This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/Q4K0kYlvp3FTFyzEK2YLlGZGooA.roa File: Q4K0kYlvp3FTFyzEK2YLlGZGooA.roa (raw, json) Hash identifier: qXM2UgIvJrR1VpY5u74Vrkmv8RUC4/qdzLxzxWzLlLU= Subject key identifier: 43:82:B4:91:89:6F:A7:71:53:17:2C:C4:2B:66:0B:94:66:46:A2:80 Certificate issuer: /CN=41a1ecd53d3c932895ea9c50992c7118728ed6b9 Certificate serial: 019ADA66E7219C2416F8BAD8A069419365E7 Authority key identifier: 41:A1:EC:D5:3D:3C:93:28:95:EA:9C:50:99:2C:71:18:72:8E:D6:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/Q4K0kYlvp3FTFyzEK2YLlGZGooA.roa Signing time: Mon 01 Dec 2025 14:52:48 +0000 ROA not before: Mon 01 Dec 2025 14:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209627 IP address blocks: 139.28.249.0/24 maxlen: 24 139.28.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.mft rsync://rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:66:e7:21:9c:24:16:f8:ba:d8:a0:69:41:93:65:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41a1ecd53d3c932895ea9c50992c7118728ed6b9 Validity Not Before: Dec 1 14:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4382b491896fa77153172cc42b660b946646a280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:03:60:2c:eb:bc:ce:65:4c:6c:a4:c1:84: ae:62:cd:5d:41:d8:50:6a:55:f7:21:91:4e:7f:f4: 60:01:b5:fd:00:f2:15:72:c0:92:a8:79:31:c4:a8: d6:37:9c:ba:30:e5:4e:64:56:02:11:3e:a1:22:48: a8:bf:e8:d4:9c:23:d0:f2:60:bf:f0:a3:0e:a5:05: d7:6f:c6:11:21:95:16:ee:d1:d4:94:53:2b:ea:22: 1c:b1:d3:17:bb:22:3b:25:77:47:ec:e5:21:f3:b3: 98:0a:97:c5:cd:89:54:9e:65:94:4b:49:db:f0:c1: fc:86:44:43:98:f0:56:80:bb:06:86:c5:35:40:19: 25:fe:fe:b0:53:13:06:a7:07:bf:66:7e:a7:2c:4d: bd:ba:f6:e6:ab:23:dd:e0:50:3b:42:88:3c:7f:1e: 4a:f3:74:d4:93:0b:a3:3d:18:82:7e:fc:f0:01:c2: 57:7c:8a:8a:8f:dd:de:7e:95:7d:49:70:52:6c:e4: ca:47:9d:d9:a6:4b:9d:4b:e3:da:c6:4c:cc:87:b2: a3:9e:b5:93:bf:40:ab:2b:2b:d1:f0:e7:c0:1d:42: c1:81:a5:b9:e9:c4:cb:24:d2:94:d3:c1:4f:c2:60: 8c:30:d5:09:ff:2f:bd:b5:03:ab:d5:54:66:00:a6: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:82:B4:91:89:6F:A7:71:53:17:2C:C4:2B:66:0B:94:66:46:A2:80 X509v3 Authority Key Identifier: keyid:41:A1:EC:D5:3D:3C:93:28:95:EA:9C:50:99:2C:71:18:72:8E:D6:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/Q4K0kYlvp3FTFyzEK2YLlGZGooA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.249.0/24 139.28.251.