This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/qw8TLEqYHaKBZBXFc5_8HznbM4o.roa File: qw8TLEqYHaKBZBXFc5_8HznbM4o.roa (raw, json) Hash identifier: FycBWVqpPD9Dfru3H19RNGBygXIpUYhq0CqBiwxgUUk= Subject key identifier: AB:0F:13:2C:4A:98:1D:A2:81:64:15:C5:73:9F:FC:1F:39:DB:33:8A Certificate issuer: /CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2 Certificate serial: 019ABC95A6480B06DF51158AD9BFAA7A5409 Authority key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/qw8TLEqYHaKBZBXFc5_8HznbM4o.roa Signing time: Tue 25 Nov 2025 19:55:15 +0000 ROA not before: Tue 25 Nov 2025 19:55:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197204 IP address blocks: 46.29.8.0/21 maxlen: 24 91.224.204.0/23 maxlen: 24 91.231.161.0/24 maxlen: 24 185.18.108.0/22 maxlen: 24 185.78.116.0/24 maxlen: 24 185.78.117.0/24 maxlen: 24 185.78.118.0/24 maxlen: 24 185.78.119.0/24 maxlen: 24 185.105.168.0/22 maxlen: 24 185.251.148.0/22 maxlen: 24 2a01:4360::/32 maxlen: 48 2a03:5c80::/32 maxlen: 48 2a05:6980::/29 maxlen: 48 2a0c:1ac0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:95:a6:48:0b:06:df:51:15:8a:d9:bf:aa:7a:54:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2 Validity Not Before: Nov 25 19:55:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab0f132c4a981da2816415c5739ffc1f39db338a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:92:06:65:da:d5:e1:92:fd:11:18:49:df: 51:3c:88:96:17:1a:0c:58:8b:08:5b:f4:1c:89:6e: 0e:38:05:ce:8d:31:99:96:7b:fa:27:55:cc:2c:5d: 50:00:14:ec:9a:44:96:02:0f:e3:dc:38:c3:5e:90: 61:60:dc:52:6b:dc:ad:a6:df:d0:ad:0b:ae:cb:1d: 37:d7:29:c9:89:f1:e8:ad:86:f1:99:5d:60:26:29: d9:d0:6e:a7:79:9f:a5:83:89:68:54:06:f1:21:77: 47:72:8c:57:43:dc:3b:bb:fd:2b:75:71:43:d0:78: fe:08:80:7f:8f:45:2c:2b:b2:57:5e:03:44:c4:0e: 68:25:64:f9:0e:5e:76:1d:1e:4f:1c:33:7f:17:06: 73:f8:5c:00:6b:85:79:0e:e4:63:73:1e:e7:61:50: 43:ff:81:68:e7:96:96:f4:ab:4a:14:b1:d2:e4:33: 78:75:e3:e8:e6:c7:ca:15:f5:29:7e:5e:03:11:2b: ec:0a:ef:87:1a:97:03:00:f7:c8:00:2e:9d:da:08: 8c:43:b2:27:f1:24:87:31:e3:32:99:c5:5b:57:86: 1e:c4:b6:7e:4f:72:06:ec:47:7f:71:ae:a9:5f:35: 1b:98:24:2a:a3:22:e3:3c:79:dd:82:aa:5b:a1:eb: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0F:13:2C:4A:98:1D:A2:81:64:15:C5:73:9F:FC:1F:39:DB:33:8A X509v3 Authority Key Identifier: keyid:F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/qw8TLEqYHaKBZBXFc5_8HznbM4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.8.0/21 91.224.204.0/23 91.231.161.0/24 185.18.108.0/22 185.78.116.0/22 185.105.168.0/22 185.251.148.0/22 IPv6: 2a01:4360::/32 2a03:5c80::/32 2a05:6980::/29 2a0c:1ac0::/29 Signature Algorithm: sha256WithRSAEncryption