This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Q-4ZyMW4py48-ZiiwVDJSI-iyGE.roa File: Q-4ZyMW4py48-ZiiwVDJSI-iyGE.roa (raw, json) Hash identifier: jB+WiKmq+3ybNPfLxLp4UcRoJN2hIAXScPSvzLruqg4= Subject key identifier: 43:EE:19:C8:C5:B8:A7:2E:3C:F9:98:A2:C1:50:C9:48:8F:A2:C8:61 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019AE40F7784F8A17322E51D9C66AC849FAD Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Q-4ZyMW4py48-ZiiwVDJSI-iyGE.roa Signing time: Wed 03 Dec 2025 11:53:30 +0000 ROA not before: Wed 03 Dec 2025 11:53:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 82.206.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:0f:77:84:f8:a1:73:22:e5:1d:9c:66:ac:84:9f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Dec 3 11:53:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=43ee19c8c5b8a72e3cf998a2c150c9488fa2c861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a7:65:23:1e:e6:7f:f6:76:d5:f0:47:94:e9: 94:cb:7c:ad:d3:ab:85:d9:df:10:13:43:51:ad:95: 55:07:5c:cb:05:4b:96:2d:12:62:a3:74:2e:29:51: d4:19:42:1d:b4:c0:ce:fe:d0:cd:66:4a:77:6e:84: e9:7a:36:3f:12:61:a0:55:3f:26:cd:e3:49:bf:91: 23:52:a9:0b:d3:c2:b8:2d:e3:fd:c4:67:f5:88:fd: d2:ed:a6:36:ce:50:dd:d8:7d:52:cb:a1:5f:90:26: a2:f5:46:71:7d:55:87:ef:ef:ab:7e:b1:cf:8e:ea: e8:f0:eb:1b:49:c0:eb:70:00:25:ab:80:fc:68:f9: 57:05:56:c1:fe:88:d3:d8:dc:58:6f:ac:b5:58:e1: c5:9c:a8:9c:fc:19:67:e1:58:34:d6:2a:90:c4:63: 84:5c:ce:11:84:f4:c3:4b:f7:c8:d5:8b:69:89:0a: a9:7d:91:1f:7d:d7:b5:fb:52:aa:69:28:b1:ff:f9: f3:98:3c:10:a8:95:ec:a0:6c:4c:ed:f2:ec:55:b3: d5:e5:4c:d2:40:a4:09:99:bb:31:f9:30:7a:42:bb: 84:34:9e:79:85:e8:2b:48:02:4c:c0:05:47:e5:63: 30:b8:59:1d:6b:c9:23:e2:be:a4:68:9a:60:a8:f0: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EE:19:C8:C5:B8:A7:2E:3C:F9:98:A2:C1:50:C9:48:8F:A2:C8:61 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Q-4ZyMW4py48-ZiiwVDJSI-iyGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.206.80.0/24 Signature Algorithm: sha256WithRSAEncryption 63:e3:2d:8f:b7:53:10:91:94:9a:13:e8:2e:30:12:47:04:a3: 89:0b:1a:d5:7a:d4:e0:8b:6b:30:8e:4a:35:c7:a8:ac:c5:8a: 25:bb:1a:74:a7:5d:4d:e1:ea:b6:35:31:b8:30:c3:49:a3:5e: c4:04:5a:b3:fe:bf:54:08:da:17:c0:cd:93:98:e3:be:8e:5a: 73:b7:1d:77:07:b5:e1:bb:69:8b:f4:2f:9e:40:bf:4f:57:af: f5:6c:4c:ec:7e:03:86:53:8f:3a:0c:9a:0d:ef:81:9e:40:17: 4f:bd:62:37:8c:2b:91:99:3f:3e:d7:7f:ae:5c:5a:87:a1:97: 20:af:30:a9:92:e0:03:c7:52:88:25:19:94:ca:d1:dc:b2:9c: 54:63:c9:72:57:cb:63:2d:47:07:10:03:62:07:37:71:2c:81: ec:44:89:1c:97:d9:b2:82:35:bf:a7:54:d4:76:e6:72:b2:9e: a9:90:63:43:f7:2e:fb:55:52:6b:ca:55:13:7c:35:e8:60:ea: 3c:de:8c:c3:6d:bc:03:25:c9:b9:3e:5a:0b:17:0c:91:0c:0f: b9:2c:5e:d0:07:98:bf:38:0d:23:a8:6a:60:e7:b3:88:1a:21: 7e:26:cc:75:79:7b:c4:31:4c:b3:82:73:55:5b:7c:a7:b1:89: b4:b1:2c:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkD3eE+KFzIuUdnGashJ+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUxMjAzMTE1MzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2VlMTljOGM1YjhhNzJlM2NmOTk4YTJjMTUwYzk0ODhmYTJjODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7adlIx7mf/Z21fBHlOmUy3yt06uF 2d8QE0NRrZVVB1zLBUuWLRJio3QuKVHUGUIdtMDO/tDNZkp3boTpejY/EmGgVT8m zeNJv5EjUqkL08K4LeP9xGf1iP3S7aY2zlDd2H1Sy6FfkCai9UZxfVWH7++rfrHP juro8OsbScDrcAAlq4D8aPlXBVbB/ojT2NxYb6y1WOHFnKic/Bln4Vg01iqQxGOE XM4RhPTDS/fI1YtpiQqpfZEffde1+1KqaSix//nzmDwQqJXsoGxM7fLsVbPV5UzS QKQJmbsx+TB6QruENJ55hegrSAJMwAVH5WMwuFkda8kj4r6kaJpgqPBhlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPuGcjFuKcuPPmYosFQyUiPoshhMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvUS00WnlNVzRweTQ4LVppaXdWREpTSS1peUdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUs5QMA0G CSqGSIb3DQEBCwUAA4IBAQBj4y2Pt1MQkZSaE+guMBJHBKOJCxrVetTgi2swjko1 x6isxYoluxp0p11N4eq2NTG4MMNJo17EBFqz/r9UCNoXwM2TmOO+jlpztx13B7Xh u2mL9C+eQL9PV6/1bEzsfgOGU486DJoN74GeQBdPvWI3jCuRmT8+13+uXFqHoZcg rzCpkuADx1KIJRmUytHcspxUY8lyV8tjLUcHEANiBzdxLIHsRIkcl9mygjW/p1TU duZysp6pkGND9y77VVJrylUTfDXoYOo83ozDbbwDJcm5PloLFwyRDA+5LF7QB5i/ OA0jqGpg57OIGiF+Jsx1eXvEMUyzgnNVW3ynsYm0sSx9 -----END CERTIFICATE-----Generated at Thu Dec 4 21:24:12 2025 by rpki-client