This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QZmyDVXUe5N0wsbzlxjxDVVeUSs.roa File: QZmyDVXUe5N0wsbzlxjxDVVeUSs.roa (raw, json) Hash identifier: 1UVopQfTDPMBKzK3dTWayQM+oqOdQ7WMMIMxGj2u3wk= Subject key identifier: 41:99:B2:0D:55:D4:7B:93:74:C2:C6:F3:97:18:F1:0D:55:5E:51:2B Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AC7C6D9CD58388269C8B9B7E565A6F392 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QZmyDVXUe5N0wsbzlxjxDVVeUSs.roa Signing time: Fri 28 Nov 2025 00:04:49 +0000 ROA not before: Fri 28 Nov 2025 00:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203963 IP address blocks: 212.134.152.0/22 maxlen: 22 212.134.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c7:c6:d9:cd:58:38:82:69:c8:b9:b7:e5:65:a6:f3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 28 00:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4199b20d55d47b9374c2c6f39718f10d555e512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:67:9c:29:d0:0e:f2:94:b4:2d:ae:6c:08: 26:48:cd:da:85:d8:31:6c:c9:1a:41:b9:51:5d:ba: 0e:88:72:de:66:9d:53:82:c5:38:1e:8d:99:75:1f: 9c:52:97:27:9f:86:3c:7e:90:35:4f:62:b7:9c:62: d7:3b:9a:73:dd:80:fb:02:e6:43:42:b9:a0:23:bb: e0:6d:cd:8d:f8:e6:b7:19:6b:d5:5a:e9:98:ca:74: 1e:b5:3f:24:d9:e8:87:5e:04:4a:33:82:13:e3:8f: 5c:58:fc:7a:3a:77:52:36:9d:4b:1e:c4:73:69:4f: 7f:56:4e:f7:0c:f4:a0:05:0e:14:59:1f:d2:87:58: a2:90:04:9a:d6:4b:89:82:e3:d2:86:87:bc:e7:4b: fd:32:76:a7:a1:19:5a:d6:6e:0b:91:14:78:73:3c: df:3a:05:9d:dc:35:ea:c5:40:53:6e:6d:42:bf:03: 5a:3d:4e:17:54:0f:6d:bb:bc:ae:17:0c:51:a5:54: e5:01:c7:9f:82:41:15:66:41:c8:b5:24:c4:b2:fe: fd:57:60:a6:14:82:5a:fb:19:59:a7:75:06:83:32: 4e:cc:34:08:d5:fb:96:ca:16:99:d7:4d:05:b5:85: 77:91:65:13:56:1e:4c:22:d2:f5:88:e0:14:91:ae: 6c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:99:B2:0D:55:D4:7B:93:74:C2:C6:F3:97:18:F1:0D:55:5E:51:2B X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QZmyDVXUe5N0wsbzlxjxDVVeUSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.152.0/22 212.134.160.0/22 Signature Algorithm: sha256WithRSAEncryption 24:9c:2c:a7:86:d8:e7:11:c7:37:e3:2d:59:0e:e7:8c:6f:18: cd:68:ac:bd:47:b8:81:4c:41:f5:48:a8:a9:83:8f:82:b4:c4: 5b:a6:af:a4:d3:6f:ca:7c:08:40:ea:a8:16:f9:a6:69:49:f9: 49:d8:c0:9a:d3:f5:06:0f:b5:21:56:9f:6b:96:7f:c7:80:af: 32:40:fa:19:f7:bb:60:d0:f5:00:ac:62:98:e5:75:a1:92:2c: 2d:5b:8d:99:34:41:06:ef:91:f8:ab:79:28:5d:c0:47:86:cf: 48:77:fc:45:b4:36:ba:3f:88:cc:11:64:e4:4b:e2:d5:de:9b: 71:78:2d:a5:bf:c2:5e:ea:51:e9:12:98:a9:2f:25:8f:dd:f4: 74:0a:f5:fa:9e:a4:9b:0c:df:5d:f9:f5:b1:a5:f6:75:aa:57: af:ab:01:cc:53:8e:e4:f5:b7:48:68:f5:f3:aa:a0:5d:a7:4c: d4:cf:7b:15:ac:39:73:53:f7:27:ea:77:b0:76:6a:c7:84:77: b8:1e:cd:19:12:24:6e:8b:16:38:41:19:eb:db:56:fc:fc:cc: dd:f3:c3:0d:e3:fd:8a:91:05:92:19:88:76:0f:9a:ad:ad:ff: 25:f2:bc:d7:5c:a3:e7:c0:c5:77:2b:ee:3b:ee:49:d6:e4:89: 01:51:5e:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrHxtnNWDiCaci5t+VlpvOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTI4MDAwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTk5YjIwZDU1ZDQ3YjkzNzRjMmM2ZjM5NzE4ZjEwZDU1NWU1MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSlnnCnQDvKUtC2ubAgmSM3ahdgx bMkaQblRXboOiHLeZp1TgsU4Ho2ZdR+cUpcnn4Y8fpA1T2K3nGLXO5pz3YD7AuZD QrmgI7vgbc2N+Oa3GWvVWumYynQetT8k2eiHXgRKM4IT449cWPx6OndSNp1LHsRz aU9/Vk73DPSgBQ4UWR/Sh1iikASa1kuJguPShoe850v9MnanoRla1m4LkRR4czzf OgWd3DXqxUBTbm1CvwNaPU4XVA9tu7yuFwxRpVTlAcefgkEVZkHItSTEsv79V2Cm FIJa+xlZp3UGgzJOzDQI1fuWyhaZ100FtYV3kWUTVh5MItL1iOAUka5sgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEGZsg1V1HuTdMLG85cY8Q1VXlErMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvUVpteURWWFVlNU4wd3Niemx4anhEVlZlVVNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1IaYAwQC 1IagMA0GCSqGSIb3DQEBCwUAA4IBAQAknCynhtjnEcc34y1ZDueMbxjNaKy9R7iB TEH1SKipg4+CtMRbpq+k02/KfAhA6qgW+aZpSflJ2MCa0/UGD7UhVp9rln/HgK8y QPoZ97tg0PUArGKY5XWhkiwtW42ZNEEG75H4q3koXcBHhs9Id/xFtDa6P4jMEWTk S+LV3ptxeC2lv8Je6lHpEpipLyWP3fR0CvX6nqSbDN9d+fWxpfZ1qlevqwHMU47k 9bdIaPXzqqBdp0zUz3sVrDlzU/cn6newdmrHhHe4Hs0ZEiRuixY4QRnr21b8/Mzd 88MN4/2KkQWSGYh2D5qtrf8l8rzXXKPnwMV3K+477knW5IkBUV4s -----END CERTIFICATE-----Generated at Thu Dec 4 19:56:38 2025 by rpki-client