This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q1_KcyKROctuWckrhsQSY5Dr5kc.roa File: Q1_KcyKROctuWckrhsQSY5Dr5kc.roa (raw, json) Hash identifier: YZQMifQPSsMxUlERDw91Mqqf4Ld51WL2nPFwuhtpk3w= Subject key identifier: 43:5F:CA:73:22:91:39:CB:6E:59:C9:2B:86:C4:12:63:90:EB:E6:47 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AB50ACEC1E612ED5117BBED17A6B2954A Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q1_KcyKROctuWckrhsQSY5Dr5kc.roa Signing time: Mon 24 Nov 2025 08:46:15 +0000 ROA not before: Mon 24 Nov 2025 08:46:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 2a05:b300::/29 maxlen: 32 2a06:1184:11::/48 maxlen: 48 2a06:35c3:100::/48 maxlen: 48 2a09:17c1:4a::/48 maxlen: 48 2a0a:2d06:66::/48 maxlen: 48 2a0c:7882:2::/48 maxlen: 48 2a0e:15c7:101::/48 maxlen: 48 2a0e:1a83:99::/48 maxlen: 48 2a0e:c786:122::/48 maxlen: 48 2a0e:c787:1000::/48 maxlen: 48 2a0e:f600:2a::/48 maxlen: 48 2a0f:1200:10::/48 maxlen: 48 2a0f:1206:66::/48 maxlen: 48 2a0f:1584:6::/48 maxlen: 48 2a0f:1e80:1986::/48 maxlen: 48 2a0f:3046:85::/48 maxlen: 48 2a0f:3047:fe48::/48 maxlen: 48 2a0f:3d80:1312::/48 maxlen: 48 2a0f:7d00:100::/48 maxlen: 48 2a0f:bc04:1004::/48 maxlen: 48 2a0f:da40::/29 maxlen: 32 2a0f:de40::/29 maxlen: 32 2a0f:e1c0:1312::/48 maxlen: 48 2a0f:e1c7:77::/48 maxlen: 48 2a0f:e202:33::/48 maxlen: 48 2a0f:e207:fd38::/48 maxlen: 48 2a0f:e740::/29 maxlen: 32 2a0f:e7c7:b4::/48 maxlen: 48 2a0f:ea44:55::/48 maxlen: 48 2a0f:ea44:acab::/48 maxlen: 48 2a0f:ec00::/29 maxlen: 29 2a10:67c2:d6::/48 maxlen: 48 2a10:67c5:2::/48 maxlen: 48 2a10:6f00::/29 maxlen: 32 2a10:7700::/29 maxlen: 32 2a12:ac46:77::/48 maxlen: 48 2a12:ac46:99::/48 maxlen: 48 2a12:ecc0:11::/48 maxlen: 48 2a12:ecc0:3e2::/48 maxlen: 48 2a13:18c5:11::/48 maxlen: 48 2a13:18c6:101::/48 maxlen: 48 2a13:18c6:8512::/48 maxlen: 48 2a13:8100::/29 maxlen: 32 2a13:8c86:88::/48 maxlen: 48 2a13:8c86:10a::/48 maxlen: 48 2a13:9285:100::/48 maxlen: 48 2a13:c900:120::/48 maxlen: 48 2a13:e100:323::/48 maxlen: 48 2a13:e102:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:0a:ce:c1:e6:12:ed:51:17:bb:ed:17:a6:b2:95:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 24 08:46:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=435fca73229139cb6e59c92b86c4126390ebe647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:57:2a:22:35:d6:a0:70:de:e1:43:fd:dd: ca:42:5d:c5:3e:86:de:75:1e:4a:4d:c9:ef:b4:6b: a6:36:15:d1:2d:f3:2e:c7:b4:27:b2:fa:ca:6f:1e: 89:56:02:06:2b:28:3f:e0:af:a3:45:9b:39:2e:45: fd:68:da:21:99:21:51:e1:68:aa:fd:f0:59:69:85: c3:16:92:ba:3f:90:2e:c4:49:55:c2:65:8f:ff:6e: 3d:24:96:3b:35:fa:0a:5c:74:f3:5f:d4:c0:f2:19: b8:e9:f9:ec:8e:78:84:94:6d:44:3f:d4:7e:42:32: 73:be:cb:6e:04:97:ec:6a:ef:30:1a:20:b9:2d:ce: 05:4b:10:3d:40:bc:fe:cd:17:59:d2:42:45:a5:37: f1:0f:af:4c:6a:a3:c9:a0:ef:10:1b:05:c7:98:08: