3:10:9a:30:ee:1c:8c:52:28:4c:60:1f:ce:b6:14: f5:b0:7c:08:0b:62:bc:28:ef:16:f5:ec:22:91:43: 25:7f:7a:1f:b9:1f:f3:e8:a4:42:42:31:be:4f:30: ac:4d:99:23:f1:f8:8d:d9:6a:eb:3c:9b:ec:65:35: 51:30:d2:b1:88:80:ed:18:7c:4b:e4:1c:b8:42:50: a4:00:a0:06:bf:25:03:57:3e:67:c6:4a:87:c6:4f: 17:fe:56:2c:9e:28:ff:12:04:89:61:ff:d9:7b:a3: e9:9e:7b:b0:32:4d:53:4f:6c:39:d3:18:47:4d:99: 50:09:a8:95:ae:ce:cd:48:ce:8f:b7:2a:78:f1:ad: b7:1c:eb:00:53:ab:4b:51:6e:0f:b7:22:0e:17:4f: a4:96:03:e6:78:23:32:b0:e0:f7:15:9f:76:ab:2b: df:06:83:a1:5f:21:20:64:3e:3b:6b:f8:9c:1f:45: b5:85:9d:09:94:b4:c0:f8:e5:bf:2b:b2:d9:d6:5a: 75:9d:0e:f1:d7:2e:b9:5f:b5:e3:3b:02:04:24:c9: 7f:de:26:9f:59:0e:35:34:8a:11:79:cd:62:40:29: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2B:26:14:34:CF:49:A4:BE:ED:7F:C3:3F:FF:CC:2E:BD:EC:A5:28 X509v3 Authority Key Identifier: keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/qysmFDTPSaS-7X_DP__MLr3spSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.107.121.0/24 Signature Algorithm: sha256WithRSAEncryption 69:9f:a8:6a:95:e7:57:05:60:90:89:db:69:7b:f3:6c:0f:43: 9e:8d:e1:2e:ef:5b:7c:52:98:b6:d2:71:b8:64:c9:ac:42:24: d7:51:22:49:e2:f9:48:e2:e8:54:82:1e:04:41:31:da:dd:2f: 57:97:77:6b:f8:bd:c4:33:86:30:91:63:e1:8a:95:82:77:4e: d9:cb:7a:a8:0f:41:85:75:91:83:98:b7:d9:54:7e:c9:c8:6d: 12:8e:77:00:6e:99:4f:4e:b3:f9:5c:34:84:ce:03:d6:76:74: 6e:34:13:74:25:c5:f1:2f:56:f4:45:14:5b:99:91:33:22:aa: ca:30:60:a2:6c:34:c4:39:63:35:0e:57:45:cc:e8:c5:e6:b7: 28:e1:da:9b:9f:91:20:43:3b:c1:a3:94:f5:cc:ff:43:9a:96: 89:9f:d8:94:a7:0e:05:1a:2f:5a:88:2c:a0:51:d0:b5:0f:8b: 36:c6:fd:8b:f9:fd:88:38:b5:eb:e7:1a:94:ff:ba:e8:46:6a: 2a:fb:c3:11:d2:6a:ca:78:ea:cd:97:25:23:04:f1:87:a1:a1: eb:86:b3:a0:57:aa:36:d1:d0:b0:8e:8f:7e:1a:a9:8b:64:ea: 96:98:fb:27:36:b0:ea:4f:31:a5:9b:a8:ed:da:45:93:e9:d1: 03:9a:aa:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1aUAWY5M3j1f0ikEnE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNjQxMmM1ZGRmMTI4ZWM3MTRhZmFlYTQ4M2U4N2IxYmM3 NGQ0MWYwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjJiMjYxNDM0Y2Y0OWE0YmVlZDdmYzMzZmZmY2MyZWJkZWNhNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm70+os3Vd5WiNk+oFa/WKbdZaFaX 40p+a9r5+W7DEJow7hyMUihMYB/OthT1sHwIC2K8KO8W9ewikUMlf3ofuR/z6KRC QjG+TzCsTZkj8fiN2WrrPJvsZTVRMNKxiIDtGHxL5By4QlCkAKAGvyUDVz5nxkqH xk8X/lYsnij/EgSJYf/Ze6PpnnuwMk1TT2w50xhHTZlQCaiVrs7NSM6Ptyp48a23 HOsAU6tLUW4PtyIOF0+klgPmeCMysOD3FZ92qyvfBoOhXyEgZD47a/icH0W1hZ0J lLTA+OW/K7LZ1lp1nQ7x1y65X7XjOwIEJMl/3iafWQ41NIoRec1iQCkMlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKsrJhQ0z0mkvu1/wz//zC697KUoMB8GA1UdIwQY MBaAFN9kEsXd8SjscUr66kg+h7G8dNQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDct Zjk1MDQyMGI5ZTA2LzEvcXlzbUZEVFBTYVMtN1hfRFBfX01McjNzcFNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDctZjk1MDQyMGI5ZTA2 LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmt5MA0G CSqGSIb3DQEBCwUAA4IBAQBpn6hqledXBWCQidtpe/NsD0OejeEu71t8Upi20nG4 ZMmsQiTXUSJJ4vlI4uhUgh4EQTHa3S9Xl3dr+L3EM4YwkWPhipWCd07Zy3qoD0GF dZGDmLfZVH7JyG0SjncAbplPTrP5XDSEzgPWdnRuNBN0JcXxL1b0RRRbmZEzIqrK MGCibDTEOWM1DldFzOjF5rco4dqbn5EgQzvBo5T1zP9DmpaJn9iUpw4FGi9aiCyg UdC1D4s2xv2L+f2IOLXr5xqU/7roRmoq+8MR0mrKeOrNlyUjBPGHoaHrhrOgV6o2 0dCwjo9+GqmLZOqWmPsnNrDqTzGlm6jt2kWT6dEDmqre -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:26 2026 by rpki-client