This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/jQZKVERr6IsuKjwneXwFmgJpk2I.roa File: jQZKVERr6IsuKjwneXwFmgJpk2I.roa (raw, json) Hash identifier: z5yWP8S8+JeM0SJY/JZUzt2VIDmGrC9iF7BnyXzu76M= Subject key identifier: 8D:06:4A:54:44:6B:E8:8B:2E:2A:3C:27:79:7C:05:9A:02:69:93:62 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019ADE8EBECE56E9E4B8E0262F0048EB535F Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/jQZKVERr6IsuKjwneXwFmgJpk2I.roa Signing time: Tue 02 Dec 2025 10:14:48 +0000 ROA not before: Tue 02 Dec 2025 10:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34702 IP address blocks: 114.129.9.0/24 maxlen: 24 185.114.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 08:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:8e:be:ce:56:e9:e4:b8:e0:26:2f:00:48:eb:53:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Dec 2 10:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d064a54446be88b2e2a3c27797c059a02699362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:b7:93:57:87:fa:19:be:23:89:cc:f1:4d: 5f:53:38:be:c4:5b:99:b6:55:f2:0e:5b:82:fb:5f: c0:83:49:e5:66:d9:d0:2d:4b:57:9d:7e:f6:dd:12: a9:ca:e2:dd:ba:42:d6:6a:f9:44:49:52:05:d5:33: b2:d9:51:b7:e5:6e:1f:a9:ef:17:36:af:b5:58:e9: 53:cc:d6:46:37:5a:c4:0c:0a:fd:85:26:1f:35:0d: 9f:29:73:18:a9:5b:0d:ff:99:6d:aa:5e:d9:e0:f1: c8:dd:14:36:db:b3:b5:49:4f:b7:c7:19:6d:17:30: 16:97:77:ce:c8:b5:26:11:04:13:b2:62:45:a3:bb: 99:a3:79:d0:3b:46:10:e6:86:2c:cc:53:6b:1a:76: e2:f1:2c:ea:77:19:78:e2:24:9e:ac:02:1d:6b:9a: 70:ba:8d:24:db:7e:43:38:a0:87:26:2b:e5:f9:e5: a6:e3:1e:ce:df:39:2d:42:07:39:db:65:a9:02:e5: da:10:1f:aa:13:57:1a:5a:13:e4:4a:37:20:40:73: 85:63:c8:bc:0c:e3:5a:a0:5e:51:63:a9:6e:5e:90: 1e:9f:18:51:e7:49:ee:4e:db:cc:84:75:dd:72:c1: 73:f6:4e:6f:02:c0:5f:33:2a:f0:2d:86:b9:48:a0: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:06:4A:54:44:6B:E8:8B:2E:2A:3C:27:79:7C:05:9A:02:69:93:62 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/jQZKVERr6IsuKjwneXwFmgJpk2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.129.9.0/24 185.114.116.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:1c:5e:35:30:c5:38:c8:36:43:0a:ec:ee:c3:1d:85:c4:ac: ad:7c:b9:77:71:41:b8:f4:c7:c7:fb:47:6b:32:0c:d8:93:35: cd:44:66:e1:33:49:1b:eb:17:2c:32:38:51:78:93:9b:35:88: 1e:c0:b0:95:a2:c2:ab:20:5f:62:eb:69:5a:99:05:16:42:f0: 74:49:c4:fd:20:17:b1:f1:6e:2a:59:6d:13:82:84:34:f5:d7: 69:aa:f2:9c:71:6a:7d:b2:3f:93:bc:11:00:2e:3f:97:76:db: 52:e9:6f:ea:f5:c2:02:89:21:99:af:bf:66:56:7f:07:66:84: 8e:5e:d4:86:95:82:59:cd:9a:90:c5:32:b1:26:b2:23:6a:52: c9:4c:e6:ef:1f:0e:9a:81:51:af:65:26:c6:42:8f:41:f3:8e: 98:69:75:cd:f0:8f:82:c9:6e:bb:b3:f5:c9:bf:73:6f:66:9b: 86:e9:98:19:88:9e:8c:3b:ad:92:40:33:3e:83:18:53:7c:eb: 46:a9:8f:a5:60:7b:c9:e4:9b:2f:df:a8:00:16:9f:26:0f:ea: 8a:4e:7b:4c:dc:20:34:d1:87:fc:2b:16:2c:21:10:8e:45:e7: 7a:12:d9:91:10:04:63:44:d1:01:8c:34:1f:04:1e:1b:f1:fc: 8e:60:eb:7c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrejr7OVunkuOAmLwBI61NfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUxMjAyMTAxNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDA2NGE1NDQ0NmJlODhiMmUyYTNjMjc3OTdjMDU5YTAyNjk5MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArku3k1eH+hm+I4nM8U1fUzi+xFuZ tlXyDluC+1/Ag0nlZtnQLUtXnX723RKpyuLdukLWavlESVIF1TOy2VG35W4fqe8X Nq+1WOlTzNZGN1rEDAr9hSYfNQ2fKXMYqVsN/5ltql7Z4PHI3RQ227O1SU+3xxlt FzAWl3fOyLUmEQQTsmJFo7uZo3nQO0YQ5oYszFNrGnbi8Szqdxl44iSerAIda5pw uo0k235DOKCHJivl+eWm4x7O3zktQgc522WpAuXaEB+qE1caWhPkSjcgQHOFY8i8 DONaoF5RY6luXpAenxhR50nuTtvMhHXdcsFz9k5vAsBfMyrwLYa5SKB41QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI0GSlREa+iLLio8J3l8BZoCaZNiMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvalFaS1ZFUnI2SXN1S2p3bmVYd0ZtZ0pwazJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAcoEJAwQA uXJ0MA0GCSqGSIb3DQEBCwUAA4IBAQCfHF41MMU4yDZDCuzuwx2FxKytfLl3cUG4 9MfH+0drMgzYkzXNRGbhM0kb6xcsMjhReJObNYgewLCVosKrIF9i62lamQUWQvB0 ScT9IBex8W4qWW0TgoQ09ddpqvKccWp9sj+TvBEALj+XdttS6W/q9cICiSGZr79m Vn8HZoSOXtSGlYJZzZqQxTKxJrIjalLJTObvHw6agVGvZSbGQo9B846YaXXN8I+C yW67s/XJv3NvZpuG6ZgZiJ6MO62SQDM+gxhTfOtGqY+lYHvJ5Jsv36gAFp8mD+qK TntM3CA00Yf8KxYsIRCORed6EtmREARjRNEBjDQfBB4b8fyOYOt8 -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:49 2025 by rpki-client