This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QpNiwSKLg1CKphWqrLMg9pRN1q0.roa File: QpNiwSKLg1CKphWqrLMg9pRN1q0.roa (raw, json) Hash identifier: kuVGSkQ9cpG3sU8yLlgROJ8xWosxalICB7mCuIOnI38= Subject key identifier: 42:93:62:C1:22:8B:83:50:8A:A6:15:AA:AC:B3:20:F6:94:4D:D6:AD Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A3AB26FF3C0AB23CA020FB7774B850316 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QpNiwSKLg1CKphWqrLMg9pRN1q0.roa Signing time: Fri 31 Oct 2025 14:36:03 +0000 ROA not before: Fri 31 Oct 2025 14:36:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198831 IP address blocks: 151.242.159.0/24 maxlen: 24 151.242.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:3a:b2:6f:f3:c0:ab:23:ca:02:0f:b7:77:4b:85:03:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Oct 31 14:36:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=429362c1228b83508aa615aaacb320f6944dd6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:c1:9a:ee:8c:72:87:d6:12:ce:cd:2b:82: 3b:f3:e3:26:67:6c:70:69:2a:59:20:ca:c6:23:57: 18:dc:56:c5:ea:e1:09:fb:61:75:e9:e9:f5:f4:2c: 7b:80:b7:ba:c4:cf:82:03:85:5d:5a:e7:ac:96:7a: 13:b1:df:e3:1c:96:b7:b2:64:d9:34:31:52:f1:23: 6b:ea:4d:82:d5:48:2c:49:dd:3b:ba:bd:1d:9f:ac: 67:bc:d6:d1:2f:55:22:95:81:2c:fa:03:fa:a6:9d: c9:f3:97:2a:26:ac:6c:6a:a5:17:31:ae:78:5f:c5: 4f:35:e1:6e:e1:f5:1b:82:21:5f:28:32:d4:20:51: 4b:8c:30:37:8e:f7:5b:a7:28:49:29:89:43:2b:4c: ce:f5:98:f3:b7:97:3e:e2:6b:40:93:a1:37:e5:91: da:9c:46:e9:09:e0:14:47:f4:e7:9a:02:29:a0:8b: c5:5f:11:2d:4d:9d:23:fc:06:ea:52:b5:97:76:dc: 16:99:e5:4c:b4:11:57:2a:b7:63:3e:e1:6d:bf:64: 02:d3:fa:6e:35:3b:8e:ae:b3:eb:d4:34:f6:16:a1: de:a3:0f:85:6c:c4:c4:6d:77:73:20:57:28:c6:46: d7:9e:32:0b:1c:54:be:22:9a:d8:bf:06:10:ed:33: 99:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:62:C1:22:8B:83:50:8A:A6:15:AA:AC:B3:20:F6:94:4D:D6:AD X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QpNiwSKLg1CKphWqrLMg9pRN1q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.159.0/24 151.242.255.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:0c:a8:b7:64:dc:eb:a4:25:83:f1:b1:9d:63:75:aa:c3:27: b8:cb:5c:b4:70:ea:a0:ac:41:f9:da:2e:0c:92:8e:31:e0:49: 10:1e:66:9d:15:6e:ac:07:6a:89:c2:4a:40:4e:da:59:b0:d1: fc:42:07:20:ee:79:ec:ec:5b:81:dd:c3:6a:71:25:9b:b6:b2: 52:12:1f:99:1b:72:e7:0f:46:66:7c:d5:13:b1:cb:7f:ab:c5: 9b:b1:8b:bf:6f:e7:33:2b:7a:fb:01:f3:85:c6:d8:40:c3:a4: 8b:15:04:df:48:76:5b:07:4e:21:46:c6:fa:44:e3:dc:8a:a2: a5:21:43:f5:09:95:cd:e0:45:8c:6b:29:96:84:92:d3:f8:d9: 55:7e:63:98:d0:ac:f6:96:48:aa:d5:25:fc:cb:cb:67:d9:42: 0b:76:07:8c:6e:c0:33:e4:ac:0b:99:ca:4c:80:28:67:db:63: c9:1d:67:49:a7:66:b3:6f:95:5f:49:0f:fa:20:53:bd:db:17: 08:f8:4e:ca:25:bd:44:df:94:7c:9f:0c:af:c4:df:f6:23:73: a4:3d:6f:d5:27:a5:a3:13:d2:1c:54:f1:32:61:5c:47:d5:b4: a7:bd:0e:fb:22:c0:5a:31:db:1f:d1:a4:5f:7f:54:fe:2b:f5: 32:06:c2:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZo6sm/zwKsjygIPt3dLhQMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMDMxMTQzNjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjkzNjJjMTIyOGI4MzUwOGFhNjE1YWFhY2IzMjBmNjk0NGRkNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQjBmu6McofWEs7NK4I78+MmZ2xw aSpZIMrGI1cY3FbF6uEJ+2F16en19Cx7gLe6xM+CA4VdWueslnoTsd/jHJa3smTZ NDFS8SNr6k2C1UgsSd07ur0dn6xnvNbRL1UilYEs+gP6pp3J85cqJqxsaqUXMa54 X8VPNeFu4fUbgiFfKDLUIFFLjDA3jvdbpyhJKYlDK0zO9Zjzt5c+4mtAk6E35ZHa nEbpCeAUR/TnmgIpoIvFXxEtTZ0j/AbqUrWXdtwWmeVMtBFXKrdjPuFtv2QC0/pu NTuOrrPr1DT2FqHeow+FbMTEbXdzIFcoxkbXnjILHFS+IprYvwYQ7TOZkwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEKTYsEii4NQiqYVqqyzIPaUTdatMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUXBOaXdTS0xnMUNLcGhXcXJMTWc5cFJOMXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/KfAwQA l/L/MA0GCSqGSIb3DQEBCwUAA4IBAQAcDKi3ZNzrpCWD8bGdY3Wqwye4y1y0cOqg rEH52i4Mko4x4EkQHmadFW6sB2qJwkpATtpZsNH8Qgcg7nns7FuB3cNqcSWbtrJS Eh+ZG3LnD0ZmfNUTsct/q8WbsYu/b+czK3r7AfOFxthAw6SLFQTfSHZbB04hRsb6 ROPciqKlIUP1CZXN4EWMaymWhJLT+NlVfmOY0Kz2lkiq1SX8y8tn2UILdgeMbsAz 5KwLmcpMgChn22PJHWdJp2azb5VfSQ/6IFO92xcI+E7KJb1E35R8nwyvxN/2I3Ok PW/VJ6WjE9IcVPEyYVxH1bSnvQ77IsBaMdsf0aRff1T+K/UyBsLf -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:56 2025 by rpki-client