This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/cq_pYsxHrQlmGEzS7FSPnuP20Ro.roa File: cq_pYsxHrQlmGEzS7FSPnuP20Ro.roa (raw, json) Hash identifier: d7qIexP8r5n2L41EYQOEgoOX8USqVtVglQDaB63EeU8= Subject key identifier: 72:AF:E9:62:CC:47:AD:09:66:18:4C:D2:EC:54:8F:9E:E3:F6:D1:1A Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B117B929F7A05C54EF21D70C9CC2C50D6 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/cq_pYsxHrQlmGEzS7FSPnuP20Ro.roa Signing time: Fri 12 Dec 2025 07:34:29 +0000 ROA not before: Fri 12 Dec 2025 07:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5458 IP address blocks: 85.153.144.0/24 maxlen: 24 212.252.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:7b:92:9f:7a:05:c5:4e:f2:1d:70:c9:cc:2c:50:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Dec 12 07:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=72afe962cc47ad0966184cd2ec548f9ee3f6d11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:3c:2c:ae:09:6f:a5:0e:bc:01:58:bb:38: d2:f4:64:38:e3:26:3a:b1:c1:28:a1:7a:14:56:0c: 4b:5b:72:eb:13:b8:2c:5e:f7:a3:43:b0:77:63:f0: ae:ec:f1:1d:36:97:d0:c0:2b:78:5b:72:a8:49:2d: 88:31:bd:0e:b1:b1:bc:05:9d:f1:bd:6e:06:f9:35: f0:da:f2:59:d2:f4:e1:41:44:38:56:dd:33:89:69: 08:76:7d:12:ff:c6:cc:b4:32:b8:4a:f6:5e:16:50: 13:dd:1c:72:1f:79:89:b3:05:e8:75:f3:bf:0d:e0: 7e:4e:a4:2e:85:27:1c:7a:44:f3:33:6b:52:10:73: 5e:ff:2b:e5:36:37:26:03:0e:43:09:57:87:3a:29: f1:7e:e1:01:93:da:5d:de:eb:5b:80:5d:15:3c:6a: d2:37:6b:16:76:d0:e2:b4:27:3c:26:1d:94:ec:49: c6:79:80:fc:d0:3a:ed:02:dd:33:7b:3d:de:71:c3: 9e:05:d6:c4:e3:50:7c:8c:20:eb:e4:e3:52:95:eb: 51:16:93:59:cd:93:e4:d9:78:e1:7f:6f:44:66:3c: 8c:41:53:ba:bf:32:e0:25:7e:7a:6c:bc:35:65:d3: 51:d4:00:42:29:da:64:62:77:0c:e8:d7:b6:f9:a2: 0c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AF:E9:62:CC:47:AD:09:66:18:4C:D2:EC:54:8F:9E:E3:F6:D1:1A X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/cq_pYsxHrQlmGEzS7FSPnuP20Ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.144.0/24 212.252.33.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:a0:72:5e:1a:d6:e6:0b:c2:48:49:ab:d9:d2:56:24:93:97: b4:4d:29:e7:5b:b9:42:0b:50:d5:26:77:b6:0e:57:8e:e2:03: 93:58:2f:1a:be:a9:b0:7c:a5:08:0b:15:4b:62:79:be:86:b4: f2:f6:ed:c2:5b:61:24:a3:fe:be:08:69:84:4d:b3:0b:0a:7c: ce:76:ef:8e:09:67:6d:ae:e1:1f:6c:03:8a:ca:f1:6c:4c:96: 14:4c:6d:5d:86:b4:57:3b:d2:e7:7c:6c:cf:dd:4f:e7:5d:43: 45:6c:5c:46:36:68:8b:b8:8b:c9:30:e0:b9:b9:ee:09:57:89: 79:4a:e1:74:2c:45:0d:63:84:fa:7c:dc:16:91:59:28:a7:27: 4b:76:b6:dd:43:4e:f0:17:06:e6:e1:b0:aa:b4:7b:ce:e5:4b: c7:21:aa:6b:9b:16:10:8d:dd:66:73:8d:a7:8f:38:3c:94:e8: 3d:93:78:95:9f:94:82:13:cc:2d:75:7a:5c:14:4d:fa:28:c5: a7:a1:d9:9b:54:1c:b6:29:84:30:74:22:08:1d:ce:82:d5:c5: 9d:66:66:15:b5:76:f5:02:2b:21:f2:49:ae:dc:3a:9f:64:c2: 04:97:4a:8d:27:60:a6:0c:92:f3:1c:a1:ec:81:44:ca:65:b1: 49:3f:15:a4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsRe5KfegXFTvIdcMnMLFDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjUxMjEyMDczNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmFmZTk2MmNjNDdhZDA5NjYxODRjZDJlYzU0OGY5ZWUzZjZkMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31s8LK4Jb6UOvAFYuzjS9GQ44yY6 scEooXoUVgxLW3LrE7gsXvejQ7B3Y/Cu7PEdNpfQwCt4W3KoSS2IMb0OsbG8BZ3x vW4G+TXw2vJZ0vThQUQ4Vt0ziWkIdn0S/8bMtDK4SvZeFlAT3RxyH3mJswXodfO/ DeB+TqQuhSccekTzM2tSEHNe/yvlNjcmAw5DCVeHOinxfuEBk9pd3utbgF0VPGrS N2sWdtDitCc8Jh2U7EnGeYD80DrtAt0zez3eccOeBdbE41B8jCDr5ONSletRFpNZ zZPk2Xjhf29EZjyMQVO6vzLgJX56bLw1ZdNR1ABCKdpkYncM6Ne2+aIMgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHKv6WLMR60JZhhM0uxUj57j9tEaMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvY3FfcFlzeEhyUWxtR0V6UzdGU1BudVAyMFJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVZmQAwQA 1PwhMA0GCSqGSIb3DQEBCwUAA4IBAQBsoHJeGtbmC8JISavZ0lYkk5e0TSnnW7lC C1DVJne2DleO4gOTWC8avqmwfKUICxVLYnm+hrTy9u3CW2Eko/6+CGmETbMLCnzO du+OCWdtruEfbAOKyvFsTJYUTG1dhrRXO9LnfGzP3U/nXUNFbFxGNmiLuIvJMOC5 ue4JV4l5SuF0LEUNY4T6fNwWkVkopydLdrbdQ07wFwbm4bCqtHvO5UvHIaprmxYQ jd1mc42njzg8lOg9k3iVn5SCE8wtdXpcFE36KMWnodmbVBy2KYQwdCIIHc6C1cWd ZmYVtXb1Aish8kmu3DqfZMIEl0qNJ2CmDJLzHKHsgUTKZbFJPxWk -----END CERTIFICATE-----Generated at Sat Dec 13 07:56:22 2025 by rpki-client