This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/Qt4Ezt33_0kXVdg-RJT20djh1XM.roa File: Qt4Ezt33_0kXVdg-RJT20djh1XM.roa (raw, json) Hash identifier: 3NPofej1c/zsdMN6gt/TX4ck3dTH6hmGSHfSKX9E1FQ= Subject key identifier: 42:DE:04:CE:DD:F7:FF:49:17:55:D8:3E:44:94:F6:D1:D8:E1:D5:73 Certificate issuer: /CN=192c781873ea4adde27538811cb6aa7e1bc04f1b Certificate serial: 019AB9606BB3DF8969F7FA6CC611E460E28B Authority key identifier: 19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/Qt4Ezt33_0kXVdg-RJT20djh1XM.roa Signing time: Tue 25 Nov 2025 04:58:15 +0000 ROA not before: Tue 25 Nov 2025 04:58:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203439 IP address blocks: 185.134.248.0/24 maxlen: 24 185.134.249.0/24 maxlen: 24 185.134.250.0/24 maxlen: 24 185.134.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:60:6b:b3:df:89:69:f7:fa:6c:c6:11:e4:60:e2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=192c781873ea4adde27538811cb6aa7e1bc04f1b Validity Not Before: Nov 25 04:58:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=42de04ceddf7ff491755d83e4494f6d1d8e1d573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:41:b8:ba:6f:1b:80:54:36:d4:b8:5b:06: cd:f0:39:bf:f8:2e:1c:65:91:be:88:0d:ad:3f:4d: 2d:0f:72:ee:84:42:ab:fc:e1:0a:90:dd:c8:98:29: 81:25:99:a0:24:07:39:f8:68:cd:e9:96:21:50:84: 18:24:97:9f:0c:42:2c:a4:9b:aa:fa:f5:f6:54:30: 91:7f:e7:e0:5d:89:c3:68:4e:1b:62:75:5f:cd:20: 22:c0:19:af:77:02:71:e2:8c:c4:6e:99:9c:61:cb: c6:97:f5:6e:20:88:92:4e:d5:9f:3b:1f:7a:95:e2: 53:65:97:e6:8c:63:ae:ed:37:09:6a:a1:ca:48:28: a6:5f:56:26:70:c9:99:05:31:47:b3:b0:ca:62:ec: 39:5c:78:0c:5a:35:c2:33:6c:b1:2e:11:63:fc:6c: 96:f7:d3:c2:44:33:9c:15:35:05:a1:c4:4e:de:81: 7f:91:43:8f:2e:27:06:db:58:e6:08:b2:29:10:53: e1:9a:8d:7f:b5:78:55:71:fb:9b:9e:07:ac:36:1e: 42:80:58:0a:f3:72:ff:47:e7:ea:21:60:df:d8:a8: ca:62:36:d6:66:b2:8d:e0:94:4d:5a:52:98:0b:42: e1:38:ed:91:e6:2a:5c:4b:89:99:01:14:5d:33:92: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DE:04:CE:DD:F7:FF:49:17:55:D8:3E:44:94:F6:D1:D8:E1:D5:73 X509v3 Authority Key Identifier: keyid:19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/Qt4Ezt33_0kXVdg-RJT20djh1XM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.248.