This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Q72Bx5Qhj9iCkj6j_eGHQCDZmNY.roa File: Q72Bx5Qhj9iCkj6j_eGHQCDZmNY.roa (raw, json) Hash identifier: 4jkETBCkpTSQkHRaEsWYaZwIBZKs/JejI576WGygAxQ= Subject key identifier: 43:BD:81:C7:94:21:8F:D8:82:92:3E:A3:FD:E1:87:40:20:D9:98:D6 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019A5D7F0917B64D51F4694695E444500A17 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Q72Bx5Qhj9iCkj6j_eGHQCDZmNY.roa Signing time: Fri 07 Nov 2025 08:46:37 +0000 ROA not before: Fri 07 Nov 2025 08:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9318 IP address blocks: 144.56.72.0/24 maxlen: 24 144.56.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5d:7f:09:17:b6:4d:51:f4:69:46:95:e4:44:50:0a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Nov 7 08:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=43bd81c794218fd882923ea3fde1874020d998d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:f3:0a:81:2f:fb:9d:ae:33:1d:ec:b1:f9: 1f:13:15:c0:33:e8:b8:fe:ab:29:d8:93:26:57:13: 26:d9:09:16:28:87:8a:f2:2c:b7:e7:f8:46:0c:ac: d6:7f:d5:09:00:e8:76:c6:08:da:9d:d7:e9:97:2e: a0:3e:ee:1c:bb:18:aa:51:73:c7:ba:7f:ba:80:51: 18:56:5b:10:9d:9e:a4:f7:50:4e:1c:80:db:f0:df: e7:a4:82:6c:2f:4e:58:cc:2e:98:4b:fc:33:0e:98: 4e:78:72:a6:f0:cd:91:8a:2d:04:10:5e:a6:a0:73: 18:d9:9f:d9:ac:39:08:bc:d7:0d:07:d9:39:79:6c: 3f:b8:e1:13:57:52:45:e8:ec:a6:44:22:2b:18:be: c0:92:8f:da:e7:37:c0:59:66:47:29:d2:52:0b:1b: 53:de:b6:2c:97:3b:9c:9b:da:1f:eb:8f:67:ad:49: 48:e7:93:4f:10:8e:8d:80:f3:20:05:ae:03:23:5a: 4f:94:25:bb:8d:34:37:eb:77:d9:f9:3d:b7:20:a5: 25:d6:26:25:67:1f:c2:cc:05:89:db:08:73:98:32: 39:39:e7:06:a3:e4:8f:92:37:0d:90:10:c4:b2:14: 8d:5c:3a:b2:74:ee:49:6a:98:e7:33:9e:35:12:31: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BD:81:C7:94:21:8F:D8:82:92:3E:A3:FD:E1:87:40:20:D9:98:D6 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Q72Bx5Qhj9iCkj6j_eGHQCDZmNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.72.0/24 144.56.105.0/24 Signature Algorithm: sha256WithRSAEncryption 13:c1:a4:7f:25:c2:f4:63:36:30:3f:95:c7:26:aa:3a:f1:fc: 64:be:62:ea:a2:3e:f1:eb:ae:d1:10:3f:5a:7a:50:18:70:93: c3:25:31:f2:5e:b8:fa:80:3f:d1:c5:d6:1c:f3:6e:fa:e3:90: 65:eb:c5:53:d6:40:87:20:f3:2d:b0:2c:9c:b2:56:d0:a6:6c: b6:a1:70:ea:41:19:2c:d9:e1:af:30:70:e4:34:97:3b:91:99: b0:65:88:5f:8d:c8:79:5d:2c:5a:b4:4e:3c:9c:70:4f:bf:c0: 5d:6b:d1:78:19:ee:53:1e:2d:a7:93:26:85:6c:93:b2:d7:2e: 3c:07:83:b7:0e:f8:88:32:ad:fd:62:f7:55:3a:d6:dd:48:36: f9:c5:cb:63:c5:0f:4f:b1:5d:d4:8b:74:29:8f:be:6e:35:3c: cb:6a:aa:72:94:3f:e7:92:9c:eb:85:ae:ae:93:95:a0:ca:05: fc:da:ae:88:7c:35:27:dd:ad:34:b4:1a:80:cd:3c:18:20:bd: 7a:4b:6b:7e:c7:52:56:6b:e7:54:bf:52:ba:96:95:f7:21:55: 4f:b6:bc:0f:ff:fb:ae:bb:20:a6:1c:58:a9:48:d9:f5:21:b5: 13:26:c0:14:f6:b4:df:fe:16:3c:97:2b:c2:d8:a4:85:eb:5c: 17:26:85:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpdfwkXtk1R9GlGleREUAoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMTA3MDg0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2JkODFjNzk0MjE4ZmQ4ODI5MjNlYTNmZGUxODc0MDIwZDk5OGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQLzCoEv+52uMx3ssfkfExXAM+i4 /qsp2JMmVxMm2QkWKIeK8iy35/hGDKzWf9UJAOh2xgjandfply6gPu4cuxiqUXPH un+6gFEYVlsQnZ6k91BOHIDb8N/npIJsL05YzC6YS/wzDphOeHKm8M2Rii0EEF6m oHMY2Z/ZrDkIvNcNB9k5eWw/uOETV1JF6OymRCIrGL7Ako/a5zfAWWZHKdJSCxtT 3rYslzucm9of649nrUlI55NPEI6NgPMgBa4DI1pPlCW7jTQ363fZ+T23IKUl1iYl Zx/CzAWJ2whzmDI5OecGo+SPkjcNkBDEshSNXDqydO5JapjnM541EjG9hQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEO9gceUIY/YgpI+o/3hh0Ag2ZjWMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvUTcyQng1UWhqOWlDa2o2al9lR0hRQ0RabU5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkDhIAwQA kDhpMA0GCSqGSIb3DQEBCwUAA4IBAQATwaR/JcL0YzYwP5XHJqo68fxkvmLqoj7x 667RED9aelAYcJPDJTHyXrj6gD/RxdYc827645Bl68VT1kCHIPMtsCycslbQpmy2 oXDqQRks2eGvMHDkNJc7kZmwZYhfjch5XSxatE48nHBPv8Bda9F4Ge5THi2nkyaF bJOy1y48B4O3DviIMq39YvdVOtbdSDb5xctjxQ9PsV3Ui3Qpj75uNTzLaqpylD/n kpzrha6uk5WgygX82q6IfDUn3a00tBqAzTwYIL16S2t+x1JWa+dUv1K6lpX3IVVP trwP//uuuyCmHFipSNn1IbUTJsAU9rTf/hY8lyvC2KSF61wXJoWs -----END CERTIFICATE-----Generated at Sat Dec 6 19:18:26 2025 by rpki-client