This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x_qcIkV2eDlQNSrTqS94NCJQ4r4.roa File: x_qcIkV2eDlQNSrTqS94NCJQ4r4.roa (raw, json) Hash identifier: g5H6cr1YqcNl4Tdb59nh8qw5J/guxu6/+i1okPg7Y48= Subject key identifier: C7:FA:9C:22:45:76:78:39:50:35:2A:D3:A9:2F:78:34:22:50:E2:BE Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019A96B68F251B88BB89BE38D96FEB6BA97D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x_qcIkV2eDlQNSrTqS94NCJQ4r4.roa Signing time: Tue 18 Nov 2025 11:25:37 +0000 ROA not before: Tue 18 Nov 2025 11:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44547 IP address blocks: 45.149.242.0/24 maxlen: 24 87.121.103.0/24 maxlen: 24 87.121.104.0/24 maxlen: 24 91.92.16.0/24 maxlen: 24 94.156.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 15:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:b6:8f:25:1b:88:bb:89:be:38:d9:6f:eb:6b:a9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 18 11:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7fa9c224576783950352ad3a92f78342250e2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:43:95:de:c7:04:db:3c:50:02:6e:d9:b4:48: 15:e4:8d:17:9d:e4:ce:77:73:11:49:b5:b4:bc:53: 09:68:7b:52:19:cd:a4:2e:d9:bd:c4:87:77:81:0e: e0:a5:68:fe:e6:34:ab:90:05:04:9b:45:49:d5:4d: 71:05:0a:72:12:4d:a8:70:f8:19:19:9c:5c:0b:5b: 6b:57:05:f6:3f:ea:a8:0b:64:3d:d5:8e:40:46:b8: 11:ca:e9:7a:a5:21:12:04:00:c3:1c:47:ea:17:bf: e8:32:9e:6b:d6:47:22:1c:6f:30:1e:16:02:89:78: 3b:14:4d:b1:79:84:18:5a:1d:72:84:d7:6f:4c:2b: eb:91:e0:35:c7:19:e9:66:97:c9:a9:a5:9d:7e:2f: c6:66:42:e0:50:63:23:35:ce:40:14:d2:fc:10:03: 37:41:8c:bb:b0:59:09:e2:74:d5:b2:c6:cc:79:a7: ac:32:2a:ce:90:0a:e1:26:ba:6e:6b:18:e4:31:95: 9b:90:d6:92:57:97:73:7b:6c:88:0d:bc:be:39:cd: c2:47:93:0d:55:31:54:77:98:e1:2c:a1:48:c4:ce: a2:b0:0d:09:12:b0:40:f8:17:61:98:3a:e0:bc:d7: 2f:99:e4:a1:ce:16:eb:7c:5e:c7:ff:71:2e:0e:bf: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FA:9C:22:45:76:78:39:50:35:2A:D3:A9:2F:78:34:22:50:E2:BE X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x_qcIkV2eDlQNSrTqS94NCJQ4r4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.242.0/24 87.121.103.0-87.121.104.255 91.92.16.0/24 94.156.113.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:47:cb:be:5f:99:11:1a:83:a4:66:cc:d4:73:48:44:3c:d3: 94:03:5f:28:48:e5:19:1c:50:d5:48:f4:a9:b3:c8:20:23:b5: c4:80:ee:64:0f:9e:6a:b9:eb:5a:54:c4:c3:85:fa:42:62:78: 80:4d:c1:25:89:42:b0:34:57:0b:26:ec:35:7c:94:3e:82:03: 44:7b:4d:35:12:bf:8c:cd:04:27:b7:b3:87:be:69:e9:3b:67: 35:10:a8:0b:3c:cf:42:67:f6:73:c9:4e:7c:53:30:be:48:6a: 9c:bc:ff:94:19:d9:7b:b7:3a:df:72:9a:6c:2e:95:40:65:04: ae:9c:ce:de:60:11:6b:7c:87:69:74:6f:9e:4b:ec:88:a7:fb: 99:88:31:76:db:c1:22:07:23:12:8c:f3:0a:f4:b3:6a:7e:9a: c2:68:e2:97:3f:1d:62:3f:c0:fc:1e:45:19:9b:0d:3d:e6:0d: 89:be:17:cb:1b:4a:34:aa:82:9f:62:84:b0:30:d9:63:8a:1a: 71:61:e4:c0:1f:f4:4c:84:4c:71:95:b7:c6:72:99:f9:50:fb: e5:1e:6c:3d:43:92:54:ae:dc:24:ec:28:63:96:53:10:1e:b3: a5:3c:82:7d:cf:84:81:df:a5:41:fb:a5:20:a3:d1:f3:80:51: cc:80:7e:9a -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZqWto8lG4i7ib442W/ra6l9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTE4MTEyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2ZhOWMyMjQ1NzY3ODM5NTAzNTJhZDNhOTJmNzgzNDIyNTBlMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EOV3scE2zxQAm7ZtEgV5I0XneTO d3MRSbW0vFMJaHtSGc2kLtm9xId3gQ7gpWj+5jSrkAUEm0VJ1U1xBQpyEk2ocPgZ GZxcC1trVwX2P+qoC2Q91Y5ARrgRyul6pSESBADDHEfqF7/oMp5r1kciHG8wHhYC iXg7FE2xeYQYWh1yhNdvTCvrkeA1xxnpZpfJqaWdfi/GZkLgUGMjNc5AFNL8EAM3 QYy7sFkJ4nTVssbMeaesMirOkArhJrpuaxjkMZWbkNaSV5dze2yIDby+Oc3CR5MN VTFUd5jhLKFIxM6isA0JErBA+BdhmDrgvNcvmeShzhbrfF7H/3EuDr/7OQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFMf6nCJFdng5UDUq06kveDQiUOK+MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEveF9xY0lrVjJlRGxRTlNyVHFTOTROQ0pRNHI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALZXyMAwD BABXeWcDBABXeWgDBABbXBADBABenHEwDQYJKoZIhvcNAQELBQADggEBAC9Hy75f mREag6RmzNRzSEQ805QDXyhI5RkcUNVI9KmzyCAjtcSA7mQPnmq561pUxMOF+kJi eIBNwSWJQrA0Vwsm7DV8lD6CA0R7TTUSv4zNBCe3s4e+aek7ZzUQqAs8z0Jn9nPJ TnxTML5Iapy8/5QZ2Xu3Ot9ymmwulUBlBK6czt5gEWt8h2l0b55L7Iin+5mIMXbb wSIHIxKM8wr0s2p+msJo4pc/HWI/wPweRRmbDT3mDYm+F8sbSjSqgp9ihLAw2WOK GnFh5MAf9EyETHGVt8ZymflQ++UebD1DklSu3CTsKGOWUxAes6U8gn3PhIHfpUH7 pSCj0fOAUcyAfpo= -----END CERTIFICATE-----Generated at Fri Nov 21 00:14:15 2025 by rpki-client