This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/qP01jLg9AFTfk3wXCfbU7oR7qCw.roa File: qP01jLg9AFTfk3wXCfbU7oR7qCw.roa (raw, json) Hash identifier: /NVQZjV+scAZTm53Kdr7vM2mPxhoccQ1UNN8dQOASVg= Subject key identifier: A8:FD:35:8C:B8:3D:00:54:DF:93:7C:17:09:F6:D4:EE:84:7B:A8:2C Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AC017CBD7B96C8AB595DF88ED199B9B6C Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/qP01jLg9AFTfk3wXCfbU7oR7qCw.roa Signing time: Wed 26 Nov 2025 12:16:16 +0000 ROA not before: Wed 26 Nov 2025 12:16:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48595 IP address blocks: 176.124.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:17:cb:d7:b9:6c:8a:b5:95:df:88:ed:19:9b:9b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 26 12:16:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a8fd358cb83d0054df937c1709f6d4ee847ba82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6e:eb:1b:71:b1:3c:27:d5:71:83:23:ef:1e: 79:b2:e7:a8:8f:44:26:a8:41:4a:c4:d4:a4:97:e7: 67:c1:2e:03:ff:64:b7:6f:ea:13:70:fc:7a:ef:02: a4:d1:8d:81:88:f1:16:c7:95:ac:38:84:5c:64:17: 33:e9:35:e2:0c:9d:73:11:4b:59:fe:b1:63:8c:c3: aa:4a:78:f7:f3:cc:88:1a:95:b2:07:c5:3f:0d:7f: 28:c5:d7:ca:55:65:de:93:3f:54:f1:b7:40:70:63: dc:a5:47:d0:cc:3e:0a:6f:2c:1c:5d:4d:28:4f:01: bb:ff:02:35:b2:3d:7e:a1:e6:52:85:9b:f0:bb:ff: 5a:29:8c:dd:e6:2c:65:3a:6e:89:03:c8:70:c5:54: ae:1c:fa:15:7c:39:ca:e7:6c:d4:00:a5:dc:8a:d3: dd:3f:7d:f8:d7:d6:37:fb:48:10:ee:ba:e7:2b:90: 8f:42:eb:77:f4:ea:a8:7b:3e:d7:74:7e:72:0d:c3: cb:7c:73:a5:64:8e:a9:11:9f:d6:89:13:99:c3:77: e6:0b:64:20:2f:06:3d:00:97:e0:18:e9:d2:ab:75: 83:93:d3:1f:3c:de:a0:57:f3:d9:ce:92:ea:c6:8a: 7b:43:00:ab:7b:dd:b3:3a:13:3b:3e:0a:b0:0f:b0: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FD:35:8C:B8:3D:00:54:DF:93:7C:17:09:F6:D4:EE:84:7B:A8:2C X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/qP01jLg9AFTfk3wXCfbU7oR7qCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.30.0/24 Signature Algorithm: sha256WithRSAEncryption 00:83:bb:1a:0e:de:ec:27:a2:25:dc:e7:a6:d4:b7:83:81:38: ed:56:b5:26:d1:d3:30:54:70:42:00:47:f8:0a:83:6c:89:55: db:5c:9e:eb:51:f9:fa:78:36:1b:97:69:28:d8:bd:b1:a6:24: 53:b0:9b:2b:53:2b:79:f6:98:1e:25:b2:7a:2a:03:0f:84:29: 9c:38:2a:c4:97:4f:58:b6:46:b8:11:cc:44:ca:d2:1e:3a:a4: 79:ec:54:ed:58:7b:70:a6:63:b8:52:ed:94:27:00:b7:4d:f6: 63:67:d9:b9:6c:91:25:2e:a8:22:41:10:30:f5:9d:e0:47:34: 92:c8:92:05:ba:20:fe:9e:bd:6c:07:44:02:cb:23:bd:32:b9: dc:df:a7:1f:14:07:06:d8:48:55:78:67:90:79:d4:9a:cf:e9: 59:47:61:37:ae:59:62:28:38:3b:fb:b9:68:70:1d:e1:29:a5: bd:5c:af:b8:90:fa:e1:cb:82:8f:bd:fd:3a:ed:af:1b:46:f4: 06:f4:44:02:db:6d:7e:08:ea:d5:cb:de:e6:fc:5a:2d:c2:a5: ca:e0:35:cf:5a:ab:50:2c:47:9a:ed:6f:85:0f:89:fb:39:c0: fa:af:01:a8:f9:53:53:3f:59:95:36:b9:c0:dc:78:c7:bf:2f: 7f:c4:b0:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrAF8vXuWyKtZXfiO0Zm5tsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTI2MTIxNjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGZkMzU4Y2I4M2QwMDU0ZGY5MzdjMTcwOWY2ZDRlZTg0N2JhODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG7rG3GxPCfVcYMj7x55sueoj0Qm qEFKxNSkl+dnwS4D/2S3b+oTcPx67wKk0Y2BiPEWx5WsOIRcZBcz6TXiDJ1zEUtZ /rFjjMOqSnj388yIGpWyB8U/DX8oxdfKVWXekz9U8bdAcGPcpUfQzD4KbywcXU0o TwG7/wI1sj1+oeZShZvwu/9aKYzd5ixlOm6JA8hwxVSuHPoVfDnK52zUAKXcitPd P33419Y3+0gQ7rrnK5CPQut39Oqoez7XdH5yDcPLfHOlZI6pEZ/WiROZw3fmC2Qg LwY9AJfgGOnSq3WDk9MfPN6gV/PZzpLqxop7QwCre92zOhM7PgqwD7ABhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKj9NYy4PQBU35N8Fwn21O6Ee6gsMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvcVAwMWpMZzlBRlRmazN3WENmYlU3b1I3cUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHweMA0G CSqGSIb3DQEBCwUAA4IBAQAAg7saDt7sJ6Il3Oem1LeDgTjtVrUm0dMwVHBCAEf4 CoNsiVXbXJ7rUfn6eDYbl2ko2L2xpiRTsJsrUyt59pgeJbJ6KgMPhCmcOCrEl09Y tka4EcxEytIeOqR57FTtWHtwpmO4Uu2UJwC3TfZjZ9m5bJElLqgiQRAw9Z3gRzSS yJIFuiD+nr1sB0QCyyO9Mrnc36cfFAcG2EhVeGeQedSaz+lZR2E3rlliKDg7+7lo cB3hKaW9XK+4kPrhy4KPvf067a8bRvQG9EQC221+COrVy97m/FotwqXK4DXPWqtQ LEea7W+FD4n7OcD6rwGo+VNTP1mVNrnA3HjHvy9/xLCY -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:54 2025 by rpki-client