This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/Nqz1k5s0ZYXUy72rKBWz32fxVTU.roa File: Nqz1k5s0ZYXUy72rKBWz32fxVTU.roa (raw, json) Hash identifier: GqKVrf//VPwumSGJonfvQyImnL7BKWccqvqBla5y7po= Subject key identifier: 36:AC:F5:93:9B:34:65:85:D4:CB:BD:AB:28:15:B3:DF:67:F1:55:35 Certificate issuer: /CN=4f32d40a53bb60b86759e6ec0a5207300b41af70 Certificate serial: 019ADE760694282FE9E4F6BA369C1236E615 Authority key identifier: 4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/Nqz1k5s0ZYXUy72rKBWz32fxVTU.roa Signing time: Tue 02 Dec 2025 09:47:48 +0000 ROA not before: Tue 02 Dec 2025 09:47:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205179 IP address blocks: 185.50.176.0/24 maxlen: 24 185.50.177.0/24 maxlen: 24 185.50.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:76:06:94:28:2f:e9:e4:f6:ba:36:9c:12:36:e6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f32d40a53bb60b86759e6ec0a5207300b41af70 Validity Not Before: Dec 2 09:47:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=36acf5939b346585d4cbbdab2815b3df67f15535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:20:14:5d:21:42:50:7f:38:14:13:2f:33: a7:a2:e3:ef:0e:10:f9:20:0e:65:2e:2c:e7:1b:32: ca:03:4a:dc:79:ba:14:56:1a:d5:1f:0c:f9:30:e8: cb:c7:cf:9c:6f:34:1a:23:4c:69:61:77:88:82:77: 48:b7:d7:3c:93:6b:d8:43:3b:20:fb:a8:81:f0:a2: 12:8e:8b:2b:b5:72:a4:f2:b0:3c:e2:0b:85:2d:ab: 90:79:04:39:ef:8d:35:f3:2c:d0:aa:a6:19:02:cf: eb:59:3b:98:95:00:00:62:b4:df:49:14:02:c9:ef: fe:91:6d:de:69:7c:0b:ed:7e:f8:06:78:f9:62:27: 8c:cc:5c:34:ce:a9:c7:83:95:c7:e8:5f:e4:c0:cb: c2:8b:1d:2f:2a:c5:b5:19:a4:4e:ac:75:b6:29:b6: 9c:12:61:bf:3d:6c:5f:8b:9a:29:99:5b:45:9c:ae: ef:93:d0:5f:80:7c:0f:45:7d:42:3d:b1:d6:45:98: 49:f8:41:78:c9:e5:7e:d3:f4:74:d4:4e:e5:f5:74: 7f:f8:c5:c6:c0:fd:7f:4e:f5:b0:d7:82:cd:20:78: 69:e6:ad:00:27:fd:71:0c:57:80:32:97:f7:95:d2: f2:57:40:4f:ab:11:ea:9e:bd:6a:5c:cd:36:90:e0: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AC:F5:93:9B:34:65:85:D4:CB:BD:AB:28:15:B3:DF:67:F1:55:35 X509v3 Authority Key Identifier: keyid:4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/Nqz1k5s0ZYXUy72rKBWz32fxVTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.176.0/23 185.50.179.0/24 Signature Algorithm: sha256WithRSAEncryption 10:64:85:cf:76:47:23:02:dc:9b:fd:5b:fc:c8:68:6a:00:33: db:54:f3:2c:6e:b6:8f:ce:41:ba:1e:9e:2c:1a:5a:d3:02:55: