This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/qcHe72FL2z-UmO_X8Rev1HToxnE.roa File: qcHe72FL2z-UmO_X8Rev1HToxnE.roa (raw, json) Hash identifier: 4Z4lNAeftyjgjC/YKeKvbCrg253Zv9FXA7xaqcqk/0s= Subject key identifier: A9:C1:DE:EF:61:4B:DB:3F:94:98:EF:D7:F1:17:AF:D4:74:E8:C6:71 Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019 Certificate serial: 019A73F91FC272F642709AFF8FCACC8AE1B8 Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/qcHe72FL2z-UmO_X8Rev1HToxnE.roa Signing time: Tue 11 Nov 2025 17:31:37 +0000 ROA not before: Tue 11 Nov 2025 17:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203909 IP address blocks: 193.228.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:f9:1f:c2:72:f6:42:70:9a:ff:8f:ca:cc:8a:e1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019 Validity Not Before: Nov 11 17:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a9c1deef614bdb3f9498efd7f117afd474e8c671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3e:5c:37:fc:bd:d6:a2:b3:32:3f:fa:f9:1c: 6a:d3:2a:f5:c5:f2:02:01:ac:47:a3:86:34:c4:00: c8:88:f0:f3:e3:62:c8:9c:80:ee:13:c0:b8:ae:9e: aa:c9:2e:48:c0:d2:e5:27:d6:3a:04:31:92:c7:0e: 6d:e8:f3:49:5f:56:0c:0f:2b:2a:b1:b7:ce:f4:2b: cb:fb:53:1b:38:3a:f6:38:cb:77:2a:0c:5c:bf:e3: b9:e5:2d:72:52:26:5e:2d:28:85:ee:59:23:d8:40: e2:7c:36:75:a8:7f:6f:1e:8b:66:53:e9:fc:b7:09: b2:8f:0b:44:f7:69:c5:06:7a:f8:4c:42:09:08:a8: da:f9:77:c8:ec:17:81:ef:f4:fb:de:c8:da:eb:07: 65:2a:d4:fd:ec:6c:0b:dd:0c:80:70:cf:a9:8f:8a: ed:01:ec:2a:cd:3e:9d:66:a2:f6:43:d0:14:d5:08: 5a:ba:67:41:91:b2:d7:7a:46:95:95:3e:36:bf:77: 14:1a:80:20:d4:c8:39:91:bf:45:15:eb:f1:33:52: fd:f7:3e:67:f9:58:ef:35:c1:9e:96:54:e2:a9:8f: 72:9e:57:b2:98:c2:e4:3e:84:ab:42:4e:87:30:3e: e6:6c:20:2b:65:77:f0:a4:26:b1:e1:bd:c5:76:10: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C1:DE:EF:61:4B:DB:3F:94:98:EF:D7:F1:17:AF:D4:74:E8:C6:71 X509v3 Authority Key Identifier: keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/qcHe72FL2z-UmO_X8Rev1HToxnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.143.0/24 Signature Algorithm: sha256WithRSAEncryption a9:f3:52:64:4b:3a:68:1d:0b:ac:89:ff:bf:ce:b3:32:04:cc: 94:a2:f8:0f:0b:dc:43:b3:21:57:93:18:d6:3f:44:e6:90:24: 75:2c:af:84:eb:b1:5a:cf:d5:23:db:47:5c:71:40:37:49:96: 15:bb:63:a1:82:98:19:33:45:31:df:df:07:2b:cb:4d:70:23: 8d:bf:53:6d:79:e3:14:0e:62:02:19:4a:f4:b5:4a:fc:9a:e5: 9d:7c:78:75:54:52:3d:39:37:5a:ed:32:be:4f:e5:4d:6e:93: de:e3:8e:5a:0b:55:35:f5:d8:47:91:46:d4:4b:e6:65:b7:db: 73:d2:fb:0d:be:5f:ae:ce:84:06:66:37:7f:bb:5b:e3:84:61: 60:91:cb:b6:6b:30:7e:e4:83:1e:2d:b9:19:2c:06:67:b0:3d: 53:43:d3:74:aa:93:12:22:71:c6:3c:ef:98:8f:32:55:ee:76: bd:6e:21:2a:52:f3:e1:37:78:20:bb:86:c6:2c:07:50:e4:74: 71:e2:9a:18:7b:e4:60:d8:8b:37:f8:bd:c3:67:bd:48:d4:cf: 70:cf:42:f5:05:37:62:a3:ce:47:32:68:b7:81:b7:da:4c:52: 0c:39:57:33:e3:f1:dd:f7:0b:64:36:d9:bb:ad:b4:74:1c:a5: f4:0a:33:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpz+R/CcvZCcJr/j8rMiuG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0 YzUwMTkwHhcNMjUxMTExMTczMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWMxZGVlZjYxNGJkYjNmOTQ5OGVmZDdmMTE3YWZkNDc0ZThjNjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j5cN/y91qKzMj/6+Rxq0yr1xfIC AaxHo4Y0xADIiPDz42LInIDuE8C4rp6qyS5IwNLlJ9Y6BDGSxw5t6PNJX1YMDysq sbfO9CvL+1MbODr2OMt3Kgxcv+O55S1yUiZeLSiF7lkj2EDifDZ1qH9vHotmU+n8 twmyjwtE92nFBnr4TEIJCKja+XfI7BeB7/T73sja6wdlKtT97GwL3QyAcM+pj4rt AewqzT6dZqL2Q9AU1QhaumdBkbLXekaVlT42v3cUGoAg1Mg5kb9FFevxM1L99z5n +VjvNcGellTiqY9ynleymMLkPoSrQk6HMD7mbCArZXfwpCax4b3FdhA5PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKnB3u9hS9s/lJjv1/EXr9R06MZxMB8GA1UdIwQY MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt NzViZDk0NmE3MzU1LzEvcWNIZTcyRkwyei1VbU9fWDhSZXYxSFRveG5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1 LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweSPMA0G CSqGSIb3DQEBCwUAA4IBAQCp81JkSzpoHQusif+/zrMyBMyUovgPC9xDsyFXkxjW P0TmkCR1LK+E67Faz9Uj20dccUA3SZYVu2OhgpgZM0Ux398HK8tNcCONv1NteeMU DmICGUr0tUr8muWdfHh1VFI9OTda7TK+T+VNbpPe445aC1U19dhHkUbUS+Zlt9tz 0vsNvl+uzoQGZjd/u1vjhGFgkcu2azB+5IMeLbkZLAZnsD1TQ9N0qpMSInHGPO+Y jzJV7na9biEqUvPhN3ggu4bGLAdQ5HRx4poYe+Rg2Is3+L3DZ71I1M9wz0L1BTdi o85HMmi3gbfaTFIMOVcz4/Hd9wtkNtm7rbR0HKX0CjMN -----END CERTIFICATE-----Generated at Sat Dec 6 18:23:12 2025 by rpki-client