This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/qhfBVHE8JoqSxpjE-nnbM-CBMaU.roa File: qhfBVHE8JoqSxpjE-nnbM-CBMaU.roa (raw, json) Hash identifier: 2Csm7aiBglLVKACf6H7N/Wd799PiNtu7lEasbieKTVY= Subject key identifier: AA:17:C1:54:71:3C:26:8A:92:C6:98:C4:FA:79:DB:33:E0:81:31:A5 Certificate issuer: /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847 Certificate serial: 019A9E18C6D48A6972134616223FA7A23151 Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/qhfBVHE8JoqSxpjE-nnbM-CBMaU.roa Signing time: Wed 19 Nov 2025 21:50:15 +0000 ROA not before: Wed 19 Nov 2025 21:50:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205889 IP address blocks: 185.185.172.0/24 maxlen: 24 185.185.173.0/24 maxlen: 24 185.185.174.0/24 maxlen: 24 185.185.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9e:18:c6:d4:8a:69:72:13:46:16:22:3f:a7:a2:31:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847 Validity Not Before: Nov 19 21:50:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa17c154713c268a92c698c4fa79db33e08131a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:27:59:a1:41:0f:a4:78:28:50:29:4a:12: 1e:41:0d:74:73:ae:af:21:32:96:21:fc:8e:a6:b7: 5b:6e:af:0b:52:89:a9:dc:64:5b:fd:88:be:29:57: 9f:7c:00:31:90:f7:2c:e8:2b:da:fb:aa:c1:33:ea: 84:ce:bd:ef:18:71:1e:72:cd:67:a2:04:b9:32:a1: 59:12:6e:62:8d:11:d4:4b:35:69:1a:3a:bd:35:e8: 01:26:3b:d8:75:b8:ad:1e:0c:83:93:a8:8b:95:bd: 7e:ea:ba:e2:2c:12:f5:97:7d:3a:92:92:4a:71:45: b8:5d:7c:be:53:fe:73:65:b4:87:61:cb:68:f0:65: 46:7f:97:5d:a8:0f:38:41:02:c1:9f:f9:ac:76:a5: 7f:ee:cb:96:d3:aa:b0:ad:b2:7e:85:03:cb:db:aa: 11:c7:fc:75:0e:35:03:49:ba:30:dc:ef:eb:dd:2c: 91:b4:84:82:61:28:93:39:4a:8e:49:31:94:8e:a4: ab:31:de:23:30:ad:9b:9e:61:90:f2:0f:af:a0:2f: 2c:34:b1:c7:5d:85:59:56:2f:95:19:fc:d1:05:f1: 34:72:8c:e1:3d:14:71:d7:f0:6f:3a:ae:b4:2f:0e: 2f:1b:82:ee:4b:49:5e:5d:26:25:d6:82:2f:10:91: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:17:C1:54:71:3C:26:8A:92:C6:98:C4:FA:79:DB:33:E0:81:31:A5 X509v3 Authority Key Identifier: keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/qhfBVHE8JoqSxpjE-nnbM-CBMaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.172.0/22 Signature Algorithm: sha256WithRSAEncryption 29:5d:6a:32:f7:27:e9:25:5a:e8:76:5b:3b:7a:6e:45:ef:ee: 9e:64:2d:2f:aa:43:63:d4:a0:cd:ce:14:e3:12:30:52:1b:72: d8:7b:eb:5a:8a:6a:4e:d2:97:31:3a:35:d4:6b:69:71:54:27: 19:71:f4:2b:e8:08:67:fa:ad:fd:d2:55:4b:f0:26:de:30:86: ad:c3:ce:a8:a2:e6:3d:51:7f:a0:b1:25:fb:c7:5f:3c:38:43: aa:5a:44:c9:65:96:73:c6:a5:25:a7:54:30:c7:4d:56:3e:52: 30:f5:07:0a:0e:e7:f4:1b:68:1e:7f:42:73:9c:8f:ec:cb:fe: 7e:1f:87:0e:89:bc:f3:c5:6a:6f:37:ed:69:5f:f3:d6:c5:cf: d3:20:b2:83:22:94:4a:05:bf:d9:4e:8d:db:07:0c:3e:ef:fa: 67:a3:64:df:a1:96:74:68:c8:55:0e:4a:b3:49:33:2f:8f:bf: 64:4f:67:91:4e:5f:b1:9e:f6:6d:a0:8a:5d:dc:9f:2e:78:91: df:ee:9e:d9:93:0f:cb:24:7a:73:51:a6:7e:14:bf:ca:4c:93: cf:ed:b5:84:14:54:3d:61:5b:6e:c6:7f:8b:5d:d8:24:cd:b3: 68:d6:ef:43:40:ef:74:e6:36:c1:3e:4d:b3:76:13:01:5c:1f: 6f:6f:68:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqeGMbUimlyE0YWIj+nojFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDRhNWE1ZDE0YzhhM2I4Y2I5NGQxY2I0NmMwZDZlMmEx YzQ4NDcwHhcNMjUxMTE5MjE1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTE3YzE1NDcxM2MyNjhhOTJjNjk4YzRmYTc5ZGIzM2UwODEzMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfgnWaFBD6R4KFApShIeQQ10c66v ITKWIfyOprdbbq8LUomp3GRb/Yi+KVeffAAxkPcs6Cva+6rBM+qEzr3vGHEecs1n ogS5MqFZEm5ijRHUSzVpGjq9NegBJjvYdbitHgyDk6iLlb1+6rriLBL1l306kpJK cUW4XXy+U/5zZbSHYcto8GVGf5ddqA84QQLBn/msdqV/7suW06qwrbJ+hQPL26oR x/x1DjUDSbow3O/r3SyRtISCYSiTOUqOSTGUjqSrMd4jMK2bnmGQ8g+voC8sNLHH XYVZVi+VGfzRBfE0cozhPRRx1/BvOq60Lw4vG4LuS0leXSYl1oIvEJF71wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKoXwVRxPCaKksaYxPp52zPggTGlMB8GA1UdIwQY MBaAFKXUpaXRTIo7jLlNHLRsDW4qHEhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTIt MjJjMDhkY2JmNTcyLzEvcWhmQlZIRThKb3FTeHBqRS1ubmJNLUNCTWFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTItMjJjMDhkY2JmNTcy LzEvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubmsMA0G CSqGSIb3DQEBCwUAA4IBAQApXWoy9yfpJVrodls7em5F7+6eZC0vqkNj1KDNzhTj EjBSG3LYe+taimpO0pcxOjXUa2lxVCcZcfQr6Ahn+q390lVL8CbeMIatw86oouY9 UX+gsSX7x188OEOqWkTJZZZzxqUlp1Qwx01WPlIw9QcKDuf0G2gef0JznI/sy/5+ H4cOibzzxWpvN+1pX/PWxc/TILKDIpRKBb/ZTo3bBww+7/pno2TfoZZ0aMhVDkqz STMvj79kT2eRTl+xnvZtoIpd3J8ueJHf7p7Zkw/LJHpzUaZ+FL/KTJPP7bWEFFQ9 YVtuxn+LXdgkzbNo1u9DQO905jbBPk2zdhMBXB9vb2g6 -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:50 2025 by rpki-client