This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/qDFp2Tp2-HQfdh-8f9kfIU2nI00.roa File: qDFp2Tp2-HQfdh-8f9kfIU2nI00.roa (raw, json) Hash identifier: sSWarW85n1Eqs9mnUdnPntZW0uPBSKr4hbBJ8eGToSA= Subject key identifier: A8:31:69:D9:3A:76:F8:74:1F:76:1F:BC:7F:D9:1F:21:4D:A7:23:4D Certificate issuer: /CN=6d6f35d8990a7b294c453956e0e8242c0aacb031 Certificate serial: 019AEE3A4DB8E1DCCF05E2E678CC0CBBCBDB Authority key identifier: 6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/qDFp2Tp2-HQfdh-8f9kfIU2nI00.roa Signing time: Fri 05 Dec 2025 11:16:29 +0000 ROA not before: Fri 05 Dec 2025 11:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50926 IP address blocks: 185.251.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:3a:4d:b8:e1:dc:cf:05:e2:e6:78:cc:0c:bb:cb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d6f35d8990a7b294c453956e0e8242c0aacb031 Validity Not Before: Dec 5 11:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a83169d93a76f8741f761fbc7fd91f214da7234d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:a3:82:5e:0d:b5:c3:1e:e4:bf:80:62:fb: 07:f3:5b:14:7f:e8:c4:97:9d:8d:9c:95:d3:ad:ed: 26:6c:3e:c4:dd:2a:c1:ef:26:59:52:ad:55:d4:90: 45:57:6c:3a:85:dc:c1:d8:44:76:45:e8:5f:b7:ba: 57:90:33:f4:38:db:84:67:ac:0b:cd:cb:06:2f:b1: 19:ec:47:f7:20:4a:c6:16:e5:3b:f8:f5:7f:93:18: de:a2:5f:23:7a:7f:26:1a:19:5d:0d:c0:50:bd:cb: 36:c9:8a:3c:8b:2c:20:3c:4c:36:5b:95:93:cf:0f: 69:f7:c0:e4:b4:fc:05:aa:87:ad:9f:b1:6b:a2:91: bb:3a:03:49:d3:21:10:a1:a8:cc:a2:35:97:ce:79: a2:2d:fe:e4:cb:01:b1:de:64:35:57:4b:3d:3b:4f: cb:87:02:4f:31:fe:f7:15:70:25:6f:bd:a4:34:c4: 78:31:c9:fe:d3:6b:e9:3a:37:81:e5:26:e4:00:07: c3:4a:b8:4b:5f:3e:5d:5c:72:86:3d:a7:14:72:ca: 99:03:8b:4b:61:80:a4:92:9c:7f:80:a3:01:14:e1: d3:a6:1f:8b:5f:ab:7e:12:70:96:34:4c:ca:39:2c: 0a:76:b0:a8:a5:19:ef:07:34:29:33:82:e7:7c:e9: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:31:69:D9:3A:76:F8:74:1F:76:1F:BC:7F:D9:1F:21:4D:A7:23:4D X509v3 Authority Key Identifier: keyid:6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/qDFp2Tp2-HQfdh-8f9kfIU2nI00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.128.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:d7:b2:c3:6f:40:72:3a:9d:24:41:98:aa:77:9c:d6:bb:31: 5d:9f:a1:0d:40:7a:c3:7f:8c:88:25:cd:86:bf:62:ac:8c:97: 29:e3:5f:95:a1:3e:9f:84:03:a5:5d:01:1a:e7:71:ce:6d:5d: f3:a8:90:8a:2d:cf:af:15:27:f3:de:c1:c8:d0:a0:46:22:7a: 37:b5:75:07:fd:32:5a:01:07:54:4f:ef:31:dc:46:64:d4:d9: 05:29:e8:1f:bc:ad:61:d0:3b:95:11:7e:3a:29:74:c3:78:0b: 48:b1:4a:cb:0e:41:1a:20:29:d2:99:4d:cf:89:60:7f:d5:5b: 74:55:9f:a6:e0:17:e9:4c:2e:13:8c:21:b4:fb:96:40:6c:7e: 13:d1:88:5e:92:23:f1:94:fc:26:b8:a3:4f:5a:74:8b:b7:74: ab:0f:ac:f9:81:ac:97:3a:dd:d5:e6:d6:7b:b3:96:2b:c9:e8: 93:47:c8:02:db:27:83:5d:24:b7:62:cd:96:2a:12:cc:c7:5c: 02:3c:59:04:a2:38:81:df:f5:7e:c0:e3:26:ff:b9:df:e4:76: 05:98:81:99:e6:3f:0c:22:2e:43:8c:a7:b3:0e:ea:d9:5d:d1: 55:6d:4d:77:61:d7:82:cd:db:ba:cc:6b:46:6b:d7:f2:f0:b1: 0f:ec:8a:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZruOk244dzPBeLmeMwMu8vbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNmYzNWQ4OTkwYTdiMjk0YzQ1Mzk1NmUwZTgyNDJjMGFh Y2IwMzEwHhcNMjUxMjA1MTExNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODMxNjlkOTNhNzZmODc0MWY3NjFmYmM3ZmQ5MWYyMTRkYTcyMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHejgl4NtcMe5L+AYvsH81sUf+jE l52NnJXTre0mbD7E3SrB7yZZUq1V1JBFV2w6hdzB2ER2Rehft7pXkDP0ONuEZ6wL zcsGL7EZ7Ef3IErGFuU7+PV/kxjeol8jen8mGhldDcBQvcs2yYo8iywgPEw2W5WT zw9p98DktPwFqoetn7FropG7OgNJ0yEQoajMojWXznmiLf7kywGx3mQ1V0s9O0/L hwJPMf73FXAlb72kNMR4Mcn+02vpOjeB5SbkAAfDSrhLXz5dXHKGPacUcsqZA4tL YYCkkpx/gKMBFOHTph+LX6t+EnCWNEzKOSwKdrCopRnvBzQpM4LnfOkR0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKgxadk6dvh0H3YfvH/ZHyFNpyNNMB8GA1UdIwQY MBaAFG1vNdiZCnspTEU5VuDoJCwKrLAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZmMyOWMtNDNlOC00MDg2LWIxNDUt N2EwOTZmNjA3ZTI2LzEvcURGcDJUcDItSFFmZGgtOGY5a2ZJVTJuSTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZmMyOWMtNDNlOC00MDg2LWIxNDUtN2EwOTZmNjA3ZTI2 LzEvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufuAMA0G CSqGSIb3DQEBCwUAA4IBAQAM17LDb0ByOp0kQZiqd5zWuzFdn6ENQHrDf4yIJc2G v2KsjJcp41+VoT6fhAOlXQEa53HObV3zqJCKLc+vFSfz3sHI0KBGIno3tXUH/TJa AQdUT+8x3EZk1NkFKegfvK1h0DuVEX46KXTDeAtIsUrLDkEaICnSmU3PiWB/1Vt0 VZ+m4BfpTC4TjCG0+5ZAbH4T0YhekiPxlPwmuKNPWnSLt3SrD6z5gayXOt3V5tZ7 s5YryeiTR8gC2yeDXSS3Ys2WKhLMx1wCPFkEojiB3/V+wOMm/7nf5HYFmIGZ5j8M Ii5DjKezDurZXdFVbU13YdeCzdu6zGtGa9fy8LEP7Iqw -----END CERTIFICATE-----Generated at Sat Dec 6 10:50:20 2025 by rpki-client