This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/1-QTEJ1tnj6PYEN8SAYsXC1oCWLM.roa File: 1-QTEJ1tnj6PYEN8SAYsXC1oCWLM.roa (raw, json) Hash identifier: RZ0FyQhUAPr9frorsTkk/S6+v/m4Q2SNiKtWlYqEBpk= Subject key identifier: F9:04:C4:27:5B:67:8F:A3:D8:10:DF:12:01:8B:17:0B:5A:02:58:B3 Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8 Certificate serial: 019ABC95A61F36F5C501C43FE2E15E46E13A Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/1-QTEJ1tnj6PYEN8SAYsXC1oCWLM.roa Signing time: Tue 25 Nov 2025 19:55:15 +0000 ROA not before: Tue 25 Nov 2025 19:55:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197204 IP address blocks: 185.134.232.0/22 maxlen: 24 2a06:ef80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:95:a6:1f:36:f5:c5:01:c4:3f:e2:e1:5e:46:e1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8 Validity Not Before: Nov 25 19:55:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f904c4275b678fa3d810df12018b170b5a0258b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:01:e7:50:20:36:81:d1:76:27:89:35:72:cc: af:83:e9:10:88:5c:83:5e:2e:d5:f9:bd:cf:18:3e: 7d:40:29:50:88:2e:eb:56:29:4b:e5:07:f8:e3:70: b2:58:e1:0c:82:c4:68:70:eb:95:6e:2a:da:2d:80: 02:74:7d:9f:35:b8:49:6e:78:cc:8d:d8:a6:0d:85: c7:bd:28:7f:65:52:58:ae:52:88:ed:35:01:ed:e1: 05:e9:12:57:e6:65:e8:78:ca:c7:6d:df:b4:3b:38: d8:cf:29:90:fa:7e:46:4e:6b:71:bb:76:20:e3:b4: 29:bc:f1:bc:3d:30:b6:e5:57:c7:91:f3:74:d4:00: c3:7f:93:3f:1e:e4:fa:32:cb:18:a0:67:46:88:e0: b1:e9:28:0c:62:ca:f1:29:48:33:3a:03:28:7d:8c: 67:45:23:33:ae:38:c7:9e:cc:48:d3:dd:4e:41:7f: ef:b9:2d:97:01:3f:67:90:11:89:29:62:e5:63:d9: 72:60:94:8d:21:2b:c1:f7:2b:48:a2:9f:bb:2d:05: fa:b0:f8:1a:f0:a6:ba:cc:52:3e:b3:51:d8:fc:6b: 05:ac:6e:45:db:14:70:df:e6:df:ef:c3:9d:51:77: c6:93:83:53:d1:c0:f8:5f:fc:2f:1f:62:41:01:81: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:04:C4:27:5B:67:8F:A3:D8:10:DF:12:01:8B:17:0B:5A:02:58:B3 X509v3 Authority Key Identifier: keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/1-QTEJ1tnj6PYEN8SAYsXC1oCWLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.232.0/22 IPv6: 2a06:ef80::/29 Signature Algorithm: sha256WithRSAEncryption 6b:ba:dc:87:b0:0b:b1:65:e4:a5:e3:01:65:92:8e:77:a7:fb: fc:37:25:4a:cb:7d:37:f0:97:b6:74:70:a4:c7:b7:b6:93:93: ae:76:1c:b6:a5:44:be:3e:b0:6f:a3:cc:9c:8f:40:d4:16:1c: fb:15:c6:7f:7c:74:98:70:49:6b:34:72:a3:60:f3:62:b8:c8: 05:e0:3b:b8:a6:0b:6a:36:19:70:f9:3d:19:8b:ef:a4:3a:ef: fc:6d:aa:b1:8f:ce:d4:a8:72:09:88:5b:25:5d:ac:f6:49:2c: cd:7f:69:fd:89:27:59:38:83:3e:a0:a0:2d:d7:27:cf:14:af: f8:02:ea:e1:27:e6:b5:2c:22:07:c5:b5:ee:73:4d:cb:49:fa: 94:79:d3:b8:ba:e3:e7:88:34:b7:de:b2:2e:94:ec:aa:3e:02: 05:04:16:18:48:86:8f:6d:80:03:82:b9:ab:87:a2:52:ec:3d: 28:51:f0:1b:3e:2f:7b:08:73:38:f4:bf:af:e1:c7:17:29:76: 1c:15:e1:d2:b6:c8:d2:ff:54:d7:12:90:49:82:3e:ff:5f:00: aa:7b:92:1c:e6:7a:b0:b1:c5:a5:14:25:51:90:71:f0:90:29: 1b:e5:d0:68:f1:8f:f9:de:46:9b:66:0c:54:12:08:84:f3:fc: db:60:23:e7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZq8laYfNvXFAcQ/4uFeRuE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZmFkN2M5YTQ4NWZlYjI5MTc5M2ViOWUyZGI5OGY0MThl NWM0YjgwHhcNMjUxMTI1MTk1NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTA0YzQyNzViNjc4ZmEzZDgxMGRmMTIwMThiMTcwYjVhMDI1OGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgHnUCA2gdF2J4k1csyvg+kQiFyD Xi7V+b3PGD59QClQiC7rVilL5Qf443CyWOEMgsRocOuVbiraLYACdH2fNbhJbnjM jdimDYXHvSh/ZVJYrlKI7TUB7eEF6RJX5mXoeMrHbd+0OzjYzymQ+n5GTmtxu3Yg 47QpvPG8PTC25VfHkfN01ADDf5M/HuT6MssYoGdGiOCx6SgMYsrxKUgzOgMofYxn RSMzrjjHnsxI091OQX/vuS2XAT9nkBGJKWLlY9lyYJSNISvB9ytIop+7LQX6sPga 8Ka6zFI+s1HY/GsFrG5F2xRw3+bf78OdUXfGk4NT0cD4X/wvH2JBAYF5owIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPkExCdbZ4+j2BDfEgGLFwtaAlizMB8GA1UdIwQY MBaAFFP618mkhf6ykXk+ueLbmPQY5cS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9yWHlhU0ZfcktSZVQ2NTR0dVk5QmpseExnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi81MTQwZTgtYzdmYy00OGJmLTk2MGUt MGYwNGM2YTk5NWZkLzEvMS1RVEVKMXRuajZQWUVOOFNBWXNYQzFvQ1dMTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjYvNTE0MGU4LWM3ZmMtNDhiZi05NjBlLTBmMDRjNmE5OTVm ZC8xL1Vfclh5YVNGX3JLUmVUNjU0dHVZOUJqbHhMZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmG6DAN BAIAAjAHAwUDKgbvgDANBgkqhkiG9w0BAQsFAAOCAQEAa7rch7ALsWXkpeMBZZKO d6f7/DclSst9N/CXtnRwpMe3tpOTrnYctqVEvj6wb6PMnI9A1BYc+xXGf3x0mHBJ azRyo2DzYrjIBeA7uKYLajYZcPk9GYvvpDrv/G2qsY/O1KhyCYhbJV2s9kkszX9p /YknWTiDPqCgLdcnzxSv+ALq4SfmtSwiB8W17nNNy0n6lHnTuLrj54g0t96yLpTs qj4CBQQWGEiGj22AA4K5q4eiUuw9KFHwGz4vewhzOPS/r+HHFyl2HBXh0rbI0v9U 1xKQSYI+/18AqnuSHOZ6sLHFpRQlUZBx8JApG+XQaPGP+d5Gm2YMVBIIhPP822Aj 5w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:32 2025 by rpki-client