This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/QFVD_vDix159B7sLQeUpWm_GLEw.roa File: QFVD_vDix159B7sLQeUpWm_GLEw.roa (raw, json) Hash identifier: kEJdjprDzoSb9cHEZeOFz4THLXOGjpr7w2NVDvWkdcI= Subject key identifier: 40:55:43:FE:F0:E2:C7:5E:7D:07:BB:0B:41:E5:29:5A:6F:C6:2C:4C Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019AB5598A975759676C3B87A1AF9C8627C8 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/QFVD_vDix159B7sLQeUpWm_GLEw.roa Signing time: Mon 24 Nov 2025 10:12:15 +0000 ROA not before: Mon 24 Nov 2025 10:12:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62257 IP address blocks: 91.243.119.0/24 maxlen: 24 194.36.172.0/23 maxlen: 23 194.180.208.0/23 maxlen: 23 194.180.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:59:8a:97:57:59:67:6c:3b:87:a1:af:9c:86:27:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Nov 24 10:12:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=405543fef0e2c75e7d07bb0b41e5295a6fc62c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:9c:d5:71:3d:4b:c5:ea:11:f4:bf:7c:b8: 06:0e:d7:e7:81:8a:f9:b5:79:89:9c:ea:84:ad:05: 2f:0b:bb:1b:46:b7:6b:60:7e:d3:ce:50:dd:2e:e9: 2b:4f:7a:29:de:fa:08:1a:c2:7f:ee:4d:53:af:8e: 25:5b:a8:37:db:85:94:2f:04:9e:ef:cd:07:a2:7b: ee:56:0c:bb:da:f5:bc:03:50:ca:fe:cb:eb:ca:72: 5e:19:03:ba:3b:80:ee:bd:66:2c:2e:86:1f:3a:9d: 0b:20:80:31:8b:40:91:ba:ef:0c:ec:26:9e:da:d0: da:71:f7:cb:bc:f9:87:6c:87:7c:50:ff:a4:ec:e2: fa:32:2e:43:2e:44:94:3a:e5:e8:ef:d4:01:b2:56: 8f:d8:2c:21:09:8e:8b:e7:15:b6:45:67:d6:16:99: ea:4c:4b:9a:59:8a:62:76:e7:50:1b:0f:ef:07:12: d2:25:a2:67:dd:8c:99:a5:03:0d:aa:67:d9:87:70: 8d:83:c9:64:5e:5b:37:47:e7:f4:01:aa:a4:49:b7: 60:2f:e9:55:83:2a:4c:ef:a4:b3:40:57:c6:f7:2b: eb:72:6a:fb:9d:cc:f1:20:47:63:74:86:3d:2c:7e: c7:97:9f:73:45:07:fa:a6:6c:51:82:8e:3c:5c:f4: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:55:43:FE:F0:E2:C7:5E:7D:07:BB:0B:41:E5:29:5A:6F:C6:2C:4C X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/QFVD_vDix159B7sLQeUpWm_GLEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.243.119.0/24 194.36.172.0/23 194.180.208.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:8d:86:92:04:22:a1:da:72:73:d4:d6:c2:a4:a7:da:e1:30: 5a:c7:e1:87:cf:94:fb:35:e2:1f:db:f3:3c:1d:ca:f2:2e:ea: e7:1a:ec:6d:67:cf:7b:9c:8c:35:5b:51:10:11:cd:87:87:c2: 45:22:b5:cc:b2:26:85:14:fc:55:1b:4f:fa:8e:b1:0b:b0:3c: 6a:fa:b4:46:53:3f:55:4c:40:f3:7c:11:6b:b3:7b:eb:c4:63: c3:c2:37:7f:07:fd:8e:6e:3e:30:c4:18:3f:c7:b3:f8:2e:2a: 6b:b0:d0:a2:69:1d:93:76:e4:08:9d:1d:42:08:66:ad:45:5a: 71:89:c7:dd:13:10:ab:84:52:6a:e6:33:0b:ee:56:3b:d5:bd: be:33:78:aa:1c:a3:22:62:7c:df:96:b4:cb:f3:e6:29:49:97: a1:5e:b4:ac:91:69:b2:9c:89:d0:39:0d:21:4e:4d:44:36:15: 37:0a:84:18:93:68:50:34:7e:db:15:2f:f8:86:39:47:00:c2: ea:39:37:73:ca:23:5d:79:5d:fd:d2:85:a2:59:58:d2:5b:1c: 95:47:d0:19:0f:12:cc:11:bd:c2:2d:ef:bc:4b:85:b8:f6:f1: b2:7f:5b:af:e5:ec:a7:46:d7:7e:06:12:e5:28:22:ce:8c:a9: 02:5e:1e:73 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZq1WYqXV1lnbDuHoa+chifIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUxMTI0MTAxMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDU1NDNmZWYwZTJjNzVlN2QwN2JiMGI0MWU1Mjk1YTZmYzYyYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAremc1XE9S8XqEfS/fLgGDtfngYr5 tXmJnOqErQUvC7sbRrdrYH7TzlDdLukrT3op3voIGsJ/7k1Tr44lW6g324WULwSe 780HonvuVgy72vW8A1DK/svrynJeGQO6O4DuvWYsLoYfOp0LIIAxi0CRuu8M7Cae 2tDacffLvPmHbId8UP+k7OL6Mi5DLkSUOuXo79QBslaP2CwhCY6L5xW2RWfWFpnq TEuaWYpidudQGw/vBxLSJaJn3YyZpQMNqmfZh3CNg8lkXls3R+f0AaqkSbdgL+lV gypM76SzQFfG9yvrcmr7nczxIEdjdIY9LH7Hl59zRQf6pmxRgo48XPQMUQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEBVQ/7w4sdefQe7C0HlKVpvxixMMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvUUZWRF92RGl4MTU5QjdzTFFlVXBXbV9HTEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW/N3AwQB wiSsAwQBwrTQMA0GCSqGSIb3DQEBCwUAA4IBAQBdjYaSBCKh2nJz1NbCpKfa4TBa x+GHz5T7NeIf2/M8HcryLurnGuxtZ897nIw1W1EQEc2Hh8JFIrXMsiaFFPxVG0/6 jrELsDxq+rRGUz9VTEDzfBFrs3vrxGPDwjd/B/2Obj4wxBg/x7P4LiprsNCiaR2T duQInR1CCGatRVpxicfdExCrhFJq5jML7lY71b2+M3iqHKMiYnzflrTL8+YpSZeh XrSskWmynInQOQ0hTk1ENhU3CoQYk2hQNH7bFS/4hjlHAMLqOTdzyiNdeV390oWi WVjSWxyVR9AZDxLMEb3CLe+8S4W49vGyf1uv5eynRtd+BhLlKCLOjKkCXh5z -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:24 2025 by rpki-client