This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/qgKZAArtpwZNGuwsFB65WWkz-lk.roa File: qgKZAArtpwZNGuwsFB65WWkz-lk.roa (raw, json) Hash identifier: PLkGhcClNOI6nc6nrxBDCSyHpkoFTKMqFL9ulr2HzlA= Subject key identifier: AA:02:99:00:0A:ED:A7:06:4D:1A:EC:2C:14:1E:B9:59:69:33:FA:59 Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Certificate serial: 019AF436E6A9D9B882DB4052A54E8E96DB6C Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/qgKZAArtpwZNGuwsFB65WWkz-lk.roa Signing time: Sat 06 Dec 2025 15:10:29 +0000 ROA not before: Sat 06 Dec 2025 15:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210705 IP address blocks: 194.26.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:36:e6:a9:d9:b8:82:db:40:52:a5:4e:8e:96:db:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Validity Not Before: Dec 6 15:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa0299000aeda7064d1aec2c141eb9596933fa59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:93:71:e2:6c:d2:1d:77:8d:8a:7f:99:06: 29:e8:0c:ca:51:b2:85:c9:65:3c:4b:c9:1d:bb:a5: b1:c5:ce:70:45:63:a9:4c:69:ce:25:53:0e:04:84: 4d:9f:14:df:10:54:9e:41:eb:d3:39:3c:06:da:58: 9c:67:11:97:47:fb:d9:d3:df:ba:03:6a:b0:18:6f: 6c:80:3a:73:0c:5b:cd:22:e5:36:ab:cc:c1:04:8c: 2f:60:7e:de:23:3f:7f:80:18:85:2d:58:d1:fe:e6: 38:8b:e4:47:ae:ca:04:86:2f:44:d1:8f:a1:7b:e3: b2:55:25:64:31:41:74:72:55:a6:60:9e:ae:f5:17: 8d:7d:88:9c:08:c5:aa:2c:12:7c:fd:a4:8e:2a:1c: 32:d7:60:f8:1c:2c:40:3d:c9:d2:b0:06:35:98:c4: 8f:35:d4:78:1b:6b:64:26:9f:90:50:34:2b:cf:97: 7a:b1:01:85:a3:2b:99:1e:8b:99:75:f3:b7:b5:d0: 3c:a7:da:77:b4:73:23:36:9c:73:6d:cf:2b:6b:d2: eb:58:31:5d:de:15:07:9f:25:d4:f6:b3:98:93:79: b9:a4:ee:e0:0c:f7:32:9f:20:04:b6:63:cd:8f:fa: 43:22:e6:70:80:4a:6b:b9:7c:45:d9:ba:89:09:a9: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:02:99:00:0A:ED:A7:06:4D:1A:EC:2C:14:1E:B9:59:69:33:FA:59 X509v3 Authority Key Identifier: keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/qgKZAArtpwZNGuwsFB65WWkz-lk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.66.0/24 Signature Algorithm: sha256WithRSAEncryption 56:fd:36:75:28:e5:98:5a:4c:d2:b3:d7:89:8b:4a:2c:45:f7: 48:72:d9:5f:1b:91:4d:62:95:6a:2d:b9:61:5f:8b:ff:4e:1a: 59:8c:18:d8:51:3e:65:7b:4d:07:46:6f:bf:51:fc:a1:13:30: 78:c6:3e:21:58:9a:53:30:8b:df:ee:47:31:67:c7:26:1b:cb: 92:78:0f:c5:4e:5c:38:10:5e:67:1e:96:44:2d:ea:65:25:03: 2c:93:a0:2e:49:82:ca:e2:ed:96:d2:78:9c:71:f9:25:1d:22: 6c:28:37:8a:f4:cd:e6:fd:68:56:d4:3c:79:41:75:82:6a:fa: 9e:7a:3e:c6:14:66:9c:d1:52:d5:67:52:18:f3:5b:cf:fe:96: ed:71:60:36:8c:c6:40:87:d3:e0:24:ba:05:4c:04:1c:5c:d9: 8f:b6:ba:ce:a7:4a:ee:a2:8b:39:ec:cb:e1:13:3a:f5:4c:99: a1:6e:74:26:23:a4:69:cb:20:1f:2e:43:e5:3e:70:94:ee:d1: fa:4d:28:96:55:87:42:cd:c9:a7:d6:15:df:a2:42:16:c5:7a: 7d:e3:c2:0a:c0:91:31:68:df:84:b3:32:7b:7d:82:1b:41:a3: 63:e1:72:1f:31:42:af:52:11:9e:a8:f8:9c:b9:c7:8a:7a:87: ca:1d:68:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr0Nuap2biC20BSpU6OlttsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZTQxZTczMjdjMmMzMTBjZTA2NmFmYWY4NzE5ODg2ZDcx ZmIzODAwHhcNMjUxMjA2MTUxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTAyOTkwMDBhZWRhNzA2NGQxYWVjMmMxNDFlYjk1OTY5MzNmYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugaTceJs0h13jYp/mQYp6AzKUbKF yWU8S8kdu6Wxxc5wRWOpTGnOJVMOBIRNnxTfEFSeQevTOTwG2licZxGXR/vZ09+6 A2qwGG9sgDpzDFvNIuU2q8zBBIwvYH7eIz9/gBiFLVjR/uY4i+RHrsoEhi9E0Y+h e+OyVSVkMUF0clWmYJ6u9ReNfYicCMWqLBJ8/aSOKhwy12D4HCxAPcnSsAY1mMSP NdR4G2tkJp+QUDQrz5d6sQGFoyuZHouZdfO3tdA8p9p3tHMjNpxzbc8ra9LrWDFd 3hUHnyXU9rOYk3m5pO7gDPcynyAEtmPNj/pDIuZwgEpruXxF2bqJCam6sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKoCmQAK7acGTRrsLBQeuVlpM/pZMB8GA1UdIwQY MBaAFPXkHnMnwsMQzgZq+vhxmIbXH7OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQt MTNiNzQ2YmJhMjYyLzEvcWdLWkFBcnRwd1pOR3V3c0ZCNjVXV2t6LWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQtMTNiNzQ2YmJhMjYy LzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhpCMA0G CSqGSIb3DQEBCwUAA4IBAQBW/TZ1KOWYWkzSs9eJi0osRfdIctlfG5FNYpVqLblh X4v/ThpZjBjYUT5le00HRm+/UfyhEzB4xj4hWJpTMIvf7kcxZ8cmG8uSeA/FTlw4 EF5nHpZELeplJQMsk6AuSYLK4u2W0niccfklHSJsKDeK9M3m/WhW1Dx5QXWCavqe ej7GFGac0VLVZ1IY81vP/pbtcWA2jMZAh9PgJLoFTAQcXNmPtrrOp0ruoos57Mvh Ezr1TJmhbnQmI6RpyyAfLkPlPnCU7tH6TSiWVYdCzcmn1hXfokIWxXp948IKwJEx aN+EszJ7fYIbQaNj4XIfMUKvUhGeqPicuceKeofKHWjI -----END CERTIFICATE-----Generated at Sun Dec 7 06:45:19 2025 by rpki-client