This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/qkFHRVpaBZPmYbz03BueADPe6do.roa File: qkFHRVpaBZPmYbz03BueADPe6do.roa (raw, json) Hash identifier: rI9MFtCLfeJbGGzg/AzMeZrhOECi758EeNdJ9PEXWqY= Subject key identifier: AA:41:47:45:5A:5A:05:93:E6:61:BC:F4:DC:1B:9E:00:33:DE:E9:DA Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019A91DB44A99263AFB90E77EB5616683A9F Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/qkFHRVpaBZPmYbz03BueADPe6do.roa Signing time: Mon 17 Nov 2025 12:47:37 +0000 ROA not before: Mon 17 Nov 2025 12:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213607 IP address blocks: 195.216.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:db:44:a9:92:63:af:b9:0e:77:eb:56:16:68:3a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Nov 17 12:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa4147455a5a0593e661bcf4dc1b9e0033dee9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:c7:24:0d:56:cb:2e:2c:c9:fa:7a:c0:95: dc:f9:cb:07:1e:7d:11:8f:76:8e:16:40:2d:a6:1c: 45:21:ad:c3:2b:c4:ac:7e:4b:29:5a:68:f9:a8:d2: fc:0c:fc:38:8d:88:9b:04:a5:2f:4b:f1:00:f2:41: de:79:95:36:04:32:ce:1b:b5:07:21:4e:e7:ca:87: 47:78:68:e9:51:67:a8:98:8a:81:d6:4a:1e:a9:49: 76:20:24:1a:84:c8:71:7c:99:83:5b:05:d1:05:b8: 04:3a:1b:13:40:7e:d1:c1:d1:61:f0:cc:61:7f:c2: de:4a:94:a1:43:9b:04:64:0c:ef:34:da:d0:19:84: e9:26:2e:fc:1e:73:9c:2d:a7:7c:20:1f:0b:75:42: e1:8a:64:93:70:8e:41:88:0c:91:7a:c6:ad:65:49: af:89:1a:72:05:9a:e0:01:47:ac:12:a1:20:c1:ca: 87:b6:89:4b:07:3d:0f:f1:46:22:3b:73:ef:11:78: f0:73:36:03:33:1b:ce:e5:9e:ee:44:5a:51:2a:f7: 2b:d2:f1:7e:ad:97:46:60:25:eb:31:1b:52:03:a9: 15:a9:86:92:75:c5:80:91:f9:6f:b5:79:87:5e:8f: dc:bb:84:94:30:18:41:16:9d:95:b2:d8:84:6c:f8: 58:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:41:47:45:5A:5A:05:93:E6:61:BC:F4:DC:1B:9E:00:33:DE:E9:DA X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/qkFHRVpaBZPmYbz03BueADPe6do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.180.0/24 Signature Algorithm: sha256WithRSAEncryption 09:46:03:5d:3e:d2:20:77:51:ac:8b:d2:83:87:42:c3:e2:b1: df:83:f5:96:b3:04:09:a4:90:a9:7d:d7:63:b2:90:c8:f5:17: 49:4f:c2:12:db:85:0d:7a:8e:b5:74:e0:20:c4:22:e3:be:e1: dc:7c:14:df:bf:d8:83:ef:fa:34:ff:91:85:72:e4:91:57:c9: 97:1f:ad:c5:a2:60:a9:c6:08:41:27:3d:3a:d4:b1:85:6f:98: 8b:df:28:ca:96:31:14:1b:9b:26:92:25:2d:1f:cd:c5:2a:8f: eb:fb:75:54:57:8a:12:e5:9e:a2:78:31:5b:02:4d:9a:5a:1f: aa:29:93:65:46:2e:a7:92:47:b4:48:54:a5:37:14:2a:0d:f8: a9:72:03:cc:85:ec:9d:f3:a0:a3:ad:6f:83:4a:06:41:0e:2e: b5:3b:a0:26:e3:28:ed:18:89:f8:35:77:1f:6e:ad:e4:b9:b2: 06:c2:42:f4:fe:a7:8b:61:f2:06:90:dd:07:3f:e2:50:36:de: 09:92:f5:7d:99:b9:58:4a:a2:62:3f:ee:61:5f:ba:b3:82:23: 18:81:df:40:9f:96:39:66:78:67:d3:a1:67:1b:6c:c9:90:f1: a7:62:3b:63:3b:bf:53:de:a9:cf:ec:9d:03:80:a1:93:80:71: 68:05:7c:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqR20SpkmOvuQ5361YWaDqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUxMTE3MTI0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTQxNDc0NTVhNWEwNTkzZTY2MWJjZjRkYzFiOWUwMDMzZGVlOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogjHJA1Wyy4syfp6wJXc+csHHn0R j3aOFkAtphxFIa3DK8SsfkspWmj5qNL8DPw4jYibBKUvS/EA8kHeeZU2BDLOG7UH IU7nyodHeGjpUWeomIqB1koeqUl2ICQahMhxfJmDWwXRBbgEOhsTQH7RwdFh8Mxh f8LeSpShQ5sEZAzvNNrQGYTpJi78HnOcLad8IB8LdULhimSTcI5BiAyResatZUmv iRpyBZrgAUesEqEgwcqHtolLBz0P8UYiO3PvEXjwczYDMxvO5Z7uRFpRKvcr0vF+ rZdGYCXrMRtSA6kVqYaSdcWAkflvtXmHXo/cu4SUMBhBFp2VstiEbPhY8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKpBR0VaWgWT5mG89NwbngAz3unaMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvcWtGSFJWcGFCWlBtWWJ6MDNCdWVBRFBlNmRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9i0MA0G CSqGSIb3DQEBCwUAA4IBAQAJRgNdPtIgd1Gsi9KDh0LD4rHfg/WWswQJpJCpfddj spDI9RdJT8IS24UNeo61dOAgxCLjvuHcfBTfv9iD7/o0/5GFcuSRV8mXH63FomCp xghBJz061LGFb5iL3yjKljEUG5smkiUtH83FKo/r+3VUV4oS5Z6ieDFbAk2aWh+q KZNlRi6nkke0SFSlNxQqDfipcgPMheyd86CjrW+DSgZBDi61O6Am4yjtGIn4NXcf bq3kubIGwkL0/qeLYfIGkN0HP+JQNt4JkvV9mblYSqJiP+5hX7qzgiMYgd9An5Y5 Znhn06FnG2zJkPGnYjtjO79T3qnP7J0DgKGTgHFoBXyq -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:11 2025 by rpki-client