This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/QOqyem5Z3yL2Ay6qXVGZl8mv2zk.roa File: QOqyem5Z3yL2Ay6qXVGZl8mv2zk.roa (raw, json) Hash identifier: mHRjozSXu9dRrgKtsLu6Unb/EKc9QC43nbhQ55iX4fs= Subject key identifier: 40:EA:B2:7A:6E:59:DF:22:F6:03:2E:AA:5D:51:99:97:C9:AF:DB:39 Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Certificate serial: 019B26B64A8186B531F37E82F01E88E968D8 Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/QOqyem5Z3yL2Ay6qXVGZl8mv2zk.roa Signing time: Tue 16 Dec 2025 10:30:39 +0000 ROA not before: Tue 16 Dec 2025 10:30:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207592 IP address blocks: 141.5.96.0/19 maxlen: 19 2a02:d480:700::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:b6:4a:81:86:b5:31:f3:7e:82:f0:1e:88:e9:68:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Validity Not Before: Dec 16 10:30:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=40eab27a6e59df22f6032eaa5d519997c9afdb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:a7:9c:ea:df:84:76:f9:87:93:26:b9:a7: 8a:87:1d:1f:27:bb:98:ba:81:27:cf:a3:e2:30:b2: ea:0c:d8:6a:0e:85:03:ed:bb:0a:7a:bc:44:8e:56: 50:1a:f8:46:50:44:ed:eb:1e:7e:71:d9:7e:fa:a2: 20:78:fc:51:bd:91:96:86:34:ea:a0:cb:68:74:fe: 61:67:30:39:fb:83:28:33:8f:1c:bd:02:81:94:e7: 1a:35:63:b4:8e:df:ab:59:31:95:ee:7c:43:4a:1d: a9:0d:c0:26:f6:81:28:fb:b0:b1:f0:1a:57:9b:94: a5:f0:5a:12:4e:83:13:b0:7a:c1:93:25:f0:5b:21: 4f:29:9d:ad:2f:a7:ec:98:ac:0d:c5:9d:0e:35:60: cd:c9:8c:97:ad:c1:1e:a7:24:2d:81:f6:1d:c4:7f: 6b:71:44:4c:54:86:1b:9f:e9:88:4f:76:57:98:b5: 67:79:68:1d:d9:a4:f0:80:21:8a:1f:98:09:8f:70: d7:7e:61:27:ba:54:c8:91:e6:61:4c:25:8e:26:1a: 52:72:0b:5e:92:9d:ab:55:98:ee:92:cc:05:6d:4e: 5f:39:bf:f1:12:3e:df:0f:da:54:c5:a4:3a:94:6e: c9:3a:a5:cc:1f:90:34:4b:f6:93:50:2a:99:9b:a6: 02:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EA:B2:7A:6E:59:DF:22:F6:03:2E:AA:5D:51:99:97:C9:AF:DB:39 X509v3 Authority Key Identifier: keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/QOqyem5Z3yL2Ay6qXVGZl8mv2zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.5.96.0/19 IPv6: 2a02:d480:700::/42 Signature Algorithm: sha256WithRSAEncryption 94:12:23:6a:c4:02:b0:5c:98:a3:d0:de:bb:84:94:e7:5a:4b: 4d:51:0c:cb:a4:85:8b:e5:81:63:72:bb:f8:7b:76:b5:3c:3a: 0b:50:c4:2a:70:09:f6:3f:09:fc:4f:df:e6:e3:bc:78:d8:37: 4e:81:aa:b0:a3:5d:6f:34:f6:a5:4d:c1:b2:d1:b1:41:17:1f: 4b:31:f6:34:0b:ad:a7:b6:1b:5d:88:b5:c4:3b:9a:83:62:2d: 4b:cf:05:b0:6d:9e:c0:fc:f0:cf:65:8c:1c:e8:f1:78:36:47: c5:93:53:e5:cf:1b:06:e0:29:d3:0c:9e:bf:33:89:b3:5f:76: ab:92:39:d3:e6:ff:1c:df:ef:67:85:18:e3:4a:f1:46:e0:71: 3b:b3:37:93:5f:2d:da:45:74:14:c4:3f:18:58:a8:ff:c9:54: f2:aa:8b:63:65:16:5d:4c:9d:4e:bd:e8:c1:9a:6b:97:f0:ea: 17:86:49:03:59:7d:aa:84:ee:b0:0d:41:be:78:3d:48:a0:df: ea:54:29:df:87:a9:1e:d9:21:d7:0d:ea:fb:e4:ba:bd:64:ea: 22:15:2f:b7:40:cb:ab:5d:9e:8f:e7:0d:41:f1:67:e1:08:94: 21:75:55:a7:c0:6f:f5:42:b2:e8:7f:3a:eb:0c:f7:a6:37:95: 8b:18:d9:93 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZsmtkqBhrUx836C8B6I6WjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx ZDYyNDQwHhcNMjUxMjE2MTAzMDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGVhYjI3YTZlNTlkZjIyZjYwMzJlYWE1ZDUxOTk5N2M5YWZkYjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlWnnOrfhHb5h5MmuaeKhx0fJ7uY uoEnz6PiMLLqDNhqDoUD7bsKerxEjlZQGvhGUETt6x5+cdl++qIgePxRvZGWhjTq oMtodP5hZzA5+4MoM48cvQKBlOcaNWO0jt+rWTGV7nxDSh2pDcAm9oEo+7Cx8BpX m5Sl8FoSToMTsHrBkyXwWyFPKZ2tL6fsmKwNxZ0ONWDNyYyXrcEepyQtgfYdxH9r cURMVIYbn+mIT3ZXmLVneWgd2aTwgCGKH5gJj3DXfmEnulTIkeZhTCWOJhpScgte kp2rVZjukswFbU5fOb/xEj7fD9pUxaQ6lG7JOqXMH5A0S/aTUCqZm6YC+QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEDqsnpuWd8i9gMuql1RmZfJr9s5MB8GA1UdIwQY MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt NTBjMTZiZGQ1YzI0LzEvUU9xeWVtNVozeUwyQXk2cVhWR1psOG12MnprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0 LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQFjQVgMA8E AgACMAkDBwYqAtSABwAwDQYJKoZIhvcNAQELBQADggEBAJQSI2rEArBcmKPQ3ruE lOdaS01RDMukhYvlgWNyu/h7drU8OgtQxCpwCfY/CfxP3+bjvHjYN06BqrCjXW80 9qVNwbLRsUEXH0sx9jQLrae2G12ItcQ7moNiLUvPBbBtnsD88M9ljBzo8Xg2R8WT U+XPGwbgKdMMnr8zibNfdquSOdPm/xzf72eFGONK8UbgcTuzN5NfLdpFdBTEPxhY qP/JVPKqi2NlFl1MnU696MGaa5fw6heGSQNZfaqE7rANQb54PUig3+pUKd+HqR7Z IdcN6vvkur1k6iIVL7dAy6tdno/nDUHxZ+EIlCF1VafAb/VCsuh/OusM96Y3lYsY 2ZM= -----END CERTIFICATE-----Generated at Wed Dec 17 19:16:55 2025 by rpki-client