This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/q1AARCh2M8OJiPaQyTiDxt6sXBU.roa File: q1AARCh2M8OJiPaQyTiDxt6sXBU.roa (raw, json) Hash identifier: pkcKypmDmSSj0mQfIXFMagUZOlBQZmMJdeGD/Uwa8UE= Subject key identifier: AB:50:00:44:28:76:33:C3:89:88:F6:90:C9:38:83:C6:DE:AC:5C:15 Certificate issuer: /CN=fbc11e3722059687b7b21ce6ef6e06e13aae7ff7 Certificate serial: 019A7E3359B43EBD577BEC40F879F5DA3818 Authority key identifier: FB:C1:1E:37:22:05:96:87:B7:B2:1C:E6:EF:6E:06:E1:3A:AE:7F:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-8EeNyIFloe3shzm724G4Tquf_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/q1AARCh2M8OJiPaQyTiDxt6sXBU.roa Signing time: Thu 13 Nov 2025 17:11:25 +0000 ROA not before: Thu 13 Nov 2025 17:11:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215558 IP address blocks: 5.154.183.0/24 maxlen: 24 2a04:a8c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-8EeNyIFloe3shzm724G4Tquf_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:33:59:b4:3e:bd:57:7b:ec:40:f8:79:f5:da:38:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbc11e3722059687b7b21ce6ef6e06e13aae7ff7 Validity Not Before: Nov 13 17:11:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab500044287633c38988f690c93883c6deac5c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:91:f1:9f:41:d5:f3:4d:fe:78:6b:f7:9a: 1f:7b:38:7c:9b:92:39:76:54:96:a8:9c:0d:e6:f0: c4:62:df:d0:de:59:ed:7f:1a:9e:c0:70:b4:f7:c1: be:5b:75:89:d9:2e:c2:19:69:24:ad:1b:c6:d5:aa: 2b:93:b9:f7:e9:c0:d1:8a:9e:fa:d8:a0:c2:8d:37: 6f:54:5c:b5:e1:3b:fa:99:97:7a:cb:c7:eb:56:ca: 8a:52:64:83:a0:9e:71:4c:c6:a1:4a:02:9f:c6:98: 84:a5:98:87:a2:49:67:f5:6b:7e:81:72:7e:33:d3: 56:d5:f1:da:7b:23:27:68:a3:7e:5c:53:90:4a:95: cb:13:c7:fa:4f:79:31:87:98:9a:6b:e8:5b:22:43: c7:2a:84:b6:3a:20:1a:ec:e1:3e:20:93:56:ad:c1: c5:6f:2a:a7:c5:12:c7:a4:07:d7:df:56:e2:35:d5: b1:56:e7:7c:c0:31:24:0c:1a:e7:0c:8b:b8:38:d0: 7d:d2:d2:8f:da:90:94:b5:4d:a0:82:42:eb:a2:4d: 13:cb:79:cc:d6:08:c9:f7:87:73:ad:ad:64:8a:43: 36:c6:22:c0:6f:f6:9e:30:9e:7d:e8:9a:1f:e2:2c: ff:d1:e6:ce:6f:24:8a:81:b3:1b:f5:b1:4c:da:1e: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:50:00:44:28:76:33:C3:89:88:F6:90:C9:38:83:C6:DE:AC:5C:15 X509v3 Authority Key Identifier: keyid:FB:C1:1E:37:22:05:96:87:B7:B2:1C:E6:EF:6E:06:E1:3A:AE:7F:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8EeNyIFloe3shzm724G4Tquf_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/q1AARCh2M8OJiPaQyTiDxt6sXBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.183.0/24 IPv6: 2a04:a8c0::/29 Signature Algorithm: