This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/q-t_1WqymI8_4-N5vyOqSXLqB8E.roa File: q-t_1WqymI8_4-N5vyOqSXLqB8E.roa (raw, json) Hash identifier: +mnwG2T/ttYD50bIkNl9fQet4+x7wi91GV5NfLA79rs= Subject key identifier: AB:EB:7F:D5:6A:B2:98:8F:3F:E3:E3:79:BF:23:AA:49:72:EA:07:C1 Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b Certificate serial: 019AED5E933B5ABF5C2C855703D13EAE88EB Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/q-t_1WqymI8_4-N5vyOqSXLqB8E.roa Signing time: Fri 05 Dec 2025 07:16:29 +0000 ROA not before: Fri 05 Dec 2025 07:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58074 IP address blocks: 91.197.247.0/24 maxlen: 24 91.212.74.0/24 maxlen: 24 193.104.121.0/24 maxlen: 24 193.105.91.0/24 maxlen: 24 193.105.239.0/24 maxlen: 24 193.200.165.0/24 maxlen: 24 194.6.201.0/24 maxlen: 24 194.107.112.0/24 maxlen: 24 195.88.38.0/23 maxlen: 24 195.245.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:5e:93:3b:5a:bf:5c:2c:85:57:03:d1:3e:ae:88:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b Validity Not Before: Dec 5 07:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=abeb7fd56ab2988f3fe3e379bf23aa4972ea07c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:22:dd:18:c9:d1:d7:80:98:6e:72:88:f9:14: 41:75:25:32:90:7b:fb:b1:28:c9:5d:66:95:5e:16: 81:9c:20:3d:ef:fe:cc:ab:35:66:bb:ba:1d:f3:20: 3a:55:33:d3:93:27:ba:d5:04:cb:cb:7e:0a:d1:ad: c5:d5:5e:6f:48:cc:4e:25:22:1e:b1:41:2f:be:c8: cf:f6:a0:ff:81:d0:58:c2:96:e3:76:b4:6e:c5:5e: 53:8f:ea:dd:4c:07:d8:44:e4:55:b4:11:0a:66:ab: 9a:9f:a0:67:e7:01:33:84:ce:16:db:ae:8b:06:e5: 98:88:63:37:64:d0:5e:f9:9a:ea:7c:d6:ee:5a:56: 0e:7c:50:d5:29:b6:00:92:99:b3:ea:87:ab:14:1a: 62:03:25:78:4f:60:42:5e:c6:12:2a:6f:56:3d:b0: 0b:e4:bc:ab:80:d7:73:a1:8d:0e:02:2a:eb:8e:35: 1b:41:bc:20:46:c7:7b:0e:c6:5f:15:e6:85:09:37: 0e:6f:39:2c:5d:3a:b4:5f:7d:66:02:14:e4:69:a6: 1d:f7:f5:c8:97:41:c1:a0:08:3a:be:34:d3:88:a4: 45:51:19:72:6d:e1:f3:75:08:41:7f:c6:36:39:35: f4:f8:fa:97:e5:b5:d7:e3:c8:3c:ed:3f:4e:b8:d4: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EB:7F:D5:6A:B2:98:8F:3F:E3:E3:79:BF:23:AA:49:72:EA:07:C1 X509v3 Authority Key Identifier: keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/q-t_1WqymI8_4-N5vyOqSXLqB8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.247.0/24 91.212.74.0/24 193.104.121.0/24 193.105.91.0/24 193.105.239.0/24 