This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/QgASoofWA9KxKzGcO6RCYm3DIeI.roa File: QgASoofWA9KxKzGcO6RCYm3DIeI.roa (raw, json) Hash identifier: Q/OeL6zIgergVTp0RM1bTRT6FZuRi3pQudovcBEcWnQ= Subject key identifier: 42:00:12:A2:87:D6:03:D2:B1:2B:31:9C:3B:A4:42:62:6D:C3:21:E2 Certificate issuer: /CN=fd261d45319e8375187436da44bf5b9adb044a7f Certificate serial: 019A7023AD1FEADFA7A1F274D50C663F1674 Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/QgASoofWA9KxKzGcO6RCYm3DIeI.roa Signing time: Mon 10 Nov 2025 23:39:37 +0000 ROA not before: Mon 10 Nov 2025 23:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8758 IP address blocks: 31.24.8.0/21 maxlen: 24 37.46.144.0/22 maxlen: 24 77.74.96.0/21 maxlen: 24 80.89.208.0/20 maxlen: 24 83.150.0.0/18 maxlen: 24 84.254.80.0/20 maxlen: 24 84.254.96.0/20 maxlen: 24 87.239.200.0/21 maxlen: 24 88.218.24.0/22 maxlen: 24 91.84.64.0/19 maxlen: 24 95.143.48.0/20 maxlen: 24 109.70.112.0/21 maxlen: 24 109.70.115.0/24 maxlen: 24 109.70.116.0/22 maxlen: 24 125.3.64.0/19 maxlen: 24 145.40.192.0/19 maxlen: 24 155.2.224.0/19 maxlen: 24 157.143.0.0/17 maxlen: 24 178.22.104.0/21 maxlen: 24 178.250.130.0/23 maxlen: 24 185.109.164.0/22 maxlen: 24 185.160.244.0/22 maxlen: 24 185.203.132.0/22 maxlen: 24 188.137.160.0/20 maxlen: 24 194.31.128.0/23 maxlen: 24 194.246.118.0/23 maxlen: 24 212.25.0.0/19 maxlen: 24 217.22.128.0/20 maxlen: 24 217.71.240.0/20 maxlen: 24 217.150.224.0/20 maxlen: 24 2001:8e0::/29 maxlen: 48 2a00:10c0::/32 maxlen: 32 2a01:bd00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:70:23:ad:1f:ea:df:a7:a1:f2:74:d5:0c:66:3f:16:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f Validity Not Before: Nov 10 23:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=420012a287d603d2b12b319c3ba442626dc321e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:9d:60:17:8f:b9:f1:36:e5:37:30:db:a5: 7b:09:27:f4:5f:c6:5d:42:86:c5:5c:99:c3:8e:c6: 9b:96:d2:e3:3b:77:82:86:b1:98:25:e9:7d:ca:5f: e8:96:d4:37:9d:a1:c2:9b:60:42:d2:16:79:d6:e0: c1:84:6c:7f:0c:7d:da:2c:7f:04:53:bf:8f:fc:5b: 35:47:5c:66:1c:f5:73:67:d1:0e:20:7c:30:6b:7a: f7:14:8f:d9:46:50:17:1d:5b:72:4f:2f:8b:77:f2: 42:6b:3e:35:9d:25:74:cc:aa:70:07:6c:e4:82:18: 98:f1:99:00:cb:88:a9:27:63:54:b4:24:78:b7:fb: fd:ca:85:09:0f:bb:bb:54:c2:79:d3:74:f4:3f:de: d7:3f:98:12:65:86:40:6f:99:c7:cd:55:79:77:f1: 8e:49:2c:7d:b7:ca:a8:8c:bd:13:3e:75:56:c3:c0: 1e:c2:1d:17:ef:52:86:6e:24:86:e7:37:ca:e9:d7: 86:37:9f:7c:b3:47:aa:1a:f6:c0:64:0e:0e:02:20: 90:5e:2b:56:c9:d3:81:86:c2:80:8c:74:59:49:74: b9:f5:37:ec:8f:a2:e0:22:14:1c:bd:ac:5e:70:94: 93:8d:b9:ae:e9:2a:4b:3d:86:15:25:59:4e:c6:5d: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:00:12:A2:87:D6:03:D2:B1:2B:31:9C:3B:A4:42:62:6D:C3:21:E2 X509v3 Authority Key Identifier: keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/QgASoofWA9KxKzGcO6RCYm3DIeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.8.0/21 37.46.144.0/22 77.74.96.0/21 80.89.208.0/20 83.150.0.0/18 84.254.80.0-84.254.111.255 87.239.200.0/21 88.218.24.0/22 