This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/QfNuRUcCBKSF0-llqlDeTnSTdBw.roa File: QfNuRUcCBKSF0-llqlDeTnSTdBw.roa (raw, json) Hash identifier: cT+qPcXBj4mhMwi4f87rXl9hFtMvmkw8RVAHgC21LE8= Subject key identifier: 41:F3:6E:45:47:02:04:A4:85:D3:E9:65:AA:50:DE:4E:74:93:74:1C Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019A9D1C6F13567E94F2308B50822711EBB1 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/QfNuRUcCBKSF0-llqlDeTnSTdBw.roa Signing time: Wed 19 Nov 2025 17:14:37 +0000 ROA not before: Wed 19 Nov 2025 17:14:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211748 IP address blocks: 94.26.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:1c:6f:13:56:7e:94:f2:30:8b:50:82:27:11:eb:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Nov 19 17:14:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=41f36e45470204a485d3e965aa50de4e7493741c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:58:b4:10:15:68:97:a7:4e:61:6c:93:f5:ca: ed:3b:f9:80:1b:59:72:db:f9:9a:f6:10:d9:b9:66: 93:d8:7b:94:2a:0e:35:e6:63:ec:01:16:b8:c9:66: 9f:9e:32:8b:5b:c2:e8:a5:1b:af:7e:46:ee:86:9c: a1:e7:df:34:e1:13:9a:77:a6:70:f5:f4:30:d3:75: 61:a8:e1:63:25:58:93:54:3e:72:e7:52:02:41:dd: 81:92:6b:35:37:8f:7e:a3:a1:85:93:7a:6b:58:00: d9:ef:78:9c:0c:79:99:bd:40:77:12:97:83:73:b9: 90:25:18:78:29:8b:62:39:f6:fe:3e:c2:ca:e1:2b: 25:d1:56:fb:63:ab:8d:41:21:50:47:23:a4:98:36: de:ff:81:78:f8:e5:d8:12:a1:02:09:66:df:0c:f4: 85:d0:de:4b:25:67:2c:05:c5:79:7e:0d:68:91:f1: 40:13:81:00:73:d3:05:5b:2f:fd:e8:b0:6e:f7:c4: a1:87:87:3b:92:2c:3d:b3:be:b4:24:c8:52:ce:04: 6e:de:ff:4f:7e:da:59:1a:f7:87:ab:b1:c9:e6:17: 6d:28:7b:be:72:15:88:d8:26:89:e6:13:5c:66:ea: 97:7b:58:e2:29:e9:cc:87:5d:5d:c9:c1:da:6a:74: a9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F3:6E:45:47:02:04:A4:85:D3:E9:65:AA:50:DE:4E:74:93:74:1C X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/QfNuRUcCBKSF0-llqlDeTnSTdBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.32.0/24 Signature Algorithm: sha256WithRSAEncryption 34:14:4e:bf:d9:64:b3:c5:59:01:91:eb:23:52:c4:e6:a7:f8: 2f:cb:68:03:64:5c:e3:bd:3c:78:68:9e:29:d8:e0:78:bd:87: 82:e9:e8:a2:35:d1:9f:85:dd:6e:a8:da:18:33:ad:59:95:2a: 66:6a:d7:28:45:49:a3:4f:20:ba:f5:a8:98:64:9f:e3:65:ff: 94:75:d0:09:ba:e8:ea:3d:61:a2:ac:12:7b:ae:4e:3d:7c:4a: ef:2c:b1:5a:75:f3:9c:cb:f2:ff:41:87:66:8d:3d:ee:87:a9: 4d:ef:a8:09:57:3c:7b:fe:49:43:4a:3c:9e:29:b9:0a:ee:bb: 48:f9:6b:76:3e:64:1d:56:e3:f1:f8:47:23:e9:3a:5a:cf:d6: 0c:c4:75:b0:f9:44:e6:23:fd:a1:a7:59:73:d9:59:b8:8d:ff: dc:0d:ef:c2:3e:47:1d:41:8c:6b:4c:a7:f6:3e:aa:e7:e1:7b: 45:02:40:2b:49:0a:2a:77:21:c0:7f:e6:89:c1:d7:24:5f:14: 5f:de:72:f7:c0:e1:24:1f:f4:32:52:24:c8:5b:2d:98:de:0f: b8:1e:38:85:70:da:02:ac:2a:91:2f:0b:58:e6:f3:53:e9:dd: 10:53:5a:09:78:70:90:b6:9f:50:f3:25:02:b1:21:3b:3f:ab: 3d:d6:0d:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqdHG8TVn6U8jCLUIInEeuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjUxMTE5MTcxNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWYzNmU0NTQ3MDIwNGE0ODVkM2U5NjVhYTUwZGU0ZTc0OTM3NDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Vi0EBVol6dOYWyT9crtO/mAG1ly 2/ma9hDZuWaT2HuUKg415mPsARa4yWafnjKLW8LopRuvfkbuhpyh59804ROad6Zw 9fQw03VhqOFjJViTVD5y51ICQd2Bkms1N49+o6GFk3prWADZ73icDHmZvUB3EpeD c7mQJRh4KYtiOfb+PsLK4Ssl0Vb7Y6uNQSFQRyOkmDbe/4F4+OXYEqECCWbfDPSF 0N5LJWcsBcV5fg1okfFAE4EAc9MFWy/96LBu98Shh4c7kiw9s760JMhSzgRu3v9P ftpZGveHq7HJ5hdtKHu+chWI2CaJ5hNcZuqXe1jiKenMh11dycHaanSpsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEHzbkVHAgSkhdPpZapQ3k50k3QcMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvUWZOdVJVY0NCS1NGMC1sbHFsRGVUblNUZEJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXhogMA0G CSqGSIb3DQEBCwUAA4IBAQA0FE6/2WSzxVkBkesjUsTmp/gvy2gDZFzjvTx4aJ4p 2OB4vYeC6eiiNdGfhd1uqNoYM61ZlSpmatcoRUmjTyC69aiYZJ/jZf+UddAJuujq PWGirBJ7rk49fErvLLFadfOcy/L/QYdmjT3uh6lN76gJVzx7/klDSjyeKbkK7rtI +Wt2PmQdVuPx+Ecj6Tpaz9YMxHWw+UTmI/2hp1lz2Vm4jf/cDe/CPkcdQYxrTKf2 Pqrn4XtFAkArSQoqdyHAf+aJwdckXxRf3nL3wOEkH/QyUiTIWy2Y3g+4HjiFcNoC rCqRLwtY5vNT6d0QU1oJeHCQtp9Q8yUCsSE7P6s91g1X -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:09 2025 by rpki-client