This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/gQiZYCaIXeqAfyMrnz6-0UZTGpA.roa File: gQiZYCaIXeqAfyMrnz6-0UZTGpA.roa (raw, json) Hash identifier: JWxyJtGpHCFniKAl8h4IcYF6FXj87lqG4HgwxnjAG2w= Subject key identifier: 81:08:99:60:26:88:5D:EA:80:7F:23:2B:9F:3E:BE:D1:46:53:1A:90 Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e Certificate serial: 019A6DFF471CCBF430660DADFE83C9694BA0 Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/gQiZYCaIXeqAfyMrnz6-0UZTGpA.roa Signing time: Mon 10 Nov 2025 13:40:37 +0000 ROA not before: Mon 10 Nov 2025 13:40:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60354 IP address blocks: 185.251.113.0/24 maxlen: 32 185.251.115.0/24 maxlen: 24 2a0c:1940::/44 maxlen: 44 2a0c:1940:10::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:ff:47:1c:cb:f4:30:66:0d:ad:fe:83:c9:69:4b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e Validity Not Before: Nov 10 13:40:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8108996026885dea807f232b9f3ebed146531a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:3b:d1:29:d7:c8:7c:a1:8d:eb:b5:04:0b: 20:8d:74:f3:31:05:4c:b4:31:ba:92:5e:db:cd:88: fd:18:bc:7b:c5:fb:2d:3d:02:ba:0c:35:13:81:1b: 5b:2b:30:2b:26:c9:6c:50:0a:d6:e0:9f:5e:0d:1d: f1:ed:42:2d:4b:aa:e4:16:ee:1e:a7:09:52:b9:14: 25:f8:d9:6e:19:d0:3e:2b:33:92:35:79:2a:5f:13: 8c:5f:3a:4a:91:07:9d:15:85:d9:f0:ca:60:89:df: 29:e3:6c:ad:4f:cc:4a:cf:c4:85:cd:04:06:23:a5: 7c:7b:4f:74:cd:36:bc:dd:21:af:a7:12:8d:a5:af: d5:ac:26:70:4e:4d:cd:b5:56:38:5e:b0:d0:9a:1d: 03:8d:83:3b:cf:44:93:3a:3e:6d:0f:fa:0a:3c:14: f1:62:97:06:22:b1:12:01:29:a8:f3:5c:44:aa:08: e3:6f:6a:ba:7b:5d:9d:c3:07:2a:6c:7b:3c:2f:08: de:a0:79:03:41:a1:cb:46:4e:70:3b:50:5d:ee:ea: 27:98:1c:43:7f:f9:54:64:cd:8a:86:2a:07:33:a9: b6:bb:03:e6:ec:f2:92:ac:c5:b1:c9:de:1c:87:cd: bd:c6:fa:3d:24:d4:36:70:de:7a:9c:3d:ea:f9:9b: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:08:99:60:26:88:5D:EA:80:7F:23:2B:9F:3E:BE:D1:46:53:1A:90 X509v3 Authority Key Identifier: keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/gQiZYCaIXeqAfyMrnz6-0UZTGpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.113.0/24 185.251.115.0/24 IPv6: 2a0c:1940::/43 Signature Algorithm: sha256WithRSAEncryption 4b:4b:6b:4b:2f:38:09:ac:1d:59:33:65:20:99:99:4b:e2:d5: fd:42:b9:4f:de:fc:ad:b1:b7:0f:8f:71:ed:be:46:f5:9f:7d: d8:a5:a3:aa:84:b6:67:d0:8d:b9:06:7e:48:e9:97:9a:d7:80: 5c:35:dd:c9:1f:a2:9d:8c:ac:64:ae:9d:3f:2f:59:0f:d7:50: 48:86:dc:11:42:e0:df:8c:e7:e4:10:27:2e:64:c9:28:37:6f: 7d:3e:5d:38:a0:e0:f3:71:52:22:5e:a4:8d:1b:d8:09:bf:90: e7:48:22:04:ab:bf:ee:ea:d8:b2:a2:29:33:37:e7:ed:67:04: f7:77:a7:10:4e:68:ea:8b:6c:8e:4e:ca:60:a9:c1:76:cf:df: 4d:66:09:e5:74:e0:de:ec:5d:8f:88:ee:12:15:80:25:4d:1b: 51:90:37:3a:1d:ef:af:4d:63:e4:86:0e:30:70:76:c5:bb:ae: 74:03:c5:c6:2c:88:e9:4c:71:1a:93:1a:84:d9:62:84:69:2c: 2b:37:c9:5c:43:ba:1b:8a:7e:be:63:31:c2:d4:58:de:4b:61: 88:f6:a5:06:03:b4:98:6f:8c:65:b6:34:8c:60:d7:69:4d:00: e9:69:b7:ab:6d:44:08:76:53:dc:c6:cc:a5:c4:6f:eb:f0:4e: 49:e9:ff:54 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZpt/0ccy/QwZg2t/oPJaUugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTIyYTVjYjA2NDNmNzM2YzdlYzc5NjE4MDlhMjU5Mzg2 NjhmMGUwHhcNMjUxMTEwMTM0MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA4OTk2MDI2ODg1ZGVhODA3ZjIzMmI5ZjNlYmVkMTQ2NTMxYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9M70SnXyHyhjeu1BAsgjXTzMQVM tDG6kl7bzYj9GLx7xfstPQK6DDUTgRtbKzArJslsUArW4J9eDR3x7UItS6rkFu4e pwlSuRQl+NluGdA+KzOSNXkqXxOMXzpKkQedFYXZ8Mpgid8p42ytT8xKz8SFzQQG I6V8e090zTa83SGvpxKNpa/VrCZwTk3NtVY4XrDQmh0DjYM7z0STOj5tD/oKPBTx YpcGIrESASmo81xEqgjjb2q6e12dwwcqbHs8LwjeoHkDQaHLRk5wO1Bd7uonmBxD f/lUZM2KhioHM6m2uwPm7PKSrMWxyd4ch829xvo9JNQ2cN56nD3q+Zs6uQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIEImWAmiF3qgH8jK58+vtFGUxqQMB8GA1UdIwQY MBaAFNESKlywZD9zbH7HlhgJolk4Zo8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgt MTE1MmY0MzkzMDIwLzEvZ1FpWllDYUlYZXFBZnlNcm56Ni0wVVpUR3BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgtMTE1MmY0MzkzMDIw LzEvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuftxAwQA uftzMA8EAgACMAkDBwUqDBlAAAAwDQYJKoZIhvcNAQELBQADggEBAEtLa0svOAms HVkzZSCZmUvi1f1CuU/e/K2xtw+Pce2+RvWffdilo6qEtmfQjbkGfkjpl5rXgFw1 3ckfop2MrGSunT8vWQ/XUEiG3BFC4N+M5+QQJy5kySg3b30+XTig4PNxUiJepI0b 2Am/kOdIIgSrv+7q2LKiKTM35+1nBPd3pxBOaOqLbI5OymCpwXbP301mCeV04N7s XY+I7hIVgCVNG1GQNzod769NY+SGDjBwdsW7rnQDxcYsiOlMcRqTGoTZYoRpLCs3 yVxDuhuKfr5jMcLUWN5LYYj2pQYDtJhvjGW2NIxg12lNAOlpt6ttRAh2U9zGzKXE b+vwTknp/1Q= -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:39 2025 by rpki-client