This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/q_kXdq_G8vxIRb690xB936XEeiM.roa File: q_kXdq_G8vxIRb690xB936XEeiM.roa (raw, json) Hash identifier: jHuhsBN5kPKdxAgKEokLgUUuhiTEBaUJtri7mRLhZ68= Subject key identifier: AB:F9:17:76:AF:C6:F2:FC:48:45:BE:BD:D3:10:7D:DF:A5:C4:7A:23 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A769CCA623833459238E30F9116EC8089 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/q_kXdq_G8vxIRb690xB936XEeiM.roa Signing time: Wed 12 Nov 2025 05:49:38 +0000 ROA not before: Wed 12 Nov 2025 05:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197537 IP address blocks: 151.242.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:9c:ca:62:38:33:45:92:38:e3:0f:91:16:ec:80:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 12 05:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=abf91776afc6f2fc4845bebdd3107ddfa5c47a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:e5:95:86:14:94:ca:58:9e:94:fc:65:38: 65:cd:d6:f7:68:be:25:01:1a:6b:28:b7:b0:70:e7: 08:06:ce:b9:32:f9:b7:64:34:d1:bf:7a:33:72:3a: f4:6a:49:43:fc:ff:e6:16:7c:fd:c0:c7:74:00:fd: c5:3a:7e:2e:ea:80:85:0d:83:de:02:7a:b9:0d:75: d8:f0:2b:18:99:e1:fc:98:b3:3c:a8:0c:22:48:15: 68:11:65:29:fa:63:85:2d:62:d5:9f:7c:ac:01:f6: 51:c7:a9:46:63:e3:0c:02:ab:31:4f:bb:50:fa:56: 3d:6b:e3:04:28:67:37:4f:8f:45:7b:3e:44:49:97: 8d:77:38:74:54:71:15:86:5b:91:26:cf:a2:24:a4: 79:5b:1b:9a:05:ed:9c:22:27:34:70:a9:9b:a5:2b: 28:5a:f5:f0:55:59:8c:69:a6:cc:b1:7b:76:20:8b: 21:84:24:3b:f6:4f:42:74:ff:6e:c1:37:eb:63:d7: f9:e1:34:65:2d:f1:60:16:ed:5e:4b:7c:8d:39:1e: 48:06:66:7d:b5:b6:9f:a2:04:6e:c1:20:08:98:34: 0f:21:a2:73:df:0d:49:d1:67:2b:88:84:30:dc:f6: ce:68:b4:d8:9c:2a:4e:f7:ff:2a:b5:64:86:ea:8c: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F9:17:76:AF:C6:F2:FC:48:45:BE:BD:D3:10:7D:DF:A5:C4:7A:23 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/q_kXdq_G8vxIRb690xB936XEeiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.112.0/24 Signature Algorithm: sha256WithRSAEncryption 77:ff:df:63:58:12:d5:c1:44:43:f9:33:c5:fb:dd:ef:1c:3a: 5e:f6:2d:a1:5f:90:98:ce:bd:cc:34:71:98:fb:db:1e:09:b7: 6f:81:2f:7a:9e:0b:aa:4f:61:e0:25:ab:de:dc:56:ac:0b:84: 24:89:62:1f:85:d5:2f:9d:d8:97:0c:0b:20:d5:00:8f:66:72: 54:b3:d6:b5:a5:9c:87:8f:6b:97:ac:86:fa:e4:b8:5b:b4:fb: aa:4c:91:61:d9:49:ed:36:41:e5:07:de:68:5f:da:e9:46:94: 3c:aa:28:9d:47:16:c4:f2:39:35:95:22:0c:e1:c4:d6:36:94: 97:a1:28:76:bb:a0:0f:45:51:fa:9c:ef:dd:ff:0a:ff:8c:88: d5:2a:63:aa:8d:8f:12:f8:b2:cd:e3:f7:55:0b:c8:66:3d:41: f2:dc:01:24:23:6e:42:e5:6c:6a:08:62:00:81:e8:77:f3:f0: d8:3e:af:5f:60:43:d2:c6:ec:66:9d:a6:5c:80:e5:48:db:98: 79:50:f0:00:0b:6a:25:f9:9b:7a:26:19:60:c8:85:a3:2d:45: 2a:d6:0c:cd:58:f4:ee:f6:bd:2f:be:63:ac:3c:05:e1:3e:23: cd:b6:d4:53:f5:35:14:47:fd:9d:c0:19:34:80:90:c6:02:3b: 56:66:ff:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp2nMpiODNFkjjjD5EW7ICJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTEyMDU0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmY5MTc3NmFmYzZmMmZjNDg0NWJlYmRkMzEwN2RkZmE1YzQ3YTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZXllYYUlMpYnpT8ZThlzdb3aL4l ARprKLewcOcIBs65Mvm3ZDTRv3ozcjr0aklD/P/mFnz9wMd0AP3FOn4u6oCFDYPe Anq5DXXY8CsYmeH8mLM8qAwiSBVoEWUp+mOFLWLVn3ysAfZRx6lGY+MMAqsxT7tQ +lY9a+MEKGc3T49Fez5ESZeNdzh0VHEVhluRJs+iJKR5WxuaBe2cIic0cKmbpSso WvXwVVmMaabMsXt2IIshhCQ79k9CdP9uwTfrY9f54TRlLfFgFu1eS3yNOR5IBmZ9 tbafogRuwSAImDQPIaJz3w1J0WcriIQw3PbOaLTYnCpO9/8qtWSG6oxF2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKv5F3avxvL8SEW+vdMQfd+lxHojMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcV9rWGRxX0c4dnhJUmI2OTB4QjkzNlhFZWlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/JwMA0G CSqGSIb3DQEBCwUAA4IBAQB3/99jWBLVwURD+TPF+93vHDpe9i2hX5CYzr3MNHGY +9seCbdvgS96nguqT2HgJave3FasC4QkiWIfhdUvndiXDAsg1QCPZnJUs9a1pZyH j2uXrIb65LhbtPuqTJFh2UntNkHlB95oX9rpRpQ8qiidRxbE8jk1lSIM4cTWNpSX oSh2u6APRVH6nO/d/wr/jIjVKmOqjY8S+LLN4/dVC8hmPUHy3AEkI25C5WxqCGIA geh38/DYPq9fYEPSxuxmnaZcgOVI25h5UPAAC2ol+Zt6JhlgyIWjLUUq1gzNWPTu 9r0vvmOsPAXhPiPNttRT9TUUR/2dwBk0gJDGAjtWZv8I -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:57 2025 by rpki-client