This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/qeNFeM9Dqgcz2nh_idpetNCJurE.roa File: qeNFeM9Dqgcz2nh_idpetNCJurE.roa (raw, json) Hash identifier: NrX7eodgnt6imSwfbL3iQbyuAebVy0fGhfCD+iBitDM= Subject key identifier: A9:E3:45:78:CF:43:AA:07:33:DA:78:7F:89:DA:5E:B4:D0:89:BA:B1 Certificate issuer: /CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2 Certificate serial: 019ABAACC24458DDE0D9D9CE14CF35B18400 Authority key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/qeNFeM9Dqgcz2nh_idpetNCJurE.roa Signing time: Tue 25 Nov 2025 11:01:15 +0000 ROA not before: Tue 25 Nov 2025 11:01:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60052 IP address blocks: 91.206.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:ac:c2:44:58:dd:e0:d9:d9:ce:14:cf:35:b1:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2 Validity Not Before: Nov 25 11:01:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a9e34578cf43aa0733da787f89da5eb4d089bab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:48:e3:09:79:0f:6a:bb:79:f1:17:a1:e1: 6c:27:49:8e:6d:06:45:43:02:db:a1:5c:4c:88:a7: 17:8f:67:0f:b9:4e:a3:f7:01:e3:30:ab:9e:35:ae: ae:0f:24:6f:63:b6:76:ce:e2:7d:be:f6:16:da:d9: 0c:a1:6c:3e:88:f3:6e:fb:40:33:c8:64:f5:e9:09: 90:98:b0:36:55:56:5b:8f:75:f9:94:ce:a1:ce:6d: a5:e9:a3:80:b8:1a:1f:15:7a:ad:ab:d8:33:9a:72: 21:f3:79:b4:32:55:0c:21:a2:e1:c7:b6:cb:f9:67: f6:99:cd:26:3c:70:7e:42:8e:34:d9:3b:7c:62:aa: 91:df:7e:e7:07:51:da:af:1b:5e:f1:0d:b4:03:d5: 9f:27:89:ae:eb:1d:cd:3e:e1:c7:62:4a:28:1e:82: ed:1b:1b:46:04:a6:1e:07:c2:b6:ff:56:94:b7:28: a9:a2:e2:c3:ad:1c:19:d1:9d:0d:a4:af:32:2c:84: 18:0f:61:61:a2:49:35:ff:f0:ca:6f:1b:fd:3f:6b: b3:39:7b:32:8c:eb:41:3e:6e:61:78:01:a8:02:89: 9f:a5:a5:05:0d:97:22:16:84:ae:6e:d6:47:93:f7: 52:ba:08:bb:7e:20:1c:10:da:08:d8:d7:d0:2d:de: aa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E3:45:78:CF:43:AA:07:33:DA:78:7F:89:DA:5E:B4:D0:89:BA:B1 X509v3 Authority Key Identifier: keyid:2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/qeNFeM9Dqgcz2nh_idpetNCJurE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.35.0/24 Signature Algorithm: sha256WithRSAEncryption 06:72:56:05:ba:8a:6f:b8:89:27:be:7c:e4:38:4e:a5:57:0b: 7c:70:c0:00:1d:a5:5f:81:8b:6e:a4:00:05:83:40:65:e8:74: 9b:bc:50:10:47:86:71:b8:57:89:3a:0a:97:c0:6a:54:f7:91: 1e:44:ec:60:63:96:e4:10:47:bb:38:c7:8c:42:61:24:96:d7: 66:82:70:32:b1:0c:f4:e7:39:82:2d:71:60:7e:f5:04:46:d7: 24:cf:9a:90:16:a1:ce:c9:35:9b:fd:d2:2b:e5:c5:e6:1d:75: 17:be:fd:f3:c6:17:c7:2b:9a:55:e9:4f:3c:29:93:c9:39:5b: fa:d3:86:fc:c2:a5:bd:ab:4e:f2:48:fb:9c:0a:87:fa:47:6d: dc:78:39:43:30:aa:57:4f:53:8c:9d:ea:c0:fc:91:c3:77:d4: a5:f7:91:8f:6d:64:ad:3f:db:0e:a8:8d:22:93:ed:f2:ba:ce: 63:e5:70:1a:11:bb:d0:5a:6b:f2:5d:fc:1e:25:af:32:fe:0d: f7:32:6f:47:de:08:80:64:52:b5:2e:9c:92:ef:aa:95:4f:f3: 8b:31:c0:bc:9f:0d:c2:2e:13:f1:6e:06:fd:6c:f5:b9:86:dc: f8:ea:20:71:d8:26:e6:72:1a:12:da:67:e6:6c:cc:4e:3f:e2: 79:72:11:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq6rMJEWN3g2dnOFM81sYQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNTk3MjY4YTU3NTM0ZjhjZjFiNjNiNzk0ZWVmMGQ3N2M3 YjQzYTIwHhcNMjUxMTI1MTEwMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWUzNDU3OGNmNDNhYTA3MzNkYTc4N2Y4OWRhNWViNGQwODliYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F5I4wl5D2q7efEXoeFsJ0mObQZF QwLboVxMiKcXj2cPuU6j9wHjMKueNa6uDyRvY7Z2zuJ9vvYW2tkMoWw+iPNu+0Az yGT16QmQmLA2VVZbj3X5lM6hzm2l6aOAuBofFXqtq9gzmnIh83m0MlUMIaLhx7bL +Wf2mc0mPHB+Qo402Tt8YqqR337nB1Harxte8Q20A9WfJ4mu6x3NPuHHYkooHoLt GxtGBKYeB8K2/1aUtyipouLDrRwZ0Z0NpK8yLIQYD2Fhokk1//DKbxv9P2uzOXsy jOtBPm5heAGoAomfpaUFDZciFoSubtZHk/dSugi7fiAcENoI2NfQLd6q0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKnjRXjPQ6oHM9p4f4naXrTQibqxMB8GA1UdIwQY MBaAFC1ZcmildTT4zxtjt5Tu8Nd8e0OiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZseWFLVjFOUGpQRzJPM2xPN3cxM3g3UTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83MWI0MjgtY2U4Mi00ZTkxLWJhMDkt NGUwNDgxZGM3ZDFjLzEvcWVORmVNOURxZ2N6Mm5oX2lkcGV0TkNKdXJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83MWI0MjgtY2U4Mi00ZTkxLWJhMDktNGUwNDgxZGM3ZDFj LzEvTFZseWFLVjFOUGpQRzJPM2xPN3cxM3g3UTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW84jMA0G CSqGSIb3DQEBCwUAA4IBAQAGclYFuopvuIknvnzkOE6lVwt8cMAAHaVfgYtupAAF g0Bl6HSbvFAQR4ZxuFeJOgqXwGpU95EeROxgY5bkEEe7OMeMQmEkltdmgnAysQz0 5zmCLXFgfvUERtckz5qQFqHOyTWb/dIr5cXmHXUXvv3zxhfHK5pV6U88KZPJOVv6 04b8wqW9q07ySPucCof6R23ceDlDMKpXT1OMnerA/JHDd9Sl95GPbWStP9sOqI0i k+3yus5j5XAaEbvQWmvyXfweJa8y/g33Mm9H3giAZFK1LpyS76qVT/OLMcC8nw3C LhPxbgb9bPW5htz46iBx2CbmchoS2mfmbMxOP+J5chFY -----END CERTIFICATE-----Generated at Sat Dec 6 20:32:15 2025 by rpki-client