This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qNPxCQmP8ZlZ6a4tAtUzhFNiZdo.roa File: qNPxCQmP8ZlZ6a4tAtUzhFNiZdo.roa (raw, json) Hash identifier: V189F90iQPz7xSK6xgDNqStH8srGj78PmaUqHpETXf0= Subject key identifier: A8:D3:F1:09:09:8F:F1:99:59:E9:AE:2D:02:D5:33:84:53:62:65:DA Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B038645696D5ED1B3032B8E887B620DF6 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qNPxCQmP8ZlZ6a4tAtUzhFNiZdo.roa Signing time: Tue 09 Dec 2025 14:31:29 +0000 ROA not before: Tue 09 Dec 2025 14:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199530 IP address blocks: 37.230.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:86:45:69:6d:5e:d1:b3:03:2b:8e:88:7b:62:0d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Dec 9 14:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a8d3f109098ff19959e9ae2d02d53384536265da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:62:63:07:02:d7:a6:70:e7:dc:eb:e3:2e:7d: f3:f8:21:fb:2a:a8:e0:a4:c7:4e:9b:12:06:1d:7b: 35:cc:43:3e:c4:84:54:ba:fa:4b:2b:1f:89:03:aa: 31:85:26:5c:74:ee:6c:47:ce:c1:71:79:38:0a:be: 39:59:1d:56:c4:40:87:d6:94:43:af:73:8c:99:25: dc:08:8b:c1:90:29:62:7d:d2:1d:df:37:ae:31:83: 89:3f:67:db:12:8f:64:fc:e6:50:dd:05:48:4c:b7: 39:f8:09:6e:71:41:70:04:df:14:88:22:2c:f5:2d: 92:e6:c9:dd:71:0b:96:c3:95:0d:a0:eb:42:60:91: 06:65:2a:95:ca:74:bc:23:f7:d4:3b:a7:31:ff:30: 45:9d:4d:27:db:3c:b8:6d:29:e0:ad:1c:0f:c8:41: 99:3c:9d:31:b2:1c:f3:73:e1:29:bc:5b:f4:c9:e7: b9:34:19:8b:39:de:b5:04:2f:0a:c5:a8:b5:73:ab: 80:73:93:fc:8d:f4:2b:b1:08:58:9c:14:9b:38:62: 77:9b:9b:e7:ca:79:15:07:09:ec:2a:ff:04:eb:97: eb:7b:9d:76:81:5e:4f:a6:08:49:94:58:ff:97:eb: 68:ad:19:97:67:af:7b:ff:93:7b:20:23:5b:9d:38: 93:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D3:F1:09:09:8F:F1:99:59:E9:AE:2D:02:D5:33:84:53:62:65:DA X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qNPxCQmP8ZlZ6a4tAtUzhFNiZdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.202.0/23 Signature Algorithm: sha256WithRSAEncryption 91:dd:43:36:46:a4:18:69:2d:69:ac:05:a7:e6:c7:1f:e7:f4: 12:67:58:35:3a:1c:29:bf:ab:56:ee:80:83:e8:f6:88:51:a0: 2c:3f:62:af:7c:a6:6f:ce:52:83:65:be:91:32:3c:c8:25:9d: e5:ff:fb:ca:8b:37:b2:8b:c2:0e:a2:46:e2:89:35:85:2c:56: b3:5b:85:58:9c:aa:40:e6:9a:64:68:92:3e:12:1c:fb:db:91: 05:1e:76:7c:d6:a9:2f:b6:0d:3a:09:31:3d:56:d4:64:ba:e7: ff:8c:78:c7:a9:d2:bf:07:da:27:bc:93:03:91:f0:32:1c:47: a4:ad:f5:41:fc:e4:7a:34:af:1f:e0:0b:68:78:d7:6e:bc:e8: 06:11:b1:6b:30:98:4a:45:ec:a8:d1:c5:f3:0d:92:e1:76:c8: b9:96:17:e6:9d:68:3c:98:e2:64:a6:37:62:31:bf:49:82:e4: c6:71:57:73:29:cf:a0:69:c8:62:47:22:26:4f:0d:7b:7b:c7: da:65:87:3e:b6:30:4c:fc:26:e5:69:5b:4a:3c:06:0f:bc:65: d6:2b:4d:e2:7c:f3:00:bb:01:62:04:04:a9:65:c7:85:df:52: 8b:51:2f:82:94:68:b4:e3:b3:1d:6f:4d:7e:64:d4:e5:f3:11: 00:f4:e6:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsDhkVpbV7RswMrjoh7Yg32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjUxMjA5MTQzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGQzZjEwOTA5OGZmMTk5NTllOWFlMmQwMmQ1MzM4NDUzNjI2NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GJjBwLXpnDn3OvjLn3z+CH7Kqjg pMdOmxIGHXs1zEM+xIRUuvpLKx+JA6oxhSZcdO5sR87BcXk4Cr45WR1WxECH1pRD r3OMmSXcCIvBkClifdId3zeuMYOJP2fbEo9k/OZQ3QVITLc5+AlucUFwBN8UiCIs 9S2S5sndcQuWw5UNoOtCYJEGZSqVynS8I/fUO6cx/zBFnU0n2zy4bSngrRwPyEGZ PJ0xshzzc+EpvFv0yee5NBmLOd61BC8Kxai1c6uAc5P8jfQrsQhYnBSbOGJ3m5vn ynkVBwnsKv8E65fre512gV5PpghJlFj/l+torRmXZ697/5N7ICNbnTiT5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKjT8QkJj/GZWemuLQLVM4RTYmXaMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvcU5QeENRbVA4WmxaNmE0dEF0VXpoRk5pWmRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJebKMA0G CSqGSIb3DQEBCwUAA4IBAQCR3UM2RqQYaS1prAWn5scf5/QSZ1g1Ohwpv6tW7oCD 6PaIUaAsP2KvfKZvzlKDZb6RMjzIJZ3l//vKizeyi8IOokbiiTWFLFazW4VYnKpA 5ppkaJI+Ehz725EFHnZ81qkvtg06CTE9VtRkuuf/jHjHqdK/B9onvJMDkfAyHEek rfVB/OR6NK8f4AtoeNduvOgGEbFrMJhKReyo0cXzDZLhdsi5lhfmnWg8mOJkpjdi Mb9JguTGcVdzKc+gachiRyImTw17e8faZYc+tjBM/CblaVtKPAYPvGXWK03ifPMA uwFiBASpZceF31KLUS+ClGi047Mdb01+ZNTl8xEA9OaM -----END CERTIFICATE-----Generated at Wed Dec 10 10:36:17 2025 by rpki-client