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:eb:42:99:8f:a8:82:cb:45:5c:89:e8:6a:c5:96:9c:fc:84: b8:4f:2d:48:71:07:34:35:a7:9a:ba:8c:34:de:9e:f6:43:16: 13:1f:2f:23:11:5a:11:83:9e:e2:47:8e:0e:37:6a:9f:ba:6d: e8:e7:45:07:1d:11:5b:a0:95:b4:c2:8d:e7:70:d4:04:0a:6b: 30:11:e3:ec:0f:30:57:42:c5:12:b4:d7:ec:9b:bf:4d:f9:fa: bb:fc:b3:fe:45:ea:c4:c0:47:8d:c5:68:42:30:40:81:17:ed: 5c:74:f9:a0:49:61:ca:d1:aa:d3:b1:c3:d3:3b:a0:55:a1:c3: 9f:56:23:4c:4e:7a:13:36:89:b2:43:8c:02:c7:f0:3b:eb:86: 98:f9:36:85:84:c5:df:95:0d:ee:37:24:c3:2f:84:0b:ff:36: 10:1f:8d:1a:81:ff:26:56:ed:5b:36:73:45:a8:f8:5a:59:88: c1:dd:ae:8a:ff:6e:c6:b6:7b:8d:8a:45:07:af:69:34:10:be: 9f:9a:cd:3a:fb:95:a0:43:95:b0:95:fb:da:0a:fa:98:20:e3: d0:ba:db:ea:7d:96:a5:96:72:d7:29:fc:fe:a9:10:47:93:e2: 17:4f:37:da:cc:a9:82:d3:9a:55:c5:63:5b:fb:e9:b0:a2:6c: 30:a5:68:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZraZuchnCQW+LrYoGlBk2XnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYTFlY2Q1M2QzYzkzMjg5NWVhOWM1MDk5MmM3MTE4NzI4 ZWQ2YjkwHhcNMjUxMjAxMTQ1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzgyYjQ5MTg5NmZhNzcxNTMxNzJjYzQyYjY2MGI5NDY2NDZhMjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvikDYCzrvM5lTGykwYSuYs1dQdhQ alX3IZFOf/RgAbX9APIVcsCSqHkxxKjWN5y6MOVOZFYCET6hIkiov+jUnCPQ8mC/ 8KMOpQXXb8YRIZUW7tHUlFMr6iIcsdMXuyI7JXdH7OUh87OYCpfFzYlUnmWUS0nb 8MH8hkRDmPBWgLsGhsU1QBkl/v6wUxMGpwe/Zn6nLE29uvbmqyPd4FA7Qog8fx5K 83TUkwujPRiCfvzwAcJXfIqKj93efpV9SXBSbOTKR53ZpkudS+PaxkzMh7KjnrWT v0CrKyvR8OfAHULBgaW56cTLJNKU08FPwmCMMNUJ/y+9tQOr1VRmAKbnEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEOCtJGJb6dxUxcsxCtmC5RmRqKAMB8GA1UdIwQY MBaAFEGh7NU9PJMoleqcUJkscRhyjta5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWFIczFUMDhreWlWNnB4UW1TeHhHSEtPMXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81OTU0ZTctM2UwYy00YzNhLTkyZDAt NDljODljZTI4ODgyLzEvUTRLMGtZbHZwM0ZURnl6RUsyWUxsR1pHb29BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81OTU0ZTctM2UwYy00YzNhLTkyZDAtNDljODljZTI4ODgy LzEvUWFIczFUMDhreWlWNnB4UW1TeHhHSEtPMXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAixz5AwQA ixz7MA0GCSqGSIb3DQEBCwUAA4IBAQAr60KZj6iCy0VciehqxZac/IS4Ty1IcQc0 Naeauow03p72QxYTHy8jEVoRg57iR44ON2qfum3o50UHHRFboJW0wo3ncNQECmsw EePsDzBXQsUStNfsm79N+fq7/LP+RerEwEeNxWhCMECBF+1cdPmgSWHK0arTscPT O6BVocOfViNMTnoTNomyQ4wCx/A764aY+TaFhMXflQ3uNyTDL4QL/zYQH40agf8m Vu1bNnNFqPhaWYjB3a6K/27GtnuNikUHr2k0EL6fms06+5WgQ5WwlfvaCvqYIOPQ utvqfZallnLXKfz+qRBHk+IXTzfazKmC05pVxWNb++mwomwwpWib -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:31 2025 by rpki-client