This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/qmOgCH9BG4TKkCdqWAftYMVt4vM.roa File: qmOgCH9BG4TKkCdqWAftYMVt4vM.roa (raw, json) Hash identifier: etIH/qdu+Lpthm0w4skYVqH8T+BiEpHxGgGmuapxsJk= Subject key identifier: AA:63:A0:08:7F:41:1B:84:CA:90:27:6A:58:07:ED:60:C5:6D:E2:F3 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019AF9CB1F0EF64844A7FF27B85D4D063DAB Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/qmOgCH9BG4TKkCdqWAftYMVt4vM.roa Signing time: Sun 07 Dec 2025 17:10:29 +0000 ROA not before: Sun 07 Dec 2025 17:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49453 IP address blocks: 158.173.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:cb:1f:0e:f6:48:44:a7:ff:27:b8:5d:4d:06:3d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Dec 7 17:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa63a0087f411b84ca90276a5807ed60c56de2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:75:3c:04:99:50:e8:7a:b7:b0:31:0a:01: f4:c9:1c:f8:f9:85:69:71:15:13:a1:4f:41:0c:89: dc:0d:a8:90:44:67:6d:ed:c6:39:56:d6:99:c6:fe: b6:97:e2:0a:c6:1a:9c:2b:be:b4:86:e8:a9:69:1f: 0a:2f:86:6c:60:6e:f1:40:7c:fa:74:13:d4:7c:53: 72:e1:a9:b4:1d:c0:df:c5:df:55:54:33:a5:a5:14: b8:be:eb:f1:62:1b:8e:5d:69:62:ff:5d:54:1a:b7: 89:5a:e3:9d:34:db:ef:06:6b:63:b7:78:5b:6a:95: ec:e4:e8:ee:fd:c0:34:fe:95:84:c7:0d:01:e1:3b: c9:8c:99:ca:99:94:a2:8d:76:c8:4a:71:45:e0:b0: ef:f0:20:1d:c8:6b:2e:3c:ee:8d:c3:96:82:86:07: a8:dd:2f:b2:ec:e0:37:c3:9e:4b:4f:74:8e:3c:0c: 31:b6:bd:a4:5f:f5:b1:ad:eb:f8:f0:52:a8:67:98: bd:d3:4f:c7:43:f0:ac:6b:91:26:75:b2:62:1a:2d: f5:f9:8c:a4:f6:27:2b:e9:09:7e:6d:72:74:7a:77: 91:af:aa:e9:e5:27:a6:9f:54:35:c9:4a:b0:96:5f: 3d:4e:91:e9:7e:b7:dd:de:0f:77:4b:75:20:b7:de: 99:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:63:A0:08:7F:41:1B:84:CA:90:27:6A:58:07:ED:60:C5:6D:E2:F3 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/qmOgCH9BG4TKkCdqWAftYMVt4vM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.176.0/22 Signature Algorithm: sha256WithRSAEncryption 14:47:81:2c:15:5b:af:29:85:2d:9d:60:94:44:47:dc:9c:2b: 5e:29:f0:6a:ed:cf:4b:c2:4a:e2:28:2b:ac:15:63:f4:b4:88: 23:24:e2:8d:7d:25:ed:90:9b:be:5f:9b:bb:2b:0b:e0:67:07: 78:18:4c:ba:d6:a1:b6:41:10:94:cf:51:3c:43:0e:87:e0:54: 6b:54:09:ca:92:44:bd:f6:45:70:7a:f2:4a:2f:f3:de:b4:a5: 3b:30:a3:49:36:50:ab:ec:2b:f1:52:d8:e5:e4:91:c8:f6:e0: 63:8f:36:dd:7d:42:c6:57:c8:03:1a:07:47:ee:c1:1e:df:dc: 98:87:31:84:c8:a7:3a:2d:9b:e7:27:57:88:a6:d2:82:3d:1b: 88:84:59:dd:8f:4f:e8:e2:da:a6:ab:32:38:08:1a:bb:d4:6c: 90:ea:8e:d3:1b:58:bc:3d:9d:e6:d5:a1:af:50:cd:48:69:49: c7:e4:9c:c3:6b:c7:62:b7:2a:4f:e1:43:64:bb:5f:96:e7:39: 71:86:94:97:b8:6d:51:b9:6a:1a:33:05:49:43:b8:b0:22:57: c3:73:db:2e:0e:66:d6:a9:1e:6f:ad:4d:8f:c5:ce:1e:2f:dd: fe:ad:f1:5a:62:6c:33:1f:16:ab:f3:33:74:cc:b7:70:10:df: 2c:f4:ba:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr5yx8O9khEp/8nuF1NBj2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMjA3MTcxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTYzYTAwODdmNDExYjg0Y2E5MDI3NmE1ODA3ZWQ2MGM1NmRlMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9B1PASZUOh6t7AxCgH0yRz4+YVp cRUToU9BDIncDaiQRGdt7cY5VtaZxv62l+IKxhqcK760huipaR8KL4ZsYG7xQHz6 dBPUfFNy4am0HcDfxd9VVDOlpRS4vuvxYhuOXWli/11UGreJWuOdNNvvBmtjt3hb apXs5Oju/cA0/pWExw0B4TvJjJnKmZSijXbISnFF4LDv8CAdyGsuPO6Nw5aChgeo 3S+y7OA3w55LT3SOPAwxtr2kX/Wxrev48FKoZ5i900/HQ/Csa5EmdbJiGi31+Yyk 9icr6Ql+bXJ0eneRr6rp5Semn1Q1yUqwll89TpHpfrfd3g93S3Ugt96ZcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKpjoAh/QRuEypAnalgH7WDFbeLzMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvcW1PZ0NIOUJHNFRLa0NkcVdBZnRZTVZ0NHZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnq2wMA0G CSqGSIb3DQEBCwUAA4IBAQAUR4EsFVuvKYUtnWCUREfcnCteKfBq7c9LwkriKCus FWP0tIgjJOKNfSXtkJu+X5u7KwvgZwd4GEy61qG2QRCUz1E8Qw6H4FRrVAnKkkS9 9kVwevJKL/PetKU7MKNJNlCr7CvxUtjl5JHI9uBjjzbdfULGV8gDGgdH7sEe39yY hzGEyKc6LZvnJ1eIptKCPRuIhFndj0/o4tqmqzI4CBq71GyQ6o7TG1i8PZ3m1aGv UM1IaUnH5JzDa8ditypP4UNku1+W5zlxhpSXuG1RuWoaMwVJQ7iwIlfDc9suDmbW qR5vrU2Pxc4eL93+rfFaYmwzHxar8zN0zLdwEN8s9Lq4 -----END CERTIFICATE-----Generated at Wed Dec 10 14:17:20 2025 by rpki-client