This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Qfx_N_kuqkMIUSgH6UsyRKgHZ0A.roa File: Qfx_N_kuqkMIUSgH6UsyRKgHZ0A.roa (raw, json) Hash identifier: mwW72dFxHuPCDkV7oNKQ6TxIZ+d2OvHqW1889IPwVao= Subject key identifier: 41:FC:7F:37:F9:2E:AA:43:08:51:28:07:E9:4B:32:44:A8:07:67:40 Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a Certificate serial: 019A6D08FB5B828E204D510F89E4263BAEB4 Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Qfx_N_kuqkMIUSgH6UsyRKgHZ0A.roa Signing time: Mon 10 Nov 2025 09:11:36 +0000 ROA not before: Mon 10 Nov 2025 09:11:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56676 IP address blocks: 91.237.187.0/24 maxlen: 24 92.62.116.0/24 maxlen: 24 92.62.116.0/25 maxlen: 25 92.62.116.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:08:fb:5b:82:8e:20:4d:51:0f:89:e4:26:3b:ae:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a Validity Not Before: Nov 10 09:11:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=41fc7f37f92eaa4308512807e94b3244a8076740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:af:82:dd:31:f6:cb:73:ad:1d:98:d7:58: 1a:99:d0:08:9a:5f:a1:56:4b:60:28:cc:9b:94:dd: d1:00:b1:ea:de:d8:ed:81:29:7e:5e:7d:e1:21:41: 6b:5a:ef:31:ae:ac:af:44:21:c0:ad:1d:c9:39:31: 43:c3:58:39:b8:f3:cb:0e:34:d9:b0:a6:85:19:a2: 09:3a:bc:28:1a:be:34:7c:b3:47:12:29:10:05:b8: 51:42:4e:4f:c3:06:a2:68:94:28:20:ce:12:eb:8f: bd:02:56:6b:57:36:26:0b:3b:c0:3c:da:1c:25:42: d3:bd:e0:d9:0e:f4:63:fe:d9:e1:27:7e:ab:67:e6: ad:4f:9b:0c:a6:d8:fd:cf:3d:f2:0d:b2:eb:9a:0a: 0b:dc:4f:bf:de:ee:41:18:bc:4c:e5:d9:f8:75:1b: f4:d4:f6:00:d7:4e:13:43:6d:bf:4d:73:50:c8:da: 1a:42:7e:9f:5a:3c:ce:8c:5b:cc:2c:e6:0e:2b:9a: 45:69:ae:02:a2:53:e8:b9:50:d9:37:3f:d8:a4:6f: c1:09:a3:db:1c:a3:5c:e4:57:4a:81:54:83:77:75: 5e:04:00:f2:d0:0d:01:58:15:8c:0d:2b:43:55:0a: 91:f6:a0:06:22:fa:4d:03:4e:8c:de:33:4e:d3:a9: 8a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FC:7F:37:F9:2E:AA:43:08:51:28:07:E9:4B:32:44:A8:07:67:40 X509v3 Authority Key Identifier: keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Qfx_N_kuqkMIUSgH6UsyRKgHZ0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.187.0/24 92.62.116.0/24 Signature Algorithm: sha256WithRSAEncryption 83:a2:79:a2:63:be:69:0b:d5:bf:36:af:4d:b9:26:34:12:db: d7:6b:16:8b:80:d8:18:b3:62:e7:5c:51:d2:32:0a:94:88:e7: 54:e4:65:93:70:18:1e:95:2d:6e:d8:3f:ae:08:db:ea:8b:a5: aa:f7:59:b4:04:a9:b5:be:14:fd:1b:4d:21:84:d0:6b:8b:b3: 69:42:0e:26:ed:f1:73:99:f6:aa:43:09:d9:48:5f:91:a8:b5: 55:14:7c:4d:fc:36:5d:71:c4:9e:28:c5:dc:a3:69:a6:ba:74: 58:9a:53:78:0b:87:8a:ae:fe:0d:5d:85:9e:3d:5d:92:5b:b1: bd:09:4f:f7:8b:b7:90:f1:b4:39:7c:ba:d7:60:7a:6a:1c:38: ef:58:e7:80:57:aa:7e:cb:ed:74:57:ef:2d:a2:5d:9d:fa:64: d0:d9:b0:a0:a3:8c:cc:3e:78:aa:19:82:51:b7:d6:9f:ec:1f: 31:f4:6f:ea:14:77:a2:4f:b6:b8:a1:1c:56:eb:0b:c6:23:e8: 18:ea:a0:5d:59:b5:c1:fc:09:e8:d8:da:61:ba:2e:2b:64:25: e1:f9:87:a6:2d:9b:ac:da:50:3e:14:f1:ef:8c:ec:75:b6:40: c4:cf:70:3c:47:24:85:2c:d4:17:0b:06:89:a4:c3:39:c7:4d: 11:ea:55:0d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZptCPtbgo4gTVEPieQmO660MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz NzA3MWEwHhcNMjUxMTEwMDkxMTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWZjN2YzN2Y5MmVhYTQzMDg1MTI4MDdlOTRiMzI0NGE4MDc2NzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgSvgt0x9stzrR2Y11gamdAIml+h VktgKMyblN3RALHq3tjtgSl+Xn3hIUFrWu8xrqyvRCHArR3JOTFDw1g5uPPLDjTZ sKaFGaIJOrwoGr40fLNHEikQBbhRQk5PwwaiaJQoIM4S64+9AlZrVzYmCzvAPNoc JULTveDZDvRj/tnhJ36rZ+atT5sMptj9zz3yDbLrmgoL3E+/3u5BGLxM5dn4dRv0 1PYA104TQ22/TXNQyNoaQn6fWjzOjFvMLOYOK5pFaa4ColPouVDZNz/YpG/BCaPb HKNc5FdKgVSDd3VeBADy0A0BWBWMDStDVQqR9qAGIvpNA06M3jNO06mKTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEH8fzf5LqpDCFEoB+lLMkSoB2dAMB8GA1UdIwQY MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt NGMwOGZmZTEwMDc2LzEvUWZ4X05fa3Vxa01JVVNnSDZVc3lSS2dIWjBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2 LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+27AwQA XD50MA0GCSqGSIb3DQEBCwUAA4IBAQCDonmiY75pC9W/Nq9NuSY0EtvXaxaLgNgY s2LnXFHSMgqUiOdU5GWTcBgelS1u2D+uCNvqi6Wq91m0BKm1vhT9G00hhNBri7Np Qg4m7fFzmfaqQwnZSF+RqLVVFHxN/DZdccSeKMXco2mmunRYmlN4C4eKrv4NXYWe PV2SW7G9CU/3i7eQ8bQ5fLrXYHpqHDjvWOeAV6p+y+10V+8tol2d+mTQ2bCgo4zM PniqGYJRt9af7B8x9G/qFHeiT7a4oRxW6wvGI+gY6qBdWbXB/Ano2Nphui4rZCXh +YemLZus2lA+FPHvjOx1tkDEz3A8RySFLNQXCwaJpMM5x00R6lUN -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:55 2025 by rpki-client