This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/q937SjjKh4bSHLGWOKtTzauz6gg.roa File: q937SjjKh4bSHLGWOKtTzauz6gg.roa (raw, json) Hash identifier: hKewiwM2o9iLcNmuDfv4h1CgAcsdjepWhZKtPxlqSnA= Subject key identifier: AB:DD:FB:4A:38:CA:87:86:D2:1C:B1:96:38:AB:53:CD:AB:B3:EA:08 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019AA9F93F4840D402EA793FCFB7EEF79C82 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/q937SjjKh4bSHLGWOKtTzauz6gg.roa Signing time: Sat 22 Nov 2025 05:11:15 +0000 ROA not before: Sat 22 Nov 2025 05:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214477 IP address blocks: 2a13:c440::/32 maxlen: 32 2a13:c441::/32 maxlen: 32 2a13:c442::/32 maxlen: 32 2a13:c443::/32 maxlen: 32 2a13:c444::/32 maxlen: 32 2a13:c445::/32 maxlen: 32 2a13:c446::/32 maxlen: 32 2a13:c447::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Nov 2025 00:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a9:f9:3f:48:40:d4:02:ea:79:3f:cf:b7:ee:f7:9c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Nov 22 05:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=abddfb4a38ca8786d21cb19638ab53cdabb3ea08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:31:2f:76:71:4b:94:b2:88:ae:0b:dc:f2: 85:d1:85:84:c1:fd:f1:72:85:0a:c9:c5:72:11:52: 24:30:ec:8f:c2:d1:82:1e:f8:82:17:b0:d4:1b:de: 22:cd:a2:f1:f5:d5:4b:a4:28:42:02:3f:65:70:11: 31:fa:87:7d:b7:96:ed:05:b1:c7:d2:7c:f7:9a:77: 09:07:cc:01:ac:44:22:80:ce:b8:df:68:5f:8a:48: 72:8f:37:60:fe:44:06:71:ea:41:37:12:fc:51:f9: f4:70:ec:d5:20:57:1e:3e:48:e5:51:4e:cb:ac:89: f8:2f:fd:53:c3:ab:7a:2a:39:7d:94:8c:83:9a:06: 27:69:ae:c5:f0:d1:c1:be:82:c1:4f:6d:34:ea:7c: 3d:aa:9e:34:bc:6f:d2:4e:91:c1:31:2d:cf:e4:b8: 81:33:e3:19:86:14:41:50:1c:ba:30:87:4c:cb:2a: ed:ba:f7:e9:2f:c8:e0:f8:0d:90:a0:33:43:34:70: 23:f2:07:ca:ef:b5:36:ff:50:9c:b6:57:7b:67:b8: 2c:69:48:33:ae:7f:2e:9b:6e:25:82:94:7b:eb:69: bf:49:02:30:eb:a7:7f:cf:f6:1f:6b:5c:c7:d4:58: ca:dc:c4:8e:1c:71:c6:df:e0:86:d4:e9:a9:64:c1: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DD:FB:4A:38:CA:87:86:D2:1C:B1:96:38:AB:53:CD:AB:B3:EA:08 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/q937SjjKh4bSHLGWOKtTzauz6gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c440::/29 Signature Algorithm: sha256WithRSAEncryption 53:bc:6b:7f:d3:ab:c5:2e:37:8a:bf:37:09:bb:b1:bd:e9:e8: db:cc:8a:f9:5d:04:7d:58:86:6e:86:cc:5c:fe:69:96:b6:50: 58:6d:16:6a:fc:2f:ec:dd:3e:43:22:45:20:ae:8c:82:26:dd: d8:f6:05:21:85:24:97:12:73:c7:ce:f0:a0:61:a1:2c:c8:3c: 4c:d9:9b:33:e6:80:17:6c:03:c8:00:59:ff:cc:f4:dc:55:d1: ee:79:07:42:d9:9c:10:98:de:80:ba:42:60:97:3c:37:3f:8b: 5c:1a:02:a1:35:a3:26:89:57:54:46:23:d7:6f:aa:26:15:5c: 27:38:7c:f3:53:a6:68:90:68:2c:c8:95:79:60:07:11:b3:b2: 69:20:d9:2b:4c:78:e6:ea:cf:32:9d:62:86:11:99:fd:90:a5: e0:41:a1:9e:f4:84:f9:89:82:2e:9a:e0:da:36:1a:cc:70:1d: 50:0e:8a:a5:dc:79:d2:67:69:e1:e7:2b:c4:98:f2:2f:14:d4: 7b:e2:e7:2c:75:6f:72:18:ae:03:e8:26:58:66:6a:77:62:cb: b1:06:01:d4:79:23:c2:fa:5e:d2:8f:55:ba:16:4c:10:ed:7c: b8:77:e0:72:43:94:7e:80:c3:a9:2d:f7:a1:19:0d:ca:d5:27: d9:bb:48:c2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqp+T9IQNQC6nk/z7fu95yCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMTIyMDUxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmRkZmI0YTM4Y2E4Nzg2ZDIxY2IxOTYzOGFiNTNjZGFiYjNlYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUcxL3ZxS5SyiK4L3PKF0YWEwf3x coUKycVyEVIkMOyPwtGCHviCF7DUG94izaLx9dVLpChCAj9lcBEx+od9t5btBbHH 0nz3mncJB8wBrEQigM6432hfikhyjzdg/kQGcepBNxL8Ufn0cOzVIFcePkjlUU7L rIn4L/1Tw6t6Kjl9lIyDmgYnaa7F8NHBvoLBT2006nw9qp40vG/STpHBMS3P5LiB M+MZhhRBUBy6MIdMyyrtuvfpL8jg+A2QoDNDNHAj8gfK77U2/1Cctld7Z7gsaUgz rn8um24lgpR762m/SQIw66d/z/Yfa1zH1FjK3MSOHHHG3+CG1OmpZMFsowIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKvd+0o4yoeG0hyxljirU82rs+oIMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvcTkzN1NqaktoNGJTSExHV09LdFR6YXV6NmdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPEQDAN BgkqhkiG9w0BAQsFAAOCAQEAU7xrf9OrxS43ir83Cbuxveno28yK+V0EfViGbobM XP5plrZQWG0Wavwv7N0+QyJFIK6Mgibd2PYFIYUklxJzx87woGGhLMg8TNmbM+aA F2wDyABZ/8z03FXR7nkHQtmcEJjegLpCYJc8Nz+LXBoCoTWjJolXVEYj12+qJhVc Jzh881OmaJBoLMiVeWAHEbOyaSDZK0x45urPMp1ihhGZ/ZCl4EGhnvSE+YmCLprg 2jYazHAdUA6Kpdx50mdp4ecrxJjyLxTUe+LnLHVvchiuA+gmWGZqd2LLsQYB1Hkj wvpe0o9VuhZMEO18uHfgckOUfoDDqS33oRkNytUn2btIwg== -----END CERTIFICATE-----Generated at Mon Nov 24 08:28:05 2025 by rpki-client