This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/FqM_4ho7rDPE7pDj9ai4ZCxjf0Y.roa File: FqM_4ho7rDPE7pDj9ai4ZCxjf0Y.roa (raw, json) Hash identifier: sB6SR2FfNoPpo3As5YllIxl1OQtiH7GgdCRzbnjbe40= Subject key identifier: 16:A3:3F:E2:1A:3B:AC:33:C4:EE:90:E3:F5:A8:B8:64:2C:63:7F:46 Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c Certificate serial: 019ADAD957F2C78732576BACF44BABE2A09A Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/FqM_4ho7rDPE7pDj9ai4ZCxjf0Y.roa Signing time: Mon 01 Dec 2025 16:57:48 +0000 ROA not before: Mon 01 Dec 2025 16:57:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210310 IP address blocks: 91.205.108.0/22 maxlen: 24 193.151.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:d9:57:f2:c7:87:32:57:6b:ac:f4:4b:ab:e2:a0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c Validity Not Before: Dec 1 16:57:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=16a33fe21a3bac33c4ee90e3f5a8b8642c637f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:08:34:a5:9e:b5:76:fe:3b:61:54:6a:b0: 96:bf:43:a2:c7:63:aa:f6:ce:7b:6d:7e:31:0f:fc: 46:f2:8d:46:b5:de:19:4a:70:9d:43:31:3e:ca:fc: 8f:d2:a5:db:37:fe:d8:31:6a:e9:f9:fb:25:a9:63: 2e:4b:86:18:c7:eb:58:c7:ca:4b:3d:2e:f8:7c:13: 2f:14:c4:b8:8b:c9:d2:cc:08:35:84:00:b6:89:6c: d3:b5:9f:f1:20:32:ce:fa:35:3c:e3:84:f1:8b:96: 93:73:2c:54:4a:c3:54:42:b4:c9:a4:e1:a7:3e:81: aa:33:d7:70:24:34:fd:62:73:16:b3:cd:73:89:e1: 2c:9b:6c:5b:d9:6e:91:5c:33:30:d4:4e:1d:f6:58: 24:2c:a5:2e:22:06:16:c0:50:b2:69:14:20:83:a9: 9e:73:94:09:d3:4b:96:2d:b2:92:56:3f:f1:28:05: 1d:cc:3d:aa:d2:aa:24:21:1f:39:41:f3:28:6e:ec: 4b:89:10:4e:e2:4b:59:5e:2c:7e:c2:04:50:df:d9: 80:6c:a0:5c:26:87:6f:c4:1e:63:54:8b:64:83:27: fd:c3:e3:4a:ef:99:c7:67:67:8a:f0:3f:bd:b9:69: e4:89:f0:0d:eb:bf:0c:04:7f:ab:26:34:b0:37:fc: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A3:3F:E2:1A:3B:AC:33:C4:EE:90:E3:F5:A8:B8:64:2C:63:7F:46 X509v3 Authority Key Identifier: keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/FqM_4ho7rDPE7pDj9ai4ZCxjf0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.108.0/22 193.151.95.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:90:cf:b4:b5:ac:64:90:37:3d:b7:47:f3:65:e1:1e:69:db: 38:9e:8d:a4:4a:c4:f9:b2:a0:02:9b:6a:97:ed:95:71:42:b5: ab:9a:9a:10:92:29:dc:67:52:56:57:ee:46:3d:9b:f1:c8:d2: 55:e5:d5:f3:8e:87:88:5f:b8:41:d1:9c:95:80:16:fd:1f:85: cb:a0:f2:3b:c8:d0:e1:37:f9:4f:c4:9d:b5:f9:9f:35:25:0f: fc:a3:fb:63:ce:48:c3:ef:24:b1:bc:72:eb:51:e7:eb:e8:46: dd:3a:1a:92:6a:7d:69:3e:77:ad:c4:3c:06:82:bf:d5:c6:1d: 7b:20:7b:08:63:0d:79:3c:01:d5:11:11:7f:97:aa:eb:12:bf: bd:76:a1:4b:42:de:30:9a:95:28:71:94:14:b5:a8:a0:f2:f6: c2:c5:fe:dc:69:d4:78:d3:ed:fb:d1:81:9b:fb:8e:0c:2c:db: 03:a3:8f:2b:84:8e:91:b3:78:4f:28:c1:34:31:7e:20:61:cc: c0:ab:8f:98:30:b3:13:7b:bc:ef:df:1c:a8:82:9d:08:39:23: 06:51:f3:32:5a:d1:97:bc:b4:54:d4:1e:4e:82:bb:4c:3b:54: 18:dc:90:13:68:1b:3a:dd:b5:58:6b:fe:0e:67:de:45:4c:7b: ea:c9:a5:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZra2Vfyx4cyV2us9Eur4qCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDhjNDg2ZWY1NjE3MGM0MTJmMjY2MTVkMGE0MDk0YmNh MWZiMmMwHhcNMjUxMjAxMTY1NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmEzM2ZlMjFhM2JhYzMzYzRlZTkwZTNmNWE4Yjg2NDJjNjM3ZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunkINKWetXb+O2FUarCWv0Oix2Oq 9s57bX4xD/xG8o1Gtd4ZSnCdQzE+yvyP0qXbN/7YMWrp+fslqWMuS4YYx+tYx8pL PS74fBMvFMS4i8nSzAg1hAC2iWzTtZ/xIDLO+jU844Txi5aTcyxUSsNUQrTJpOGn PoGqM9dwJDT9YnMWs81zieEsm2xb2W6RXDMw1E4d9lgkLKUuIgYWwFCyaRQgg6me c5QJ00uWLbKSVj/xKAUdzD2q0qokIR85QfMobuxLiRBO4ktZXix+wgRQ39mAbKBc JodvxB5jVItkgyf9w+NK75nHZ2eK8D+9uWnkifAN678MBH+rJjSwN/zzbQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBajP+IaO6wzxO6Q4/WouGQsY39GMB8GA1UdIwQY MBaAFEAIxIbvVhcMQS8mYV0KQJS8ofssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTct ZTkyYTI1NDkxY2VkLzEvRnFNXzRobzdyRFBFN3BEajlhaTRaQ3hqZjBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTctZTkyYTI1NDkxY2Vk LzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW81sAwQA wZdfMA0GCSqGSIb3DQEBCwUAA4IBAQCckM+0taxkkDc9t0fzZeEeads4no2kSsT5 sqACm2qX7ZVxQrWrmpoQkincZ1JWV+5GPZvxyNJV5dXzjoeIX7hB0ZyVgBb9H4XL oPI7yNDhN/lPxJ21+Z81JQ/8o/tjzkjD7ySxvHLrUefr6EbdOhqSan1pPnetxDwG gr/Vxh17IHsIYw15PAHVERF/l6rrEr+9dqFLQt4wmpUocZQUtaig8vbCxf7cadR4 0+370YGb+44MLNsDo48rhI6Rs3hPKME0MX4gYczAq4+YMLMTe7zv3xyogp0IOSMG UfMyWtGXvLRU1B5OgrtMO1QY3JATaBs63bVYa/4OZ95FTHvqyaXH -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:54 2025 by rpki-client