This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/qZNiFnxeUzz5XEPun42Fz9FodnU.roa File: qZNiFnxeUzz5XEPun42Fz9FodnU.roa (raw, json) Hash identifier: utLDo2wO1yHKyt0UAzXgcGw7rn24hRMAbyeC1uhL2cQ= Subject key identifier: A9:93:62:16:7C:5E:53:3C:F9:5C:43:EE:9F:8D:85:CF:D1:68:76:75 Certificate issuer: /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7 Certificate serial: 019A7C29D66166DA27A29B136F5359F71506 Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/qZNiFnxeUzz5XEPun42Fz9FodnU.roa Signing time: Thu 13 Nov 2025 07:41:47 +0000 ROA not before: Thu 13 Nov 2025 07:41:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49051 IP address blocks: 94.143.229.0/24 maxlen: 24 193.186.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:29:d6:61:66:da:27:a2:9b:13:6f:53:59:f7:15:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7 Validity Not Before: Nov 13 07:41:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a99362167c5e533cf95c43ee9f8d85cfd1687675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6c:3b:b1:2b:a9:ae:b7:ed:56:45:7e:5d:4a: 8b:60:3d:32:fe:07:10:eb:b7:e4:7f:79:66:71:89: d5:a4:a7:59:34:99:e9:65:27:33:f3:96:d0:0c:72: 02:d1:f4:d3:29:c4:10:75:91:a6:60:3d:0b:9d:e2: 65:ee:18:7b:aa:0c:d8:1a:a7:29:9c:87:12:db:82: d2:cb:3c:7c:e3:0b:5c:3a:ab:32:23:c6:1f:8c:7e: 7b:ed:60:bf:91:de:1e:e9:a9:88:64:46:d8:14:db: ba:06:c7:2a:db:9b:fd:9a:bf:db:c0:de:e7:3d:28: 8e:a3:95:37:5f:8b:c2:84:a9:5a:29:51:cb:e1:3f: 01:97:74:21:11:a4:fd:bc:c2:62:ac:b8:d8:e9:3c: 45:9f:aa:8d:db:8c:fb:8e:69:e5:f1:61:18:51:42: f7:a3:1b:f6:e1:43:c7:43:b1:6f:f6:dc:3a:d1:2b: a8:7e:f8:00:19:f8:73:9c:84:b1:25:1e:a5:d6:c8: 6e:5a:f4:1e:ce:dc:6c:cd:3d:32:9d:85:6b:87:e5: 8a:25:09:65:29:6b:e7:d1:2e:3e:ee:fe:a8:cb:e5: 44:1d:e4:3a:96:70:90:d3:31:f7:5d:6a:fb:c0:03: 62:74:3a:7a:97:ec:ef:f2:f0:47:ec:9f:02:ba:6b: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:93:62:16:7C:5E:53:3C:F9:5C:43:EE:9F:8D:85:CF:D1:68:76:75 X509v3 Authority Key Identifier: keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/qZNiFnxeUzz5XEPun42Fz9FodnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.143.229.0/24 193.186.211.0/24 Signature Algorithm: sha256WithRSAEncryption ba:3f:5c:34:64:ee:f1:4e:ca:d2:21:12:0f:55:f5:47:1d:bf: 03:cb:08:f5:57:f2:c3:56:2d:71:0a:e8:82:ed:12:49:81:dc: f9:d8:e8:98:c5:f3:e2:89:4f:47:1c:1a:0a:60:e1:71:37:a6: 6b:15:6e:fc:92:00:98:d2:17:1f:08:12:0f:79:4d:23:f5:70: 26:2c:15:9c:32:36:d0:37:d2:cd:35:fb:16:40:36:ad:30:04: 95:31:83:7c:79:e6:0c:a0:91:ad:2c:9f:ff:70:a9:2e:52:21: bb:8c:33:d8:93:fa:a7:af:21:f3:5a:d8:ef:c9:42:69:0e:e5: 04:69:82:20:a7:0f:59:c9:a8:88:f1:00:f9:c9:bb:90:81:1e: d7:7f:56:51:39:9a:26:60:96:c9:dc:08:24:71:cb:f3:e9:2f: 26:72:68:4a:f8:bf:94:a5:67:83:08:06:ef:0f:96:e7:38:61: 78:d1:70:7f:12:bf:2b:1f:07:44:07:18:ec:66:3a:f8:c9:fc: b9:ae:f0:45:1f:b6:23:75:62:5d:9a:8b:94:26:81:23:a8:d0: 15:e5:a7:a3:83:b2:c5:3a:69:91:dd:e4:fb:9a:1e:00:52:40: 9f:92:17:16:1e:c1:a3:20:28:b5:fd:59:26:49:2b:88:b0:85: d3:a6:0d:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp8KdZhZtonopsTb1NZ9xUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWUzMTk5M2ZhODU4NzU2OGIzZmNkZTViN2ZlZTk2ZGI0 M2E5YjcwHhcNMjUxMTEzMDc0MTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTkzNjIxNjdjNWU1MzNjZjk1YzQzZWU5ZjhkODVjZmQxNjg3Njc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmw7sSuprrftVkV+XUqLYD0y/gcQ 67fkf3lmcYnVpKdZNJnpZScz85bQDHIC0fTTKcQQdZGmYD0LneJl7hh7qgzYGqcp nIcS24LSyzx84wtcOqsyI8YfjH577WC/kd4e6amIZEbYFNu6Bscq25v9mr/bwN7n PSiOo5U3X4vChKlaKVHL4T8Bl3QhEaT9vMJirLjY6TxFn6qN24z7jmnl8WEYUUL3 oxv24UPHQ7Fv9tw60SuofvgAGfhznISxJR6l1shuWvQeztxszT0ynYVrh+WKJQll KWvn0S4+7v6oy+VEHeQ6lnCQ0zH3XWr7wANidDp6l+zv8vBH7J8CumvuKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKmTYhZ8XlM8+VxD7p+Nhc/RaHZ1MB8GA1UdIwQY MBaAFIgeMZk/qFh1aLP83lt/7pbbQ6m3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2Yt NTEzOGYzNDJlOWY1LzEvcVpOaUZueGVVeno1WEVQdW40MkZ6OUZvZG5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2YtNTEzOGYzNDJlOWY1 LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXo/lAwQA wbrTMA0GCSqGSIb3DQEBCwUAA4IBAQC6P1w0ZO7xTsrSIRIPVfVHHb8Dywj1V/LD Vi1xCuiC7RJJgdz52OiYxfPiiU9HHBoKYOFxN6ZrFW78kgCY0hcfCBIPeU0j9XAm LBWcMjbQN9LNNfsWQDatMASVMYN8eeYMoJGtLJ//cKkuUiG7jDPYk/qnryHzWtjv yUJpDuUEaYIgpw9ZyaiI8QD5ybuQgR7Xf1ZROZomYJbJ3Agkccvz6S8mcmhK+L+U pWeDCAbvD5bnOGF40XB/Er8rHwdEBxjsZjr4yfy5rvBFH7YjdWJdmouUJoEjqNAV 5aejg7LFOmmR3eT7mh4AUkCfkhcWHsGjICi1/VkmSSuIsIXTpg1f -----END CERTIFICATE-----Generated at Sun Dec 7 07:32:45 2025 by rpki-client