This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/QkwgvOARZ0WArMcZyBkhE2Jb76g.roa File: QkwgvOARZ0WArMcZyBkhE2Jb76g.roa (raw, json) Hash identifier: ToI6x0zU+v+8pQ6FvMmC9PVdbpiMYXQKPnaPxXzGxiA= Subject key identifier: 42:4C:20:BC:E0:11:67:45:80:AC:C7:19:C8:19:21:13:62:5B:EF:A8 Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2 Certificate serial: 019AB9CF330C20BD2E8AF0EC1FB0C91674DB Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/QkwgvOARZ0WArMcZyBkhE2Jb76g.roa Signing time: Tue 25 Nov 2025 06:59:15 +0000 ROA not before: Tue 25 Nov 2025 06:59:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201179 IP address blocks: 176.110.124.0/24 maxlen: 24 176.110.125.0/24 maxlen: 24 176.110.126.0/24 maxlen: 24 185.18.220.0/24 maxlen: 24 2a13:1240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:cf:33:0c:20:bd:2e:8a:f0:ec:1f:b0:c9:16:74:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2 Validity Not Before: Nov 25 06:59:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=424c20bce011674580acc719c8192113625befa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:1d:1d:b8:99:a8:41:bd:73:09:67:20:17: 9b:02:a5:fb:ca:a7:4e:8f:89:17:da:22:7f:7a:88: 32:ab:8c:8b:76:c6:aa:5c:e6:8c:f2:36:89:ab:e1: 8a:70:17:2d:b9:66:94:2b:8a:25:51:fa:30:61:f1: 7d:89:98:30:2d:50:f5:39:af:06:f0:6d:67:5b:48: 61:86:72:7e:8b:41:e4:2f:d5:74:65:90:7d:c6:32: 2a:52:7a:36:c1:26:03:a9:3c:90:0e:e1:b0:79:97: 24:1a:29:96:d2:4b:3b:02:59:7a:59:b8:f0:b3:d1: ed:0b:af:61:7e:eb:d7:2a:10:0f:c8:8d:12:ed:91: a8:9f:cf:a8:ef:0b:d0:c4:1d:ab:f3:61:dc:67:08: bc:a6:7d:0a:23:a1:08:95:51:06:81:74:b8:29:5c: 0a:1c:f8:9e:93:46:48:c3:8a:c7:a1:a1:bc:d9:15: c0:a8:58:60:5a:fc:8e:a6:ef:22:97:55:e2:95:38: d9:73:3d:c7:14:ad:d8:75:fb:6d:63:b5:12:dc:35: 2f:b0:ec:a3:cc:53:f4:f4:aa:b1:91:20:30:b1:17: b8:69:20:c0:0d:76:b9:20:ed:54:f5:46:0e:7e:cb: 8e:7e:d4:ec:6a:b1:4f:cc:9d:d0:75:0d:5a:9e:97: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4C:20:BC:E0:11:67:45:80:AC:C7:19:C8:19:21:13:62:5B:EF:A8 X509v3 Authority Key Identifier: keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/QkwgvOARZ0WArMcZyBkhE2Jb76g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.110.124.0-176.110.126.255 185.18.220.0/24 IPv6: 2a13:1240::/29 Signature Algorithm: sha256WithRSAEncryption 82:8c:1c:f9:bf:b8:2a:c9:50:5f:2e:f7:3b:f1:e5:39:17:80: 28:6e:da:35:64:ac:53:ca:1c:68:6a:4d:c9:39:e7:c3:b6:c3: 33:ff:7e:50:d9:b5:50:70:01:9e:e0:6e:de:7a:1e:8a:bd:df: 31:66:a8:48:28:56:ca:4c:d2:89:8a:38:79:19:65:38:85:e8: 24:96:1b:39:e8:c1:e9:da:7b:db:e1:3e:40:e3:3c:73:62:1f: 63:22:86:dc:24:0c:35:91:fa:59:53:f8:93:3f:a3:32:ea:b6: 37:07:77:ca:9f:8e:5f:79:2a:6e:ea:d1:a4:56:ca:a2:63:48: 57:2c:2e:ee:ac:06:a3:2a:93:bf:db:00:af:2f:1d:3a:a0:ee: 8d:7f:fb:9f:0b:e8:28:49:a1:a0:a1:31:7f:57:8f:22:ea:94: 30:cd:ae:f9:14:95:d6:fb:c5:fa:f2:99:f0:d0:f8:61:09:3d: d4:6d:5d:3c:a0:44:af:c7:cd:dd:8d:5e:8b:91:78:39:1b:46: 1e:a3:fc:80:8e:f4:01:0a:df:23:67:08:9a:93:23:02:db:be: f1:81:df:92:39:33:d0:da:b8:bf:c1:83:31:e5:99:c7:98:d6: 72:8e:0a:5d:21:20:0f:c3:7b:54:30:de:0a:a9:82:5c:66:65: e8:56:50:fc -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZq5zzMMIL0uivDsH7DJFnTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGFkYmEyNjA0OTM0NzM4YzdjOTY5MmEwYjNhYjdiMzBh ODJiYjIwHhcNMjUxMTI1MDY1OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjRjMjBiY2UwMTE2NzQ1ODBhY2M3MTljODE5MjExMzYyNWJlZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz0dHbiZqEG9cwlnIBebAqX7yqdO j4kX2iJ/eogyq4yLdsaqXOaM8jaJq+GKcBctuWaUK4olUfowYfF9iZgwLVD1Oa8G 8G1nW0hhhnJ+i0HkL9V0ZZB9xjIqUno2wSYDqTyQDuGweZckGimW0ks7All6Wbjw s9HtC69hfuvXKhAPyI0S7ZGon8+o7wvQxB2r82HcZwi8pn0KI6EIlVEGgXS4KVwK HPiek0ZIw4rHoaG82RXAqFhgWvyOpu8il1XilTjZcz3HFK3YdfttY7US3DUvsOyj zFP09KqxkSAwsRe4aSDADXa5IO1U9UYOfsuOftTsarFPzJ3QdQ1anpfrQwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFEJMILzgEWdFgKzHGcgZIRNiW++oMB8GA1UdIwQY MBaAFI8K26JgSTRzjHyWkqCzq3swqCuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEt N2JhZmRlNGM0YjI0LzEvUWt3Z3ZPQVJaMFdBck1jWnlCa2hFMkpiNzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEtN2JhZmRlNGM0YjI0 LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAKwbnwD BACwbn4DBAC5EtwwDQQCAAIwBwMFAyoTEkAwDQYJKoZIhvcNAQELBQADggEBAIKM HPm/uCrJUF8u9zvx5TkXgChu2jVkrFPKHGhqTck558O2wzP/flDZtVBwAZ7gbt56 Hoq93zFmqEgoVspM0omKOHkZZTiF6CSWGznowenae9vhPkDjPHNiH2MihtwkDDWR +llT+JM/ozLqtjcHd8qfjl95Km7q0aRWyqJjSFcsLu6sBqMqk7/bAK8vHTqg7o1/ +58L6ChJoaChMX9XjyLqlDDNrvkUldb7xfrymfDQ+GEJPdRtXTygRK/Hzd2NXouR eDkbRh6j/ICO9AEK3yNnCJqTIwLbvvGB35I5M9DauL/BgzHlmceY1nKOCl0hIA/D e1Qw3gqpglxmZehWUPw= -----END CERTIFICATE-----Generated at Sat Dec 6 09:41:57 2025 by rpki-client