193.200.165.0/24 194.6.201.0/24 194.107.112.0/24 195.88.38.0/23 195.245.82.0/24 Signature Algorithm: sha256WithRSAEncryption 94:e4:d6:cd:c1:e4:a2:43:91:3b:85:db:51:f0:9c:55:4e:ad: 81:a6:e1:bd:88:b1:88:99:e7:5f:39:98:19:02:ed:2e:05:93: ef:53:33:43:ba:cf:61:1d:f3:ca:50:30:99:79:96:78:7f:23: a5:2d:96:04:4e:b7:fe:3b:38:0a:bf:1a:bd:1b:f0:4d:6c:81: cf:57:49:b4:14:56:29:50:7e:65:98:95:c1:40:53:ea:68:94: 77:a8:35:e4:9e:2e:73:ab:ac:9c:ac:da:a2:00:02:1e:00:4c: ab:e4:d1:e2:32:d9:3e:f9:5e:45:96:a1:61:af:98:dc:5a:06: b2:65:59:7b:30:43:5e:22:09:f7:a6:51:35:b6:5e:9d:df:47: 9f:cb:1b:50:3c:d2:64:56:28:97:4b:81:74:32:92:a5:33:d1: 5b:e9:15:b8:3a:5b:c3:ba:24:4e:91:4e:02:3c:b1:9d:54:6c: 0d:bf:bc:40:e4:b7:bd:66:04:b4:68:98:e8:f9:0b:cc:b1:e2: d0:02:68:48:a2:cf:93:0b:1d:1b:53:77:de:03:21:ac:27:bb: 60:ed:bd:f6:99:6a:4a:46:6f:3d:28:ae:08:76:80:09:ea:bc: 32:8a:e9:55:64:e6:c9:85:d7:46:16:d1:c3:a2:b1:a8:52:81: 58:9b:77:01 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZrtXpM7Wr9cLIVXA9E+rojrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2 NTE4NmIwHhcNMjUxMjA1MDcxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmViN2ZkNTZhYjI5ODhmM2ZlM2UzNzliZjIzYWE0OTcyZWEwN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iLdGMnR14CYbnKI+RRBdSUykHv7 sSjJXWaVXhaBnCA97/7MqzVmu7od8yA6VTPTkye61QTLy34K0a3F1V5vSMxOJSIe sUEvvsjP9qD/gdBYwpbjdrRuxV5Tj+rdTAfYRORVtBEKZquan6Bn5wEzhM4W266L BuWYiGM3ZNBe+ZrqfNbuWlYOfFDVKbYAkpmz6oerFBpiAyV4T2BCXsYSKm9WPbAL 5LyrgNdzoY0OAirrjjUbQbwgRsd7DsZfFeaFCTcObzksXTq0X31mAhTkaaYd9/XI l0HBoAg6vjTTiKRFURlybeHzdQhBf8Y2OTX0+PqX5bXX48g87T9OuNQgXQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFKvrf9VqspiPP+Pjeb8jqkly6gfBMB8GA1UdIwQY MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt MDQyM2YyNjNmMmNiLzEvcS10XzFXcXltSThfNC1ONXZ5T3FTWExxQjhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAW8X3AwQA W9RKAwQAwWh5AwQAwWlbAwQAwWnvAwQAwcilAwQAwgbJAwQAwmtwAwQBw1gmAwQA w/VSMA0GCSqGSIb3DQEBCwUAA4IBAQCU5NbNweSiQ5E7hdtR8JxVTq2BpuG9iLGI medfOZgZAu0uBZPvUzNDus9hHfPKUDCZeZZ4fyOlLZYETrf+OzgKvxq9G/BNbIHP V0m0FFYpUH5lmJXBQFPqaJR3qDXkni5zq6ycrNqiAAIeAEyr5NHiMtk++V5FlqFh r5jcWgayZVl7MENeIgn3plE1tl6d30efyxtQPNJkViiXS4F0MpKlM9Fb6RW4OlvD uiROkU4CPLGdVGwNv7xA5Le9ZgS0aJjo+QvMseLQAmhIos+TCx0bU3feAyGsJ7tg 7b32mWpKRm89KK4IdoAJ6rwyiulVZObJhddGFtHDorGoUoFYm3cB -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:03 2025 by rpki-client