This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/q7qxZUlMexCCPUrlLyE18hEbtAo.roa File: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (raw, json) Hash identifier: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ= Subject key identifier: AB:BA:B1:65:49:4C:7B:10:82:3D:4A:E5:2F:21:35:F2:11:1B:B4:0A Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019AE3C7BB0A7C5BE31A7690683403A357AA Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/q7qxZUlMexCCPUrlLyE18hEbtAo.roa Signing time: Wed 03 Dec 2025 10:35:08 +0000 ROA not before: Wed 03 Dec 2025 10:35:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60800 IP address blocks: 91.210.100.0/22 maxlen: 24 103.82.0.0/22 maxlen: 24 125.62.72.0/22 maxlen: 24 185.17.172.0/22 maxlen: 24 185.42.16.0/22 maxlen: 24 185.222.112.0/22 maxlen: 24 2a03:ec40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:c7:bb:0a:7c:5b:e3:1a:76:90:68:34:03:a3:57:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Dec 3 10:35:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=abbab165494c7b10823d4ae52f2135f2111bb40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:91:ce:ba:5b:5c:42:19:97:d7:6a:aa:20: 88:b1:b1:30:23:72:9e:05:d6:d3:00:fa:1c:dd:14: 41:da:1c:69:98:7f:7d:f3:a1:68:19:26:35:47:4f: 3b:a0:ae:36:a3:2a:53:a1:fa:42:d9:bf:90:66:df: 13:53:18:1b:61:36:53:1b:2c:8c:86:74:70:3f:dd: 3e:2d:98:68:dd:15:ee:da:ec:e6:b1:8d:91:88:72: 51:73:21:97:22:cb:d6:74:69:e8:75:b6:8b:92:29: 21:39:a2:be:91:d0:21:2c:f6:d6:75:25:18:09:a0: 95:09:d5:90:b3:46:4c:a2:f2:2b:38:9e:23:b9:75: 63:c0:04:eb:f1:29:6d:ac:0e:98:70:f8:38:f3:d4: f7:87:d0:3e:f4:c0:3f:67:5f:52:db:94:7e:16:1a: 58:9f:f8:40:59:0b:23:dc:e2:b8:dd:fc:39:f7:42: 64:9d:48:81:c2:43:03:a4:a1:70:e9:d5:27:af:ee: 32:cf:dd:01:45:01:7d:c9:e8:cd:4e:6c:72:fc:d3: 1b:ec:4a:5b:27:8f:5b:0b:48:ad:58:10:a8:e7:2f: 12:6a:35:3e:5a:5d:32:cd:65:f9:3c:26:3d:47:b8: 2b:c8:7a:e9:bb:22:b9:72:43:77:ee:58:b8:f4:4c: da:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BA:B1:65:49:4C:7B:10:82:3D:4A:E5:2F:21:35:F2:11:1B:B4:0A X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/q7qxZUlMexCCPUrlLyE18hEbtAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.100.0/22 103.82.0.0/22 125.62.72.0/22 185.17.172.0/22 185.42.16.0/22 185.222.112.0/22 IPv6: 2a03:ec40::/29 Signature Algorithm: sha256WithRSAEncryption 50:fa:1a:76:62:37:5a:14:c7:44:d6:a8:fd:d2:96:c0:4c:77: 0e:0a:b5:49:48:7e:a5:95:d5:12:b6:ee:3e:94:0a:ff:8e:e5: 88:20:cd:02:cc:8b:48:e2:99:26:fe:e1:17:d6:34:03:8c:77: dc:1e:e2:fb:20:dd:1d:ba:2d:90:80:9d:5a:38:63:f5:35:56: d4:40:0c:aa:5a:af:95:6d:5b:c2:80:ee:b6:e6:4f:ed:13:1f: 50:ff:24:5b:cb:ef:96:4f:b4:72:52:5b:e1:5d:96:b7:c2:8f: 68:98:ea:bd:d2:17:6b:4d:d6:1c:60:7d:08:98:34:f0:45:22: e5:ae:93:f1:0a:c4:e1:ad:db:82:66:6c:0a:d4:88:d9:f8:39: b7:85:b7:4e:8d:3f:a6:60:5e:b5:c2:2b:53:a9:da:cb:1d:81: cb:3a:c7:88:72:eb:b0:79:e1:01:45:82:2e:5c:1d:5d:d8:fa: e9:2e:ac:3b:1f:07:53:78:9b:7f:75:62:24:58:ce:3c:f4:5a: f8:a0:41:04:c4:54:50:20:42:8c:2b:93:af:e2:a5:80:34:1a: 33:0c:1e:cb:1b:c2:85:05:3b:8c:49:bb:18:79:01:56:34:89: 54:39:6e:ef:7b:a8:46:0f:d3:e7:71:32:e9:92:60:b1:71:d3: 80:fc:88:83 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZrjx7sKfFvjGnaQaDQDo1eqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMjAzMTAzNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmJhYjE2NTQ5NGM3YjEwODIzZDRhZTUyZjIxMzVmMjExMWJiNDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymKRzrpbXEIZl9dqqiCIsbEwI3Ke BdbTAPoc3RRB2hxpmH9986FoGSY1R087oK42oypTofpC2b+QZt8TUxgbYTZTGyyM hnRwP90+LZho3RXu2uzmsY2RiHJRcyGXIsvWdGnodbaLkikhOaK+kdAhLPbWdSUY CaCVCdWQs0ZMovIrOJ4juXVjwATr8SltrA6YcPg489T3h9A+9MA/Z19S25R+FhpY n/hAWQsj3OK43fw590JknUiBwkMDpKFw6dUnr+4yz90BRQF9yejNTmxy/NMb7Epb J49bC0itWBCo5y8SajU+Wl0yzWX5PCY9R7gryHrpuyK5ckN37li49EzaDwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFKu6sWVJTHsQgj1K5S8hNfIRG7QKMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvcTdxeFpVbE1leENDUFVybEx5RTE4aEVidEFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCW9JkAwQC Z1IAAwQCfT5IAwQCuRGsAwQCuSoQAwQCud5wMA0EAgACMAcDBQMqA+xAMA0GCSqG SIb3DQEBCwUAA4IBAQBQ+hp2YjdaFMdE1qj90pbATHcOCrVJSH6lldUStu4+lAr/ juWIIM0CzItI4pkm/uEX1jQDjHfcHuL7IN0dui2QgJ1aOGP1NVbUQAyqWq+VbVvC gO625k/tEx9Q/yRby++WT7RyUlvhXZa3wo9omOq90hdrTdYcYH0ImDTwRSLlrpPx CsThrduCZmwK1IjZ+Dm3hbdOjT+mYF61witTqdrLHYHLOseIcuuweeEBRYIuXB1d 2PrpLqw7HwdTeJt/dWIkWM489Fr4oEEExFRQIEKMK5Ov4qWANBozDB7LG8KFBTuM SbsYeQFWNIlUOW7ve6hGD9PncTLpkmCxcdOA/IiD -----END CERTIFICATE-----Generated at Thu Dec 4 19:01:40 2025 by rpki-client