This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/qZocFyTBBtTZkpcY9943j5n-Ir4.roa File: qZocFyTBBtTZkpcY9943j5n-Ir4.roa (raw, json) Hash identifier: ovDpPn59By7OfPab+VYt9+g9UpHQ2jkLrw3elfd9Pbs= Subject key identifier: A9:9A:1C:17:24:C1:06:D4:D9:92:97:18:F7:DE:37:8F:99:FE:22:BE Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B6E477E319567101914DB881E34A9201D Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/qZocFyTBBtTZkpcY9943j5n-Ir4.roa Signing time: Tue 30 Dec 2025 08:02:17 +0000 ROA not before: Tue 30 Dec 2025 08:02:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 83.147.194.0/24 maxlen: 24 94.241.160.0/23 maxlen: 24 178.253.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:47:7e:31:95:67:10:19:14:db:88:1e:34:a9:20:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Dec 30 08:02:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a99a1c1724c106d4d9929718f7de378f99fe22be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:c1:42:ce:a7:26:b1:23:6e:d7:77:24:b4: b8:8a:f1:87:17:36:d6:12:08:55:e7:de:73:06:a7: 74:f2:e6:5c:73:d7:53:ae:10:0d:de:c1:ac:30:54: 1d:09:ea:0e:58:35:e1:ff:f3:75:b9:cd:c0:64:32: 78:c8:1e:c0:50:09:0b:5c:79:b9:db:23:18:bd:ed: ed:4d:be:b2:bc:36:4b:5f:ce:c7:d4:e5:c8:8f:bc: 9a:7e:94:aa:d4:7d:34:5c:e9:87:cf:1e:1c:09:3e: 68:2a:7c:2f:55:06:5f:e7:3e:ff:59:a9:6b:ef:a3: c5:37:ff:7a:7b:6f:2e:bd:35:d5:83:4b:27:3d:65: 07:0e:b1:5c:86:09:36:27:06:60:16:fa:96:fa:98: ac:78:88:c7:76:f8:0d:7e:6b:2c:ab:e0:51:1b:2a: 13:17:d4:3a:fd:84:10:ff:89:a2:a1:7d:5e:a8:a2: db:66:3c:b1:3f:46:58:71:f3:74:c8:69:32:e1:cc: bc:16:d1:6a:9e:2f:c4:a8:00:20:90:25:65:0f:9b: d0:61:35:76:16:5b:0c:0a:db:1d:70:5c:6d:73:f2: 29:07:83:31:df:ac:ad:d0:35:0e:39:45:81:f4:c7: 18:3a:d7:5a:1d:75:41:6b:e7:db:2f:50:da:27:16: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9A:1C:17:24:C1:06:D4:D9:92:97:18:F7:DE:37:8F:99:FE:22:BE X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/qZocFyTBBtTZkpcY9943j5n-Ir4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.194.0/24 94.241.160.0/23 178.253.38.0/23 Signature Algorithm: sha256WithRSAEncryption 88:82:9c:0e:b5:de:51:9a:67:2a:0c:2a:b8:b3:c9:94:b2:9c: ca:a2:c4:11:bf:9d:c7:92:2f:7b:4d:a8:d3:e9:55:9c:2b:41: 2e:66:80:c0:da:db:84:1d:49:e6:ff:f8:30:aa:95:cd:83:20: 0a:22:b8:1e:5e:9b:26:a7:c4:8b:13:6c:56:ce:a9:5e:e4:d5: 97:4e:05:c0:f5:3a:ce:8f:83:8e:fa:bf:25:ae:11:96:d2:39: 1d:b9:73:be:df:6a:30:7f:4e:ca:5a:27:dd:6c:54:13:01:2d: 4b:63:cf:a1:ed:4a:a9:e7:c3:87:d4:03:67:f4:7f:aa:e3:38: 90:a4:f4:88:df:9a:a4:04:aa:27:e4:96:76:da:26:ac:d4:e8: bc:14:ee:76:b6:ad:ff:f4:97:1c:dd:8a:1b:1c:4f:3a:1d:64: 2e:30:33:6d:e8:1c:54:1a:9d:d2:45:2d:b6:63:fb:9e:b9:a0: 4c:e9:af:e6:ec:02:66:35:10:24:99:cb:82:32:02:b2:a8:f1: b4:02:25:e9:bc:b1:82:0c:36:f3:3a:63:81:4d:88:3a:31:de: cd:33:88:d6:36:8a:cf:26:dd:21:5f:e4:55:82:e2:b7:cb:c9: d6:c6:d8:bd:d1:19:b9:f2:85:f7:d1:a2:eb:0b:6a:b8:49:fb: 88:fa:d4:88 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZtuR34xlWcQGRTbiB40qSAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUxMjMwMDgwMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTlhMWMxNzI0YzEwNmQ0ZDk5Mjk3MThmN2RlMzc4Zjk5ZmUyMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpLBQs6nJrEjbtd3JLS4ivGHFzbW EghV595zBqd08uZcc9dTrhAN3sGsMFQdCeoOWDXh//N1uc3AZDJ4yB7AUAkLXHm5 2yMYve3tTb6yvDZLX87H1OXIj7yafpSq1H00XOmHzx4cCT5oKnwvVQZf5z7/Walr 76PFN/96e28uvTXVg0snPWUHDrFchgk2JwZgFvqW+piseIjHdvgNfmssq+BRGyoT F9Q6/YQQ/4mioX1eqKLbZjyxP0ZYcfN0yGky4cy8FtFqni/EqAAgkCVlD5vQYTV2 FlsMCtsdcFxtc/IpB4Mx36yt0DUOOUWB9McYOtdaHXVBa+fbL1DaJxYlFQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKmaHBckwQbU2ZKXGPfeN4+Z/iK+MB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvcVpvY0Z5VEJCdFRaa3BjWTk5NDNqNW4tSXI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU5PCAwQB XvGgAwQBsv0mMA0GCSqGSIb3DQEBCwUAA4IBAQCIgpwOtd5RmmcqDCq4s8mUspzK osQRv53Hki97TajT6VWcK0EuZoDA2tuEHUnm//gwqpXNgyAKIrgeXpsmp8SLE2xW zqle5NWXTgXA9TrOj4OO+r8lrhGW0jkduXO+32owf07KWifdbFQTAS1LY8+h7Uqp 58OH1ANn9H+q4ziQpPSI35qkBKon5JZ22ias1Oi8FO52tq3/9Jcc3YobHE86HWQu MDNt6BxUGp3SRS22Y/ueuaBM6a/m7AJmNRAkmcuCMgKyqPG0AiXpvLGCDDbzOmOB TYg6Md7NM4jWNorPJt0hX+RVguK3y8nWxti90Rm58oX30aLrC2q4SfuI+tSI -----END CERTIFICATE-----Generated at Tue Dec 30 21:07:16 2025 by rpki-client