This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/qfhmkc_HwXg7A2m85zz16LT9pVg.roa File: qfhmkc_HwXg7A2m85zz16LT9pVg.roa (raw, json) Hash identifier: SIG/zyJi8NhJ6/P3vG7Ibh4wMdDH8A5hhpK9FvR6ers= Subject key identifier: A9:F8:66:91:CF:C7:C1:78:3B:03:69:BC:E7:3C:F5:E8:B4:FD:A5:58 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019A59C6E3452E8075A16B0CF23F3F0E5108 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/qfhmkc_HwXg7A2m85zz16LT9pVg.roa Signing time: Thu 06 Nov 2025 15:26:37 +0000 ROA not before: Thu 06 Nov 2025 15:26:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33659 IP address blocks: 9.142.0.0/19 maxlen: 19 138.226.0.0/20 maxlen: 20 138.226.88.0/21 maxlen: 21 170.100.128.0/22 maxlen: 22 170.100.152.0/21 maxlen: 21 170.100.192.0/21 maxlen: 21 170.100.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:c6:e3:45:2e:80:75:a1:6b:0c:f2:3f:3f:0e:51:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Nov 6 15:26:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a9f86691cfc7c1783b0369bce73cf5e8b4fda558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b1:1f:ee:16:f2:46:c0:1f:85:a3:5a:f6:dc: 58:99:c0:0a:01:79:ab:ea:d6:f4:ee:28:68:96:6e: 74:5f:cc:1f:d9:ea:a5:c6:8d:82:9f:42:73:50:50: 7d:93:46:42:57:6c:cb:29:06:69:1a:6d:4c:fa:3f: 3f:3e:58:45:57:7c:9c:2f:b9:0d:b9:f2:34:67:35: f2:cd:32:95:2a:29:df:c5:80:34:fc:37:fd:78:b9: 25:4e:d0:5c:97:77:35:46:40:49:f9:28:3e:d6:ce: 6b:ad:d3:01:92:00:12:79:f5:4a:15:8e:35:87:50: 7e:0b:56:9b:de:f9:06:14:eb:cb:83:99:5e:61:1b: 0f:0f:43:60:f1:0d:d5:f6:7c:ec:bd:a6:db:3e:19: cf:c4:ca:d2:e3:20:f3:76:4f:61:69:59:a8:33:1f: 5a:5d:73:b3:b5:07:aa:57:dc:4c:65:27:6b:55:fe: 05:c7:d7:e8:05:06:4a:e2:de:4a:31:13:df:10:7a: e8:15:6a:39:8e:cf:80:d9:ef:35:bc:11:1b:e6:cc: 9e:4d:7a:af:a5:a2:35:d0:e8:e8:e5:34:71:48:c8: 4d:4c:e8:37:28:b8:79:df:15:1f:8c:7c:94:a0:64: a0:ed:3e:6a:d7:93:8a:95:aa:6c:e1:3e:b4:7a:99: af:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F8:66:91:CF:C7:C1:78:3B:03:69:BC:E7:3C:F5:E8:B4:FD:A5:58 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/qfhmkc_HwXg7A2m85zz16LT9pVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 9.142.0.0/19 138.226.0.0/20 138.226.88.0/21 170.100.128.0/22 170.100.152.0/21 170.100.192.0-170.100.203.255 Signature Algorithm: sha256WithRSAEncryption 71:95:a8:e1:5a:eb:16:5c:01:e4:a9:cb:1b:44:10:b6:33:78: 64:9d:5f:78:6d:1c:a9:99:d0:ea:f6:a5:98:2b:29:66:7e:e6: 4c:cb:0b:de:5c:fe:31:c6:17:8c:88:0b:68:3e:e7:21:7e:9e: 27:6f:7d:58:f1:df:96:4d:5b:7c:ce:84:15:8c:f3:c2:ef:06: 9e:5a:ee:2a:1a:a6:5d:13:f4:7a:3e:8d:99:44:60:cc:51:dd: 08:18:b4:18:b0:4a:43:51:e8:eb:3a:4b:a6:e1:21:c9:65:b5: 46:3b:cd:2f:15:23:c6:f4:19:eb:0a:41:eb:62:57:e3:2e:5c: 75:d5:ef:46:87:ed:a5:72:a1:9a:2f:c3:99:b1:37:b6:75:7f: 44:73:f9:47:8d:82:56:ec:aa:21:2e:54:d1:e9:64:73:66:32: 30:49:01:8d:23:ea:99:55:fb:74:0f:62:bd:33:be:6b:4e:d8: 54:28:b7:e9:69:ed:21:be:55:7b:ea:c1:23:75:17:81:e8:ca: 5a:67:ad:a8:00:04:b7:27:a2:0c:4c:47:ad:49:7c:39:e6:a4: 59:1b:a9:53:ae:4b:f2:24:42:a8:45:31:69:83:db:c9:7f:8b: a8:f7:a4:bd:ea:30:78:53:2c:f0:44:64:28:73:8a:8c:7a:64: 2b:42:ac:be -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZpZxuNFLoB1oWsM8j8/DlEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjUxMTA2MTUyNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWY4NjY5MWNmYzdjMTc4M2IwMzY5YmNlNzNjZjVlOGI0ZmRhNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LEf7hbyRsAfhaNa9txYmcAKAXmr 6tb07iholm50X8wf2eqlxo2Cn0JzUFB9k0ZCV2zLKQZpGm1M+j8/PlhFV3ycL7kN ufI0ZzXyzTKVKinfxYA0/Df9eLklTtBcl3c1RkBJ+Sg+1s5rrdMBkgASefVKFY41 h1B+C1ab3vkGFOvLg5leYRsPD0Ng8Q3V9nzsvabbPhnPxMrS4yDzdk9haVmoMx9a XXOztQeqV9xMZSdrVf4Fx9foBQZK4t5KMRPfEHroFWo5js+A2e81vBEb5syeTXqv paI10Ojo5TRxSMhNTOg3KLh53xUfjHyUoGSg7T5q15OKlaps4T60epmvSQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFKn4ZpHPx8F4OwNpvOc89ei0/aVYMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvcWZobWtjX0h3WGc3QTJtODV6ejE2TFQ5cFZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQFCY4AAwQE iuIAAwQDiuJYAwQCqmSAAwQDqmSYMAwDBAaqZMADBAKqZMgwDQYJKoZIhvcNAQEL BQADggEBAHGVqOFa6xZcAeSpyxtEELYzeGSdX3htHKmZ0Or2pZgrKWZ+5kzLC95c /jHGF4yIC2g+5yF+nidvfVjx35ZNW3zOhBWM88LvBp5a7ioapl0T9Ho+jZlEYMxR 3QgYtBiwSkNR6Os6S6bhIclltUY7zS8VI8b0GesKQetiV+MuXHXV70aH7aVyoZov w5mxN7Z1f0Rz+UeNglbsqiEuVNHpZHNmMjBJAY0j6plV+3QPYr0zvmtO2FQot+lp 7SG+VXvqwSN1F4HoylpnragABLcnogxMR61JfDnmpFkbqVOuS/IkQqhFMWmD28l/ i6j3pL3qMHhTLPBEZChziox6ZCtCrL4= -----END CERTIFICATE-----Generated at Sat Dec 6 16:19:07 2025 by rpki-client