This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/qv25HuVkGD25YIg_oR2WSTGPtS8.roa File: qv25HuVkGD25YIg_oR2WSTGPtS8.roa (raw, json) Hash identifier: AhkATBPCei80O9bXQPoD49GvTRXEmbOiuSx3aLVtzx4= Subject key identifier: AA:FD:B9:1E:E5:64:18:3D:B9:60:88:3F:A1:1D:96:49:31:8F:B5:2F Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA2FF8F5C4C5E80FB73E1F1FC9F781 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/qv25HuVkGD25YIg_oR2WSTGPtS8.roa Signing time: Fri 02 Jan 2026 08:19:21 +0000 ROA not before: Fri 02 Jan 2026 08:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44677 IP address blocks: 62.118.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2f:f8:f5:c4:c5:e8:0f:b7:3e:1f:1f:c9:f7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aafdb91ee564183db960883fa11d9649318fb52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:42:7f:c4:f6:f6:97:6a:d9:12:e6:64:ac: eb:3c:cc:f2:d1:4c:76:1c:26:0c:2c:31:f8:d0:4d: 08:2a:4e:3b:81:1b:4c:3d:f8:15:e4:74:41:71:e7: 93:97:22:83:4a:b2:da:94:cb:65:3b:ae:e4:a7:d3: df:64:0e:55:33:4b:42:2b:2c:ee:ba:f6:a8:17:e2: 81:44:3d:a8:31:6f:fc:20:1b:92:fb:0c:a1:3b:01: 9a:95:d7:74:89:da:6c:11:77:c9:d9:b0:42:e5:41: 31:b9:8c:a6:a3:c5:61:ae:53:86:71:5d:78:df:4e: ca:32:08:70:4e:a2:6c:ae:c7:f0:5a:74:bc:5f:3e: 0c:5c:87:0d:a1:d5:7c:ef:78:ac:cf:2c:ec:35:33: ce:39:1a:3b:f0:d0:ee:50:fb:1a:21:b2:ad:65:88: cf:62:44:c0:e2:f3:34:47:10:c1:e8:c7:5e:ce:c0: 49:ad:66:61:33:98:71:21:4b:c9:5c:c0:b0:15:20: 79:e2:e3:d7:e1:9b:57:65:36:e6:a6:b1:04:f0:cc: fc:02:df:b9:a4:33:2a:4a:3e:09:1a:22:df:54:04: a6:89:0f:0e:01:e9:da:53:3a:81:15:98:d6:aa:ee: 63:04:f4:a1:8a:69:d3:bc:88:38:81:bd:76:b5:26: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FD:B9:1E:E5:64:18:3D:B9:60:88:3F:A1:1D:96:49:31:8F:B5:2F X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/qv25HuVkGD25YIg_oR2WSTGPtS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.118.244.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:54:c2:17:98:ea:37:12:af:34:9a:89:0e:7e:19:e7:a5:bd: ef:d9:51:2d:84:b8:f8:46:d5:b8:62:07:46:58:b4:c2:10:e8: ce:af:72:59:c4:76:92:3d:a7:c2:d3:36:0a:cd:2f:d6:88:f2: 86:b3:37:9b:7f:11:48:ee:64:94:5d:b1:bb:00:2e:f2:2e:36: ba:5a:bb:74:4a:4d:64:a1:74:43:5d:04:35:04:f3:7f:cb:1f: 7f:92:5a:00:a5:54:81:e4:f6:6d:72:0a:6e:58:c1:eb:f8:3c: 56:45:07:a3:9a:7a:45:16:c5:ba:c9:b8:4c:97:60:f0:bf:c8: 09:7f:41:f8:3f:25:f3:32:c4:a8:36:15:54:30:16:1b:f2:d4: 64:20:cb:0b:92:aa:24:62:e0:82:72:63:66:aa:ae:bc:4b:dd: 19:28:c5:6d:26:1d:7f:55:02:43:86:72:28:62:76:e1:72:62: 33:29:71:c7:ce:07:68:4a:79:3d:4d:4a:8c:26:75:7f:57:6a: 6f:7e:26:ad:a5:a1:d7:c0:f1:d3:1b:d0:24:2b:9b:49:a9:90: f4:52:12:fd:6d:28:c6:ac:ef:45:f5:94:ee:33:0b:41:0e:eb: ed:54:ae:a2:7e:33:97:19:0e:3b:ae:4f:ed:89:8a:00:63:63: f7:01:6b:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yi/49cTF6A+3Ph8fyfeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWZkYjkxZWU1NjQxODNkYjk2MDg4M2ZhMTFkOTY0OTMxOGZiNTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgNCf8T29pdq2RLmZKzrPMzy0Ux2 HCYMLDH40E0IKk47gRtMPfgV5HRBceeTlyKDSrLalMtlO67kp9PfZA5VM0tCKyzu uvaoF+KBRD2oMW/8IBuS+wyhOwGaldd0idpsEXfJ2bBC5UExuYymo8VhrlOGcV14 307KMghwTqJsrsfwWnS8Xz4MXIcNodV873iszyzsNTPOORo78NDuUPsaIbKtZYjP YkTA4vM0RxDB6MdezsBJrWZhM5hxIUvJXMCwFSB54uPX4ZtXZTbmprEE8Mz8At+5 pDMqSj4JGiLfVASmiQ8OAenaUzqBFZjWqu5jBPShimnTvIg4gb12tSYPDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKr9uR7lZBg9uWCIP6Edlkkxj7UvMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvcXYyNUh1VmtHRDI1WUlnX29SMldTVEdQdFM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPnb0MA0G CSqGSIb3DQEBCwUAA4IBAQAbVMIXmOo3Eq80mokOfhnnpb3v2VEthLj4RtW4YgdG WLTCEOjOr3JZxHaSPafC0zYKzS/WiPKGszebfxFI7mSUXbG7AC7yLja6Wrt0Sk1k oXRDXQQ1BPN/yx9/kloApVSB5PZtcgpuWMHr+DxWRQejmnpFFsW6ybhMl2Dwv8gJ f0H4PyXzMsSoNhVUMBYb8tRkIMsLkqokYuCCcmNmqq68S90ZKMVtJh1/VQJDhnIo YnbhcmIzKXHHzgdoSnk9TUqMJnV/V2pvfiatpaHXwPHTG9AkK5tJqZD0UhL9bSjG rO9F9ZTuMwtBDuvtVK6ifjOXGQ47rk/tiYoAY2P3AWsV -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:28 2026 by rpki-client