This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Qp9jOusZCBN0JXag2WA7VjJEhAI.roa File: Qp9jOusZCBN0JXag2WA7VjJEhAI.roa (raw, json) Hash identifier: GJotYqe5jBcfcWp978k42Cmmc8wElAK5JvzmSSlWE/E= Subject key identifier: 42:9F:63:3A:EB:19:08:13:74:25:76:A0:D9:60:3B:56:32:44:84:02 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019ADA4C5ACCA666D8C0219474C487BA6A4C Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Qp9jOusZCBN0JXag2WA7VjJEhAI.roa Signing time: Mon 01 Dec 2025 14:23:48 +0000 ROA not before: Mon 01 Dec 2025 14:23:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206728 IP address blocks: 77.221.134.0/24 maxlen: 24 77.221.146.0/24 maxlen: 24 109.120.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:4c:5a:cc:a6:66:d8:c0:21:94:74:c4:87:ba:6a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Dec 1 14:23:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=429f633aeb190813742576a0d9603b5632448402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:ba:25:1a:36:88:0a:e6:d4:b8:fa:f7:43: a3:89:d8:f8:45:85:2a:72:e6:56:20:51:ab:3e:0e: 16:f5:70:cb:bc:d0:be:d3:9c:fd:0f:5e:8a:15:c3: 2a:85:da:da:12:c1:b8:f8:5e:1b:6f:ad:de:b4:85: e3:78:90:b5:b4:a2:fa:a4:38:3a:1a:dd:0f:11:e3: e9:8d:b1:49:8c:d7:89:a3:53:58:5f:a5:ad:19:49: 64:78:d9:56:e0:e9:a4:a5:2e:60:be:de:a5:4a:d2: 6d:f4:fa:d4:26:9c:b7:6b:b9:f5:ad:55:c1:66:7e: bc:21:32:40:7d:4d:08:75:4e:52:e0:4b:36:01:17: 73:5d:0d:31:4e:67:5f:df:84:84:a1:eb:38:0f:a9: 5c:1c:d1:f3:35:50:ba:4a:50:d7:aa:2b:94:a2:e8: 42:ec:a9:06:38:3e:63:a0:f1:e6:89:50:e6:45:a2: 0c:77:38:f7:6e:6f:1f:79:bd:d3:9d:9b:05:af:a8: 32:0d:0c:12:f9:16:2f:3e:69:06:35:a4:bd:c3:45: 2a:c4:f6:1a:26:b4:1c:a0:8d:81:66:f5:83:e2:d1: f2:2e:6d:93:a3:aa:1d:68:ec:57:a9:de:e1:33:58: 90:c8:cb:c8:c4:4a:69:9f:a9:1d:8c:4a:59:9a:ce: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9F:63:3A:EB:19:08:13:74:25:76:A0:D9:60:3B:56:32:44:84:02 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Qp9jOusZCBN0JXag2WA7VjJEhAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.134.0/24 77.221.146.0/24 109.120.136.0/24 Signature Algorithm: sha256WithRSAEncryption 37:4c:dc:02:6a:15:94:87:5a:39:b4:ff:18:2e:80:96:a0:0b: df:fa:2d:b3:3f:f3:c4:4f:77:d8:33:f8:15:77:39:9c:ab:7b: 98:3d:32:05:6d:e5:7b:74:89:e7:db:55:42:ba:6b:0c:ae:ed: 0d:1e:08:bc:af:3a:5b:61:c7:61:be:53:67:d2:2f:fe:f2:9e: 42:cd:7a:40:c6:0f:5f:23:11:73:2f:37:d5:40:9a:96:11:5d: de:99:bb:2b:5c:87:11:18:0f:6a:c0:de:54:d2:e3:f2:a4:f8: 6b:d0:96:8c:d0:94:a7:6b:f3:44:37:43:02:ce:54:a9:43:cb: 5b:0f:3c:b3:4d:52:88:70:9d:62:cb:29:42:24:8b:57:fa:9d: e4:98:bd:7f:f3:8d:20:36:00:48:56:cf:b9:fc:fa:68:f5:df: 70:68:45:fd:4c:b5:b1:1d:f0:4a:f0:ac:88:8e:a4:e4:c8:0f: 7f:01:53:e3:9c:8d:38:8f:9e:ca:c3:4e:b6:5f:9a:a1:e9:33: b8:b8:f9:2b:32:71:35:8a:10:de:df:8e:22:48:a1:43:9d:29: ec:46:33:94:e4:7e:66:40:94:ae:d7:44:ca:a5:84:ba:a7:e8: 91:84:8f:b8:49:a9:4b:f9:4f:10:84:a2:0e:9f:52:93:d1:a5: e1:e1:37:69 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZraTFrMpmbYwCGUdMSHumpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjUxMjAxMTQyMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjlmNjMzYWViMTkwODEzNzQyNTc2YTBkOTYwM2I1NjMyNDQ4NDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO26JRo2iArm1Lj690Ojidj4RYUq cuZWIFGrPg4W9XDLvNC+05z9D16KFcMqhdraEsG4+F4bb63etIXjeJC1tKL6pDg6 Gt0PEePpjbFJjNeJo1NYX6WtGUlkeNlW4OmkpS5gvt6lStJt9PrUJpy3a7n1rVXB Zn68ITJAfU0IdU5S4Es2ARdzXQ0xTmdf34SEoes4D6lcHNHzNVC6SlDXqiuUouhC 7KkGOD5joPHmiVDmRaIMdzj3bm8feb3TnZsFr6gyDQwS+RYvPmkGNaS9w0UqxPYa JrQcoI2BZvWD4tHyLm2To6odaOxXqd7hM1iQyMvIxEppn6kdjEpZms6hEwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEKfYzrrGQgTdCV2oNlgO1YyRIQCMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvUXA5ak91c1pDQk4wSlhhZzJXQTdWakpFaEFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATd2GAwQA Td2SAwQAbXiIMA0GCSqGSIb3DQEBCwUAA4IBAQA3TNwCahWUh1o5tP8YLoCWoAvf +i2zP/PET3fYM/gVdzmcq3uYPTIFbeV7dInn21VCumsMru0NHgi8rzpbYcdhvlNn 0i/+8p5CzXpAxg9fIxFzLzfVQJqWEV3embsrXIcRGA9qwN5U0uPypPhr0JaM0JSn a/NEN0MCzlSpQ8tbDzyzTVKIcJ1iyylCJItX+p3kmL1/840gNgBIVs+5/Ppo9d9w aEX9TLWxHfBK8KyIjqTkyA9/AVPjnI04j57Kw062X5qh6TO4uPkrMnE1ihDe344i SKFDnSnsRjOU5H5mQJSu10TKpYS6p+iRhI+4SalL+U8QhKIOn1KT0aXh4Tdp -----END CERTIFICATE-----Generated at Thu Dec 4 13:13:41 2025 by rpki-client