This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/qizHV5ds9FkmtPQu75JjrdJO6gk.roa File: qizHV5ds9FkmtPQu75JjrdJO6gk.roa (raw, json) Hash identifier: m490BFBSfrWwvOvCR2s32/mpUXfGBA9g3Lznx0nRmuU= Subject key identifier: AA:2C:C7:57:97:6C:F4:59:26:B4:F4:2E:EF:92:63:AD:D2:4E:EA:09 Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Certificate serial: 019B0DC715D8912F2DD57FA186FBA4FD782E Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/qizHV5ds9FkmtPQu75JjrdJO6gk.roa Signing time: Thu 11 Dec 2025 14:18:29 +0000 ROA not before: Thu 11 Dec 2025 14:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15576 IP address blocks: 185.253.192.0/22 maxlen: 22 185.253.192.0/24 maxlen: 24 185.253.193.0/24 maxlen: 24 185.253.194.0/24 maxlen: 24 2a04:4c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:c7:15:d8:91:2f:2d:d5:7f:a1:86:fb:a4:fd:78:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Validity Not Before: Dec 11 14:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa2cc757976cf45926b4f42eef9263add24eea09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:a3:fd:f6:ac:aa:7a:3c:d8:13:0d:1b:22: 7d:b2:03:1e:84:a3:df:20:46:75:79:e9:97:f7:ed: 72:15:46:06:6a:cb:7f:46:f3:56:bb:89:c9:db:f5: dc:ba:57:dd:e6:c6:a9:ec:fe:62:44:4a:02:83:d9: 03:62:b4:fc:26:33:ae:69:c0:7c:ba:41:5a:2e:87: be:a1:4e:0c:7a:af:5e:e1:fd:0a:dc:ee:94:ff:28: 5c:c1:1d:9c:e9:78:00:d0:f1:c1:10:8a:ac:52:c4: 97:b5:6c:ac:f8:84:51:04:30:3e:da:31:8a:aa:24: 41:57:c8:f2:83:c3:4c:0f:ce:d0:c3:be:03:ab:b3: fc:e4:c1:65:04:a2:b8:49:4c:5c:02:00:bd:ce:a9: bb:10:51:71:61:97:28:48:56:5e:52:ca:de:ad:c2: ba:63:81:31:ca:62:ce:4b:51:91:09:55:27:03:af: 46:82:4f:f2:5f:e2:0b:b1:2c:ab:29:5c:0d:4d:fb: 16:d0:41:81:df:d6:96:f6:93:82:a2:e0:a9:5b:16: e9:3e:f9:b4:1d:ca:73:51:3d:f1:33:02:41:92:fd: ef:a2:9b:06:34:b4:a9:78:51:09:61:46:9a:b6:26: 8a:d9:6f:b9:f3:bc:59:c2:f0:01:74:6f:77:c9:d2: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2C:C7:57:97:6C:F4:59:26:B4:F4:2E:EF:92:63:AD:D2:4E:EA:09 X509v3 Authority Key Identifier: keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/qizHV5ds9FkmtPQu75JjrdJO6gk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.192.0/22 IPv6: 2a04:4c00::/29 Signature Algorithm: sha256WithRSAEncryption 84:96:1b:78:c1:f4:b8:6c:35:92:6c:16:33:bb:db:98:05:63: 6a:97:93:82:5a:fd:26:fc:f5:4b:e8:24:83:7f:32:8f:df:7f: 52:4c:9f:d9:cf:e7:9a:23:18:d7:b7:a8:16:2d:5b:29:56:fe: 81:96:51:cd:dd:38:f8:0a:85:c8:ad:ac:f5:8f:18:b7:99:42: 3c:02:a0:75:44:ad:47:86:26:bf:a1:44:2d:c0:24:7d:6a:24: 26:f1:45:d8:64:e8:95:10:90:ee:63:1f:5a:66:82:8d:d7:62: 2c:d8:e9:ea:55:70:2f:c9:a9:0b:a0:84:48:8d:51:8d:7e:9e: cf:8c:df:26:69:a1:de:d4:39:02:b6:9c:8e:ef:65:4f:11:9c: 75:ab:2b:fe:9f:31:45:18:14:f2:94:f2:d5:85:5e:27:d4:da: 5d:53:10:6c:04:ce:b2:4b:d5:e2:03:08:f5:03:75:44:46:6c: f5:2b:99:c5:cb:7c:49:d5:29:9b:22:3a:be:e8:0d:d2:8b:7d: 89:9f:07:71:96:2e:20:ed:0e:7d:76:7f:19:51:c4:4a:56:46: 39:9e:4e:e7:b8:ea:6a:df:b5:0d:c9:ec:e1:f0:ac:c5:7c:95: d1:ba:77:e0:7d:bd:d7:03:d9:78:c7:0c:ab:77:3b:94:4f:3e: dd:f8:cf:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsNxxXYkS8t1X+hhvuk/XguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZjY2NTA1ODJjMDBkYmIyNTkxY2VkYzI5OGMwY2QzYzU5 NjhhYjAwHhcNMjUxMjExMTQxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTJjYzc1Nzk3NmNmNDU5MjZiNGY0MmVlZjkyNjNhZGQyNGVlYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnmj/fasqno82BMNGyJ9sgMehKPf IEZ1eemX9+1yFUYGast/RvNWu4nJ2/Xculfd5sap7P5iREoCg9kDYrT8JjOuacB8 ukFaLoe+oU4Meq9e4f0K3O6U/yhcwR2c6XgA0PHBEIqsUsSXtWys+IRRBDA+2jGK qiRBV8jyg8NMD87Qw74Dq7P85MFlBKK4SUxcAgC9zqm7EFFxYZcoSFZeUsrercK6 Y4ExymLOS1GRCVUnA69Ggk/yX+ILsSyrKVwNTfsW0EGB39aW9pOCouCpWxbpPvm0 HcpzUT3xMwJBkv3vopsGNLSpeFEJYUaatiaK2W+587xZwvABdG93ydKqTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKosx1eXbPRZJrT0Lu+SY63STuoJMB8GA1UdIwQY MBaAFL72ZQWCwA27JZHO3CmMDNPFloqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYt ZjlhMzNmZjAxMWNiLzEvcWl6SFY1ZHM5RmttdFBRdTc1SmpyZEpPNmdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYtZjlhMzNmZjAxMWNi LzEvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf3AMA0E AgACMAcDBQMqBEwAMA0GCSqGSIb3DQEBCwUAA4IBAQCElht4wfS4bDWSbBYzu9uY BWNql5OCWv0m/PVL6CSDfzKP339STJ/Zz+eaIxjXt6gWLVspVv6BllHN3Tj4CoXI raz1jxi3mUI8AqB1RK1Hhia/oUQtwCR9aiQm8UXYZOiVEJDuYx9aZoKN12Is2Onq VXAvyakLoIRIjVGNfp7PjN8maaHe1DkCtpyO72VPEZx1qyv+nzFFGBTylPLVhV4n 1NpdUxBsBM6yS9XiAwj1A3VERmz1K5nFy3xJ1SmbIjq+6A3Si32Jnwdxli4g7Q59 dn8ZUcRKVkY5nk7nuOpq37UNyezh8KzFfJXRunfgfb3XA9l4xwyrdzuUTz7d+M+S -----END CERTIFICATE-----Generated at Thu Dec 11 22:32:59 2025 by rpki-client