This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/q1aUxTH67vKCNVudozumhgFJnN0.roa File: q1aUxTH67vKCNVudozumhgFJnN0.roa (raw, json) Hash identifier: Gev4Jmq/q5w1K/DLzN5ZlF/rU5AntRJHyQ0iiS7LMww= Subject key identifier: AB:56:94:C5:31:FA:EE:F2:82:35:5B:9D:A3:3B:A6:86:01:49:9C:DD Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Certificate serial: 019B1438DD4E7E9DBB76FBA5FC54DE29C01E Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/q1aUxTH67vKCNVudozumhgFJnN0.roa Signing time: Fri 12 Dec 2025 20:20:29 +0000 ROA not before: Fri 12 Dec 2025 20:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210259 IP address blocks: 81.29.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:38:dd:4e:7e:9d:bb:76:fb:a5:fc:54:de:29:c0:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Validity Not Before: Dec 12 20:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab5694c531faeef282355b9da33ba68601499cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:27:aa:1a:5f:8a:e9:97:d5:28:ec:78:82: 49:bf:40:3a:8d:b9:97:69:99:8c:57:d5:3d:27:81: b9:01:35:c4:b0:2b:51:33:fe:70:89:e3:5e:27:1c: 99:77:d7:ce:2a:b3:6f:b4:84:63:10:59:f3:0d:44: 77:d4:68:b0:53:8c:72:94:05:4e:ed:20:86:68:c9: b9:9b:8a:c6:7d:3f:86:75:0d:cb:81:bf:66:cd:27: e6:e9:d6:57:68:e4:b9:b7:c2:a4:3a:8e:19:03:39: 27:38:60:c0:d7:de:bf:d4:44:03:da:d5:c6:7c:c8: 3f:cb:24:3c:b6:3e:52:a7:de:2a:88:df:9a:fc:90: c4:23:7f:28:9a:54:24:5d:35:e6:ce:73:f7:88:70: e0:34:5b:06:23:37:ee:1e:be:04:65:5f:13:98:aa: 3b:8b:16:42:c2:3d:b6:1e:dc:c2:e4:44:d8:d8:0f: c8:1c:07:c7:16:b6:b7:fd:a6:7d:31:ad:6e:c4:c8: 83:75:af:75:3c:3c:da:d6:14:0a:14:bf:8c:63:95: 83:c8:a8:53:a8:bf:0c:81:6f:5a:b6:54:6e:e3:7b: c4:d6:10:1b:4f:42:71:ff:78:0a:97:42:28:e2:a7: df:c6:28:30:e6:4c:30:9e:de:fc:84:77:d9:35:0a: 4b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:56:94:C5:31:FA:EE:F2:82:35:5B:9D:A3:3B:A6:86:01:49:9C:DD X509v3 Authority Key Identifier: keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/q1aUxTH67vKCNVudozumhgFJnN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.142.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:b6:25:75:8b:c9:9b:91:86:b6:99:b9:bf:d7:5b:ca:d1:de: 0d:be:25:b0:5b:52:64:1a:43:c1:0a:d6:ff:83:81:ab:aa:5a: 2e:c5:4c:1f:1a:c8:a8:53:51:e9:16:34:5e:04:e1:e9:53:2d: 3a:1d:20:f7:17:9e:44:a7:7d:88:77:c4:f9:25:45:81:49:a1: 80:28:fe:44:65:9a:2f:7b:c0:74:8b:21:09:b3:04:27:ac:2e: 50:ae:08:2e:c7:48:ab:41:7b:25:c8:98:d6:25:19:96:53:ea: d2:6e:9c:18:37:07:ae:f4:7b:f6:4a:53:48:ab:b0:bd:23:11: 81:31:c6:af:fa:3a:1d:84:fa:31:e5:0b:71:e9:b1:0d:45:db: 95:59:ff:24:e9:f7:be:c9:da:b9:51:59:a3:ad:f3:ab:4b:f3: 0f:38:1e:9f:72:bd:10:c9:74:cf:d1:45:ab:3f:76:ab:5b:75: 73:b7:1c:cd:19:c5:e0:a3:68:a8:1a:dd:55:13:32:f9:50:f1: 4f:7f:2e:85:d1:cc:31:fc:18:f0:8f:13:1a:80:99:e6:bc:3d: db:07:c2:66:07:b6:ba:d6:8c:9f:dc:60:c5:03:9d:df:f4:e3: bd:30:c1:bc:77:11:8f:f2:31:ae:1b:b5:eb:c4:26:04:6e:3a: 72:57:65:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsUON1Ofp27dvul/FTeKcAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy YjAzYzAwHhcNMjUxMjEyMjAyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjU2OTRjNTMxZmFlZWYyODIzNTViOWRhMzNiYTY4NjAxNDk5Y2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRcnqhpfiumX1SjseIJJv0A6jbmX aZmMV9U9J4G5ATXEsCtRM/5wieNeJxyZd9fOKrNvtIRjEFnzDUR31GiwU4xylAVO 7SCGaMm5m4rGfT+GdQ3Lgb9mzSfm6dZXaOS5t8KkOo4ZAzknOGDA196/1EQD2tXG fMg/yyQ8tj5Sp94qiN+a/JDEI38omlQkXTXmznP3iHDgNFsGIzfuHr4EZV8TmKo7 ixZCwj22HtzC5ETY2A/IHAfHFra3/aZ9Ma1uxMiDda91PDza1hQKFL+MY5WDyKhT qL8MgW9atlRu43vE1hAbT0Jx/3gKl0Io4qffxigw5kwwnt78hHfZNQpLcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtWlMUx+u7ygjVbnaM7poYBSZzdMB8GA1UdIwQY MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt YTcyNDdlOWQ1ZjNhLzEvcTFhVXhUSDY3dktDTlZ1ZG96dW1oZ0ZKbk4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2OMA0G CSqGSIb3DQEBCwUAA4IBAQActiV1i8mbkYa2mbm/11vK0d4NviWwW1JkGkPBCtb/ g4GrqlouxUwfGsioU1HpFjReBOHpUy06HSD3F55Ep32Id8T5JUWBSaGAKP5EZZov e8B0iyEJswQnrC5Qrggux0irQXslyJjWJRmWU+rSbpwYNweu9Hv2SlNIq7C9IxGB Mcav+jodhPox5Qtx6bENRduVWf8k6fe+ydq5UVmjrfOrS/MPOB6fcr0QyXTP0UWr P3arW3VztxzNGcXgo2ioGt1VEzL5UPFPfy6F0cwx/BjwjxMagJnmvD3bB8JmB7a6 1oyf3GDFA53f9OO9MMG8dxGP8jGuG7XrxCYEbjpyV2X3 -----END CERTIFICATE-----Generated at Sun Dec 21 11:54:15 2025 by rpki-client