This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pqG7pTHpZ12iXtUebDEFlDmjmW0.roa File: pqG7pTHpZ12iXtUebDEFlDmjmW0.roa (raw, json) Hash identifier: pyANArKDVJiHDDXT+N/BwiUvuRfL73c/dLW29xA8ofQ= Subject key identifier: A6:A1:BB:A5:31:E9:67:5D:A2:5E:D5:1E:6C:31:05:94:39:A3:99:6D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B500DA71E8391882D313DBED9AC719D96 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pqG7pTHpZ12iXtUebDEFlDmjmW0.roa Signing time: Wed 24 Dec 2025 11:10:30 +0000 ROA not before: Wed 24 Dec 2025 11:10:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 5.253.64.0/24 maxlen: 24 93.123.74.0/24 maxlen: 24 93.123.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:0d:a7:1e:83:91:88:2d:31:3d:be:d9:ac:71:9d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 24 11:10:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a6a1bba531e9675da25ed51e6c31059439a3996d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:08:d3:cc:61:fc:4f:ca:ad:23:06:dd:8b: 15:c4:b7:c8:83:70:ee:51:cc:56:67:a3:79:74:01: ea:19:00:25:bb:6f:a2:d2:11:16:b6:4e:84:02:53: d4:b2:cf:0f:a9:76:32:b1:33:4f:6e:42:df:5e:b1: 03:21:79:4f:8d:30:39:7e:5a:cc:8e:25:ff:1e:7e: 95:fc:e2:7d:70:eb:3a:ad:dd:d1:e1:8c:72:0c:e0: 21:c4:6e:69:5a:39:fe:d1:75:d2:60:1b:bb:6f:14: 31:8f:ca:23:24:e8:3e:2b:d5:5c:5d:d0:9a:46:0a: 71:f5:99:43:ad:ed:7b:82:cf:34:c2:e1:2a:fc:59: d3:a1:a1:fc:09:f7:55:7a:ba:e5:81:89:0d:d5:2e: df:cd:b9:75:48:80:20:a7:71:20:69:21:14:2b:b1: 87:15:81:20:79:82:3c:e9:68:b7:78:ea:b1:70:c6: 63:3b:ba:74:c8:3b:f8:11:74:59:85:de:74:df:84: d8:b4:79:41:1a:aa:c3:43:1a:42:60:af:ac:71:3b: c1:3f:d7:87:66:4e:19:de:07:91:c3:4f:72:e9:2c: 04:d4:35:a0:2e:c6:b3:a3:08:ac:17:d5:d7:6f:51: 57:55:ed:dd:f6:d2:8c:32:a5:cf:3f:98:61:81:07: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A1:BB:A5:31:E9:67:5D:A2:5E:D5:1E:6C:31:05:94:39:A3:99:6D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pqG7pTHpZ12iXtUebDEFlDmjmW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.64.0/24 93.123.74.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:ed:21:98:f3:a5:1c:02:a9:1b:49:8f:3d:8d:fd:a8:64:6f: cd:80:3a:ec:32:8f:18:c9:98:bf:20:81:85:b8:03:71:08:00: 45:19:c3:2f:88:39:12:b2:7b:df:9c:eb:28:da:17:c3:74:6c: 35:db:fd:b5:ed:a2:c9:bf:d2:ef:e4:da:4a:4b:3b:28:51:0e: 6c:fe:b2:f4:ce:30:73:af:59:9c:f7:87:6d:9f:32:a5:bd:66: b6:c1:e3:44:ca:15:df:d6:76:24:41:61:ae:c9:16:be:d5:01: f4:4e:df:40:26:f1:54:ef:00:9d:51:6e:42:10:28:b0:13:cc: 97:bf:15:13:20:c7:61:3c:09:40:f4:f2:fd:ca:34:17:14:dc: 2b:20:2a:36:d3:af:21:db:e0:2a:ef:dc:78:e0:a7:cd:c2:ec: 38:20:7e:d9:05:dd:1b:e1:f8:49:bd:78:d4:04:0a:93:75:c3: ea:92:b9:aa:7e:69:f7:b9:35:31:0d:c3:27:f8:f1:bb:0a:72: ce:89:77:11:05:10:65:27:03:66:14:fb:17:b7:86:95:21:bb: 34:d1:01:4f:6d:ac:61:5b:d4:bd:f5:24:e6:64:54:da:50:de: cb:d6:66:15:15:01:f9:12:57:cf:88:ca:2b:c7:75:86:2d:ea: b9:06:79:c9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtQDaceg5GILTE9vtmscZ2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjI0MTExMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmExYmJhNTMxZTk2NzVkYTI1ZWQ1MWU2YzMxMDU5NDM5YTM5OTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIEI08xh/E/KrSMG3YsVxLfIg3Du UcxWZ6N5dAHqGQAlu2+i0hEWtk6EAlPUss8PqXYysTNPbkLfXrEDIXlPjTA5flrM jiX/Hn6V/OJ9cOs6rd3R4YxyDOAhxG5pWjn+0XXSYBu7bxQxj8ojJOg+K9VcXdCa Rgpx9ZlDre17gs80wuEq/FnToaH8CfdVerrlgYkN1S7fzbl1SIAgp3EgaSEUK7GH FYEgeYI86Wi3eOqxcMZjO7p0yDv4EXRZhd5034TYtHlBGqrDQxpCYK+scTvBP9eH Zk4Z3geRw09y6SwE1DWgLsazowisF9XXb1FXVe3d9tKMMqXPP5hhgQdsRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKahu6Ux6Wddol7VHmwxBZQ5o5ltMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcHFHN3BUSHBaMTJpWHRVZWJERUZsRG1qbVcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABf1AAwQB XXtKMA0GCSqGSIb3DQEBCwUAA4IBAQAr7SGY86UcAqkbSY89jf2oZG/NgDrsMo8Y yZi/IIGFuANxCABFGcMviDkSsnvfnOso2hfDdGw12/217aLJv9Lv5NpKSzsoUQ5s /rL0zjBzr1mc94dtnzKlvWa2weNEyhXf1nYkQWGuyRa+1QH0Tt9AJvFU7wCdUW5C ECiwE8yXvxUTIMdhPAlA9PL9yjQXFNwrICo2068h2+Aq79x44KfNwuw4IH7ZBd0b 4fhJvXjUBAqTdcPqkrmqfmn3uTUxDcMn+PG7CnLOiXcRBRBlJwNmFPsXt4aVIbs0 0QFPbaxhW9S99STmZFTaUN7L1mYVFQH5ElfPiMorx3WGLeq5BnnJ -----END CERTIFICATE-----Generated at Sun Dec 28 22:27:25 2025 by rpki-client