This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/qDo63AkvTCIPp8RiOp5qIlq5Y4M.roa File: qDo63AkvTCIPp8RiOp5qIlq5Y4M.roa (raw, json) Hash identifier: Nsk89diCVFtaOwMnAnY4OTAll1v9oBCR74Du8pv6pc8= Subject key identifier: A8:3A:3A:DC:09:2F:4C:22:0F:A7:C4:62:3A:9E:6A:22:5A:B9:63:83 Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Certificate serial: 019AB4AACF212CF98D5E7E43DEE8FBB84374 Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/qDo63AkvTCIPp8RiOp5qIlq5Y4M.roa Signing time: Mon 24 Nov 2025 07:01:24 +0000 ROA not before: Mon 24 Nov 2025 07:01:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 193.8.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:aa:cf:21:2c:f9:8d:5e:7e:43:de:e8:fb:b8:43:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Validity Not Before: Nov 24 07:01:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a83a3adc092f4c220fa7c4623a9e6a225ab96383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:f8:86:82:3a:7a:96:14:94:e3:56:6d:58: e1:68:c9:39:e4:f3:63:71:7c:46:7a:2f:77:99:47: 68:d6:4c:47:ca:3e:73:ce:43:2c:a0:b5:cb:2a:43: 2f:1a:26:dc:54:b3:3a:0c:96:b2:49:fd:02:00:55: c2:8d:87:bf:b3:4a:df:ee:43:81:e7:96:46:df:00: e3:90:f7:30:7b:23:59:14:77:97:85:10:a0:98:bf: 4a:5e:ee:91:60:a0:08:6f:04:e6:2d:d3:bb:e1:63: cb:10:4c:7f:c9:bb:a4:4e:40:33:2c:84:54:10:7b: db:18:33:4c:df:2f:85:4a:f3:c7:1f:61:bb:a3:a5: e7:1c:54:9a:ab:aa:18:be:80:7b:fa:0c:1f:1b:c4: e2:07:38:e0:5e:e3:3f:0b:e3:71:1c:2f:f2:6b:e0: 12:40:96:3c:6d:95:dc:90:be:e9:85:9c:cb:eb:cb: c3:94:18:9a:b6:90:b0:24:cc:4d:e5:1a:e3:c4:16: f1:ef:77:ab:23:40:8d:40:8a:d9:89:50:3f:34:e9: c8:f7:b2:0a:a9:32:ac:72:2f:df:94:15:96:4e:f1: 4b:ed:b9:9f:c4:ee:1b:75:dd:bb:24:35:db:5c:13: 75:de:79:15:6f:0f:cf:46:3c:43:85:6d:77:44:03: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3A:3A:DC:09:2F:4C:22:0F:A7:C4:62:3A:9E:6A:22:5A:B9:63:83 X509v3 Authority Key Identifier: keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/qDo63AkvTCIPp8RiOp5qIlq5Y4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.236.0/23 Signature Algorithm: sha256WithRSAEncryption 80:67:56:22:72:3c:86:f1:c5:31:1e:c5:f2:18:b9:3e:87:9d: 14:63:c7:87:8d:1d:68:de:fc:4f:37:79:5b:d0:20:3b:69:08: 35:62:f5:ba:aa:5a:6f:d3:af:ee:2c:b6:05:f6:55:96:5e:17: 19:d7:f1:7c:90:37:39:03:5a:c2:e8:98:dc:27:06:db:62:76: 72:47:4c:f3:05:2d:5d:81:4f:99:a8:04:77:1c:1e:69:27:81: 7a:b1:0e:aa:98:b9:c0:09:67:fa:89:88:16:fd:2e:ea:d3:fe: f8:c4:e0:f4:8a:20:4a:88:a0:88:54:45:b6:bb:52:7e:40:43: 16:1b:94:07:01:31:76:9a:18:e9:69:8c:33:f0:71:ad:1d:cd: c0:24:f4:18:ba:d1:22:7f:1e:91:59:cb:aa:78:bf:af:a1:da: 33:be:3b:35:7e:36:c7:18:1c:38:d5:c1:49:a2:38:36:81:e6: 74:e5:df:89:88:89:52:08:57:81:c8:fe:4f:73:74:5d:5f:80: bc:bd:ad:45:8c:f5:6d:fe:9a:b4:70:a3:67:40:dc:20:c5:f2: e8:eb:53:b1:db:a9:91:cf:04:b1:75:6e:1e:e3:1b:1b:54:f3: 97:ae:3e:ca:7d:32:90:5d:bb:a2:62:89:fb:b7:60:b9:6b:00: 23:b1:01:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq0qs8hLPmNXn5D3uj7uEN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2 ZjYyZDYwHhcNMjUxMTI0MDcwMTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODNhM2FkYzA5MmY0YzIyMGZhN2M0NjIzYTllNmEyMjVhYjk2MzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUj4hoI6epYUlONWbVjhaMk55PNj cXxGei93mUdo1kxHyj5zzkMsoLXLKkMvGibcVLM6DJaySf0CAFXCjYe/s0rf7kOB 55ZG3wDjkPcweyNZFHeXhRCgmL9KXu6RYKAIbwTmLdO74WPLEEx/ybukTkAzLIRU EHvbGDNM3y+FSvPHH2G7o6XnHFSaq6oYvoB7+gwfG8TiBzjgXuM/C+NxHC/ya+AS QJY8bZXckL7phZzL68vDlBiatpCwJMxN5RrjxBbx73erI0CNQIrZiVA/NOnI97IK qTKsci/flBWWTvFL7bmfxO4bdd27JDXbXBN13nkVbw/PRjxDhW13RAO4UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKg6OtwJL0wiD6fEYjqeaiJauWODMB8GA1UdIwQY MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct NDAyMjM4NjM4ZWEzLzEvcURvNjNBa3ZUQ0lQcDhSaU9wNXFJbHE1WTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwQjsMA0G CSqGSIb3DQEBCwUAA4IBAQCAZ1YicjyG8cUxHsXyGLk+h50UY8eHjR1o3vxPN3lb 0CA7aQg1YvW6qlpv06/uLLYF9lWWXhcZ1/F8kDc5A1rC6JjcJwbbYnZyR0zzBS1d gU+ZqAR3HB5pJ4F6sQ6qmLnACWf6iYgW/S7q0/74xOD0iiBKiKCIVEW2u1J+QEMW G5QHATF2mhjpaYwz8HGtHc3AJPQYutEifx6RWcuqeL+vodozvjs1fjbHGBw41cFJ ojg2geZ05d+JiIlSCFeByP5Pc3RdX4C8va1FjPVt/pq0cKNnQNwgxfLo61Ox26mR zwSxdW4e4xsbVPOXrj7KfTKQXbuiYon7t2C5awAjsQEm -----END CERTIFICATE-----Generated at Sun Dec 7 03:34:07 2025 by rpki-client