This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/qbDVabYqJeYEqjBWj7Cv4XVl3xw.roa File: qbDVabYqJeYEqjBWj7Cv4XVl3xw.roa (raw, json) Hash identifier: EKqAOb5Dbm7XycIewVU/Wv2fHJD/MJiV9ILVNO/5NdE= Subject key identifier: A9:B0:D5:69:B6:2A:25:E6:04:AA:30:56:8F:B0:AF:E1:75:65:DF:1C Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019A723C2CA41BB67D90DB420BAB51C1FE69 Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/qbDVabYqJeYEqjBWj7Cv4XVl3xw.roa Signing time: Tue 11 Nov 2025 09:25:37 +0000 ROA not before: Tue 11 Nov 2025 09:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62145 IP address blocks: 193.104.9.0/24 maxlen: 32 193.109.236.0/24 maxlen: 32 195.66.154.0/23 maxlen: 32 195.234.129.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:3c:2c:a4:1b:b6:7d:90:db:42:0b:ab:51:c1:fe:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Nov 11 09:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a9b0d569b62a25e604aa30568fb0afe17565df1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e4:6b:e3:3f:14:1b:7c:d2:ea:c2:c3:24:2f: 64:ee:7a:6e:50:37:55:69:7e:e6:86:ae:a1:aa:3f: c7:e2:bb:38:19:df:00:34:6f:67:02:98:ba:53:a2: aa:64:89:d9:8b:68:55:e6:9b:a3:75:33:c1:9e:0b: 39:06:39:10:7c:03:c1:ce:4b:04:26:b1:e1:84:00: c7:35:ca:9d:f0:f0:55:b6:4d:b2:7b:b9:77:cc:50: b3:fa:61:2f:7d:fc:fa:bd:da:db:9a:62:3f:b4:6b: 34:40:68:a1:26:3c:bc:cf:5d:7e:07:e1:d9:86:cc: 25:cb:db:b4:59:83:58:9e:76:a0:57:e6:15:b0:f0: 37:76:ed:40:32:c2:b7:e9:85:c7:06:c1:89:fd:a2: f4:8b:f3:3a:b4:eb:23:9d:4a:66:72:ec:c2:da:2e: b1:54:df:44:49:b0:36:a9:1c:94:d4:4c:c3:99:35: f2:e2:62:3c:05:dd:fd:b1:4a:06:f6:55:dd:fd:2b: f5:93:87:3c:dc:70:a3:da:7b:a8:78:4a:fc:b8:19: 70:56:de:a3:d8:e9:63:d5:92:e3:25:0f:59:5a:c2: dd:56:82:54:74:ff:41:69:33:e2:91:32:84:9a:9e: a4:7c:30:52:4c:cf:cc:35:63:a9:19:7f:91:a8:ce: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B0:D5:69:B6:2A:25:E6:04:AA:30:56:8F:B0:AF:E1:75:65:DF:1C X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/qbDVabYqJeYEqjBWj7Cv4XVl3xw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.9.0/24 193.109.236.0/24 195.66.154.0/23 195.234.129.0/24 Signature Algorithm: sha256WithRSAEncryption 61:a1:07:48:1a:1e:b4:dd:e9:91:c2:83:c3:9a:4f:48:c9:3e: ed:3a:62:9f:d8:28:6e:ab:4f:70:23:b8:d0:32:e5:3b:06:9f: 39:80:75:d2:ba:6a:6f:ff:e2:88:51:91:38:c3:a2:63:02:f9: 70:0f:cd:c6:46:e3:c8:bb:f8:4b:a7:ea:4d:6d:5e:9e:e5:1e: 4b:34:b6:e8:78:0b:51:ee:d1:b1:b3:4d:62:66:75:c1:16:0a: ae:4c:f7:93:ce:b6:cb:51:99:c1:3d:1b:5d:37:18:15:b3:01: 61:f3:14:d7:66:11:9d:49:01:7c:a3:3c:27:c8:c0:c6:52:b6: 8b:09:56:90:45:7e:8f:51:84:13:4a:fb:c9:f5:de:4c:4c:9d: 2f:2d:bf:62:e0:ea:f5:ba:e7:4a:95:f3:62:5b:b5:d9:15:1a: 94:99:0b:e7:66:97:d9:96:94:2b:3f:ce:72:0d:81:16:43:60: e9:a4:a9:af:6c:ea:39:45:c4:5d:25:f9:4d:5e:f5:84:e0:38: b1:0b:21:6c:b2:ae:fc:d2:24:c8:92:ee:7e:bc:fa:c8:92:c4: e8:38:4c:e6:af:5b:6b:a8:d1:2e:4e:85:b8:cb:a4:86:9e:0d: 6f:5d:25:4c:b9:76:43:79:06:0b:47:a1:17:89:d7:cc:f7:26: 5f:45:16:82 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZpyPCykG7Z9kNtCC6tRwf5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjUxMTExMDkyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWIwZDU2OWI2MmEyNWU2MDRhYTMwNTY4ZmIwYWZlMTc1NjVkZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ORr4z8UG3zS6sLDJC9k7npuUDdV aX7mhq6hqj/H4rs4Gd8ANG9nApi6U6KqZInZi2hV5pujdTPBngs5BjkQfAPBzksE JrHhhADHNcqd8PBVtk2ye7l3zFCz+mEvffz6vdrbmmI/tGs0QGihJjy8z11+B+HZ hswly9u0WYNYnnagV+YVsPA3du1AMsK36YXHBsGJ/aL0i/M6tOsjnUpmcuzC2i6x VN9ESbA2qRyU1EzDmTXy4mI8Bd39sUoG9lXd/Sv1k4c83HCj2nuoeEr8uBlwVt6j 2Olj1ZLjJQ9ZWsLdVoJUdP9BaTPikTKEmp6kfDBSTM/MNWOpGX+RqM7uMwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKmw1Wm2KiXmBKowVo+wr+F1Zd8cMB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEvcWJEVmFiWXFKZVlFcWpCV2o3Q3Y0WFZsM3h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwWgJAwQA wW3sAwQBw0KaAwQAw+qBMA0GCSqGSIb3DQEBCwUAA4IBAQBhoQdIGh603emRwoPD mk9IyT7tOmKf2Chuq09wI7jQMuU7Bp85gHXSumpv/+KIUZE4w6JjAvlwD83GRuPI u/hLp+pNbV6e5R5LNLboeAtR7tGxs01iZnXBFgquTPeTzrbLUZnBPRtdNxgVswFh 8xTXZhGdSQF8ozwnyMDGUraLCVaQRX6PUYQTSvvJ9d5MTJ0vLb9i4Or1uudKlfNi W7XZFRqUmQvnZpfZlpQrP85yDYEWQ2DppKmvbOo5RcRdJflNXvWE4DixCyFssq78 0iTIku5+vPrIksToOEzmr1trqNEuToW4y6SGng1vXSVMuXZDeQYLR6EXidfM9yZf RRaC -----END CERTIFICATE-----Generated at Sat Dec 6 23:19:41 2025 by rpki-client