This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/QRj4PWYScU1R2oLbuuIQwTe2NBg.roa File: QRj4PWYScU1R2oLbuuIQwTe2NBg.roa (raw, json) Hash identifier: 7JJ/VXVC+aWi+k1so9h5DMX0fa9bswKhyK5iTp1vw+E= Subject key identifier: 41:18:F8:3D:66:12:71:4D:51:DA:82:DB:BA:E2:10:C1:37:B6:34:18 Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 01957EDFD2C7DEF4F3595B8DFE1A4A496CE8 Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/QRj4PWYScU1R2oLbuuIQwTe2NBg.roa Signing time: Mon 10 Mar 2025 07:05:52 +0000 ROA not before: Mon 10 Mar 2025 07:05:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212993 IP address blocks: 2001:7fc:5::/48 maxlen: 48 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:7e:df:d2:c7:de:f4:f3:59:5b:8d:fe:1a:4a:49:6c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Mar 10 07:05:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4118f83d6612714d51da82dbbae210c137b63418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:a2:75:f4:6e:79:1a:fb:92:61:8b:f7:de: 87:d4:e7:9d:bc:79:e5:14:13:17:b9:ba:cc:90:74: b7:e6:22:4e:db:59:ee:d8:22:8b:6b:aa:9a:62:44: 44:d2:56:fd:2a:ff:9d:25:ff:19:91:24:28:1d:c6: 8d:c0:9a:d0:3b:69:10:b6:63:b6:4e:28:72:e5:11: 0f:23:e0:95:66:eb:d6:71:67:21:e6:17:ef:36:dd: 07:bb:2b:5d:f4:0a:cc:d8:bc:ce:da:9c:2e:02:a5: b3:66:c8:74:71:98:46:ff:b2:46:69:76:26:ce:96: 5d:2b:8d:9a:c0:09:49:85:26:c3:5e:d1:21:df:cf: 59:9a:26:9c:3b:9f:b6:00:6f:43:66:fd:be:33:c9: 81:9a:c0:45:92:54:47:b6:55:22:35:e1:db:b1:bc: 83:c4:34:d5:cb:0b:23:1c:f7:f1:ec:08:ec:83:84: db:8d:7a:45:4b:45:73:24:44:d9:2e:07:3c:a2:7e: f5:f7:84:45:2a:cb:f7:53:34:52:24:24:3b:1f:80: 8b:00:73:9c:9e:1d:85:d6:ab:5f:2f:2d:5a:26:6a: 72:af:8d:fa:ab:fc:38:bc:16:56:4f:b4:cf:19:47: 12:61:b7:81:84:de:61:5f:b0:a8:01:9a:19:bd:6c: 9b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:18:F8:3D:66:12:71:4D:51:DA:82:DB:BA:E2:10:C1:37:B6:34:18 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/QRj4PWYScU1R2oLbuuIQwTe2NBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:7fc:5::/48 Signature Algorithm: sha256WithRSAEncryption 77:7f:06:fa:6a:0b:20:13:18:5a:b2:8b:e8:70:5c:b0:70:11: 4b:d2:99:84:95:c8:72:1e:4e:c0:9a:d2:8b:dc:b9:73:76:36: a4:35:f0:73:cc:9c:08:b3:f0:1f:86:bb:4b:16:22:fa:7b:bc: 2c:66:cc:ea:39:44:37:06:d5:b1:96:df:d3:56:1c:af:48:f3: a6:34:77:58:f2:35:6e:bf:d1:fc:60:30:48:9f:3f:63:a3:f1: f6:50:01:cd:a0:ad:8a:1c:b3:de:22:74:10:52:fd:1c:fa:46: 82:0b:43:c4:8e:fe:ed:97:8d:d4:b4:1c:ad:ef:fa:2d:c1:a8: 94:7e:d9:49:e4:1c:9b:7c:df:bb:45:03:fb:b9:2a:fd:27:3c: 4a:e8:ae:4a:bc:d6:77:68:1c:4f:5a:d2:64:d1:99:04:a7:4e: 5c:4e:96:f8:9e:6b:29:39:c7:72:6c:38:c5:28:05:1a:92:1d: 17:91:10:a4:2d:e4:80:12:59:d5:5a:dd:09:af:df:74:c5:80: 5f:aa:1e:4a:9e:8a:6d:55:c2:92:de:14:f1:c4:3b:72:83:08: 51:3e:f5:55:67:b4:e3:db:19:94:f3:87:b5:67:aa:51:35:21: be:16:30:23:ad:b2:b4:ad:b9:8a:4d:f4:78:27:46:1a:d4:a5: 2d:db:9a:93 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZV+39LH3vTzWVuN/hpKSWzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjUwMzEwMDcwNTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTE4ZjgzZDY2MTI3MTRkNTFkYTgyZGJiYWUyMTBjMTM3YjYzNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHuidfRueRr7kmGL996H1OedvHnl FBMXubrMkHS35iJO21nu2CKLa6qaYkRE0lb9Kv+dJf8ZkSQoHcaNwJrQO2kQtmO2 Tihy5REPI+CVZuvWcWch5hfvNt0Huytd9ArM2LzO2pwuAqWzZsh0cZhG/7JGaXYm zpZdK42awAlJhSbDXtEh389ZmiacO5+2AG9DZv2+M8mBmsBFklRHtlUiNeHbsbyD xDTVywsjHPfx7Ajsg4TbjXpFS0VzJETZLgc8on7194RFKsv3UzRSJCQ7H4CLAHOc nh2F1qtfLy1aJmpyr436q/w4vBZWT7TPGUcSYbeBhN5hX7CoAZoZvWybcwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEEY+D1mEnFNUdqC27riEME3tjQYMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEvUVJqNFBXWVNjVTFSMm9MYnV1SVF3VGUyTkJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEH/AAF MA0GCSqGSIb3DQEBCwUAA4IBAQB3fwb6agsgExhasovocFywcBFL0pmElchyHk7A mtKL3LlzdjakNfBzzJwIs/AfhrtLFiL6e7wsZszqOUQ3BtWxlt/TVhyvSPOmNHdY 8jVuv9H8YDBInz9jo/H2UAHNoK2KHLPeInQQUv0c+kaCC0PEjv7tl43UtByt7/ot waiUftlJ5BybfN+7RQP7uSr9JzxK6K5KvNZ3aBxPWtJk0ZkEp05cTpb4nmspOcdy bDjFKAUakh0XkRCkLeSAElnVWt0Jr990xYBfqh5KnoptVcKS3hTxxDtygwhRPvVV Z7Tj2xmU84e1Z6pRNSG+FjAjrbK0rbmKTfR4J0Ya1KUt25qT -----END CERTIFICATE-----Generated at Sat Dec 20 20:31:45 2025 by rpki-client