This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/QM7CQZFRXQsm83-sk0lkaeNJWEA.roa File: QM7CQZFRXQsm83-sk0lkaeNJWEA.roa (raw, json) Hash identifier: JUCq99g1zIj2UjCFfcX+vrCDilkdq3nZovEcHb4/QgE= Subject key identifier: 40:CE:C2:41:91:51:5D:0B:26:F3:7F:AC:93:49:64:69:E3:49:58:40 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B1729EAB259BC3CC8187BAD18BD4195 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/QM7CQZFRXQsm83-sk0lkaeNJWEA.roa Signing time: Wed 19 Nov 2025 07:49:37 +0000 ROA not before: Wed 19 Nov 2025 07:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62251 IP address blocks: 2a0d:8341::/32 maxlen: 32 2a0d:8342::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:17:29:ea:b2:59:bc:3c:c8:18:7b:ad:18:bd:41:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=40cec24191515d0b26f37fac93496469e3495840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:8d:43:44:28:e4:ff:df:64:e3:95:28:24: bc:41:0c:fe:e7:85:cc:2b:39:0b:7d:46:f9:b5:15: 6f:ba:21:ca:b4:38:70:05:0a:98:93:7a:01:b9:25: e6:f1:73:f5:12:23:c4:fe:2c:d2:f1:78:9e:5a:11: 27:52:a1:de:05:3d:4e:3f:1a:3e:1f:78:e2:44:a3: 0a:8e:98:9b:6b:9a:ee:00:fc:2c:00:7b:48:bb:43: 54:f5:35:74:a1:5d:4f:b5:18:6a:45:e4:6a:c4:4e: 39:72:f7:5e:5a:fa:dc:d5:bd:44:2c:f8:16:10:09: 6d:b3:65:fe:e9:c7:95:e8:9d:59:40:1f:b6:52:b1: 2b:58:1d:57:9f:71:b2:2b:95:bc:bb:c5:ce:0e:cf: b1:a7:e8:c5:da:cb:90:05:54:51:bc:37:a2:e3:08: db:b6:87:29:a4:99:32:dc:ad:58:d6:f4:23:02:a7: 32:93:38:07:88:61:eb:55:dd:8f:f3:38:a8:ad:db: 9e:97:94:6e:2c:81:d7:24:93:2c:f8:7f:20:01:db: ab:f6:38:6b:23:66:66:10:9d:57:3b:b2:4d:96:8c: d5:cf:3b:64:a5:ba:dd:2a:02:df:dc:26:0d:f4:d0: fc:5e:55:2a:d1:e0:b9:9f:24:a7:06:1e:3c:12:28: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CE:C2:41:91:51:5D:0B:26:F3:7F:AC:93:49:64:69:E3:49:58:40 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/QM7CQZFRXQsm83-sk0lkaeNJWEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:8341::-2a0d:8342:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6e:d9:2e:2f:d8:32:1f:21:ba:90:d5:f4:a1:3a:0d:5d:d5:e5: e2:03:31:96:02:42:a0:49:da:a8:a5:67:24:26:51:70:55:97: 9f:e6:d1:42:53:5c:39:f8:49:76:1d:86:a5:67:00:e9:24:c0: a8:a7:94:7b:30:74:a2:bb:b9:3d:98:63:8e:d8:6f:b5:e8:7c: f9:a3:26:94:d4:11:b3:17:15:f7:e6:84:b3:d6:a1:30:96:e6: df:35:e0:de:dc:05:b5:0d:53:1f:ed:01:b8:12:60:f9:fc:3b: 41:f4:a5:81:f5:9b:66:30:6c:f1:fb:13:2e:11:eb:04:12:f0: a8:47:e3:d7:b7:2a:51:9a:aa:d2:4c:8f:10:21:a7:f6:d3:bd: 8d:d1:8a:28:13:a5:a7:ec:bc:b3:ef:41:49:5a:56:a0:58:fa: be:58:37:6b:a3:0b:b3:73:9c:14:52:e9:a1:6f:d6:d8:37:0e: b9:54:7f:87:fe:6f:65:37:8f:7f:e5:d1:d4:bb:af:2b:c5:47: 6e:d5:18:a2:b7:a7:01:2a:e3:7b:03:a3:5b:01:94:28:01:70: f6:0c:f0:8a:a1:30:75:dd:0a:8c:0f:21:60:ee:93:11:0a:e5: d2:c5:70:ab:52:fa:d0:74:30:a9:e6:9c:58:b0:87:e5:a9:1d: 9c:16:85:36 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZqbFynqslm8PMgYe60YvUGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGNlYzI0MTkxNTE1ZDBiMjZmMzdmYWM5MzQ5NjQ2OWUzNDk1ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UKNQ0Qo5P/fZOOVKCS8QQz+54XM KzkLfUb5tRVvuiHKtDhwBQqYk3oBuSXm8XP1EiPE/izS8XieWhEnUqHeBT1OPxo+ H3jiRKMKjpiba5ruAPwsAHtIu0NU9TV0oV1PtRhqReRqxE45cvdeWvrc1b1ELPgW EAlts2X+6ceV6J1ZQB+2UrErWB1Xn3GyK5W8u8XODs+xp+jF2suQBVRRvDei4wjb tocppJky3K1Y1vQjAqcykzgHiGHrVd2P8ziorduel5RuLIHXJJMs+H8gAdur9jhr I2ZmEJ1XO7JNlozVzztkpbrdKgLf3CYN9ND8XlUq0eC5nySnBh48EigiXQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFEDOwkGRUV0LJvN/rJNJZGnjSVhAMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvUU03Q1FaRlJYUXNtODMtc2swbGthZU5KV0VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqDYNB AwUAKg2DQjANBgkqhkiG9w0BAQsFAAOCAQEAbtkuL9gyHyG6kNX0oToNXdXl4gMx lgJCoEnaqKVnJCZRcFWXn+bRQlNcOfhJdh2GpWcA6STAqKeUezB0oru5PZhjjthv teh8+aMmlNQRsxcV9+aEs9ahMJbm3zXg3twFtQ1TH+0BuBJg+fw7QfSlgfWbZjBs 8fsTLhHrBBLwqEfj17cqUZqq0kyPECGn9tO9jdGKKBOlp+y8s+9BSVpWoFj6vlg3 a6MLs3OcFFLpoW/W2DcOuVR/h/5vZTePf+XR1LuvK8VHbtUYorenASrjewOjWwGU KAFw9gzwiqEwdd0KjA8hYO6TEQrl0sVwq1L60HQwqeacWLCH5akdnBaFNg== -----END CERTIFICATE-----Generated at Fri Dec 5 21:32:22 2025 by rpki-client