ac:d6:58:8f:4d:64:87:8d:88:3f:7a:23:e4:6d:9a:87:6d:09: 16:6a:4f:18:c0:20:8c:81:41:d1:6d:d6:4c:89:88:df:73:c4: 44:07:ea:21:a2:64:6b:c7:b4:ef:61:64:36:64:51:ee:e5:ea: 55:68:c2:db:dd:75:48:b2:69:33:97:5c:79:4f:a0:3a:95:00: 94:98:a0:9d:76:08:12:ef:37:24:94:9f:62:a0:85:5b:f8:49: e8:46:ca:e3:88:3f:18:79:f8:bf:78:40:41:cb:36:99:e4:45: 13:f6:de:cc:6d:73:af:6b:7f:48:a5:b7:8e:3f:33:1e:a4:22: 13:06:09:31:99:e3:0c:64:13:a4:ba:c3:61:35:70:06:37:1d: 92:b5:8c:39:6c:41:20:08:c5:5b:1a:1e:b0:1d:5d:b1:77:4f: 69:99:30:91:85:96:96:cb:55:5c:5a:80:1a:03:d1:91:dd:66: 88:12:3c:8c:38:3f:9e:13:0e:a9:41:56:a5:b7:37:93:30:8a: 9f:6b:94:cb:3f:8a:8a:7a:58:89:ba:bb:d6:be:f2:90:d0:0b: 59:40:00:24:0f:e0:70:c2:70:6e:d6:b8:b7:27:d4:20:11:fd: 7a:26:0c:54:4e:05:fc:5b:14:f4:0b:71:c1:42:b8:99:3d:7a: 1e:bc:1d:73 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZq8laZICwbfURWK2b+qelQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OThkODlmOTI1Mjk5YjUxZjNiYzgyYWNjZDhjNmI5NjJk Y2MyZTIwHhcNMjUxMTI1MTk1NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjBmMTMyYzRhOTgxZGEyODE2NDE1YzU3MzlmZmMxZjM5ZGIzMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo42SBmXa1eGS/REYSd9RPIiWFxoM WIsIW/QciW4OOAXOjTGZlnv6J1XMLF1QABTsmkSWAg/j3DjDXpBhYNxSa9ytpt/Q rQuuyx031ynJifHorYbxmV1gJinZ0G6neZ+lg4loVAbxIXdHcoxXQ9w7u/0rdXFD 0Hj+CIB/j0UsK7JXXgNExA5oJWT5Dl52HR5PHDN/FwZz+FwAa4V5DuRjcx7nYVBD /4Fo55aW9KtKFLHS5DN4dePo5sfKFfUpfl4DESvsCu+HGpcDAPfIAC6d2giMQ7In 8SSHMeMymcVbV4YexLZ+T3IG7Ed/ca6pXzUbmCQqoyLjPHndgqpboetfkwIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFKsPEyxKmB2igWQVxXOf/B852zOKMB8GA1UdIwQY MBaAFPiY2J+SUpm1HzvIKszYxrli3MLiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KalluNUpTbWJVZk84Z3F6TmpHdVdMY3d1SS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvYjg4YTYwLWFhZjQtNDkxYS1hYjgy LWM1OTI5NDk5MWIyNS8xL3F3OFRMRXFZSGFLQlpCWEZjNV84SHpuYk00by5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWMvYjg4YTYwLWFhZjQtNDkxYS1hYjgyLWM1OTI5NDk5MWIy NS8xLzEtSmpZbjVKU21iVWZPOGdxek5qR3VXTGN3dUkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwZwYIKwYBBQUHAQcBAf8EWDBWMDAEAgABMCoDBAMuHQgD BAFb4MwDBABb56EDBAK5EmwDBAK5TnQDBAK5aagDBAK5+5QwIgQCAAIwHAMFACoB Q2ADBQAqA1yAAwUDKgVpgAMFAyoMGsAwDQYJKoZIhvcNAQELBQADggEBAKzWWI9N ZIeNiD96I+RtmodtCRZqTxjAIIyBQdFt1kyJiN9zxEQH6iGiZGvHtO9hZDZkUe7l 6lVowtvddUiyaTOXXHlPoDqVAJSYoJ12CBLvNySUn2KghVv4SehGyuOIPxh5+L94 QEHLNpnkRRP23sxtc69rf0ilt44/Mx6kIhMGCTGZ4wxkE6S6w2E1cAY3HZK1jDls QSAIxVsaHrAdXbF3T2mZMJGFlpbLVVxagBoD0ZHdZogSPIw4P54TDqlBVqW3N5Mw ip9rlMs/iop6WIm6u9a+8pDQC1lAACQP4HDCcG7WuLcn1CAR/XomDFROBfxbFPQL ccFCuJk9eh68HXM= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:17 2025 by rpki-client