sha256WithRSAEncryption 47:fe:73:76:1f:ab:fa:4c:ce:a8:64:93:b8:9b:19:b1:c2:fc: f4:64:5c:fe:1b:33:ab:b9:12:df:d2:7b:b7:80:6a:39:10:40: 58:db:16:18:c7:a8:65:ec:15:f0:17:22:ad:b9:7c:b7:ee:e0: 02:97:a1:74:38:e0:79:c4:d5:2d:a6:6b:df:20:89:bb:3b:12: 6e:26:55:a0:91:f9:7e:5f:f0:b6:72:01:a4:74:16:96:8d:6a: 9e:be:b4:43:d7:e9:b8:fe:9d:ae:1b:8f:b0:df:84:42:9d:19: 36:34:73:a2:0f:84:24:90:fc:b2:c8:93:0c:7c:05:38:6c:33: 0e:c6:48:34:b9:02:a6:ef:54:4a:69:40:a0:52:02:f7:6f:32: bc:a1:fb:60:e3:09:08:b7:7a:cb:62:9f:5b:f6:21:93:60:1c: 60:75:48:b9:99:49:be:34:bc:a3:ed:95:9d:23:a6:b4:2a:4f: 53:fd:da:73:8d:ea:a1:9e:23:35:3b:9a:1d:bc:c9:1b:e1:22: f5:ef:04:e4:fd:42:2f:c2:ba:dc:e7:24:39:da:3a:40:e5:ee: 42:0f:94:2b:4e:51:f7:c3:62:92:ad:8d:cd:ca:0e:62:59:f0: 1a:81:1a:21:f9:d5:64:92:a8:f2:f2:40:30:f6:6c:bc:a1:78: 53:58:91:a7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZp+M1m0Pr1Xe+xA+Hn12jgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYzExZTM3MjIwNTk2ODdiN2IyMWNlNmVmNmUwNmUxM2Fh ZTdmZjcwHhcNMjUxMTEzMTcxMTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjUwMDA0NDI4NzYzM2MzODk4OGY2OTBjOTM4ODNjNmRlYWM1YzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSaR8Z9B1fNN/nhr95ofezh8m5I5 dlSWqJwN5vDEYt/Q3lntfxqewHC098G+W3WJ2S7CGWkkrRvG1aork7n36cDRip76 2KDCjTdvVFy14Tv6mZd6y8frVsqKUmSDoJ5xTMahSgKfxpiEpZiHokln9Wt+gXJ+ M9NW1fHaeyMnaKN+XFOQSpXLE8f6T3kxh5iaa+hbIkPHKoS2OiAa7OE+IJNWrcHF byqnxRLHpAfX31biNdWxVud8wDEkDBrnDIu4ONB90tKP2pCUtU2ggkLrok0Ty3nM 1gjJ94dzra1kikM2xiLAb/aeMJ596Jof4iz/0ebObySKgbMb9bFM2h5sswIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKtQAEQodjPDiYj2kMk4g8berFwVMB8GA1UdIwQY MBaAFPvBHjciBZaHt7Ic5u9uBuE6rn/3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04RWVOeUlGbG9lM3Noem03MjRHNFRxdWZfYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvZWM3MTY5LTYxMjQtNGEwZC1hZGEy LWRiZmY0MDFkMTAyMS8xL3ExQUFSQ2gyTThPSmlQYVF5VGlEeHQ2c1hCVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTkvZWM3MTY5LTYxMjQtNGEwZC1hZGEyLWRiZmY0MDFkMTAy MS8xLzEtOEVlTnlJRmxvZTNzaHptNzI0RzRUcXVmX2MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAAFmrcw DQQCAAIwBwMFAyoEqMAwDQYJKoZIhvcNAQELBQADggEBAEf+c3Yfq/pMzqhkk7ib GbHC/PRkXP4bM6u5Et/Se7eAajkQQFjbFhjHqGXsFfAXIq25fLfu4AKXoXQ44HnE 1S2ma98gibs7Em4mVaCR+X5f8LZyAaR0FpaNap6+tEPX6bj+na4bj7DfhEKdGTY0 c6IPhCSQ/LLIkwx8BThsMw7GSDS5AqbvVEppQKBSAvdvMryh+2DjCQi3estin1v2 IZNgHGB1SLmZSb40vKPtlZ0jprQqT1P92nON6qGeIzU7mh28yRvhIvXvBOT9Qi/C utznJDnaOkDl7kIPlCtOUffDYpKtjc3KDmJZ8BqBGiH51WSSqPLyQDD2bLyheFNY kac= -----END CERTIFICATE-----Generated at Sat Dec 6 11:45:50 2025 by rpki-client