This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/q132_fYbwaKVGt2WcYzt_tR9ttM.roa File: q132_fYbwaKVGt2WcYzt_tR9ttM.roa (raw, json) Hash identifier: gYyba/pR/Xctc3nYmWFd8jOX+GGonouDttrL9ni4SVg= Subject key identifier: AB:5D:F6:FD:F6:1B:C1:A2:95:1A:DD:96:71:8C:ED:FE:D4:7D:B6:D3 Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B080B7F02D8F7FE57EAAE8B5593D01C33 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/q132_fYbwaKVGt2WcYzt_tR9ttM.roa Signing time: Wed 10 Dec 2025 11:35:29 +0000 ROA not before: Wed 10 Dec 2025 11:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204958 IP address blocks: 185.57.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:0b:7f:02:d8:f7:fe:57:ea:ae:8b:55:93:d0:1c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Dec 10 11:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab5df6fdf61bc1a2951add96718cedfed47db6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:83:bd:1f:de:6c:7d:b2:67:38:2e:48:04: ad:00:f3:e8:33:6d:63:5f:c8:14:a7:40:fb:13:eb: 41:9e:f9:45:d2:f5:e2:17:27:35:98:1c:90:a8:4a: 6d:39:59:88:fb:40:6b:73:47:cc:71:68:11:c6:1f: ea:f0:b4:ab:39:6f:de:6f:11:b6:e0:a9:67:b9:8b: 84:7d:59:66:8a:3b:15:49:1a:35:2c:5c:56:9d:34: 3f:3a:86:31:8b:c9:f1:32:5e:34:0f:02:f2:8b:d8: ef:15:cc:ad:41:1f:a4:20:2a:98:a4:af:b7:ac:0b: 96:f6:40:c9:7e:8d:ce:7e:95:a9:b2:19:8d:55:a6: 68:b0:ad:e3:96:0b:f1:4b:30:8b:de:cc:56:a1:e1: 48:2e:8a:fc:90:11:d0:01:27:aa:35:ac:f8:12:be: 50:06:44:5a:2e:87:cd:2e:6b:11:a2:1a:c6:76:a1: b4:68:19:d9:c0:96:4b:6d:c5:44:d2:45:93:7f:b8: 2c:67:5e:a3:0c:e9:d4:eb:26:88:f4:8e:bc:8f:ef: b4:55:85:6d:0b:b6:c8:b1:69:19:64:9b:b9:cd:19: 95:2e:cd:cc:31:1a:14:a6:68:92:64:9b:41:f6:12: 17:2b:2f:47:2f:26:0e:03:0c:e8:46:2c:2a:f9:5a: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5D:F6:FD:F6:1B:C1:A2:95:1A:DD:96:71:8C:ED:FE:D4:7D:B6:D3 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/q132_fYbwaKVGt2WcYzt_tR9ttM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.231.0/24 Signature Algorithm: sha256WithRSAEncryption 18:70:cc:2c:00:cb:c6:5b:4e:5a:25:f1:26:01:42:23:f0:20: 75:6d:b5:02:2e:05:23:3f:3a:b8:d3:18:67:fe:f9:d6:3b:71: df:50:e3:32:e7:4a:ce:e2:90:1f:57:ea:38:58:c6:ae:66:30: 02:49:ce:f5:0b:6d:a1:c1:19:25:89:17:e3:1a:db:0f:d4:b6: f1:04:a3:2e:e0:06:9f:b3:5d:f8:65:32:01:e2:35:ff:0b:fd: 25:0d:ff:12:fc:dc:28:28:54:e1:88:8e:fa:04:29:60:be:91: 8f:9d:5d:26:c3:83:2d:b4:1a:fb:09:40:3a:05:f6:cd:6e:7e: fb:1f:0d:03:15:f5:c7:5e:f1:1e:cc:db:0a:90:bd:91:00:c2: 85:79:0b:a7:4d:40:18:5a:df:a3:c8:65:e9:a9:89:4d:dd:2b: 17:09:14:eb:28:48:cb:41:56:2e:18:64:ea:d3:b7:3a:bd:20: 03:34:1e:15:f8:cf:f0:fc:b8:0c:05:25:99:03:a9:93:ea:04: ed:4a:45:6e:bd:a2:12:4f:b4:5a:a9:31:d6:03:c2:26:4e:59: 4d:f4:71:77:6a:48:ef:63:61:ce:31:3a:30:c2:a6:b4:cf:dd: 41:19:b9:d0:4c:14:ff:26:c1:4b:b5:b8:15:b0:34:f5:48:8a: 8c:72:3a:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsIC38C2Pf+V+qui1WT0BwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjUxMjEwMTEzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjVkZjZmZGY2MWJjMWEyOTUxYWRkOTY3MThjZWRmZWQ0N2RiNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHqDvR/ebH2yZzguSAStAPPoM21j X8gUp0D7E+tBnvlF0vXiFyc1mByQqEptOVmI+0Brc0fMcWgRxh/q8LSrOW/ebxG2 4KlnuYuEfVlmijsVSRo1LFxWnTQ/OoYxi8nxMl40DwLyi9jvFcytQR+kICqYpK+3 rAuW9kDJfo3OfpWpshmNVaZosK3jlgvxSzCL3sxWoeFILor8kBHQASeqNaz4Er5Q BkRaLofNLmsRohrGdqG0aBnZwJZLbcVE0kWTf7gsZ16jDOnU6yaI9I68j++0VYVt C7bIsWkZZJu5zRmVLs3MMRoUpmiSZJtB9hIXKy9HLyYOAwzoRiwq+VqEOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtd9v32G8GilRrdlnGM7f7UfbbTMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvcTEzMl9mWWJ3YUtWR3QyV2NZenRfdFI5dHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTnnMA0G CSqGSIb3DQEBCwUAA4IBAQAYcMwsAMvGW05aJfEmAUIj8CB1bbUCLgUjPzq40xhn /vnWO3HfUOMy50rO4pAfV+o4WMauZjACSc71C22hwRkliRfjGtsP1LbxBKMu4Aaf s134ZTIB4jX/C/0lDf8S/NwoKFThiI76BClgvpGPnV0mw4MttBr7CUA6BfbNbn77 Hw0DFfXHXvEezNsKkL2RAMKFeQunTUAYWt+jyGXpqYlN3SsXCRTrKEjLQVYuGGTq 07c6vSADNB4V+M/w/LgMBSWZA6mT6gTtSkVuvaIST7RaqTHWA8ImTllN9HF3akjv Y2HOMTowwqa0z91BGbnQTBT/JsFLtbgVsDT1SIqMcjr2 -----END CERTIFICATE-----Generated at Fri Dec 12 00:23:48 2025 by rpki-client