This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/nqJvOltUHqr25X4pICbwNnMi8BE.roa File: nqJvOltUHqr25X4pICbwNnMi8BE.roa (raw, json) Hash identifier: JYU3ifoc1BxDq4f4n/32K5vXlkFJJJ4Wepo1i/IHiM0= Subject key identifier: 9E:A2:6F:3A:5B:54:1E:AA:F6:E5:7E:29:20:26:F0:36:73:22:F0:11 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B07D57B948DA9B517F3CC57B3B7320B26 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/nqJvOltUHqr25X4pICbwNnMi8BE.roa Signing time: Wed 10 Dec 2025 10:36:29 +0000 ROA not before: Wed 10 Dec 2025 10:36:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57841 IP address blocks: 195.245.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:d5:7b:94:8d:a9:b5:17:f3:cc:57:b3:b7:32:0b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Dec 10 10:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ea26f3a5b541eaaf6e57e292026f0367322f011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:1c:1b:ea:fe:98:db:8e:6b:ce:19:e8:fd: d3:4f:db:ad:08:cc:12:1d:f5:d3:2d:11:4e:79:71: c8:0d:63:10:e6:cd:75:04:d1:d6:1e:ca:34:59:3a: 70:c0:29:7a:c6:6a:5b:92:e8:76:88:dd:74:eb:17: c5:0c:f6:6a:11:3e:49:68:7e:bd:be:e7:66:eb:3e: 83:1e:35:13:e0:97:c7:e4:1a:cc:9c:97:05:74:ad: d7:98:78:61:a7:79:c2:2a:48:77:3a:07:ef:45:e5: d3:21:21:4a:74:31:14:eb:2f:6e:b3:e1:78:51:48: 37:fb:d6:56:33:5b:9b:33:9a:2e:4d:f4:0b:fe:d9: 32:34:b3:d1:34:20:a9:df:fe:66:32:df:f6:be:1b: 74:91:0c:7d:af:7b:a5:3a:e0:09:93:e9:b2:dd:9f: 31:76:03:a3:36:38:c1:51:68:1f:74:de:13:4b:30: 2b:3d:25:87:1b:e5:99:ae:1c:c7:df:d4:44:36:c6: 1a:e1:98:e2:08:33:97:e5:be:ec:88:ab:83:04:72: f6:57:15:3a:71:cc:50:59:52:22:2d:81:fe:c1:e3: c5:91:be:43:d2:b2:58:3f:51:84:d5:61:39:52:b4: b2:f1:fb:76:b5:71:ee:e4:25:0c:b7:e6:8e:ef:dd: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A2:6F:3A:5B:54:1E:AA:F6:E5:7E:29:20:26:F0:36:73:22:F0:11 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/nqJvOltUHqr25X4pICbwNnMi8BE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.194.0/24 Signature Algorithm: sha256WithRSAEncryption 68:6f:63:e2:bb:94:c0:2b:71:59:29:f8:42:15:85:61:99:48: e0:da:b9:37:6f:01:63:a8:8d:10:0e:dd:64:71:fd:b7:20:09: 7d:f6:c0:c6:a8:20:3d:dc:ea:f7:f4:09:3f:69:d3:fb:e2:21: 9e:f8:da:f6:32:ea:f5:42:06:4e:5d:e2:d9:f1:8a:b1:53:0b: 0d:51:fa:8a:14:a7:af:0c:0e:f4:63:8b:05:09:5f:e0:32:e0: ae:33:e5:21:27:54:62:3b:06:c0:98:93:0c:d2:07:7b:cf:bd: bb:5f:96:cc:8c:31:08:6f:38:79:5f:90:e1:4a:39:86:ae:59: 42:39:55:c5:3b:51:de:e5:98:52:6b:98:cc:90:e6:52:a5:a6: 07:b7:5d:63:ee:56:f5:ab:ba:5b:52:d6:10:83:17:7a:2c:a7: 6d:c8:0d:ae:ef:2e:92:91:15:c6:ee:07:77:68:d6:54:92:b9: 87:13:aa:a7:28:8b:46:46:59:1d:59:43:64:c7:17:2c:2c:ab: b3:83:03:ee:4f:e3:33:f8:e2:93:ef:3c:fc:75:78:6d:88:aa: 5c:d8:f1:26:35:20:be:ac:61:47:fc:16:5b:eb:27:dc:39:3e: e8:f7:2d:ba:27:13:ba:fd:7e:aa:57:be:b8:61:09:ea:94:a5: e2:e6:a6:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsH1XuUjam1F/PMV7O3MgsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUxMjEwMTAzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWEyNmYzYTViNTQxZWFhZjZlNTdlMjkyMDI2ZjAzNjczMjJmMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CscG+r+mNuOa84Z6P3TT9utCMwS HfXTLRFOeXHIDWMQ5s11BNHWHso0WTpwwCl6xmpbkuh2iN106xfFDPZqET5JaH69 vudm6z6DHjUT4JfH5BrMnJcFdK3XmHhhp3nCKkh3OgfvReXTISFKdDEU6y9us+F4 UUg3+9ZWM1ubM5ouTfQL/tkyNLPRNCCp3/5mMt/2vht0kQx9r3ulOuAJk+my3Z8x dgOjNjjBUWgfdN4TSzArPSWHG+WZrhzH39RENsYa4ZjiCDOX5b7siKuDBHL2VxU6 ccxQWVIiLYH+wePFkb5D0rJYP1GE1WE5UrSy8ft2tXHu5CUMt+aO791qDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ6ibzpbVB6q9uV+KSAm8DZzIvARMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvbnFKdk9sdFVIcXIyNVg0cElDYndObk1pOEJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/XCMA0G CSqGSIb3DQEBCwUAA4IBAQBob2Piu5TAK3FZKfhCFYVhmUjg2rk3bwFjqI0QDt1k cf23IAl99sDGqCA93Or39Ak/adP74iGe+Nr2Mur1QgZOXeLZ8YqxUwsNUfqKFKev DA70Y4sFCV/gMuCuM+UhJ1RiOwbAmJMM0gd7z727X5bMjDEIbzh5X5DhSjmGrllC OVXFO1He5ZhSa5jMkOZSpaYHt11j7lb1q7pbUtYQgxd6LKdtyA2u7y6SkRXG7gd3 aNZUkrmHE6qnKItGRlkdWUNkxxcsLKuzgwPuT+Mz+OKT7zz8dXhtiKpc2PEmNSC+ rGFH/BZb6yfcOT7o9y26JxO6/X6qV764YQnqlKXi5qaw -----END CERTIFICATE-----Generated at Fri Dec 12 20:36:02 2025 by rpki-client