This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/sQU-GU7px3O6hZ2huRHbnRSf58Q.roa File: sQU-GU7px3O6hZ2huRHbnRSf58Q.roa (raw, json) Hash identifier: 0VRAdASjxA/F7Cach4HHNdmfR+0cuUmjNeTDMHFBYqI= Subject key identifier: B1:05:3E:19:4E:E9:C7:73:BA:85:9D:A1:B9:11:DB:9D:14:9F:E7:C4 Certificate issuer: /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305 Certificate serial: 019A6FB6BA89CECE418B91D7C59531DA2270 Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/sQU-GU7px3O6hZ2huRHbnRSf58Q.roa Signing time: Mon 10 Nov 2025 21:40:37 +0000 ROA not before: Mon 10 Nov 2025 21:40:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211600 IP address blocks: 46.243.72.0/24 maxlen: 24 46.243.74.0/23 maxlen: 23 91.195.150.0/24 maxlen: 24 91.195.151.0/24 maxlen: 24 195.43.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6f:b6:ba:89:ce:ce:41:8b:91:d7:c5:95:31:da:22:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305 Validity Not Before: Nov 10 21:40:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b1053e194ee9c773ba859da1b911db9d149fe7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:a2:cf:4f:e2:b2:07:48:25:f7:68:42:94: 3b:0d:c4:5e:51:27:fa:c6:7b:a3:74:08:a8:8e:8c: df:12:cb:85:2f:2f:45:da:ab:83:f8:1d:f8:b6:0c: 19:15:9f:cc:a2:8c:ff:1e:73:99:2b:39:a5:7b:f9: 59:ab:0c:11:1d:bb:17:7b:6b:e2:e6:8e:d5:f5:7d: 27:51:be:02:c1:b3:98:31:1a:61:09:23:58:d9:8b: 03:89:ac:e6:63:b9:b1:19:3f:ce:73:77:9e:72:b4: 35:13:30:6d:3b:47:fb:d0:c9:eb:02:0a:47:50:d2: 3a:91:a0:d9:2a:06:a7:ec:ab:37:19:6e:a6:68:62: f4:86:40:bc:21:9d:ba:1f:9a:37:76:93:97:35:f2: 52:91:5e:0c:49:db:9f:c7:39:2f:c1:84:5c:b8:21: a9:b5:31:3a:6b:17:7a:ec:b5:22:36:b8:64:7e:ac: f0:27:86:9c:91:4f:35:65:fc:52:58:91:d4:40:44: 96:fe:f4:aa:57:37:68:8b:cd:a6:e3:dc:5e:c6:7a: 70:e8:d6:d5:67:2d:16:84:ce:be:0c:51:02:74:58: bc:5f:bc:ef:ac:97:8f:5b:a6:55:51:b3:35:fd:27: 5f:0d:2d:4d:27:1c:84:2e:f9:72:23:df:b0:3b:3a: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:05:3E:19:4E:E9:C7:73:BA:85:9D:A1:B9:11:DB:9D:14:9F:E7:C4 X509v3 Authority Key Identifier: keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/sQU-GU7px3O6hZ2huRHbnRSf58Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.72.0/24 46.243.74.0/23 91.195.150.0/23 195.43.141.