This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/qC4I7omklrGMGDF8l2hLIeTGK0I.roa File: qC4I7omklrGMGDF8l2hLIeTGK0I.roa (raw, json) Hash identifier: 8xsMx8ZOTT0zr7b6BrMYk6XYyKq+pWHRlqmJag8LVoI= Subject key identifier: A8:2E:08:EE:89:A4:96:B1:8C:18:31:7C:97:68:4B:21:E4:C6:2B:42 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019ABBA8875832B8402C629D1F23BEFF5001 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/qC4I7omklrGMGDF8l2hLIeTGK0I.roa Signing time: Tue 25 Nov 2025 15:36:15 +0000 ROA not before: Tue 25 Nov 2025 15:36:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 82.115.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:a8:87:58:32:b8:40:2c:62:9d:1f:23:be:ff:50:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Nov 25 15:36:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a82e08ee89a496b18c18317c97684b21e4c62b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:d9:1d:dd:dc:49:32:ce:d9:a0:42:1b:d8: ef:98:7b:49:3d:28:18:90:8c:76:c8:fb:84:19:27: f6:7a:1f:6a:b9:b0:39:65:ab:3e:ba:33:4d:09:21: 4a:c9:ba:d4:ad:f5:f6:8c:00:41:09:a2:cb:82:a8: de:77:ed:db:38:92:2e:c3:0d:a0:da:00:5e:11:a0: 93:dd:d8:78:0c:00:42:31:a0:db:2c:ba:a0:c0:c6: 3f:0e:86:91:93:14:43:78:e5:05:e1:ca:f9:16:d1: be:99:f4:f7:15:8d:b2:49:e0:82:07:8e:18:e7:fb: 4a:ef:30:df:ae:18:4d:e6:5b:0e:32:4b:62:57:8d: 89:93:73:18:9a:a6:6b:1e:33:0c:98:43:69:67:cd: dc:be:88:85:42:da:4b:1e:7d:ba:1e:29:ac:27:31: 61:37:df:1e:81:95:1a:80:89:03:c3:78:fe:d3:93: ff:5c:36:86:d6:2b:d1:87:8c:9b:18:20:48:9f:ee: 28:af:23:a5:1e:d8:00:21:91:89:9b:54:12:f7:4a: d6:e3:8a:89:bc:4b:64:07:37:a6:dc:3d:d5:e8:de: a8:08:4b:9b:5a:92:1b:48:38:c4:6c:3e:57:df:25: 33:40:fe:9e:6a:92:84:ab:d6:a5:1a:72:a2:71:4f: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2E:08:EE:89:A4:96:B1:8C:18:31:7C:97:68:4B:21:E4:C6:2B:42 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/qC4I7omklrGMGDF8l2hLIeTGK0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.217.0/24 Signature Algorithm: sha256WithRSAEncryption 14:d1:59:6d:d0:f5:a6:08:1e:69:3f:ae:9a:e7:f2:cf:2b:4b: d0:87:ad:b2:d9:fe:3a:ad:3b:84:9f:8c:88:d2:f9:75:ca:ad: 01:4d:db:fa:32:02:e0:08:0b:a4:b7:70:ad:56:5a:ac:ed:5e: 6d:d3:a4:de:c7:1f:35:de:30:5c:dd:99:07:56:fd:6d:56:f5: fc:b8:dd:23:a5:3a:cf:33:ec:c8:fb:e9:4a:90:93:ca:b3:b2: b1:82:77:8f:69:ba:aa:d6:dd:10:6c:e8:01:e4:ff:59:fb:bb: 8a:8d:b0:93:35:58:1c:a1:b4:9f:25:5e:a1:92:ad:ad:c8:50: b5:dd:6b:fa:0b:cd:58:b7:64:a0:5c:72:cf:09:8a:0d:10:ed: 76:9c:89:c7:8b:15:15:54:69:75:38:15:4f:85:99:a5:d3:60: 6c:97:1b:14:55:05:f6:96:39:55:d4:85:2d:46:b4:9a:5e:66: 84:43:a0:80:61:fc:94:96:9e:c1:5e:55:6e:5e:8e:57:24:12: 3a:cf:ea:11:f4:68:eb:02:22:26:6b:67:f7:62:48:ea:09:4b: 5f:b2:8e:99:13:70:a7:71:c7:0f:89:ae:6e:9c:7a:72:f5:63: 7f:4b:f2:52:bd:7d:f6:2b:a5:6e:3d:f1:f3:8e:fd:f4:98:84: fa:81:36:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq7qIdYMrhALGKdHyO+/1ABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUxMTI1MTUzNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODJlMDhlZTg5YTQ5NmIxOGMxODMxN2M5NzY4NGIyMWU0YzYyYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFTZHd3cSTLO2aBCG9jvmHtJPSgY kIx2yPuEGSf2eh9qubA5Zas+ujNNCSFKybrUrfX2jABBCaLLgqjed+3bOJIuww2g 2gBeEaCT3dh4DABCMaDbLLqgwMY/DoaRkxRDeOUF4cr5FtG+mfT3FY2ySeCCB44Y 5/tK7zDfrhhN5lsOMktiV42Jk3MYmqZrHjMMmENpZ83cvoiFQtpLHn26HimsJzFh N98egZUagIkDw3j+05P/XDaG1ivRh4ybGCBIn+4oryOlHtgAIZGJm1QS90rW44qJ vEtkBzem3D3V6N6oCEubWpIbSDjEbD5X3yUzQP6eapKEq9alGnKicU/WJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKguCO6JpJaxjBgxfJdoSyHkxitCMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEvcUM0STdvbWtsckdNR0RGOGwyaExJZVRHSzBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnPZMA0G CSqGSIb3DQEBCwUAA4IBAQAU0Vlt0PWmCB5pP66a5/LPK0vQh62y2f46rTuEn4yI 0vl1yq0BTdv6MgLgCAukt3CtVlqs7V5t06Texx813jBc3ZkHVv1tVvX8uN0jpTrP M+zI++lKkJPKs7KxgnePabqq1t0QbOgB5P9Z+7uKjbCTNVgcobSfJV6hkq2tyFC1 3Wv6C81Yt2SgXHLPCYoNEO12nInHixUVVGl1OBVPhZml02BslxsUVQX2ljlV1IUt RrSaXmaEQ6CAYfyUlp7BXlVuXo5XJBI6z+oR9GjrAiIma2f3YkjqCUtfso6ZE3Cn cccPia5unHpy9WN/S/JSvX32K6VuPfHzjv30mIT6gTaU -----END CERTIFICATE-----Generated at Sat Dec 6 14:28:32 2025 by rpki-client