This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/qjzeeh1Gho5kkoGd8eWSm2fDElg.roa File: qjzeeh1Gho5kkoGd8eWSm2fDElg.roa (raw, json) Hash identifier: legd59DpUzqYKdG/H8UB7NHrWv3d+4ykb5elvNlaqw4= Subject key identifier: AA:3C:DE:7A:1D:46:86:8E:64:92:81:9D:F1:E5:92:9B:67:C3:12:58 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019AB4AC82125C25794AE5804A6C425A74DF Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/qjzeeh1Gho5kkoGd8eWSm2fDElg.roa Signing time: Mon 24 Nov 2025 07:03:15 +0000 ROA not before: Mon 24 Nov 2025 07:03:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43289 IP address blocks: 45.153.124.0/24 maxlen: 24 89.46.232.0/24 maxlen: 24 92.243.67.0/24 maxlen: 24 188.190.12.0/24 maxlen: 24 2a03:f80:373::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:ac:82:12:5c:25:79:4a:e5:80:4a:6c:42:5a:74:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Nov 24 07:03:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa3cde7a1d46868e6492819df1e5929b67c31258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9e:97:5c:14:91:0e:f0:37:ce:18:c2:74:5d: 28:c1:12:00:95:71:aa:44:e8:94:0c:a6:29:76:f1: b7:40:6b:ab:34:b5:af:d3:69:b8:0e:5b:5b:b2:00: 6c:ad:27:23:33:19:43:81:8e:73:fe:ee:93:04:90: f0:29:5e:fd:49:ca:15:69:c6:96:d0:48:d3:d7:0b: f1:3d:d0:10:da:7c:35:98:6a:77:21:ee:ca:db:11: 51:15:d1:3c:b4:ed:c1:b9:9b:01:71:2c:5b:f5:47: 45:82:4a:80:3f:e5:ec:4f:4e:d3:07:87:8c:92:36: f3:92:d6:03:d8:02:46:25:c5:d0:2f:e1:25:aa:80: 93:17:18:39:39:76:3c:de:4a:a8:97:34:58:58:f4: 1b:4c:99:7f:90:a8:05:b9:08:1a:e2:48:11:ca:fb: 24:74:12:2f:c0:3a:23:e6:d9:ce:50:56:57:0f:87: 74:97:35:2f:44:d0:b8:21:2c:9a:af:2c:99:3b:a8: b6:2f:8f:b4:4c:27:81:34:9e:cc:fe:6a:33:de:14: 38:4d:bd:e1:74:04:bb:b5:ab:bb:40:ca:a1:49:51: 0c:3d:b2:24:98:ef:49:ad:b6:8d:50:83:1c:4c:e2: a4:89:f8:4a:0f:d0:f9:a8:70:db:c2:ea:7e:96:e9: a0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3C:DE:7A:1D:46:86:8E:64:92:81:9D:F1:E5:92:9B:67:C3:12:58 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/qjzeeh1Gho5kkoGd8eWSm2fDElg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.124.0/24 89.46.232.0/24 92.243.67.0/24 188.190.12.0/24 IPv6: 2a03:f80:373::/48 Signature Algorithm: sha256WithRSAEncryption 9b:b5:bc:6a:5f:9d:b3:e4:b5:e5:8c:84:4b:75:74:2d:c1:fd: 08:63:a7:80:7f:9f:c1:93:74:33:7c:76:61:cf:98:bf:2c:cb: 9a:ba:e8:57:86:14:a7:87:2f:6c:7f:a0:e5:0b:69:99:90:86: ab:cc:8c:b1:8f:e8:60:83:7f:af:ad:6d:a1:27:8a:fa:6b:ff: 98:08:2a:82:52:5b:1f:2c:3b:16:e6:7c:fc:8f:03:a0:27:fa: 3f:02:b1:c0:36:0d:89:d8:5e:7c:0e:70:ce:e1:71:e0:b3:a6: a2:3d:f6:96:9d:be:a5:c0:0d:ab:05:09:82:7b:5a:92:26:5f: 28:e7:e6:7b:14:d2:77:25:2c:91:6d:ee:c8:56:e4:37:64:38: d8:d0:6f:04:e3:f8:15:d8:40:a4:c8:6b:9e:6e:04:d2:96:e3: 79:4b:5c:1e:c5:3d:fb:0f:d9:f3:a4:04:6f:9a:5b:d9:bd:c7: 1b:6e:a0:56:0b:f9:88:c5:f6:09:63:14:a9:45:97:fc:74:09: 64:9b:43:aa:c2:77:ce:8b:67:bf:1d:36:06:1e:4a:de:4e:94: e7:75:72:cd:2d:67:c5:b6:d0:ab:5c:90:3b:4e:81:a9:ec:11: 15:0d:42:6c:ac:09:bd:ee:53:63:d8:ee:6c:01:fc:57:d7:57: 9e:76:61:77 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZq0rIISXCV5SuWASmxCWnTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUxMTI0MDcwMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTNjZGU3YTFkNDY4NjhlNjQ5MjgxOWRmMWU1OTI5YjY3YzMxMjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp6XXBSRDvA3zhjCdF0owRIAlXGq ROiUDKYpdvG3QGurNLWv02m4DltbsgBsrScjMxlDgY5z/u6TBJDwKV79ScoVacaW 0EjT1wvxPdAQ2nw1mGp3Ie7K2xFRFdE8tO3BuZsBcSxb9UdFgkqAP+XsT07TB4eM kjbzktYD2AJGJcXQL+ElqoCTFxg5OXY83kqolzRYWPQbTJl/kKgFuQga4kgRyvsk dBIvwDoj5tnOUFZXD4d0lzUvRNC4ISyaryyZO6i2L4+0TCeBNJ7M/moz3hQ4Tb3h dAS7tau7QMqhSVEMPbIkmO9JrbaNUIMcTOKkifhKD9D5qHDbwup+lumghQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFKo83nodRoaOZJKBnfHlkptnwxJYMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvcWp6ZWVoMUdobzVra29HZDhlV1NtMmZERWxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALZl8AwQA WS7oAwQAXPNDAwQAvL4MMA8EAgACMAkDBwAqAw+AA3MwDQYJKoZIhvcNAQELBQAD ggEBAJu1vGpfnbPkteWMhEt1dC3B/Qhjp4B/n8GTdDN8dmHPmL8sy5q66FeGFKeH L2x/oOULaZmQhqvMjLGP6GCDf6+tbaEnivpr/5gIKoJSWx8sOxbmfPyPA6An+j8C scA2DYnYXnwOcM7hceCzpqI99padvqXADasFCYJ7WpImXyjn5nsU0nclLJFt7shW 5DdkONjQbwTj+BXYQKTIa55uBNKW43lLXB7FPfsP2fOkBG+aW9m9xxtuoFYL+YjF 9gljFKlFl/x0CWSbQ6rCd86LZ78dNgYeSt5OlOd1cs0tZ8W20KtckDtOgansERUN QmysCb3uU2PY7mwB/FfXV552YXc= -----END CERTIFICATE-----Generated at Wed Dec 10 10:53:24 2025 by rpki-client