This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/QPojn2lFmOTUjkuvYm4RnM-Y1Yk.roa File: QPojn2lFmOTUjkuvYm4RnM-Y1Yk.roa (raw, json) Hash identifier: NcB8YHOmb6iBxrDVM7Q7nmw/YpVtYSb5GRfh3q07PNI= Subject key identifier: 40:FA:23:9F:69:45:98:E4:D4:8E:4B:AF:62:6E:11:9C:CF:98:D5:89 Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c Certificate serial: 019AA1915B9AFCAFFE22C465E1371FDBC362 Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/QPojn2lFmOTUjkuvYm4RnM-Y1Yk.roa Signing time: Thu 20 Nov 2025 14:00:49 +0000 ROA not before: Thu 20 Nov 2025 14:00:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41887 IP address blocks: 185.152.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:91:5b:9a:fc:af:fe:22:c4:65:e1:37:1f:db:c3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d43689a7638ff737591ff3b251918862349695c Validity Not Before: Nov 20 14:00:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=40fa239f694598e4d48e4baf626e119ccf98d589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:05:89:fb:52:92:7d:9c:b8:4b:31:df:d5: e7:83:b3:6a:5c:04:e9:d6:26:14:09:00:62:09:2c: 31:77:d9:da:c7:03:30:c2:09:f5:a2:f7:ad:0b:44: ef:94:32:f7:87:8a:97:f6:df:eb:ea:e5:db:d5:d2: 53:04:ef:b8:0e:da:da:4f:45:6c:b6:e9:78:9c:35: af:a6:b4:b3:45:bf:06:e6:05:7c:bc:ad:00:61:be: 1e:63:d7:fb:3a:54:ac:b7:1e:39:9b:8c:42:3c:38: aa:74:3e:3e:7d:02:90:38:35:17:71:71:25:e6:9e: a1:ff:02:50:a2:f9:46:a0:c8:1b:5e:61:bd:8a:0f: 4b:c9:c0:35:f6:8d:13:62:9d:86:5c:43:ce:ee:da: b9:49:7e:8a:35:e1:4b:6f:cf:d2:07:51:e8:17:97: 7a:a3:9b:b3:bd:56:01:c0:29:c2:b4:89:ab:7f:c4: d4:17:b9:de:ed:8b:42:7f:a1:37:17:19:df:20:2f: 99:1a:c3:b5:7a:f6:08:e4:fc:1c:07:7a:c6:07:3b: 9e:f1:f7:12:74:a1:9f:2e:b0:a9:05:8a:e4:b1:4f: bd:60:52:3c:25:a3:56:00:cb:f8:98:28:fb:bc:fe: f5:33:27:8b:79:68:9d:e3:10:4d:c3:e2:c8:59:fc: d9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FA:23:9F:69:45:98:E4:D4:8E:4B:AF:62:6E:11:9C:CF:98:D5:89 X509v3 Authority Key Identifier: keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/QPojn2lFmOTUjkuvYm4RnM-Y1Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.215.0/24 Signature Algorithm: sha256WithRSAEncryption 93:34:b8:c2:81:c7:80:8b:68:c7:6d:43:fd:11:7d:75:5e:e0: 7b:15:16:d1:7a:17:ea:dc:ed:b8:00:cd:67:4a:f3:f4:e3:24: af:70:6a:c2:3f:3f:54:35:92:26:67:dd:36:74:12:b8:fe:cb: 9f:9b:0d:63:2e:38:84:dd:8d:64:49:82:c6:8f:87:c4:13:2e: e6:34:e9:54:b1:9a:88:84:aa:1c:db:94:62:c4:7a:09:04:57: 68:cf:97:14:27:37:aa:5b:11:3f:00:a8:1b:a6:5e:c4:6e:da: 3d:85:9b:8c:7a:7f:ba:64:c9:62:05:08:6d:42:22:39:c1:f2: da:40:21:1e:99:53:1c:0d:20:94:ac:91:33:2b:21:23:d8:cc: ac:02:e7:4e:0d:9f:78:d2:06:9f:cc:ed:60:9a:7c:55:0d:fe: 29:8b:b6:d9:b3:e3:30:9f:23:5b:15:14:42:52:8c:5c:56:a0: db:96:16:d3:23:ed:91:4b:c6:de:4e:ab:3d:5f:b8:91:03:bd: 3e:45:20:7d:e4:17:78:40:2f:93:9a:ce:71:b7:26:e3:b8:b8: 16:df:48:4d:51:10:15:f7:d6:5d:cb:df:85:2c:46:21:e6:57: 3e:7f:cd:7b:5b:ab:11:1c:f3:69:91:76:a3:43:01:5c:6a:ee: a0:ad:35:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqhkVua/K/+IsRl4Tcf28NiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDM2ODlhNzYzOGZmNzM3NTkxZmYzYjI1MTkxODg2MjM0 OTY5NWMwHhcNMjUxMTIwMTQwMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGZhMjM5ZjY5NDU5OGU0ZDQ4ZTRiYWY2MjZlMTE5Y2NmOThkNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC8FiftSkn2cuEsx39Xng7NqXATp 1iYUCQBiCSwxd9naxwMwwgn1ovetC0TvlDL3h4qX9t/r6uXb1dJTBO+4DtraT0Vs tul4nDWvprSzRb8G5gV8vK0AYb4eY9f7OlSstx45m4xCPDiqdD4+fQKQODUXcXEl 5p6h/wJQovlGoMgbXmG9ig9LycA19o0TYp2GXEPO7tq5SX6KNeFLb8/SB1HoF5d6 o5uzvVYBwCnCtImrf8TUF7ne7YtCf6E3FxnfIC+ZGsO1evYI5PwcB3rGBzue8fcS dKGfLrCpBYrksU+9YFI8JaNWAMv4mCj7vP71MyeLeWid4xBNw+LIWfzZJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFED6I59pRZjk1I5Lr2JuEZzPmNWJMB8GA1UdIwQY MBaAFC1DaJp2OP9zdZH/OyUZGIYjSWlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMt M2EzMDM0YTM5ZWE1LzEvUVBvam4ybEZtT1RVamt1dlltNFJuTS1ZMVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMtM2EzMDM0YTM5ZWE1 LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZjXMA0G CSqGSIb3DQEBCwUAA4IBAQCTNLjCgceAi2jHbUP9EX11XuB7FRbRehfq3O24AM1n SvP04ySvcGrCPz9UNZImZ902dBK4/sufmw1jLjiE3Y1kSYLGj4fEEy7mNOlUsZqI hKoc25RixHoJBFdoz5cUJzeqWxE/AKgbpl7Ebto9hZuMen+6ZMliBQhtQiI5wfLa QCEemVMcDSCUrJEzKyEj2MysAudODZ940gafzO1gmnxVDf4pi7bZs+MwnyNbFRRC UoxcVqDblhbTI+2RS8beTqs9X7iRA70+RSB95Bd4QC+Tms5xtybjuLgW30hNURAV 99Zdy9+FLEYh5lc+f817W6sRHPNpkXajQwFcau6grTWY -----END CERTIFICATE-----Generated at Sat Dec 6 21:14:42 2025 by rpki-client