ae:f0:18:f9:e7:2e:be:67:35:49:37:8b:54:3f:8e:b8:92:da: c8:20:ab:08:43:ca:22:6c:4a:79:7b:46:f9:2b:20:49:96:fe: 03:04:69:34:9f:da:80:be:ab:61:05:55:4a:c3:81:e7:25:b3: f9:6f:55:c4:dd:92:14:7e:df:19:b9:ef:4f:9b:70:4e:0d:5d: 5d:b8:34:43:dd:05:7b:58:43:47:52:f0:8d:c3:a0:a8:c6:da: 3f:9c:c1:9f:ce:3e:9c:b6:4f:cb:04:f5:b3:05:76:70:be:a3: f9:0c:fb:23:31:d5:66:a2:35:ed:d7:bb:5f:78:e9:6d:25:75: dd:14:63:25:13:c3:41:6d:5c:38:95:74:08:10:4c:01:cf:02: 85:78:82:66:c3:a1:52:5f:46:4d:b9:2a:58:23:2c:eb:bc:d6: 11:6b:dd:22:9f:34:44:65:6b:48:88:c4:6a:a8:a0:e4:40:9f: a2:f4:58:20:b9:7e:c1:98:8e:a9:48:e0:2a:69:71:9f:8b:c5: 34:7f:16:b7:13:69:ab:fa:bb:3f:a1:84:5d:e2:ca:de:d4:d5: ca:ef:95:f9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZredgaUKC/p5Pa6NpwSNuYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzJkNDBhNTNiYjYwYjg2NzU5ZTZlYzBhNTIwNzMwMGI0 MWFmNzAwHhcNMjUxMjAyMDk0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmFjZjU5MzliMzQ2NTg1ZDRjYmJkYWIyODE1YjNkZjY3ZjE1NTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeAgFF0hQlB/OBQTLzOnouPvDhD5 IA5lLiznGzLKA0rceboUVhrVHwz5MOjLx8+cbzQaI0xpYXeIgndIt9c8k2vYQzsg +6iB8KISjosrtXKk8rA84guFLauQeQQ574018yzQqqYZAs/rWTuYlQAAYrTfSRQC ye/+kW3eaXwL7X74Bnj5YieMzFw0zqnHg5XH6F/kwMvCix0vKsW1GaROrHW2Kbac EmG/PWxfi5opmVtFnK7vk9BfgHwPRX1CPbHWRZhJ+EF4yeV+0/R01E7l9XR/+MXG wP1/TvWw14LNIHhp5q0AJ/1xDFeAMpf3ldLyV0BPqxHqnr1qXM02kOA9fwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDas9ZObNGWF1Mu9qygVs99n8VU1MB8GA1UdIwQY MBaAFE8y1ApTu2C4Z1nm7ApSBzALQa9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpMVUNsTzdZTGhuV2Vic0NsSUhNQXRCcjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNzVlNjMtODE0OS00OWM2LTkzOWYt YzZiZjJmZmI3MjUzLzEvTnF6MWs1czBaWVhVeTcycktCV3ozMmZ4VlRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hNzVlNjMtODE0OS00OWM2LTkzOWYtYzZiZjJmZmI3MjUz LzEvVHpMVUNsTzdZTGhuV2Vic0NsSUhNQXRCcjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuTKwAwQA uTKzMA0GCSqGSIb3DQEBCwUAA4IBAQAQZIXPdkcjAtyb/Vv8yGhqADPbVPMsbraP zkG6Hp4sGlrTAlWu8Bj55y6+ZzVJN4tUP464ktrIIKsIQ8oibEp5e0b5KyBJlv4D BGk0n9qAvqthBVVKw4HnJbP5b1XE3ZIUft8Zue9Pm3BODV1duDRD3QV7WENHUvCN w6Coxto/nMGfzj6ctk/LBPWzBXZwvqP5DPsjMdVmojXt17tfeOltJXXdFGMlE8NB bVw4lXQIEEwBzwKFeIJmw6FSX0ZNuSpYIyzrvNYRa90inzREZWtIiMRqqKDkQJ+i 9FgguX7BmI6pSOAqaXGfi8U0fxa3E2mr+rs/oYRd4sre1NXK75X5 -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:54 2025 by rpki-client