This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/TQZJDaTm6cQmDPuEOPxapZkCISs.roa File: TQZJDaTm6cQmDPuEOPxapZkCISs.roa (raw, json) Hash identifier: 71cxCfqZNZizAvgCO5BZPTvWQFbmobZzVgCMTpsT5bc= Subject key identifier: 4D:06:49:0D:A4:E6:E9:C4:26:0C:FB:84:38:FC:5A:A5:99:02:21:2B Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019A7E05C1AA3D7BAF78FD8D92BEB23652E8 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/TQZJDaTm6cQmDPuEOPxapZkCISs.roa Signing time: Thu 13 Nov 2025 16:21:37 +0000 ROA not before: Thu 13 Nov 2025 16:21:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60490 IP address blocks: 62.113.66.0/24 maxlen: 24 62.113.67.0/24 maxlen: 24 62.113.71.0/24 maxlen: 24 62.113.72.0/24 maxlen: 24 62.113.76.0/24 maxlen: 24 91.185.95.0/24 maxlen: 24 176.109.64.0/23 maxlen: 23 176.109.64.0/24 maxlen: 24 176.109.65.0/24 maxlen: 24 176.109.67.0/24 maxlen: 24 176.109.70.0/24 maxlen: 24 178.236.25.0/24 maxlen: 24 194.150.88.0/24 maxlen: 24 194.150.89.0/24 maxlen: 24 194.150.90.0/24 maxlen: 24 194.150.91.0/24 maxlen: 24 2a02:28:7::/48 maxlen: 48 2a02:2a:1000::/36 maxlen: 48 2a02:2a:1000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:05:c1:aa:3d:7b:af:78:fd:8d:92:be:b2:36:52:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Nov 13 16:21:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d06490da4e6e9c4260cfb8438fc5aa59902212b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:44:ed:55:17:eb:65:99:32:78:98:19:bf: 42:c7:71:a8:63:ba:aa:e1:80:65:8b:c7:09:cf:2f: 36:30:99:18:cf:70:f7:e5:a7:06:cc:85:45:a7:11: 8c:19:10:10:d6:70:43:03:5a:c4:86:63:c3:cd:a3: 16:8a:ba:ab:9f:5b:fa:3d:cb:25:4f:52:8e:af:b9: fa:2d:0b:c9:7d:68:80:8b:ff:31:d1:8a:28:12:e8: 1d:ac:27:65:ea:ce:d1:71:b9:67:91:6a:f9:3f:46: 96:db:e0:45:76:77:f1:40:59:49:c6:e9:bb:17:a0: f8:e9:8e:72:d8:7a:e9:4e:65:e6:77:fe:3d:99:10: 7d:26:bd:4b:59:a0:dd:a7:bd:ca:d5:9d:b4:93:ef: 92:13:4c:81:76:3e:78:e6:d3:99:a9:95:2e:35:7f: c6:e2:cb:45:06:50:05:f0:2f:53:68:15:01:51:b7: 93:23:78:60:85:25:1a:6a:35:2f:56:e7:a9:c5:9f: e1:4d:22:46:4a:ba:a4:2b:e5:40:94:2b:53:14:65: 0b:46:e4:cd:14:2f:c1:b0:fa:6d:89:ab:76:da:7d: 80:ce:79:d4:33:21:6d:32:f5:d6:91:b1:f8:07:70: b0:88:c7:00:5d:8f:1e:bc:2c:e6:7a:6b:59:a7:82: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:06:49:0D:A4:E6:E9:C4:26:0C:FB:84:38:FC:5A:A5:99:02:21:2B X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/TQZJDaTm6cQmDPuEOPxapZkCISs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.66.0/23 