This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/qrjM3Xke9StQsD7QGEaMB1cnPCg.roa File: qrjM3Xke9StQsD7QGEaMB1cnPCg.roa (raw, json) Hash identifier: 5cHU2tUbN3WIKRuo57dJz/SiBbrBTxsVU0FxctK2/WQ= Subject key identifier: AA:B8:CC:DD:79:1E:F5:2B:50:B0:3E:D0:18:46:8C:07:57:27:3C:28 Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0 Certificate serial: 019AEE34CF08DA2C91330985DB3B51E96256 Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/qrjM3Xke9StQsD7QGEaMB1cnPCg.roa Signing time: Fri 05 Dec 2025 11:10:29 +0000 ROA not before: Fri 05 Dec 2025 11:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42314 IP address blocks: 85.114.96.0/24 maxlen: 24 85.114.104.0/24 maxlen: 24 85.114.105.0/24 maxlen: 24 85.114.106.0/24 maxlen: 24 85.114.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:34:cf:08:da:2c:91:33:09:85:db:3b:51:e9:62:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0 Validity Not Before: Dec 5 11:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aab8ccdd791ef52b50b03ed018468c0757273c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:e1:e2:63:05:8b:44:ee:86:3a:b9:c1:5a: 77:df:84:ce:29:c9:93:e5:e9:b4:df:57:c1:0c:54: 4b:36:f3:56:44:fc:b9:89:09:e2:46:0a:26:85:c1: 76:f5:7b:93:be:e4:41:d3:f0:a8:40:c1:4b:2c:0a: 1c:c0:ee:9b:e1:cb:c5:fd:0e:10:fd:e6:2a:28:a8: 53:b7:6d:aa:77:0c:3b:d8:46:79:18:39:24:a9:1f: 23:96:83:dd:38:29:64:db:6e:b3:5f:9f:3a:ae:89: 09:48:79:cf:4f:65:06:bd:d0:9f:e4:25:54:34:c5: 6d:20:45:89:9b:f5:7d:4f:5e:fc:94:24:dd:bc:bd: b5:3e:1b:99:af:0a:73:ba:c8:12:a7:da:8c:3d:c9: 08:a5:97:56:b9:95:08:59:6f:72:33:05:77:75:9b: 64:73:9c:a7:38:81:4d:7d:64:f0:b8:bf:b4:6d:c0: 06:33:55:84:a4:6c:41:77:b4:b1:4d:d8:a7:e8:65: 39:06:7d:66:0d:89:0e:68:e1:cb:fe:f4:a1:af:ef: c6:39:7d:18:a4:77:a2:7e:31:4b:50:95:73:3f:c7: f5:e4:c7:2f:96:80:58:78:9e:05:83:03:9c:94:61: 06:75:e0:1c:e2:d1:19:dd:94:f3:e6:0b:b4:8b:80: a7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B8:CC:DD:79:1E:F5:2B:50:B0:3E:D0:18:46:8C:07:57:27:3C:28 X509v3 Authority Key Identifier: keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/qrjM3Xke9StQsD7QGEaMB1cnPCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.114.96.0/24 85.114.104.0/22 Signature Algorithm: sha256WithRSAEncryption 01:b9:70:60:47:c9:ac:e5:cb:b2:fc:f0:15:54:92:b8:c8:1b: 39:88:c3:30:1f:0f:e5:4c:79:07:c0:81:d6:f1:27:23:ed:71: c8:06:6c:b9:06:bb:17:4b:b5:00:ac:7c:70:3e:ee:0c:ab:ea: bd:9a:fd:25:0a:3f:c2:36:32:92:ca:ce:f9:ce:75:36:64:e4: 71:50:ef:a9:c8:0e:0a:38:23:23:14:6f:89:a5:ec:19:03:ee: 11:8e:61:89:30:b5:3d:d0:a0:c1:b8:d0:46:8c:0f:7b:9c:33: 12:87:85:ce:d1:c5:71:52:21:0b:8d:23:6f:59:a4:7d:1d:ac: b5:97:92:0f:01:5e:b0:4c:6c:17:35:cc:e2:fd:5b:e5:b5:72: 68:00:98:ff:0b:43:2b:bb:0e:d6:7a:63:48:c7:68:c4:a3:7a: 96:03:cf:c7:bc:e0:17:2b:69:4d:99:66:c2:16:37:fe:20:93: 8d:20:e5:73:07:2b:dd:a7:58:a0:28:82:82:6d:4c:78:a4:6e: 77:18:f3:0d:91:92:53:1c:dc:05:9f:79:71:c3:f8:fd:6c:ed: 02:31:b8:f5:59:7b:f2:f0:2d:5a:a6:c0:6d:d9:62:98:9f:09: 43:fa:8e:b9:6d:df:bf:ca:4f:50:14:e2:19:67:db:9d:86:e6: 44:e7:15:64 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZruNM8I2iyRMwmF2ztR6WJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZDI0NmUxODMwNTY3YWIxMTUyMzFkYjc3NWYyODc5ZDk5 YWYwYTAwHhcNMjUxMjA1MTExMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWI4Y2NkZDc5MWVmNTJiNTBiMDNlZDAxODQ2OGMwNzU3MjczYzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp3h4mMFi0Tuhjq5wVp334TOKcmT 5em031fBDFRLNvNWRPy5iQniRgomhcF29XuTvuRB0/CoQMFLLAocwO6b4cvF/Q4Q /eYqKKhTt22qdww72EZ5GDkkqR8jloPdOClk226zX586rokJSHnPT2UGvdCf5CVU NMVtIEWJm/V9T178lCTdvL21PhuZrwpzusgSp9qMPckIpZdWuZUIWW9yMwV3dZtk c5ynOIFNfWTwuL+0bcAGM1WEpGxBd7SxTdin6GU5Bn1mDYkOaOHL/vShr+/GOX0Y pHeifjFLUJVzP8f15McvloBYeJ4FgwOclGEGdeAc4tEZ3ZTz5gu0i4CntQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKq4zN15HvUrULA+0BhGjAdXJzwoMB8GA1UdIwQY MBaAFNzSRuGDBWerEVIx23dfKHnZmvCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2Qt YTQxZTYyMGJhM2ViLzEvcXJqTTNYa2U5U3RRc0Q3UUdFYU1CMWNuUENnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2QtYTQxZTYyMGJhM2Vi LzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVXJgAwQC VXJoMA0GCSqGSIb3DQEBCwUAA4IBAQABuXBgR8ms5cuy/PAVVJK4yBs5iMMwHw/l THkHwIHW8Scj7XHIBmy5BrsXS7UArHxwPu4Mq+q9mv0lCj/CNjKSys75znU2ZORx UO+pyA4KOCMjFG+JpewZA+4RjmGJMLU90KDBuNBGjA97nDMSh4XO0cVxUiELjSNv WaR9Hay1l5IPAV6wTGwXNczi/VvltXJoAJj/C0Mruw7WemNIx2jEo3qWA8/HvOAX K2lNmWbCFjf+IJONIOVzByvdp1igKIKCbUx4pG53GPMNkZJTHNwFn3lxw/j9bO0C Mbj1WXvy8C1apsBt2WKYnwlD+o65bd+/yk9QFOIZZ9udhuZE5xVk -----END CERTIFICATE-----Generated at Sat Dec 6 13:12:32 2025 by rpki-client