This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/QQyuygKlW1lheMUCgRfNgpAjWnY.roa File: QQyuygKlW1lheMUCgRfNgpAjWnY.roa (raw, json) Hash identifier: sGKiznK/9zahMlRBx+pheUHNlRkFSMU1Tbssjd9hPaU= Subject key identifier: 41:0C:AE:CA:02:A5:5B:59:61:78:C5:02:81:17:CD:82:90:23:5A:76 Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629 Certificate serial: 019AB5B42DEECA02E82FCCFA33D9D5B05CD5 Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/QQyuygKlW1lheMUCgRfNgpAjWnY.roa Signing time: Mon 24 Nov 2025 11:51:15 +0000 ROA not before: Mon 24 Nov 2025 11:51:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44612 IP address blocks: 45.151.86.0/23 maxlen: 24 185.214.24.0/22 maxlen: 24 185.214.24.0/24 maxlen: 24 185.214.25.0/24 maxlen: 24 185.214.26.0/24 maxlen: 24 185.214.27.0/24 maxlen: 24 2a0b:9440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:b4:2d:ee:ca:02:e8:2f:cc:fa:33:d9:d5:b0:5c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629 Validity Not Before: Nov 24 11:51:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=410caeca02a55b596178c5028117cd8290235a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:ac:2a:49:28:74:ba:70:fe:2e:4d:b7:fe: 7e:35:62:04:b8:bc:61:b4:bf:24:b2:26:2c:da:88: a6:b9:1f:8c:2e:95:93:00:e3:3e:02:34:80:67:ae: 08:d7:da:1f:89:eb:7d:b1:62:00:df:28:28:81:9b: d4:5b:3b:24:9b:4a:11:4d:e7:0c:af:30:12:a6:fb: d4:e6:fc:11:4e:08:4f:68:c9:2b:fc:44:96:67:93: c0:d2:40:bc:78:0f:53:bf:45:ce:5d:f5:18:66:10: d3:ad:f0:c6:e6:1d:e5:0e:9d:6f:37:44:66:c1:aa: 2e:f6:3e:34:8f:7e:34:73:5e:a0:12:1c:48:44:5e: b5:ea:ac:0c:ae:01:06:76:81:c7:f7:b2:a1:7f:46: 85:1c:a9:47:6e:4d:50:3a:f7:2b:0e:95:b1:5d:d0: 59:c1:6e:25:32:17:70:2b:36:2c:75:88:61:c3:d5: 93:d0:b6:24:8f:d0:50:7b:06:b3:91:6d:1d:b5:0b: a3:0b:fa:77:3d:04:7d:bb:8f:a0:ca:c8:9b:58:32: 40:1e:3b:7e:66:ee:db:4d:d5:c8:35:2b:9c:c9:56: bd:76:11:bb:a9:68:e5:15:43:3e:78:4a:fa:c1:84: 04:3d:36:f6:df:45:1b:e4:72:dd:0c:ee:95:34:2a: 32:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0C:AE:CA:02:A5:5B:59:61:78:C5:02:81:17:CD:82:90:23:5A:76 X509v3 Authority Key Identifier: keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/QQyuygKlW1lheMUCgRfNgpAjWnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.86.0/23 185.214.24.0/22 IPv6: 2a0b:9440::/29 Signature Algorithm: sha256WithRSAEncryption 43:e4:5c:a6:e9:91:87:5d:34:ff:20:66:1b:71:84:a1:46:3c: 8d:c6:b0:01:47:20:84:94:d4:85:84:2d:bb:04:50:df:ec:92: 30:24:57:2d:bb:27:7c:38:f4:1e:de:fe:be:40:2b:4b:bf:3b: ef:a7:5e:49:08:69:07:21:91:db:87:8b:c4:90:ce:a4:a4:b7: ac:ea:bb:5c:54:d7:4f:b5:fc:9f:cf:c7:6e:17:52:19:57:3e: 27:c2:f3:eb:9a:73:2b:ec:7f:e7:f4:8a:34:13:43:ef:ae:be: a7:62:fc:41:24:f0:d3:ba:4b:4f:8b:dd:cf:c9:79:0d:53:1d: 5a:5e:31:e1:be:ac:b1:dd:eb:cf:b3:17:65:c6:f6:4d:60:49: 07:40:66:f6:82:3c:ae:1a:02:f0:81:dc:34:93:fd:eb:16:6f: 1b:8c:8c:15:dc:10:f0:e6:78:3e:f8:b2:1c:38:69:dc:04:0e: 52:d5:25:58:1b:b3:6e:b6:e1:e9:04:0a:af:e5:20:b4:65:16: 04:bd:41:21:6a:f6:56:16:ea:5f:d1:86:e5:ac:79:de:a0:d2: 3b:f3:6d:a1:9d:a1:2f:f2:3f:1b:38:e0:09:39:fc:53:1b:91: b6:c5:c5:f5:0b:55:9d:12:3f:ca:cf:16:14:04:cc:1a:94:d6: 5d:b6:dd:76 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZq1tC3uygLoL8z6M9nVsFzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl N2Y2MjkwHhcNMjUxMTI0MTE1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTBjYWVjYTAyYTU1YjU5NjE3OGM1MDI4MTE3Y2Q4MjkwMjM1YTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjysKkkodLpw/i5Nt/5+NWIEuLxh tL8ksiYs2oimuR+MLpWTAOM+AjSAZ64I19ofiet9sWIA3ygogZvUWzskm0oRTecM rzASpvvU5vwRTghPaMkr/ESWZ5PA0kC8eA9Tv0XOXfUYZhDTrfDG5h3lDp1vN0Rm waou9j40j340c16gEhxIRF616qwMrgEGdoHH97Khf0aFHKlHbk1QOvcrDpWxXdBZ wW4lMhdwKzYsdYhhw9WT0LYkj9BQewazkW0dtQujC/p3PQR9u4+gysibWDJAHjt+ Zu7bTdXINSucyVa9dhG7qWjlFUM+eEr6wYQEPTb230Ub5HLdDO6VNCoyJQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEEMrsoCpVtZYXjFAoEXzYKQI1p2MB8GA1UdIwQY MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt MWJmZDEwYTg4NDVhLzEvUVF5dXlnS2xXMWxoZU1VQ2dSZk5ncEFqV25ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLZdWAwQC udYYMA0EAgACMAcDBQMqC5RAMA0GCSqGSIb3DQEBCwUAA4IBAQBD5Fym6ZGHXTT/ IGYbcYShRjyNxrABRyCElNSFhC27BFDf7JIwJFctuyd8OPQe3v6+QCtLvzvvp15J CGkHIZHbh4vEkM6kpLes6rtcVNdPtfyfz8duF1IZVz4nwvPrmnMr7H/n9Io0E0Pv rr6nYvxBJPDTuktPi93PyXkNUx1aXjHhvqyx3evPsxdlxvZNYEkHQGb2gjyuGgLw gdw0k/3rFm8bjIwV3BDw5ng++LIcOGncBA5S1SVYG7NutuHpBAqv5SC0ZRYEvUEh avZWFupf0YblrHneoNI7822hnaEv8j8bOOAJOfxTG5G2xcX1C1WdEj/KzxYUBMwa lNZdtt12 -----END CERTIFICATE-----Generated at Sat Dec 6 20:44:17 2025 by rpki-client