This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/QBzq9SwT5Mj7Gipr9Se8Luh44tY.roa File: QBzq9SwT5Mj7Gipr9Se8Luh44tY.roa (raw, json) Hash identifier: G8hbbzFis0gYCX0QYtBRD4Pqznb+xerkkNt98SZq2jU= Subject key identifier: 40:1C:EA:F5:2C:13:E4:C8:FB:1A:2A:6B:F5:27:BC:2E:E8:78:E2:D6 Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019A7390C0FB790326BDC7ABD162294AFFAD Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/QBzq9SwT5Mj7Gipr9Se8Luh44tY.roa Signing time: Tue 11 Nov 2025 15:37:37 +0000 ROA not before: Tue 11 Nov 2025 15:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21396 IP address blocks: 93.113.110.0/23 maxlen: 23 93.114.86.0/23 maxlen: 23 93.114.184.0/23 maxlen: 23 93.114.234.0/23 maxlen: 23 176.56.56.0/21 maxlen: 21 185.17.180.0/22 maxlen: 22 185.65.40.0/22 maxlen: 22 185.164.196.0/22 maxlen: 22 188.212.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:90:c0:fb:79:03:26:bd:c7:ab:d1:62:29:4a:ff:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Nov 11 15:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=401ceaf52c13e4c8fb1a2a6bf527bc2ee878e2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:6b:e8:b3:3b:20:db:19:06:19:8f:d9:86: 73:60:85:60:b8:03:ee:b4:d8:cd:e3:62:1f:c9:d6: ea:86:37:1f:c9:0a:16:e6:fe:77:ed:6f:04:e6:82: 1a:de:7b:fd:b5:36:b6:9e:e5:d8:91:7a:e6:44:3c: 27:2f:8a:ff:2f:79:df:26:6a:5d:cf:78:ce:56:2a: ba:76:a3:b2:fb:a3:b7:fe:7c:0e:0b:49:53:ab:23: 17:a4:12:37:41:86:b3:70:4b:21:94:47:a2:b8:63: 9b:7c:57:9a:68:c6:fb:03:e8:73:d0:14:6f:c5:60: f9:6b:d2:1e:05:46:26:bc:b8:70:a9:90:d8:4b:b6: 5d:07:b4:33:ef:eb:9e:a5:a1:34:80:b0:62:a6:8a: 08:24:40:a6:55:d3:77:78:c4:c2:99:9a:c4:69:10: ae:03:8f:12:92:93:7a:2e:68:6a:45:21:da:70:f4: 60:fd:e0:39:50:b1:5b:c3:67:f9:f2:f3:7a:63:24: f2:e0:6b:43:85:d9:37:66:35:29:8d:0d:1a:fa:10: f3:9a:a0:42:7c:e3:2c:dc:b5:05:6b:dd:32:5f:00: df:b2:71:b9:bd:43:c6:e6:cc:6f:4a:d7:ef:6e:d0: 0c:e1:50:62:2a:30:bf:f7:2b:44:b3:c7:af:3d:13: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1C:EA:F5:2C:13:E4:C8:FB:1A:2A:6B:F5:27:BC:2E:E8:78:E2:D6 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/QBzq9SwT5Mj7Gipr9Se8Luh44tY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.113.110.0/23 93.114.86.0/23 93.114.184.0/23 93.114.234.0/23 176.56.56.0/21 185.17.180.0/22 185.65.40.0/22 185.164.196.0/22 188.212.34.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:ae:a8:ff:71:4b:4a:7f:09:cb:b7:54:28:51:fc:f0:46:79: c4:f7:62:4f:ed:b6:56:bc:1c:89:90:7b:d3:5b:ba:a7:cb:c6: ac:fd:9a:06:97:27:92:71:84:a9:3e:08:2f:89:90:19:86:54: 85:db:6d:10:cd:e6:ff:0f:29:d6:ee:6a:91:57:19:dc:b6:3b: 34:98:2a:e0:06:32:88:0e:60:3a:51:85:54:bc:94:d4:f6:8a: d6:9a:31:4d:77:90:2d:16:00:a8:17:bd:91:04:06:bc:b5:24: c9:e6:0a:fe:75:50:6e:70:f3:29:99:9e:cc:48:83:1f:29:4c: 59:da:b9:bf:26:b6:a4:0e:64:c2:56:25:7b:d0:9a:a6:da:44: ef:e6:db:70:fb:59:52:a6:18:fa:04:8e:3d:af:af:bd:fa:31: e0:f2:1e:89:a0:e6:dc:2f:18:fb:12:a6:39:4b:66:0d:86:c0: 4d:23:54:34:6d:e1:d2:65:ae:3a:75:31:e4:c2:f9:c3:3f:6c: 11:86:26:9e:f1:76:30:dd:7b:4c:1d:e8:d9:67:43:63:eb:49: c8:83:73:eb:ec:1e:72:05:a0:0a:a5:b0:f1:1d:13:b1:40:ed: 3a:02:6e:0c:c2:e3:73:57:e8:56:ed:8e:58:55:51:89:3a:0a: 59:c4:3b:af -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZpzkMD7eQMmvcer0WIpSv+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjUxMTExMTUzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDFjZWFmNTJjMTNlNGM4ZmIxYTJhNmJmNTI3YmMyZWU4NzhlMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphVr6LM7INsZBhmP2YZzYIVguAPu tNjN42IfydbqhjcfyQoW5v537W8E5oIa3nv9tTa2nuXYkXrmRDwnL4r/L3nfJmpd z3jOViq6dqOy+6O3/nwOC0lTqyMXpBI3QYazcEshlEeiuGObfFeaaMb7A+hz0BRv xWD5a9IeBUYmvLhwqZDYS7ZdB7Qz7+uepaE0gLBipooIJECmVdN3eMTCmZrEaRCu A48SkpN6LmhqRSHacPRg/eA5ULFbw2f58vN6YyTy4GtDhdk3ZjUpjQ0a+hDzmqBC fOMs3LUFa90yXwDfsnG5vUPG5sxvStfvbtAM4VBiKjC/9ytEs8evPRP4nwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFEAc6vUsE+TI+xoqa/UnvC7oeOLWMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvUUJ6cTlTd1Q1TWo3R2lwcjlTZThMdWg0NHRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBXXFuAwQB XXJWAwQBXXK4AwQBXXLqAwQDsDg4AwQCuRG0AwQCuUEoAwQCuaTEAwQBvNQiMA0G CSqGSIb3DQEBCwUAA4IBAQAbrqj/cUtKfwnLt1QoUfzwRnnE92JP7bZWvByJkHvT W7qny8as/ZoGlyeScYSpPggviZAZhlSF220Qzeb/DynW7mqRVxnctjs0mCrgBjKI DmA6UYVUvJTU9orWmjFNd5AtFgCoF72RBAa8tSTJ5gr+dVBucPMpmZ7MSIMfKUxZ 2rm/JrakDmTCViV70Jqm2kTv5ttw+1lSphj6BI49r6+9+jHg8h6JoObcLxj7EqY5 S2YNhsBNI1Q0beHSZa46dTHkwvnDP2wRhiae8XYw3XtMHejZZ0Nj60nIg3Pr7B5y BaAKpbDxHROxQO06Am4MwuNzV+hW7Y5YVVGJOgpZxDuv -----END CERTIFICATE-----Generated at Sat Dec 6 17:58:35 2025 by rpki-client