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:e0:9c:e8:c7:00:84:a9:5c:1f:13:a0:29:f9:d7:47:ab:5c: 0d:27:fc:ca:dd:8a:5f:e2:99:65:13:94:42:f1:b4:a6:ac:69: 54:36:50:3c:8b:a3:85:50:f1:fe:a0:74:e2:82:88:1f:92:36: e2:28:e3:3e:90:31:21:e9:5d:36:b3:8d:45:e7:e8:49:64:23: de:52:66:31:9b:21:8c:51:b6:67:86:41:c0:7b:e9:b7:6d:56: 61:9f:71:c5:3d:57:52:db:97:a8:da:c6:ce:29:a1:d0:b2:40: 91:1f:45:bb:b6:39:b5:b0:ad:74:f1:70:97:11:eb:8e:cd:1d: 03:72:31:1c:91:f6:2f:aa:87:53:3a:f6:d2:69:87:a0:0d:0d: f8:15:4e:ec:cb:e1:03:58:e2:a7:7e:c4:2a:7b:b1:bb:65:c8: e9:ce:5d:33:86:b2:41:58:75:7d:fc:80:d8:c1:96:c9:29:ee: 4b:41:57:2c:3a:0a:57:cc:b3:fb:40:ec:88:2f:5a:ae:2e:a2: bd:04:3b:ff:a5:8b:66:a3:33:52:cc:62:4f:4f:51:c7:d4:49: 82:c1:dc:d1:06:d2:6d:fb:92:3d:b4:94:7d:16:32:66:00:1e: f4:f3:2e:f7:aa:20:ec:92:a9:10:de:b2:cf:29:5e:ac:33:82: e5:08:25:95 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZpvtrqJzs5Bi5HXxZUx2iJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMWNmMWRjNTE0ZTdmMzhhMjM4N2Q4MmJkYmJlZjJmYjQ2 YzEzMDUwHhcNMjUxMTEwMjE0MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTA1M2UxOTRlZTljNzczYmE4NTlkYTFiOTExZGI5ZDE0OWZlN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSyiz0/isgdIJfdoQpQ7DcReUSf6 xnujdAiojozfEsuFLy9F2quD+B34tgwZFZ/Mooz/HnOZKzmle/lZqwwRHbsXe2vi 5o7V9X0nUb4CwbOYMRphCSNY2YsDiazmY7mxGT/Oc3eecrQ1EzBtO0f70MnrAgpH UNI6kaDZKgan7Ks3GW6maGL0hkC8IZ26H5o3dpOXNfJSkV4MSdufxzkvwYRcuCGp tTE6axd67LUiNrhkfqzwJ4ackU81ZfxSWJHUQESW/vSqVzdoi82m49xexnpw6NbV Zy0WhM6+DFECdFi8X7zvrJePW6ZVUbM1/SdfDS1NJxyELvlyI9+wOzpD0QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLEFPhlO6cdzuoWdobkR250Un+fEMB8GA1UdIwQY MBaAFO0c8dxRTn84ojh9gr277y+0bBMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1J6eDNGRk9memlpT0gyQ3ZidnZMN1JzRXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85YjkyOGYtY2M1Mi00MTIxLWI0OTIt ZTZmOWU0MTY4YmQyLzEvc1FVLUdVN3B4M082aFoyaHVSSGJuUlNmNThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS85YjkyOGYtY2M1Mi00MTIxLWI0OTItZTZmOWU0MTY4YmQy LzEvN1J6eDNGRk9memlpT0gyQ3ZidnZMN1JzRXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALvNIAwQB LvNKAwQBW8OWAwQAwyuNMA0GCSqGSIb3DQEBCwUAA4IBAQCN4JzoxwCEqVwfE6Ap +ddHq1wNJ/zK3Ypf4pllE5RC8bSmrGlUNlA8i6OFUPH+oHTigogfkjbiKOM+kDEh 6V02s41F5+hJZCPeUmYxmyGMUbZnhkHAe+m3bVZhn3HFPVdS25eo2sbOKaHQskCR H0W7tjm1sK108XCXEeuOzR0DcjEckfYvqodTOvbSaYegDQ34FU7sy+EDWOKnfsQq e7G7Zcjpzl0zhrJBWHV9/IDYwZbJKe5LQVcsOgpXzLP7QOyIL1quLqK9BDv/pYtm ozNSzGJPT1HH1EmCwdzRBtJt+5I9tJR9FjJmAB708y73qiDskqkQ3rLPKV6sM4Ll CCWV -----END CERTIFICATE-----Generated at Mon Dec 15 22:43:40 2025 by rpki-client