This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/gqPaWXZsUGNbcY4gnqlpogLao-8.roa File: gqPaWXZsUGNbcY4gnqlpogLao-8.roa (raw, json) Hash identifier: Iw92HcYzpoQx7JXnJD2EPoFslbAR6z3uKi+7CNkU9JQ= Subject key identifier: 82:A3:DA:59:76:6C:50:63:5B:71:8E:20:9E:A9:69:A2:02:DA:A3:EF Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019AC64AE847D821356E11B07614CBA7A9F3 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/gqPaWXZsUGNbcY4gnqlpogLao-8.roa Signing time: Thu 27 Nov 2025 17:09:49 +0000 ROA not before: Thu 27 Nov 2025 17:09:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 80.174.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 08:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:4a:e8:47:d8:21:35:6e:11:b0:76:14:cb:a7:a9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Nov 27 17:09:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=82a3da59766c50635b718e209ea969a202daa3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:27:40:61:54:98:6a:7f:ef:a9:e4:2a:34:69: 88:05:06:19:4a:55:b3:ff:86:4f:62:97:f4:88:8d: 07:05:08:cb:e1:21:5c:7f:ab:6d:22:a6:f3:77:f1: cb:d2:b5:dd:09:a2:01:e0:5c:7e:75:83:3b:af:b7: a3:62:0c:9e:1b:b9:6d:2f:40:97:e3:27:de:3f:6c: 5a:aa:2e:f3:8c:ba:29:c4:8d:84:ed:b1:15:f7:5e: c7:2b:ef:80:88:b0:d0:d5:d7:ca:6e:98:ac:04:e1: 0c:24:fc:d7:6b:93:2c:f9:ad:8a:09:bd:d4:ed:e0: 6f:6f:cf:fd:e4:86:88:55:62:9e:fd:43:0b:8e:34: 4b:93:16:35:d9:e9:4e:19:16:11:58:e7:ca:cf:73: a6:07:d8:39:e4:23:50:27:f3:16:a0:48:58:50:00: 45:1e:e4:01:9b:93:0d:78:6d:97:ed:6d:a8:b4:bf: 33:63:41:b2:f1:10:91:88:e8:05:9c:a3:aa:b6:77: 28:02:29:bd:fa:8f:12:2b:06:ad:a6:33:e1:50:fe: cf:44:46:80:17:c5:c2:ef:ad:82:9c:2a:f5:8d:ba: 0f:07:8a:4b:28:09:6a:b9:ff:b4:66:2b:e1:ae:29: 47:e2:e9:26:b3:f7:7f:8e:0f:c9:46:78:3e:a8:44: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A3:DA:59:76:6C:50:63:5B:71:8E:20:9E:A9:69:A2:02:DA:A3:EF X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/gqPaWXZsUGNbcY4gnqlpogLao-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.250.0/24 Signature Algorithm: sha256WithRSAEncryption 85:d7:92:c9:a8:03:34:ed:41:87:3a:6e:10:0d:7a:88:f1:10: 26:de:fc:dc:56:0c:3f:fd:0d:c2:74:83:51:2d:1e:3b:6c:36: 60:4c:42:5c:c2:a4:20:fc:2b:8c:52:b4:35:61:83:47:d9:d4: dd:f2:f3:1d:f5:77:47:2c:a4:bd:be:25:5c:ee:b4:9d:18:a2: ad:60:11:06:f4:c6:35:98:a6:91:37:0c:01:b2:1f:7a:d9:7f: a0:f6:ef:0e:6b:81:6c:24:ca:48:e3:d5:88:f3:9d:20:f6:98: 85:fb:60:6c:c6:07:96:e1:d7:13:ad:4b:46:c2:92:bf:3b:37: 18:0d:2d:fd:fd:86:a8:74:ad:57:d8:32:01:0c:a5:c3:39:c7: 55:a1:23:f3:ee:29:bc:a2:51:02:e2:10:f0:e5:b2:9d:02:09: 18:0d:66:23:cb:7d:02:3e:2d:21:50:ed:d1:0a:3d:28:e0:3d: 6e:8a:8b:3b:23:70:c5:5e:6f:20:8b:11:a1:0e:0c:54:c5:d1: ee:fd:a4:fd:5c:1c:4a:fd:78:0e:13:c6:e7:d8:49:5a:90:88: a1:e5:d3:bd:00:7b:f2:4c:86:dd:98:69:f2:f5:87:7a:f0:81: c3:fa:06:68:2c:89:41:54:3e:11:8b:70:e9:4a:0d:d6:89:a6: 3b:f7:3b:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrGSuhH2CE1bhGwdhTLp6nzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMTI3MTcwOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmEzZGE1OTc2NmM1MDYzNWI3MThlMjA5ZWE5NjlhMjAyZGFhM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CdAYVSYan/vqeQqNGmIBQYZSlWz /4ZPYpf0iI0HBQjL4SFcf6ttIqbzd/HL0rXdCaIB4Fx+dYM7r7ejYgyeG7ltL0CX 4yfeP2xaqi7zjLopxI2E7bEV917HK++AiLDQ1dfKbpisBOEMJPzXa5Ms+a2KCb3U 7eBvb8/95IaIVWKe/UMLjjRLkxY12elOGRYRWOfKz3OmB9g55CNQJ/MWoEhYUABF HuQBm5MNeG2X7W2otL8zY0Gy8RCRiOgFnKOqtncoAim9+o8SKwatpjPhUP7PREaA F8XC762CnCr1jboPB4pLKAlquf+0ZivhrilH4ukms/d/jg/JRng+qES5bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIKj2ll2bFBjW3GOIJ6paaIC2qPvMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvZ3FQYVdYWnNVR05iY1k0Z25xbHBvZ0xhby04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK76MA0G CSqGSIb3DQEBCwUAA4IBAQCF15LJqAM07UGHOm4QDXqI8RAm3vzcVgw//Q3CdINR LR47bDZgTEJcwqQg/CuMUrQ1YYNH2dTd8vMd9XdHLKS9viVc7rSdGKKtYBEG9MY1 mKaRNwwBsh962X+g9u8Oa4FsJMpI49WI850g9piF+2BsxgeW4dcTrUtGwpK/OzcY DS39/YaodK1X2DIBDKXDOcdVoSPz7im8olEC4hDw5bKdAgkYDWYjy30CPi0hUO3R Cj0o4D1uios7I3DFXm8gixGhDgxUxdHu/aT9XBxK/XgOE8bn2ElakIih5dO9AHvy TIbdmGny9Yd68IHD+gZoLIlBVD4Ri3DpSg3WiaY79zsW -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:53 2025 by rpki-client