This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Q3BEVY6T-yukGIlQWP8C73BuRL4.roa File: Q3BEVY6T-yukGIlQWP8C73BuRL4.roa (raw, json) Hash identifier: kTbbcy2EsZg55zyQbp9ey/5gy79GbAj39FwLvDadeK0= Subject key identifier: 43:70:44:55:8E:93:FB:2B:A4:18:89:50:58:FF:02:EF:70:6E:44:BE Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019AF8B2F74C52978B0EE2A79E89AE29864F Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Q3BEVY6T-yukGIlQWP8C73BuRL4.roa Signing time: Sun 07 Dec 2025 12:04:29 +0000 ROA not before: Sun 07 Dec 2025 12:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213644 IP address blocks: 178.239.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:b2:f7:4c:52:97:8b:0e:e2:a7:9e:89:ae:29:86:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Dec 7 12:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=437044558e93fb2ba418895058ff02ef706e44be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:56:1a:7c:36:51:40:f7:2a:4f:68:1b:ff: 0e:a6:9f:a4:2f:e6:22:a6:75:7e:95:44:53:5f:01: 28:05:bf:ae:ce:e8:ae:b8:e9:3f:e6:de:fb:9a:47: 6e:fd:1f:94:4f:15:f0:43:6c:37:40:ad:00:6a:53: 8d:5b:21:4f:68:70:df:ed:a1:c1:33:a8:36:f5:8f: 4f:45:9d:30:64:a3:b3:58:a8:0f:b4:66:ce:49:be: 6e:52:ed:e8:6e:1e:66:8f:4d:20:ce:fb:04:79:fd: e2:1b:d6:e0:6e:a6:e2:6e:e1:c1:79:39:fc:15:83: 65:fd:6d:4c:ea:bf:10:6e:a0:05:34:8e:a1:6c:97: 89:32:48:f6:d1:98:52:07:fe:34:a9:49:31:78:2c: 7f:92:1f:12:c6:17:6e:74:2b:a2:90:1a:74:c2:0e: 10:bf:b5:1b:fd:02:52:ef:af:93:6a:14:5a:94:8c: 5d:6c:fc:4c:ca:3e:5a:1b:cf:f3:ce:00:9a:9a:9e: 29:b1:4f:43:b5:f2:eb:50:af:62:aa:8b:d9:4f:da: 6f:2c:3e:a3:a8:c5:31:fc:a3:4f:68:ce:46:5c:c4: 61:62:2e:63:65:58:75:28:fd:53:f4:94:5b:f3:b8: c3:39:f5:af:79:0e:1c:e3:e1:41:93:54:5c:4d:46: 88:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:70:44:55:8E:93:FB:2B:A4:18:89:50:58:FF:02:EF:70:6E:44:BE X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Q3BEVY6T-yukGIlQWP8C73BuRL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.150.0/24 Signature Algorithm: sha256WithRSAEncryption 95:e9:cf:6d:36:e8:a8:93:ec:f1:f3:a6:71:0b:0c:e2:a3:b0: 8e:83:98:31:8a:c5:f3:8e:4c:e7:22:d8:40:30:25:29:b2:38: 29:b7:1d:e7:0f:27:74:b4:6a:ae:f4:64:af:7f:9b:6a:ab:a8: 58:e4:26:41:da:04:f4:45:3c:77:d7:84:86:26:54:ba:cc:39: d5:7a:d5:88:93:15:8d:04:77:a7:17:4a:87:b6:73:55:aa:c4: 6a:01:fb:a8:62:91:0a:c0:7f:60:98:ba:06:1a:ec:9d:5a:b8: f2:70:3a:ba:3d:13:63:cb:a9:6a:a4:69:a9:76:e8:78:30:c8: a6:92:81:78:79:7c:95:62:c7:fc:3b:35:df:19:a6:21:30:94: ef:c2:75:81:f2:76:16:23:fb:65:48:fe:a6:0c:d7:76:ff:8d: ce:a6:0e:03:53:3e:fe:72:20:03:1e:5b:74:0a:ad:15:04:08: 35:74:5a:73:df:69:4d:14:a1:a1:17:6e:39:96:dc:94:ee:2c: 8d:08:27:52:a8:24:85:80:b9:5b:e5:85:d9:d8:53:f8:86:c5: 9e:7c:dd:12:b8:f7:f5:a6:05:50:7e:bb:14:61:ba:1a:f5:a8: 08:cd:90:96:65:0e:c8:ed:39:08:45:4d:7c:19:44:65:91:39: ec:4d:fe:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr4svdMUpeLDuKnnomuKYZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjUxMjA3MTIwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzcwNDQ1NThlOTNmYjJiYTQxODg5NTA1OGZmMDJlZjcwNmU0NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrNWGnw2UUD3Kk9oG/8Opp+kL+Yi pnV+lURTXwEoBb+uzuiuuOk/5t77mkdu/R+UTxXwQ2w3QK0AalONWyFPaHDf7aHB M6g29Y9PRZ0wZKOzWKgPtGbOSb5uUu3obh5mj00gzvsEef3iG9bgbqbibuHBeTn8 FYNl/W1M6r8QbqAFNI6hbJeJMkj20ZhSB/40qUkxeCx/kh8SxhdudCuikBp0wg4Q v7Ub/QJS76+TahRalIxdbPxMyj5aG8/zzgCamp4psU9DtfLrUK9iqovZT9pvLD6j qMUx/KNPaM5GXMRhYi5jZVh1KP1T9JRb87jDOfWveQ4c4+FBk1RcTUaIRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFENwRFWOk/srpBiJUFj/Au9wbkS+MB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvUTNCRVZZNlQteXVrR0lsUVdQOEM3M0J1Ukw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+WMA0G CSqGSIb3DQEBCwUAA4IBAQCV6c9tNuiok+zx86ZxCwzio7COg5gxisXzjkznIthA MCUpsjgptx3nDyd0tGqu9GSvf5tqq6hY5CZB2gT0RTx314SGJlS6zDnVetWIkxWN BHenF0qHtnNVqsRqAfuoYpEKwH9gmLoGGuydWrjycDq6PRNjy6lqpGmpduh4MMim koF4eXyVYsf8OzXfGaYhMJTvwnWB8nYWI/tlSP6mDNd2/43Opg4DUz7+ciADHlt0 Cq0VBAg1dFpz32lNFKGhF245ltyU7iyNCCdSqCSFgLlb5YXZ2FP4hsWefN0SuPf1 pgVQfrsUYboa9agIzZCWZQ7I7TkIRU18GURlkTnsTf5d -----END CERTIFICATE-----Generated at Wed Dec 10 12:24:17 2025 by rpki-client