91.84.64.0/19 95.143.48.0/20 109.70.112.0/21 125.3.64.0/19 145.40.192.0/19 155.2.224.0/19 157.143.0.0/17 178.22.104.0/21 178.250.130.0/23 185.109.164.0/22 185.160.244.0/22 185.203.132.0/22 188.137.160.0/20 194.31.128.0/23 194.246.118.0/23 212.25.0.0/19 217.22.128.0/20 217.71.240.0/20 217.150.224.0/20 IPv6: 2001:8e0::/29 2a00:10c0::/32 2a01:bd00::/32 Signature Algorithm: sha256WithRSAEncryption ca:ba:3f:85:ce:5b:53:08:a3:80:4b:35:8e:8b:c7:01:f6:4f: 2b:47:1a:aa:f3:4d:a2:f4:b9:1d:fa:6a:6f:73:4a:bf:ff:ff: a9:12:7a:1a:1e:a9:95:fb:36:35:9a:9f:2f:21:e6:81:da:9d: 67:dc:07:4f:88:a3:60:7d:ef:ad:dd:a7:d4:c1:e3:f3:21:c7: 8f:6e:53:ad:0f:d4:26:5e:7a:4d:c0:6c:ba:98:84:e1:55:0c: 6f:f2:8b:10:77:07:52:42:65:27:0e:77:41:7b:e9:c9:f1:05: 5a:31:0d:bf:d5:42:ac:19:b0:1e:c4:2c:37:54:ab:ac:d9:b7: 02:61:c4:25:ed:88:6f:3a:f1:a0:76:5f:73:d1:6a:22:0c:70: b8:4d:73:5a:89:40:90:66:6a:2b:53:7d:7b:73:99:43:94:a6: b1:94:a6:3b:b7:5c:9a:d2:cc:b9:8c:d2:08:68:9c:3f:95:55: 1c:a0:e1:0f:d5:61:11:5e:b3:e6:9f:2e:f0:89:8d:4d:0c:ee: 45:e5:90:78:ba:74:b3:81:cb:2d:c8:63:fc:c1:04:3e:f5:22: 38:c3:cc:70:ae:7b:77:b6:33:cc:db:fe:8f:66:1b:68:4b:95: b2:6e:7d:ba:ad:e8:69:27:1e:30:dd:39:58:1f:33:66:0c:25: 52:94:ce:24 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZpwI60f6t+nofJ01QxmPxZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMjYxZDQ1MzE5ZTgzNzUxODc0MzZkYTQ0YmY1YjlhZGIw NDRhN2YwHhcNMjUxMTEwMjMzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjAwMTJhMjg3ZDYwM2QyYjEyYjMxOWMzYmE0NDI2MjZkYzMyMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pqdYBePufE25Tcw26V7CSf0X8Zd QobFXJnDjsabltLjO3eChrGYJel9yl/oltQ3naHCm2BC0hZ51uDBhGx/DH3aLH8E U7+P/Fs1R1xmHPVzZ9EOIHwwa3r3FI/ZRlAXHVtyTy+Ld/JCaz41nSV0zKpwB2zk ghiY8ZkAy4ipJ2NUtCR4t/v9yoUJD7u7VMJ503T0P97XP5gSZYZAb5nHzVV5d/GO SSx9t8qojL0TPnVWw8Aewh0X71KGbiSG5zfK6deGN598s0eqGvbAZA4OAiCQXitW ydOBhsKAjHRZSXS59Tfsj6LgIhQcvaxecJSTjbmu6SpLPYYVJVlOxl2yRwIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFEIAEqKH1gPSsSsxnDukQmJtwyHiMB8GA1UdIwQY MBaAFP0mHUUxnoN1GHQ22kS/W5rbBEp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQt ZWI1MDkzYjIzMWMxLzEvUWdBU29vZldBOUt4S3pHY082UkNZbTNESWVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQtZWI1MDkzYjIzMWMx LzEvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHkBggrBgEFBQcBBwEB/wSB1DCB0TCBsQQCAAEwgaoDBAMf GAgDBAIlLpADBANNSmADBARQWdADBAZTlgAwDAMEBFT+UAMEBFT+YAMEA1fvyAME AljaGAMEBVtUQAMEBF+PMAMEA21GcAMEBX0DQAMEBZEowAMEBZsC4AMEB52PAAME A7IWaAMEAbL6ggMEArltpAMEArmg9AMEArnLhAMEBLyJoAMEAcIfgAMEAcL2dgME BdQZAAMEBNkWgAMEBNlH8AMEBNmW4DAbBAIAAjAVAwUDIAEI4AMFACoAEMADBQAq Ab0AMA0GCSqGSIb3DQEBCwUAA4IBAQDKuj+FzltTCKOASzWOi8cB9k8rRxqq802i 9Lkd+mpvc0q///+pEnoaHqmV+zY1mp8vIeaB2p1n3AdPiKNgfe+t3afUwePzIceP blOtD9QmXnpNwGy6mIThVQxv8osQdwdSQmUnDndBe+nJ8QVaMQ2/1UKsGbAexCw3 VKus2bcCYcQl7YhvOvGgdl9z0WoiDHC4TXNaiUCQZmorU317c5lDlKaxlKY7t1ya 0sy5jNIIaJw/lVUcoOEP1WERXrPmny7wiY1NDO5F5ZB4unSzgcstyGP8wQQ+9SI4 w8xwrnt3tjPM2/6PZhtoS5Wybn26rehpJx4w3TlYHzNmDCVSlM4k -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:42 2025 by rpki-client