This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/q5niV9Q5eeAXp3hOjUxur8jqYds.roa File: q5niV9Q5eeAXp3hOjUxur8jqYds.roa (raw, json) Hash identifier: 5Fx+K88meFjDJECpzvKTBZJ+eQp2LTW5I4a26Jv7tF0= Subject key identifier: AB:99:E2:57:D4:39:79:E0:17:A7:78:4E:8D:4C:6E:AF:C8:EA:61:DB Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A796B7919FED1AB0850EEA448F355F893 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/q5niV9Q5eeAXp3hOjUxur8jqYds.roa Signing time: Wed 12 Nov 2025 18:54:37 +0000 ROA not before: Wed 12 Nov 2025 18:54:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213622 IP address blocks: 89.106.64.0/24 maxlen: 24 185.13.156.0/24 maxlen: 24 185.121.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:6b:79:19:fe:d1:ab:08:50:ee:a4:48:f3:55:f8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 12 18:54:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab99e257d43979e017a7784e8d4c6eafc8ea61db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:4e:86:29:3d:f5:9e:8b:24:33:5c:96:89: d8:ed:42:86:24:d0:5b:49:61:21:11:57:63:6d:27: e4:28:13:80:8c:6b:38:8b:11:b1:ce:00:6e:cd:e2: f6:54:b5:10:d3:1d:1a:b6:59:61:25:16:a2:ad:98: 9b:b0:90:4b:b1:67:ae:6d:aa:01:dd:0c:41:66:ab: 6c:31:14:60:8f:4e:9d:6a:db:5f:98:20:38:01:32: 10:97:73:68:c5:20:3f:50:16:b2:ad:0f:f7:f6:5b: ed:e0:6b:70:a1:00:f7:90:c7:f8:e1:f7:83:61:12: 7f:17:f1:86:f7:1e:bd:0a:69:ff:2a:d3:c7:24:fe: 47:b4:1e:b8:96:3d:da:3d:a1:49:ab:c4:92:9c:dd: 57:58:3c:e1:f5:95:49:8c:29:af:9f:5d:24:f8:32: e1:05:f8:94:4c:f4:b4:f9:62:75:16:ef:13:91:61: c2:df:7b:8d:1d:05:b8:9d:d6:cd:89:39:97:0f:5d: 6a:dc:78:50:c7:ef:be:ce:10:e6:91:96:26:f0:01: fd:87:ea:2f:ac:f0:c0:2a:a1:65:4a:4c:93:ec:a9: 09:3d:38:ad:8d:06:67:f3:6d:45:e4:7c:b1:b5:12: 64:e7:cf:4e:00:24:3d:78:25:58:32:84:ea:92:2a: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:E2:57:D4:39:79:E0:17:A7:78:4E:8D:4C:6E:AF:C8:EA:61:DB X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/q5niV9Q5eeAXp3hOjUxur8jqYds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.64.0/24 185.13.156.0/24 185.121.69.0/24 Signature Algorithm: sha256WithRSAEncryption d8:95:ac:0f:72:7e:57:0a:ad:4a:fc:63:06:9c:e5:24:34:b8: 4e:12:e2:2c:8b:7d:42:5f:f4:00:fd:a9:91:ee:95:21:50:98: ec:c1:e3:c8:1d:0c:d0:be:9f:90:9b:83:b9:3c:c4:89:88:e7: 7c:1d:1d:40:3c:eb:db:31:d9:9c:78:8f:39:11:a7:65:54:c8: 4a:d0:88:56:e0:c7:48:44:7e:a2:68:f8:9f:41:a3:cc:e1:09: a8:54:0d:c8:9a:53:2e:d0:e0:46:41:66:be:a9:89:30:ed:d3: ad:b8:d0:11:dd:38:22:9f:48:9b:73:4c:fc:d7:69:6a:6d:b0: 36:b1:3c:5e:ce:8b:13:8d:58:5a:a8:1a:26:8c:6f:f4:6f:59: 96:9d:fe:1b:a3:11:14:b1:0d:5a:71:b9:46:f5:62:52:22:5d: 76:69:3c:56:b9:ec:e8:ed:1a:d0:64:7d:76:ef:b3:f0:cf:5a: 6e:59:3a:73:d5:27:15:37:ad:3c:10:3d:48:83:6e:ed:56:7a: 53:4f:eb:f4:21:f1:c4:9f:12:eb:67:b1:88:a1:b9:44:29:1c: 18:f1:0a:fd:05:98:14:54:9d:8e:31:26:da:26:1f:08:60:09: 4c:16:32:87:24:a7:75:27:ed:5b:c9:3a:e5:35:35:fd:b9:62: 2d:48:7d:8d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp5a3kZ/tGrCFDupEjzVfiTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTEyMTg1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjk5ZTI1N2Q0Mzk3OWUwMTdhNzc4NGU4ZDRjNmVhZmM4ZWE2MWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3ROhik99Z6LJDNclonY7UKGJNBb SWEhEVdjbSfkKBOAjGs4ixGxzgBuzeL2VLUQ0x0atllhJRairZibsJBLsWeubaoB 3QxBZqtsMRRgj06dattfmCA4ATIQl3NoxSA/UBayrQ/39lvt4GtwoQD3kMf44feD YRJ/F/GG9x69Cmn/KtPHJP5HtB64lj3aPaFJq8SSnN1XWDzh9ZVJjCmvn10k+DLh BfiUTPS0+WJ1Fu8TkWHC33uNHQW4ndbNiTmXD11q3HhQx+++zhDmkZYm8AH9h+ov rPDAKqFlSkyT7KkJPTitjQZn821F5HyxtRJk589OACQ9eCVYMoTqkiooyQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKuZ4lfUOXngF6d4To1Mbq/I6mHbMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvcTVuaVY5UTVlZUFYcDNoT2pVeHVyOGpxWWRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWWpAAwQA uQ2cAwQAuXlFMA0GCSqGSIb3DQEBCwUAA4IBAQDYlawPcn5XCq1K/GMGnOUkNLhO EuIsi31CX/QA/amR7pUhUJjswePIHQzQvp+Qm4O5PMSJiOd8HR1APOvbMdmceI85 EadlVMhK0IhW4MdIRH6iaPifQaPM4QmoVA3ImlMu0OBGQWa+qYkw7dOtuNAR3Tgi n0ibc0z812lqbbA2sTxezosTjVhaqBomjG/0b1mWnf4boxEUsQ1acblG9WJSIl12 aTxWuezo7RrQZH1277Pwz1puWTpz1ScVN608ED1Ig27tVnpTT+v0IfHEnxLrZ7GI oblEKRwY8Qr9BZgUVJ2OMSbaJh8IYAlMFjKHJKd1J+1byTrlNTX9uWItSH2N -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:45 2025 by rpki-client