This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GTq_SQR2-7K_y427giERKHYVmZE.roa File: GTq_SQR2-7K_y427giERKHYVmZE.roa (raw, json) Hash identifier: n1Rbm0nJXbZ3Qhcf+p8foYpm21wkCg2xCxC2hfVeW80= Subject key identifier: 19:3A:BF:49:04:76:FB:B2:BF:CB:8D:BB:82:21:11:28:76:15:99:91 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B11E6B3560C60A1B78D6412BB08FB1F7A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GTq_SQR2-7K_y427giERKHYVmZE.roa Signing time: Fri 12 Dec 2025 09:31:30 +0000 ROA not before: Fri 12 Dec 2025 09:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.120.245.0/24 maxlen: 24 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 91.92.27.0/24 maxlen: 24 91.92.197.0/24 maxlen: 24 91.92.248.0/21 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 94.156.253.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 193.148.253.0/24 maxlen: 24 194.31.222.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:e6:b3:56:0c:60:a1:b7:8d:64:12:bb:08:fb:1f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 12 09:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=193abf490476fbb2bfcb8dbb8221112876159991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:e2:dd:07:2c:dc:ea:5d:fc:29:fa:39:9b: f6:ea:71:8d:20:86:7f:af:61:58:1d:8d:97:89:3a: 29:76:01:6f:25:34:5f:f4:f6:9e:19:e0:61:17:65: 9d:86:92:d2:d2:e8:90:24:0d:bb:af:57:72:48:1d: df:4b:be:16:9a:5d:4a:0e:2e:1b:19:83:41:5e:0b: 9c:7e:31:27:b3:31:43:3b:f1:d1:cf:a2:3b:53:76: 0f:91:6a:3a:de:21:e5:69:47:61:69:4e:bd:65:03: 54:d8:ca:68:52:a9:4e:e8:f1:b9:a6:32:ac:f1:af: 40:6d:9b:66:6c:06:66:73:6a:24:d4:6e:0a:dd:70: fd:8c:55:74:24:cb:b2:c3:0d:52:1a:b0:a2:58:89: cb:37:3f:6c:43:ab:e1:d8:68:b1:19:96:43:f1:61: c4:66:84:bb:53:4b:3a:8b:af:32:e9:47:c8:99:e0: 78:94:32:82:24:87:e0:cc:09:ce:5a:2d:4a:63:07: 73:9e:67:db:9b:52:52:87:4d:04:93:4c:10:8e:c7: 40:4f:c6:bb:0a:2b:54:13:e2:08:da:16:5b:89:a3: 99:48:e9:e7:2f:ee:c2:4a:19:d4:ba:91:be:b2:8d: 64:c1:ed:98:54:88:68:27:ba:23:9a:17:3f:35:fe: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3A:BF:49:04:76:FB:B2:BF:CB:8D:BB:82:21:11:28:76:15:99:91 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GTq_SQR2-7K_y427giERKHYVmZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.120.245.0/24 87.121.132.0/22 87.121.165.0/24 91.92.27.0/24 91.92.197.0/24 91.92.248.0/21 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 94.156.253.0/24 185.222.160.0/24 193.25.216.0/24 193.148.253.0/24 194.31.222.0/24 194.55.186.0/24 194.169.175.0/24 Signature Algorithm: sha256WithRSAEncryption ab:32:69:ec:11:46:fb:54:8c:a3:f3:b8:73:dc:fc:99:5c:08: 72:85:e9:27:df:42:3f:f2:3e:a9:ff:da:00:9d:83:a4:0a:a6: 7d:79:eb:91:27:15:93:5e:30:16:5b:44:a5:c2:fe:83:2e:2a: f8:1f:45:e0:ee:f6:0c:25:73:10:54:80:5f:fb:39:08:0d:0f: 65:73:26:6e:fa:6e:d7:56:71:cd:89:1d:88:4f:6d:11:c9:2f: 18:ba:e4:fd:35:75:6f:f1:ef:ff:b4:93:df:39:f6:e7:62:99: 4a:5a:49:77:6b:54:b0:04:20:dd:c6:a7:77:c1:00:61:0b:f9: ef:5f:5e:e4:46:3a:ff:cd:31:e4:49:69:6d:8d:04:0e:ef:11: 73:a3:e3:f0:cc:ef:48:1b:d0:02:32:27:9d:52:35:57:3b:de: 33:b3:3b:88:91:52:db:68:8f:58:90:3d:cd:e8:9d:5b:95:e9: 8f:20:6c:5e:35:7e:a8:ac:58:9d:43:d4:4b:6c:dc:4f:49:39: 83:e4:39:4a:da:be:31:56:7e:d4:2a:3a:4e:65:de:bb:32:44: e2:fd:f5:8d:00:8e:24:01:2d:ab:23:d9:ba:79:bf:0f:d5:a4: a5:20:98:7e:57:69:91:05:e9:95:e2:e1:f7:d4:67:01:3d:ec: 66:de:f7:25 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZsR5rNWDGCht41kErsI+x96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjEyMDkzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTNhYmY0OTA0NzZmYmIyYmZjYjhkYmI4MjIxMTEyODc2MTU5OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujni3Qcs3Opd/Cn6OZv26nGNIIZ/ r2FYHY2XiTopdgFvJTRf9PaeGeBhF2WdhpLS0uiQJA27r1dySB3fS74Wml1KDi4b GYNBXgucfjEnszFDO/HRz6I7U3YPkWo63iHlaUdhaU69ZQNU2MpoUqlO6PG5pjKs 8a9AbZtmbAZmc2ok1G4K3XD9jFV0JMuyww1SGrCiWInLNz9sQ6vh2GixGZZD8WHE ZoS7U0s6i68y6UfImeB4lDKCJIfgzAnOWi1KYwdznmfbm1JSh00Ek0wQjsdAT8a7 CitUE+II2hZbiaOZSOnnL+7CShnUupG+so1kwe2YVIhoJ7ojmhc/Nf7KFQIDAQAB o4ICnjCCApowHQYDVR0OBBYEFBk6v0kEdvuyv8uNu4IhESh2FZmRMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvR1RxX1NRUjItN0tfeTQyN2dpRVJLSFlWbVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAt QuQDBAAtQucDBAAtWfcDBAAtjZ4DBABRoe4DBAFV2YIDBABXeFcDBABXeH4DBABX eKYDBABXePUDBAJXeYQDBABXeaUDBABbXBsDBABbXMUDBANbXPgDBAFcd8QDBABc +TIDBABde20DBABenP0DBAC53qADBADBGdgDBADBlP0DBADCH94DBADCN7oDBADC qa8wDQYJKoZIhvcNAQELBQADggEBAKsyaewRRvtUjKPzuHPc/JlcCHKF6SffQj/y Pqn/2gCdg6QKpn1565EnFZNeMBZbRKXC/oMuKvgfReDu9gwlcxBUgF/7OQgND2Vz Jm76btdWcc2JHYhPbRHJLxi65P01dW/x7/+0k9859udimUpaSXdrVLAEIN3Gp3fB AGEL+e9fXuRGOv/NMeRJaW2NBA7vEXOj4/DM70gb0AIyJ51SNVc73jOzO4iRUtto j1iQPc3onVuV6Y8gbF41fqisWJ1D1Ets3E9JOYPkOUravjFWftQqOk5l3rsyROL9 9Y0AjiQBLasj2bp5vw/VpKUgmH5XaZEF6ZXi4ffUZwE97Gbe9yU= -----END CERTIFICATE-----Generated at Sun Dec 14 17:01:09 2025 by rpki-client