This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/qFg8P7kncyejFwe6WRStCWMu9tk.roa File: qFg8P7kncyejFwe6WRStCWMu9tk.roa (raw, json) Hash identifier: nG5AmMAmgCeZqwQAuUTnylIrA6+TQ+tcWksu8mRl/HA= Subject key identifier: A8:58:3C:3F:B9:27:73:27:A3:17:07:BA:59:14:AD:09:63:2E:F6:D9 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019AC92750D3B1AEC167DA474E3FF34A07AA Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/qFg8P7kncyejFwe6WRStCWMu9tk.roa Signing time: Fri 28 Nov 2025 06:29:48 +0000 ROA not before: Fri 28 Nov 2025 06:29:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 109.122.1.0/24 maxlen: 24 109.122.15.0/24 maxlen: 24 109.122.20.0/24 maxlen: 24 109.122.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:27:50:d3:b1:ae:c1:67:da:47:4e:3f:f3:4a:07:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Nov 28 06:29:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a8583c3fb9277327a31707ba5914ad09632ef6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ef:0b:09:e3:a2:49:9d:7d:fc:14:3d:a8:85: a3:0b:73:18:8b:2d:44:8b:40:b6:cf:cb:3f:fa:28: 4d:b0:b6:97:90:2f:08:0d:91:f8:ec:1e:20:d8:ab: 62:1d:95:bf:4c:53:69:d3:56:dd:59:fb:e4:78:c7: d5:95:1a:fb:91:e3:80:6d:22:e3:24:f7:39:07:c4: 9f:01:53:a5:ca:66:df:a1:71:1c:f4:88:d5:e9:b6: c7:d0:61:12:c8:93:e9:be:a4:69:f7:3b:0e:8c:d2: 36:03:a7:5c:36:e2:51:ab:7d:ab:ac:39:26:44:39: 63:78:82:86:26:7e:44:d7:2d:a3:66:75:b7:e5:b9: 76:0c:a7:17:ab:fd:72:3c:e8:ac:1f:21:8a:7b:75: f7:11:78:1b:99:57:87:b5:25:07:77:88:b2:5e:f8: 6b:3d:d6:e1:ea:9c:ef:2b:4c:30:25:32:54:50:28: 70:65:ec:33:bb:f2:c9:1b:bb:ad:ec:e5:2b:c2:62: fd:29:2e:79:c9:50:b6:62:ed:a4:95:72:49:9f:a6: bf:7e:a8:04:8a:a6:d5:97:1c:cf:6a:8a:93:15:e4: 91:e0:71:18:e6:45:74:4a:9e:cc:78:e1:eb:af:81: d2:26:61:1c:1c:29:8f:ef:9f:a4:dd:c9:6f:38:f1: 45:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:58:3C:3F:B9:27:73:27:A3:17:07:BA:59:14:AD:09:63:2E:F6:D9 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/qFg8P7kncyejFwe6WRStCWMu9tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.1.0/24 109.122.15.0/24 109.122.20.0/23 Signature Algorithm: sha256WithRSAEncryption 47:52:64:3b:57:57:82:aa:66:82:ac:55:d9:46:31:0f:f5:96: ae:2e:c5:bf:22:44:9e:e5:1b:b9:96:ac:1a:9e:65:65:be:6a: 96:e6:60:b1:4a:60:75:2d:09:d4:64:b4:66:7d:6b:32:ad:3b: ee:a0:b3:13:37:34:70:a0:29:f0:c6:d2:f6:62:3b:54:3a:7e: c8:b1:51:bf:e0:77:8e:32:8c:ee:cc:52:81:5b:25:73:66:54: 07:04:68:06:03:88:2a:37:dc:80:9d:d6:79:39:7c:e3:3e:b1: 77:b8:3e:5f:6c:eb:a9:3e:c6:24:d6:08:a4:02:85:68:24:0d: 1a:11:95:ab:22:d3:4a:a3:2e:56:91:db:05:75:71:d6:92:2d: f1:b3:97:b3:8a:20:ac:0d:0c:5e:71:38:91:dc:21:99:ce:d9: ba:11:71:70:64:ca:a3:c0:a0:2a:db:02:5c:5c:d4:f9:c9:4b: 59:1d:08:29:2d:78:75:65:b5:ce:9d:7f:e0:0f:fb:ff:c6:b1: d4:0f:4d:c4:83:ed:b3:77:e7:b4:93:9c:b8:8d:b4:30:fd:7f: 03:38:70:9a:b2:c1:3f:79:ad:af:8c:6a:12:fc:a4:55:55:7c: 02:6a:fb:f3:46:bc:43:bd:96:00:09:72:95:34:fb:a9:f6:a8: ad:ec:eb:58 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrJJ1DTsa7BZ9pHTj/zSgeqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMTI4MDYyOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODU4M2MzZmI5Mjc3MzI3YTMxNzA3YmE1OTE0YWQwOTYzMmVmNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme8LCeOiSZ19/BQ9qIWjC3MYiy1E i0C2z8s/+ihNsLaXkC8IDZH47B4g2KtiHZW/TFNp01bdWfvkeMfVlRr7keOAbSLj JPc5B8SfAVOlymbfoXEc9IjV6bbH0GESyJPpvqRp9zsOjNI2A6dcNuJRq32rrDkm RDljeIKGJn5E1y2jZnW35bl2DKcXq/1yPOisHyGKe3X3EXgbmVeHtSUHd4iyXvhr Pdbh6pzvK0wwJTJUUChwZewzu/LJG7ut7OUrwmL9KS55yVC2Yu2klXJJn6a/fqgE iqbVlxzPaoqTFeSR4HEY5kV0Sp7MeOHrr4HSJmEcHCmP75+k3clvOPFF7wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKhYPD+5J3MnoxcHulkUrQljLvbZMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvcUZnOFA3a25jeWVqRndlNldSU3RDV011OXRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXoBAwQA bXoPAwQBbXoUMA0GCSqGSIb3DQEBCwUAA4IBAQBHUmQ7V1eCqmaCrFXZRjEP9Zau LsW/IkSe5Ru5lqwanmVlvmqW5mCxSmB1LQnUZLRmfWsyrTvuoLMTNzRwoCnwxtL2 YjtUOn7IsVG/4HeOMozuzFKBWyVzZlQHBGgGA4gqN9yAndZ5OXzjPrF3uD5fbOup PsYk1gikAoVoJA0aEZWrItNKoy5WkdsFdXHWki3xs5eziiCsDQxecTiR3CGZztm6 EXFwZMqjwKAq2wJcXNT5yUtZHQgpLXh1ZbXOnX/gD/v/xrHUD03Eg+2zd+e0k5y4 jbQw/X8DOHCassE/ea2vjGoS/KRVVXwCavvzRrxDvZYACXKVNPup9qit7OtY -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:05 2025 by rpki-client