62.113.71.0-62.113.72.255 62.113.76.0/24 91.185.95.0/24 176.109.64.0/23 176.109.67.0/24 176.109.70.0/24 178.236.25.0/24 194.150.88.0/22 IPv6: 2a02:28:7::/48 2a02:2a:1000::/36 Signature Algorithm: sha256WithRSAEncryption 84:d8:b3:70:69:26:b6:64:7b:fa:2f:93:3a:7d:88:26:da:a5: f6:4d:4b:21:09:56:24:f0:ca:07:13:1e:e2:f0:93:fe:e8:5a: 48:8b:e0:04:28:e2:e6:33:84:17:16:04:4e:73:fb:80:3e:17: 12:46:88:7a:fc:02:aa:fc:de:2d:f6:cd:75:c4:2a:78:52:9d: 2b:95:db:e2:8f:9e:ea:de:15:3d:82:eb:11:a9:ab:5b:b2:85: de:77:28:3b:18:86:74:8a:32:cf:cf:12:40:0c:cd:fe:bf:dc: e2:f5:13:0c:2a:8a:7c:40:c2:97:f3:2b:81:13:51:f9:40:cd: fe:55:a8:ec:c2:6d:ee:53:d0:4f:5a:8b:c5:a4:46:3c:3d:f8: 10:b5:95:28:64:df:5d:d5:3a:3a:f9:cc:d6:bd:5b:c9:1f:5e: 09:02:0e:1e:a3:84:30:7e:80:a5:6a:55:4a:07:7e:1c:d9:29: e5:69:7e:5c:b1:3b:fa:e1:0c:bf:75:53:09:78:4e:e6:ef:a3: 55:26:78:5d:40:ec:db:5f:91:4e:63:09:93:83:9a:de:f2:4d: aa:97:b2:c4:18:93:35:66:20:bd:63:87:fc:bb:73:c1:81:f3: 51:60:04:17:78:ae:25:09:a3:2b:86:04:68:3d:44:76:74:94: 46:04:a7:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZp+BcGqPXuveP2Nkr6yNlLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjUxMTEzMTYyMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDA2NDkwZGE0ZTZlOWM0MjYwY2ZiODQzOGZjNWFhNTk5MDIyMTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps5E7VUX62WZMniYGb9Cx3GoY7qq 4YBli8cJzy82MJkYz3D35acGzIVFpxGMGRAQ1nBDA1rEhmPDzaMWirqrn1v6Pcsl T1KOr7n6LQvJfWiAi/8x0YooEugdrCdl6s7RcblnkWr5P0aW2+BFdnfxQFlJxum7 F6D46Y5y2HrpTmXmd/49mRB9Jr1LWaDdp73K1Z20k++SE0yBdj545tOZqZUuNX/G 4stFBlAF8C9TaBUBUbeTI3hghSUaajUvVuepxZ/hTSJGSrqkK+VAlCtTFGULRuTN FC/BsPptiat22n2AznnUMyFtMvXWkbH4B3CwiMcAXY8evCzmemtZp4LTtwIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFE0GSQ2k5unEJgz7hDj8WqWZAiErMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvVFFaSkRhVG02Y1FtRFB1RU9QeGFwWmtDSVNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBEBAIAATA+AwQBPnFCMAwD BAA+cUcDBAA+cUgDBAA+cUwDBABbuV8DBAGwbUADBACwbUMDBACwbUYDBACy7BkD BALCllgwFwQCAAIwEQMHACoCACgABwMGBCoCACoQMA0GCSqGSIb3DQEBCwUAA4IB AQCE2LNwaSa2ZHv6L5M6fYgm2qX2TUshCVYk8MoHEx7i8JP+6FpIi+AEKOLmM4QX FgROc/uAPhcSRoh6/AKq/N4t9s11xCp4Up0rldvij57q3hU9gusRqatbsoXedyg7 GIZ0ijLPzxJADM3+v9zi9RMMKop8QMKX8yuBE1H5QM3+Vajswm3uU9BPWovFpEY8 PfgQtZUoZN9d1To6+czWvVvJH14JAg4eo4QwfoClalVKB34c2SnlaX5csTv64Qy/ dVMJeE7m76NVJnhdQOzbX5FOYwmTg5re8k2ql7LEGJM1ZiC9Y4f8u3PBgfNRYAQX eK4lCaMrhgRoPUR2dJRGBKcH -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:39 2025 by rpki-client