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:6e:95:5b:a1:0d:d3:71:dd:f7:04:46:be:a3:45:8b:2b:17: e7:05:02:33:2f:f5:48:4b:e1:df:e5:8f:79:71:c7:28:ad:f5: e5:35:c6:47:00:a3:f2:90:a5:28:4b:f7:9e:8c:fe:8e:59:30: 0b:6a:f3:fe:ae:99:1a:ed:6d:3c:78:38:fa:42:7f:2f:1b:4c: 4a:86:ec:13:da:f0:c7:a6:14:25:3a:e0:db:c5:a3:4b:72:51: fb:31:13:45:0f:30:13:2f:1f:81:f9:30:78:b3:46:dc:18:c4: 44:2f:c8:02:c3:3c:4f:2c:46:6a:25:4e:32:2b:f5:79:83:99: 2d:73:6f:d1:17:ec:c4:fe:1b:da:a5:42:2e:8d:08:c1:b4:4d: 52:19:a8:41:86:8d:67:51:15:37:ae:b7:e7:1a:f0:8b:a4:57: bc:bc:6f:25:fd:98:f2:d9:25:02:fa:41:0d:3f:16:da:82:e7: fc:8b:a5:80:93:b7:1a:36:32:46:71:3c:17:f9:cb:78:45:03: 23:56:a2:68:68:2d:86:0c:50:7c:75:0e:6f:16:26:3c:93:9c: d6:ed:29:9e:f4:0b:c9:79:8f:f9:c2:8b:48:60:67:6b:98:62: 00:38:6c:51:bb:f7:ab:45:cf:c9:35:ba:76:43:8c:9a:ee:42: 72:38:6f:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq5YGuz34lp9/psxhHkYOKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MmM3ODE4NzNlYTRhZGRlMjc1Mzg4MTFjYjZhYTdlMWJj MDRmMWIwHhcNMjUxMTI1MDQ1ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmRlMDRjZWRkZjdmZjQ5MTc1NWQ4M2U0NDk0ZjZkMWQ4ZTFkNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW1BuLpvG4BUNtS4WwbN8Dm/+C4c ZZG+iA2tP00tD3LuhEKr/OEKkN3ImCmBJZmgJAc5+GjN6ZYhUIQYJJefDEIspJuq +vX2VDCRf+fgXYnDaE4bYnVfzSAiwBmvdwJx4ozEbpmcYcvGl/VuIIiSTtWfOx96 leJTZZfmjGOu7TcJaqHKSCimX1YmcMmZBTFHs7DKYuw5XHgMWjXCM2yxLhFj/GyW 99PCRDOcFTUFocRO3oF/kUOPLicG21jmCLIpEFPhmo1/tXhVcfubngesNh5CgFgK 83L/R+fqIWDf2KjKYjbWZrKN4JRNWlKYC0LhOO2R5ipcS4mZARRdM5JjUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFELeBM7d9/9JF1XYPkSU9tHY4dVzMB8GA1UdIwQY MBaAFBkseBhz6krd4nU4gRy2qn4bwE8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1N4NEdIUHFTdDNpZFRpQkhMYXFmaHZBVHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZjA0NzctZGNhNy00NjM0LTgwMTIt OTMzNGQ1NDhkMTkzLzEvUXQ0RXp0MzNfMGtYVmRnLVJKVDIwZGpoMVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lZjA0NzctZGNhNy00NjM0LTgwMTItOTMzNGQ1NDhkMTkz LzEvR1N4NEdIUHFTdDNpZFRpQkhMYXFmaHZBVHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYb4MA0G CSqGSIb3DQEBCwUAA4IBAQAabpVboQ3Tcd33BEa+o0WLKxfnBQIzL/VIS+Hf5Y95 cccorfXlNcZHAKPykKUoS/eejP6OWTALavP+rpka7W08eDj6Qn8vG0xKhuwT2vDH phQlOuDbxaNLclH7MRNFDzATLx+B+TB4s0bcGMREL8gCwzxPLEZqJU4yK/V5g5kt c2/RF+zE/hvapUIujQjBtE1SGahBho1nURU3rrfnGvCLpFe8vG8l/Zjy2SUC+kEN Pxbaguf8i6WAk7caNjJGcTwX+ct4RQMjVqJoaC2GDFB8dQ5vFiY8k5zW7Sme9AvJ eY/5wotIYGdrmGIAOGxRu/erRc/JNbp2Q4ya7kJyOG8j -----END CERTIFICATE-----Generated at Sat Dec 6 13:30:19 2025 by rpki-client