This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/QEbkAxjMxhbCO8y5Ilb21MaV5NE.roa File: QEbkAxjMxhbCO8y5Ilb21MaV5NE.roa (raw, json) Hash identifier: wQb8yV+01leqjggiuBmYwgdka249JvC8JRwFTScwwcQ= Subject key identifier: 40:46:E4:03:18:CC:C6:16:C2:3B:CC:B9:22:56:F6:D4:C6:95:E4:D1 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019A81F4FF0C10A1A3AC96B08582BC29EC79 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/QEbkAxjMxhbCO8y5Ilb21MaV5NE.roa Signing time: Fri 14 Nov 2025 10:41:48 +0000 ROA not before: Fri 14 Nov 2025 10:41:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201813 IP address blocks: 195.178.146.0/24 maxlen: 24 212.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 15:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:f4:ff:0c:10:a1:a3:ac:96:b0:85:82:bc:29:ec:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Nov 14 10:41:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4046e40318ccc616c23bccb92256f6d4c695e4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:63:6a:da:f6:e3:31:16:e0:f8:af:a5:19: e8:3e:4c:42:f6:fc:f0:e9:44:bd:d0:b8:ff:e0:8c: 09:18:63:cd:22:49:2f:25:3c:d5:af:27:5a:53:25: 0c:2d:46:bc:d8:ef:8e:26:90:d6:18:13:4a:ac:c8: 9b:1c:29:e5:ae:bb:43:8b:33:9e:20:3f:33:7e:8f: 98:31:ef:5c:d2:a0:c9:65:1c:ff:e4:c3:a7:9a:25: cf:77:98:34:5a:c1:40:f0:65:35:e6:44:12:67:5f: 2a:51:cf:ab:3c:57:b9:06:71:6d:f7:6c:bf:e2:f5: 34:0a:de:cd:be:2f:e1:b8:ee:cb:1c:08:77:0e:8f: 8f:c5:db:20:c6:9e:de:8c:49:02:ef:32:fe:87:b7: 19:c1:c4:2f:74:2c:70:fa:77:49:c9:f4:10:2c:00: f5:55:de:63:9f:4e:28:b3:83:e6:d1:ed:47:15:c2: 81:be:2f:9e:c2:de:70:2d:25:35:2e:c9:3c:71:91: 3a:02:30:92:de:56:ff:03:97:ca:1c:0d:19:57:cf: 67:33:b6:7a:d0:5c:a2:69:19:fd:a5:82:ec:f8:0b: e1:3b:0f:98:25:77:18:6c:85:d8:36:a5:53:ec:46: e8:45:eb:2d:87:16:92:1e:59:95:56:b6:07:23:c4: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:46:E4:03:18:CC:C6:16:C2:3B:CC:B9:22:56:F6:D4:C6:95:E4:D1 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/QEbkAxjMxhbCO8y5Ilb21MaV5NE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.146.0/24 212.111.217.0/24 Signature Algorithm: sha256WithRSAEncryption 27:48:1e:3f:ac:c6:1f:ec:e6:73:89:1e:0e:93:b2:be:83:6b: ac:14:e3:b9:7a:e1:60:03:63:d5:26:47:0d:37:1f:ec:ea:2d: d3:f6:75:36:1d:24:60:7c:41:ec:cd:a4:d8:4d:f0:49:0c:16: 7c:60:a7:19:25:b1:f0:f0:f6:bf:b8:04:bc:c2:27:56:6b:b3: f8:de:c5:1c:b9:1b:8a:e1:6d:c9:9b:5d:8d:d4:e7:26:49:2f: 35:9f:dd:40:e0:6f:9e:be:7a:6a:d0:bb:ef:65:d0:0a:e6:84: 3e:0e:90:de:2a:6d:79:55:21:56:54:ee:8a:1b:4b:d8:32:1c: 0a:e1:6a:57:aa:e5:85:06:d7:8c:15:9c:69:07:ca:99:b7:50: 60:8b:7c:3b:75:aa:e9:10:56:5b:f9:13:1e:8f:7c:cc:0e:2d: e6:a6:12:78:24:f5:3d:52:ee:96:b2:87:bc:07:56:5b:41:0b: d1:69:25:7c:49:8d:71:8e:57:e2:d3:fd:ba:e6:57:41:21:0d: 1e:26:25:74:14:56:91:61:bd:a4:7e:a2:15:55:0d:c7:47:76: e9:fb:94:1a:a0:b2:76:14:cf:03:38:5e:1d:78:f4:6e:30:a1: d3:8a:72:e3:65:1d:f8:59:c0:19:57:d5:71:10:23:d3:e2:0b: 65:92:e1:14 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqB9P8MEKGjrJawhYK8Kex5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMTE0MTA0MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDQ2ZTQwMzE4Y2NjNjE2YzIzYmNjYjkyMjU2ZjZkNGM2OTVlNGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv41jatr24zEW4PivpRnoPkxC9vzw 6US90Lj/4IwJGGPNIkkvJTzVrydaUyUMLUa82O+OJpDWGBNKrMibHCnlrrtDizOe ID8zfo+YMe9c0qDJZRz/5MOnmiXPd5g0WsFA8GU15kQSZ18qUc+rPFe5BnFt92y/ 4vU0Ct7Nvi/huO7LHAh3Do+Pxdsgxp7ejEkC7zL+h7cZwcQvdCxw+ndJyfQQLAD1 Vd5jn04os4Pm0e1HFcKBvi+ewt5wLSU1Lsk8cZE6AjCS3lb/A5fKHA0ZV89nM7Z6 0FyiaRn9pYLs+AvhOw+YJXcYbIXYNqVT7EboResthxaSHlmVVrYHI8RW2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEBG5AMYzMYWwjvMuSJW9tTGleTRMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvUUVia0F4ak14aGJDTzh5NUlsYjIxTWFWNU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw7KSAwQA 1G/ZMA0GCSqGSIb3DQEBCwUAA4IBAQAnSB4/rMYf7OZziR4Ok7K+g2usFOO5euFg A2PVJkcNNx/s6i3T9nU2HSRgfEHszaTYTfBJDBZ8YKcZJbHw8Pa/uAS8widWa7P4 3sUcuRuK4W3Jm12N1OcmSS81n91A4G+evnpq0LvvZdAK5oQ+DpDeKm15VSFWVO6K G0vYMhwK4WpXquWFBteMFZxpB8qZt1Bgi3w7darpEFZb+RMej3zMDi3mphJ4JPU9 Uu6Wsoe8B1ZbQQvRaSV8SY1xjlfi0/265ldBIQ0eJiV0FFaRYb2kfqIVVQ3HR3bp +5QaoLJ2FM8DOF4dePRuMKHTinLjZR34WcAZV9VxECPT4gtlkuEU -----END CERTIFICATE-----Generated at Thu Nov 20 00:38:50 2025 by rpki-client