This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/Q_vlvSETpqh_qzFX24IiMAcSpo4.roa File: Q_vlvSETpqh_qzFX24IiMAcSpo4.roa (raw, json) Hash identifier: 58OctwKlJ52YMEAamS+8+qLb551rY2Em9kksAkpx+s4= Subject key identifier: 43:FB:E5:BD:21:13:A6:A8:7F:AB:31:57:DB:82:22:30:07:12:A6:8E Certificate issuer: /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Certificate serial: 019AE3D576970B6D210B2FDF2DC8BAF26804 Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/Q_vlvSETpqh_qzFX24IiMAcSpo4.roa Signing time: Wed 03 Dec 2025 10:50:08 +0000 ROA not before: Wed 03 Dec 2025 10:50:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 81.172.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:d5:76:97:0b:6d:21:0b:2f:df:2d:c8:ba:f2:68:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Validity Not Before: Dec 3 10:50:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=43fbe5bd2113a6a87fab3157db8222300712a68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:40:10:37:11:b3:82:dd:66:8a:ac:f4:f4: 16:32:ca:ca:27:64:14:6d:bc:9e:8c:2d:b8:70:69: 4a:bb:42:64:a1:da:f1:73:57:36:71:73:eb:22:fd: 54:49:f1:62:6a:b1:16:34:ac:6f:7a:4e:f7:e8:01: 3e:b9:1c:02:4e:fd:8a:d3:48:1e:12:11:a6:9f:6d: de:d1:c3:e3:cf:c6:60:65:89:5a:35:34:ab:49:49: 3c:97:0d:04:c1:8d:1c:f3:a1:76:bf:20:3d:eb:27: 2b:fb:90:22:5a:3a:8f:40:38:59:10:9c:a0:00:00: a8:ac:81:06:70:d9:0b:93:72:42:51:12:34:16:ea: a5:7c:dc:ed:a4:19:4c:fc:53:4d:b2:7a:aa:e4:27: f8:c2:cc:29:86:93:ab:a6:99:d1:8b:66:82:2e:53: bb:63:af:b6:21:82:81:2f:ee:19:5a:33:f6:73:83: b4:2a:c1:7d:a2:3e:35:1a:69:00:1d:ef:17:ef:cf: a6:6c:74:29:cb:7c:87:39:86:19:78:af:a3:d5:8b: 47:68:6f:c9:70:6f:56:80:ea:51:56:d1:7a:d6:77: e3:6e:63:3e:e8:07:5b:7f:ae:38:f1:98:d5:74:2c: 81:35:03:45:be:4a:c3:92:bf:79:7c:a4:ab:60:bd: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FB:E5:BD:21:13:A6:A8:7F:AB:31:57:DB:82:22:30:07:12:A6:8E X509v3 Authority Key Identifier: keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/Q_vlvSETpqh_qzFX24IiMAcSpo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.172.99.0/24 Signature Algorithm: sha256WithRSAEncryption 92:08:51:52:3e:86:d9:04:05:fb:ca:7e:26:22:94:05:62:bf: 4c:a6:51:ab:8a:5c:64:2e:16:1e:6f:f3:d3:dc:67:db:6a:cc: 1d:ef:d1:64:f7:b4:4b:65:d5:d1:08:0c:0a:4b:1a:c6:03:1b: 67:96:a9:66:2d:45:86:72:c2:32:71:fa:d1:d4:63:1e:7d:e9: 6e:68:1b:56:06:e3:0e:77:5a:76:4b:01:c2:ad:a8:cf:bd:04: 39:f6:f2:0d:0b:4a:45:d0:85:29:5f:fc:d6:8d:3e:7a:06:9a: cb:c2:84:06:18:a3:33:cb:b6:18:c7:d1:a4:04:87:98:40:75: 1e:5a:1c:d6:d4:4a:b1:0f:fe:ff:8b:2d:c7:52:bf:1c:81:ea: 64:c7:eb:84:7a:3d:3a:12:b0:bc:18:99:e9:88:95:59:0c:82: 52:45:f6:b8:ce:d9:9f:6a:7a:04:ee:d3:a9:27:fe:36:a1:dc: 37:d8:54:f8:a0:4e:84:39:07:6e:41:0f:f1:c1:39:31:ce:84: b8:69:db:c1:50:25:c8:2f:b4:02:6a:e2:bb:8e:2d:c4:11:56: 5d:74:2b:6b:e1:57:73:a4:0b:0b:10:9a:d2:7c:75:cd:cc:93: 35:f5:9d:b0:e8:9f:7f:ca:0c:5a:42:2f:89:5a:a0:ae:d7:38: 71:5d:15:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrj1XaXC20hCy/fLci68mgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTUzNTk3OGJlNmIwYWQ3YTljYjcwZWIwNTIyZjhjOTUw OTgyYTkwHhcNMjUxMjAzMTA1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2ZiZTViZDIxMTNhNmE4N2ZhYjMxNTdkYjgyMjIzMDA3MTJhNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz5AEDcRs4LdZoqs9PQWMsrKJ2QU bbyejC24cGlKu0Jkodrxc1c2cXPrIv1USfFiarEWNKxvek736AE+uRwCTv2K00ge EhGmn23e0cPjz8ZgZYlaNTSrSUk8lw0EwY0c86F2vyA96ycr+5AiWjqPQDhZEJyg AACorIEGcNkLk3JCURI0FuqlfNztpBlM/FNNsnqq5Cf4wswphpOrppnRi2aCLlO7 Y6+2IYKBL+4ZWjP2c4O0KsF9oj41GmkAHe8X78+mbHQpy3yHOYYZeK+j1YtHaG/J cG9WgOpRVtF61nfjbmM+6Adbf6448ZjVdCyBNQNFvkrDkr95fKSrYL3IzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEP75b0hE6aof6sxV9uCIjAHEqaOMB8GA1UdIwQY MBaAFO8VNZeL5rCtepy3DrBSL4yVCYKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgt MTVjNjVmZjI1OGU4LzEvUV92bHZTRVRwcWhfcXpGWDI0SWlNQWNTcG80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgtMTVjNjVmZjI1OGU4 LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUaxjMA0G CSqGSIb3DQEBCwUAA4IBAQCSCFFSPobZBAX7yn4mIpQFYr9MplGrilxkLhYeb/PT 3Gfbaswd79Fk97RLZdXRCAwKSxrGAxtnlqlmLUWGcsIycfrR1GMefeluaBtWBuMO d1p2SwHCrajPvQQ59vINC0pF0IUpX/zWjT56BprLwoQGGKMzy7YYx9GkBIeYQHUe WhzW1EqxD/7/iy3HUr8cgepkx+uEej06ErC8GJnpiJVZDIJSRfa4ztmfanoE7tOp J/42odw32FT4oE6EOQduQQ/xwTkxzoS4advBUCXIL7QCauK7ji3EEVZddCtr4Vdz pAsLEJrSfHXNzJM19Z2w6J9/ygxaQi+JWqCu1zhxXRVK -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:00 2025 by rpki-client