This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/QBYP5f0_ZKeoVqAGpUJXmu3czyA.roa File: QBYP5f0_ZKeoVqAGpUJXmu3czyA.roa (raw, json) Hash identifier: uEMvExoNHA6VkjNgrlmvXEXtFQzBUe2OYCrsV1Yb4TI= Subject key identifier: 40:16:0F:E5:FD:3F:64:A7:A8:56:A0:06:A5:42:57:9A:ED:DC:CF:20 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AB112919BB25F21233B0B5D8B5D68520A Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/QBYP5f0_ZKeoVqAGpUJXmu3czyA.roa Signing time: Sun 23 Nov 2025 14:16:15 +0000 ROA not before: Sun 23 Nov 2025 14:16:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202279 IP address blocks: 31.133.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:12:91:9b:b2:5f:21:23:3b:0b:5d:8b:5d:68:52:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 23 14:16:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=40160fe5fd3f64a7a856a006a542579aeddccf20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ce:00:35:c9:eb:44:3e:bd:21:54:a7:ba:03: b7:b7:26:88:dc:8c:31:48:c6:f2:8c:14:00:4c:39: c7:db:e2:f6:dc:29:d7:63:e0:1f:84:92:6e:22:73: 5a:46:69:6e:48:24:78:4f:41:fa:89:d1:6c:4b:fb: b6:34:cc:69:38:4f:eb:dc:29:fd:05:64:11:12:1e: 83:7d:b8:54:28:9d:14:03:94:06:87:bf:fd:5d:b7: f5:b2:ea:8d:28:cb:29:55:91:2d:3f:44:9a:0b:b7: b8:96:4d:7d:a7:18:f8:31:ba:11:8e:02:a0:63:c2: 62:a6:3b:26:9c:ad:19:63:f6:91:a4:e9:ef:8e:fc: d9:af:8e:99:e3:10:47:40:c4:e9:9e:fa:83:be:a4: 15:4d:fe:39:96:13:94:30:6b:80:b5:93:0a:56:2f: 4f:26:2e:e8:4e:74:1a:93:49:b4:da:a3:af:9b:96: ff:cb:0a:91:fc:8a:28:f7:20:e9:19:d3:2c:fd:6e: 27:1c:22:5e:47:f6:b7:ff:28:36:fc:67:47:71:99: 6a:5a:a4:43:f7:44:02:bf:46:d1:e5:b1:67:5a:5d: 34:37:5d:92:cd:14:d2:86:c4:e2:67:1b:ba:e2:b3: b3:43:75:43:2b:fb:ab:67:3e:a5:6c:b3:1c:5b:14: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:16:0F:E5:FD:3F:64:A7:A8:56:A0:06:A5:42:57:9A:ED:DC:CF:20 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/QBYP5f0_ZKeoVqAGpUJXmu3czyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.48.0/21 Signature Algorithm: sha256WithRSAEncryption 37:13:d2:d4:26:02:42:ee:00:60:d5:15:87:07:88:22:ec:e6: 30:8a:7a:57:da:3d:18:c0:6a:a8:3c:4e:cb:49:58:32:6d:2a: ac:11:c2:c7:aa:cb:0b:cb:e5:55:2c:7e:30:a9:c9:0c:96:26: 66:0d:de:56:3c:1f:aa:c6:5a:e7:f1:61:33:79:8d:f2:45:56: ce:9e:77:e0:58:7b:1e:a8:60:fe:97:a5:1c:ac:1d:a3:4a:28: a1:b4:22:28:b4:14:e8:24:d6:b4:89:42:fc:e5:80:d5:e7:29: 78:45:48:a7:34:4a:4f:99:97:96:d6:26:0c:15:5d:93:55:5b: 9b:57:e3:85:af:77:75:6e:3a:12:6d:d2:88:76:5f:db:2d:61: 80:d8:d9:68:0a:e4:0b:96:72:da:c8:20:98:65:39:1c:83:4b: 67:76:b8:b4:3d:05:f5:49:e8:43:2d:07:b5:4a:0e:ff:be:d1: 71:50:1b:f5:2a:2e:e0:82:52:6b:77:22:85:99:73:05:cb:13: 33:3a:1d:2f:c6:b1:4a:9b:85:2f:d2:b5:85:b9:76:f7:86:3b: 05:c0:ab:c7:98:42:17:45:90:1c:43:3f:0f:ab:06:c0:09:9c: 03:05:c3:01:20:e6:4a:f7:4a:8c:19:20:14:cc:d5:45:fc:8d: 77:56:28:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqxEpGbsl8hIzsLXYtdaFIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTIzMTQxNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDE2MGZlNWZkM2Y2NGE3YTg1NmEwMDZhNTQyNTc5YWVkZGNjZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c4ANcnrRD69IVSnugO3tyaI3Iwx SMbyjBQATDnH2+L23CnXY+AfhJJuInNaRmluSCR4T0H6idFsS/u2NMxpOE/r3Cn9 BWQREh6DfbhUKJ0UA5QGh7/9Xbf1suqNKMspVZEtP0SaC7e4lk19pxj4MboRjgKg Y8JipjsmnK0ZY/aRpOnvjvzZr46Z4xBHQMTpnvqDvqQVTf45lhOUMGuAtZMKVi9P Ji7oTnQak0m02qOvm5b/ywqR/Ioo9yDpGdMs/W4nHCJeR/a3/yg2/GdHcZlqWqRD 90QCv0bR5bFnWl00N12SzRTShsTiZxu64rOzQ3VDK/urZz6lbLMcWxSEhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEAWD+X9P2SnqFagBqVCV5rt3M8gMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvUUJZUDVmMF9aS2VvVnFBR3BVSlhtdTNjenlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4UwMA0G CSqGSIb3DQEBCwUAA4IBAQA3E9LUJgJC7gBg1RWHB4gi7OYwinpX2j0YwGqoPE7L SVgybSqsEcLHqssLy+VVLH4wqckMliZmDd5WPB+qxlrn8WEzeY3yRVbOnnfgWHse qGD+l6UcrB2jSiihtCIotBToJNa0iUL85YDV5yl4RUinNEpPmZeW1iYMFV2TVVub V+OFr3d1bjoSbdKIdl/bLWGA2NloCuQLlnLayCCYZTkcg0tndri0PQX1SehDLQe1 Sg7/vtFxUBv1Ki7gglJrdyKFmXMFyxMzOh0vxrFKm4Uv0rWFuXb3hjsFwKvHmEIX RZAcQz8PqwbACZwDBcMBIOZK90qMGSAUzNVF/I13Vij6 -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:23 2025 by rpki-client