This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/QdZdK2qqiI5aoCKgtqiHNktyi64.roa File: QdZdK2qqiI5aoCKgtqiHNktyi64.roa (raw, json) Hash identifier: VYo7wX1xPM2gvfQMUvdssqSygBbHWq6CXy3NXKo/nzM= Subject key identifier: 41:D6:5D:2B:6A:AA:88:8E:5A:A0:22:A0:B6:A8:87:36:4B:72:8B:AE Certificate issuer: /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb Certificate serial: 019B21ADFF322EDCEBEDD32A082BB574E21E Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/QdZdK2qqiI5aoCKgtqiHNktyi64.roa Signing time: Mon 15 Dec 2025 11:03:29 +0000 ROA not before: Mon 15 Dec 2025 11:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60045 IP address blocks: 185.15.204.0/22 maxlen: 22 185.15.204.0/24 maxlen: 24 185.15.205.0/24 maxlen: 24 185.15.206.0/24 maxlen: 24 185.15.207.0/24 maxlen: 24 194.247.170.0/23 maxlen: 23 194.247.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ad:ff:32:2e:dc:eb:ed:d3:2a:08:2b:b5:74:e2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb Validity Not Before: Dec 15 11:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=41d65d2b6aaa888e5aa022a0b6a887364b728bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e4:78:0c:75:9f:16:b8:35:39:88:8a:7f:c7: c0:d9:a0:5c:d5:99:c1:93:d8:63:05:62:05:27:eb: b0:84:14:61:2f:20:f4:1f:92:ff:d0:e5:95:23:b7: cd:2a:6b:cf:2a:4b:a0:9b:5b:82:a6:3c:4b:01:20: 82:c4:92:56:46:69:ce:5b:66:b0:e5:13:66:32:07: 22:a9:57:46:1a:68:1c:73:db:ed:32:3c:d9:81:db: 52:1d:57:43:21:d5:7e:3c:95:b0:d5:c6:6f:48:f3: c4:75:ca:91:94:c5:6f:7c:ac:ed:4f:55:71:14:63: d6:2a:df:f4:90:53:d7:9f:e7:8d:69:a4:e3:f9:0d: 44:70:8a:eb:9d:fd:fb:8c:e6:6d:d3:b8:67:26:ea: 21:9f:c7:f7:3b:9f:05:cd:b7:9e:43:63:c2:14:70: a8:32:6d:77:d5:63:a5:eb:b6:28:dc:c8:f8:30:87: 70:9f:71:f0:e2:37:dc:69:69:57:98:9f:0f:27:2b: 52:b5:34:4d:f7:b3:46:5d:ea:e3:f1:b3:44:43:58: c2:67:f4:6f:f3:d9:2f:19:7c:f9:95:14:30:fe:10: 61:a6:da:d1:52:00:9b:fe:1e:42:5e:4f:f1:30:29: de:cd:7b:11:1a:25:0f:35:05:0e:40:fd:b0:47:d1: 81:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D6:5D:2B:6A:AA:88:8E:5A:A0:22:A0:B6:A8:87:36:4B:72:8B:AE X509v3 Authority Key Identifier: keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/QdZdK2qqiI5aoCKgtqiHNktyi64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.204.0/22 194.247.170.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:c8:77:4b:7a:2a:25:94:0b:34:03:33:99:0b:a6:4d:51:3f: 85:63:7a:27:a1:43:2a:6d:86:30:5e:a3:56:81:ec:0d:bb:56: 52:ed:eb:6d:95:8d:73:58:51:f5:12:bf:1b:a7:b8:a1:f0:bd: 30:4a:01:bc:df:61:9c:5c:33:fb:df:5e:ab:09:be:0f:ac:02: a9:fa:05:03:00:28:20:8d:81:dc:b4:89:2d:35:6c:28:cc:02: af:df:15:21:14:57:89:fc:35:47:58:df:87:b8:ab:96:e1:aa: 38:ac:39:31:0b:10:d1:e5:35:ce:77:38:0f:39:45:47:b2:2d: 1d:27:ca:be:18:d2:73:78:1f:a2:68:e9:fe:89:12:4e:05:5e: cc:27:87:f7:8c:7f:57:92:2b:b1:a0:3e:78:76:f4:9e:9c:c7: 8e:0a:b4:c9:42:46:a7:d2:d7:4e:3e:29:62:5d:ab:43:96:67: 7a:7e:79:97:60:c9:0f:b1:47:55:68:53:81:a7:cf:9d:27:3d: a8:37:4e:9f:e8:0b:37:4f:88:c8:e3:42:4a:1d:0f:91:d5:cf: dd:e2:67:af:23:87:66:89:73:f6:ce:db:8c:9e:b2:f0:03:61: fb:e3:6a:73:45:c7:37:ea:60:c8:34:c1:79:75:5d:15:bb:ca: 35:6f:a6:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZshrf8yLtzr7dMqCCu1dOIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTQyMjQ3NmUxYWU1ZWEwZDU4ZTRmOGZkZjkxZjA1ZjEw MmZlZmIwHhcNMjUxMjE1MTEwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWQ2NWQyYjZhYWE4ODhlNWFhMDIyYTBiNmE4ODczNjRiNzI4YmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeR4DHWfFrg1OYiKf8fA2aBc1ZnB k9hjBWIFJ+uwhBRhLyD0H5L/0OWVI7fNKmvPKkugm1uCpjxLASCCxJJWRmnOW2aw 5RNmMgciqVdGGmgcc9vtMjzZgdtSHVdDIdV+PJWw1cZvSPPEdcqRlMVvfKztT1Vx FGPWKt/0kFPXn+eNaaTj+Q1EcIrrnf37jOZt07hnJuohn8f3O58FzbeeQ2PCFHCo Mm131WOl67Yo3Mj4MIdwn3Hw4jfcaWlXmJ8PJytStTRN97NGXerj8bNEQ1jCZ/Rv 89kvGXz5lRQw/hBhptrRUgCb/h5CXk/xMCnezXsRGiUPNQUOQP2wR9GBtwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEHWXStqqoiOWqAioLaohzZLcouuMB8GA1UdIwQY MBaAFLaUIkduGuXqDVjk+P35HwXxAv77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNDlhZmUtMTVhZS00ODVhLWFmNzYt NjY1MTZmZmNlNzUwLzEvUWRaZEsycXFpSTVhb0NLZ3RxaUhOa3R5aTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lNDlhZmUtMTVhZS00ODVhLWFmNzYtNjY1MTZmZmNlNzUw LzEvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQ/MAwQB wveqMA0GCSqGSIb3DQEBCwUAA4IBAQB9yHdLeiollAs0AzOZC6ZNUT+FY3onoUMq bYYwXqNWgewNu1ZS7ettlY1zWFH1Er8bp7ih8L0wSgG832GcXDP7316rCb4PrAKp +gUDACggjYHctIktNWwozAKv3xUhFFeJ/DVHWN+HuKuW4ao4rDkxCxDR5TXOdzgP OUVHsi0dJ8q+GNJzeB+iaOn+iRJOBV7MJ4f3jH9XkiuxoD54dvSenMeOCrTJQkan 0tdOPiliXatDlmd6fnmXYMkPsUdVaFOBp8+dJz2oN06f6As3T4jI40JKHQ+R1c/d 4mevI4dmiXP2ztuMnrLwA2H742pzRcc36mDINMF5dV0Vu8o1b6Ya -----END CERTIFICATE-----Generated at Thu Dec 18 20:03:11 2025 by rpki-client