This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/qyau8X0_p_R5G5UjJ9R5hhByR60.roa File: qyau8X0_p_R5G5UjJ9R5hhByR60.roa (raw, json) Hash identifier: hN7rF1+0mFFIPxT3mneLl4qNERLNSsd/HuIXg9Ud9Ys= Subject key identifier: AB:26:AE:F1:7D:3F:A7:F4:79:1B:95:23:27:D4:79:86:10:72:47:AD Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Certificate serial: 019AE3CC4EE417867A94AAFFE81D592B8FE5 Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/qyau8X0_p_R5G5UjJ9R5hhByR60.roa Signing time: Wed 03 Dec 2025 10:40:08 +0000 ROA not before: Wed 03 Dec 2025 10:40:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216468 IP address blocks: 62.108.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:cc:4e:e4:17:86:7a:94:aa:ff:e8:1d:59:2b:8f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Validity Not Before: Dec 3 10:40:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab26aef17d3fa7f4791b952327d47986107247ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0d:67:cc:04:e8:f2:32:5e:0e:d1:20:25:41: a8:a3:06:a3:19:37:aa:93:27:65:6d:00:f9:ec:f0: 9b:c6:d7:90:5f:00:11:7f:51:b5:49:02:bb:33:bd: 51:dc:ac:21:f8:21:33:6a:5d:c6:7c:c2:24:23:7f: c2:2a:bb:e6:0c:38:d9:fb:49:cd:85:e2:28:5b:d1: c1:8d:01:2d:cc:bd:ee:2a:0b:84:24:b6:9f:8b:36: 03:dc:57:3d:22:da:c1:fb:ec:ef:48:df:3e:b4:c6: 47:8b:d2:3f:b3:4f:c6:23:ca:c7:75:05:72:15:b5: c0:72:b0:c8:7f:45:c3:bb:a3:f6:b9:0d:bc:67:82: b2:36:41:52:76:d1:e4:00:50:61:b3:f5:09:85:b8: d1:c5:c4:a6:77:ac:38:c0:0e:41:a2:5c:eb:56:42: 59:69:eb:7c:88:1d:09:9c:ee:8e:ce:54:b9:bc:28: 0e:3c:53:67:fd:7d:e4:64:30:bf:97:6d:fa:8b:d6: 45:d5:17:0d:9f:9d:48:1a:4f:2d:6a:01:99:2b:20: a0:d9:10:31:98:17:78:f5:00:55:94:28:9a:73:6c: b3:27:d7:d7:fd:7e:8c:1e:c7:fa:0f:2b:8c:4d:60: 8a:da:6f:66:52:15:3d:bc:77:9a:02:69:a1:f6:8b: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:26:AE:F1:7D:3F:A7:F4:79:1B:95:23:27:D4:79:86:10:72:47:AD X509v3 Authority Key Identifier: keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/qyau8X0_p_R5G5UjJ9R5hhByR60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.104.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:da:56:b4:26:d4:1e:ca:54:18:67:4e:74:8e:6f:8f:e5:6e: 31:23:a7:d4:42:f2:84:bf:26:28:91:b9:8d:42:c1:26:6d:ef: 95:89:95:a7:a4:c1:6d:3f:88:2c:11:d6:7a:5a:b7:4d:88:08: ff:ef:60:0d:b8:a4:a8:3e:2a:ba:aa:8d:f0:74:bf:da:d3:03: ea:8f:c3:83:df:a7:d5:16:9a:82:60:cb:2e:21:41:9d:d4:b1: 41:a9:1c:6c:27:b2:fe:99:64:0c:d9:c7:f1:fa:2a:99:ab:4b: 28:f1:42:a9:57:3a:d4:19:fd:0b:e0:03:bf:76:5d:d1:68:e6: 94:98:0c:f4:ec:2e:21:ff:43:5f:56:b1:1c:d7:ba:65:66:78: 97:31:35:86:57:e6:13:49:e9:4b:6f:3c:1b:68:7f:34:49:c9: 76:c0:e4:60:b2:fb:cb:eb:05:f1:79:c1:c2:e8:a7:19:47:e3: 72:0d:10:69:dc:09:e3:1c:23:58:9a:cd:81:70:4f:87:a7:d6: 9b:ef:0f:a0:68:d4:99:d6:05:8c:a4:d7:2e:73:a5:aa:07:3d: 6b:5f:6d:5b:e3:bc:7e:d3:b9:98:27:c2:60:69:88:40:cf:bf: d0:fa:a7:05:c9:62:52:56:9c:1a:e1:9b:95:5d:58:34:c3:0c: 3b:76:96:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrjzE7kF4Z6lKr/6B1ZK4/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi NmJkZjcwHhcNMjUxMjAzMTA0MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjI2YWVmMTdkM2ZhN2Y0NzkxYjk1MjMyN2Q0Nzk4NjEwNzI0N2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g1nzATo8jJeDtEgJUGoowajGTeq kydlbQD57PCbxteQXwARf1G1SQK7M71R3Kwh+CEzal3GfMIkI3/CKrvmDDjZ+0nN heIoW9HBjQEtzL3uKguEJLafizYD3Fc9ItrB++zvSN8+tMZHi9I/s0/GI8rHdQVy FbXAcrDIf0XDu6P2uQ28Z4KyNkFSdtHkAFBhs/UJhbjRxcSmd6w4wA5BolzrVkJZ aet8iB0JnO6OzlS5vCgOPFNn/X3kZDC/l236i9ZF1RcNn51IGk8tagGZKyCg2RAx mBd49QBVlCiac2yzJ9fX/X6MHsf6DyuMTWCK2m9mUhU9vHeaAmmh9ouBQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKsmrvF9P6f0eRuVIyfUeYYQcketMB8GA1UdIwQY MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt ZDNlMjgwMGJkNjQwLzEvcXlhdThYMF9wX1I1RzVVako5UjVoaEJ5UjYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmxoMA0G CSqGSIb3DQEBCwUAA4IBAQBs2la0JtQeylQYZ050jm+P5W4xI6fUQvKEvyYokbmN QsEmbe+ViZWnpMFtP4gsEdZ6WrdNiAj/72ANuKSoPiq6qo3wdL/a0wPqj8OD36fV FpqCYMsuIUGd1LFBqRxsJ7L+mWQM2cfx+iqZq0so8UKpVzrUGf0L4AO/dl3RaOaU mAz07C4h/0NfVrEc17plZniXMTWGV+YTSelLbzwbaH80Scl2wORgsvvL6wXxecHC 6KcZR+NyDRBp3AnjHCNYms2BcE+Hp9ab7w+gaNSZ1gWMpNcuc6WqBz1rX21b47x+ 07mYJ8JgaYhAz7/Q+qcFyWJSVpwa4ZuVXVg0www7dpbQ -----END CERTIFICATE-----Generated at Sat Dec 6 15:15:16 2025 by rpki-client