d6:ec:5b:eb:34:2d:0d:17:bb:57:f9:14:d6:11:4e: e7:1b:06:e2:0f:39:a3:28:35:80:dc:ad:0b:f6:54: 9b:40:a0:a0:f0:f3:95:01:47:2d:ca:13:aa:3b:68: 7e:09:b1:df:5e:c5:26:62:c9:76:25:ad:b7:c0:a6: 09:34:e5:d8:03:c9:2f:00:3f:7a:3e:2e:6f:b2:44: 2e:80:ba:53:92:ff:f2:45:37:e3:29:27:92:9f:0e: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5F:CA:73:22:91:39:CB:6E:59:C9:2B:86:C4:12:63:90:EB:E6:47 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q1_KcyKROctuWckrhsQSY5Dr5kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b300::/29 2a06:1184:11::/48 2a06:35c3:100::/48 2a09:17c1:4a::/48 2a0a:2d06:66::/48 2a0c:7882:2::/48 2a0e:15c7:101::/48 2a0e:1a83:99::/48 2a0e:c786:122::/48 2a0e:c787:1000::/48 2a0e:f600:2a::/48 2a0f:1200:10::/48 2a0f:1206:66::/48 2a0f:1584:6::/48 2a0f:1e80:1986::/48 2a0f:3046:85::/48 2a0f:3047:fe48::/48 2a0f:3d80:1312::/48 2a0f:7d00:100::/48 2a0f:bc04:1004::/48 2a0f:da40::/29 2a0f:de40::/29 2a0f:e1c0:1312::/48 2a0f:e1c7:77::/48 2a0f:e202:33::/48 2a0f:e207:fd38::/48 2a0f:e740::/29 2a0f:e7c7:b4::/48 2a0f:ea44:55::/48 2a0f:ea44:acab::/48 2a0f:ec00::/29 2a10:67c2:d6::/48 2a10:67c5:2::/48 2a10:6f00::/29 2a10:7700::/29 2a12:ac46:77::/48 2a12:ac46:99::/48 2a12:ecc0:11::/48 2a12:ecc0:3e2::/48 2a13:18c5:11::/48 2a13:18c6:101::/48 2a13:18c6:8512::/48 2a13:8100::/29 2a13:8c86:88::/48 2a13:8c86:10a::/48 2a13:9285:100::/48 2a13:c900:120::/48 2a13:e100:323::/48 2a13:e102:1::/48 Signature Algorithm: sha256WithRSAEncryption 6a:ad:f0:f2:05:de:fa:df:52:20:17:72:5b:4f:4a:db:fe:a3: 33:70:cf:75:95:b5:35:a7:1c:6b:97:8a:18:2a:a2:a8:34:75: d5:bc:31:41:c6:ff:36:aa:2d:fb:5a:2b:87:ef:5f:d2:73:ef: 12:14:45:9c:cc:2f:7b:05:16:7d:f6:76:47:37:51:32:b9:0a: ab:cb:e3:b2:c9:c2:ce:8a:8b:3d:44:68:a1:6d:65:c8:98:55: 34:66:2a:8b:ed:b5:7e:a0:a5:80:6f:0e:c3:aa:3e:98:d9:d5: 9d:ca:b5:7e:84:17:47:e9:dc:6b:da:c0:f1:b7:e2:12:1b:bc: 13:d8:e6:01:e7:f3:8e:6b:10:df:dc:89:ee:f1:63:df:aa:3a: 60:55:87:b5:6b:62:67:a7:17:f6:87:da:d5:12:e6:ff:d6:84: f8:e0:fe:eb:8b:c3:2f:f1:df:b2:14:4d:76:a4:78:bc:0d:15: 4f:07:76:1f:1f:6d:c4:93:c7:37:9c:7b:37:79:a5:97:b9:68: 0d:c6:88:0e:5d:a8:36:2d:25:07:0e:73:e0:38:05:12:4e:b0: f1:61:a4:14:1f:db:43:65:78:a1:18:32:56:ab:f9:c2:5c:ab: 70:e3:3e:bc:7e:2e:5e:32:f1:ab:db:85:c1:93:4f:08:33:9c: 12:df:ab:fe -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgISAZq1Cs7B5hLtURe77RemspVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTI0MDg0NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzVmY2E3MzIyOTEzOWNiNmU1OWM5MmI4NmM0MTI2MzkwZWJlNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQdXKiI11qBw3uFD/d3KQl3FPobe dR5KTcnvtGumNhXRLfMux7QnsvrKbx6JVgIGKyg/4K+jRZs5LkX9aNohmSFR4Wiq /fBZaYXDFpK6P5AuxElVwmWP/249JJY7NfoKXHTzX9TA8hm46fnsjniElG1EP9R+ QjJzvstuBJfsau8wGiC5Lc4FSxA9QLz+zRdZ0kJFpTfxD69MaqPJoO8QGwXHmAjW 7FvrNC0NF7tX+RTWEU7nGwbiDzmjKDWA3K0L9lSbQKCg8POVAUctyhOqO2h+CbHf XsUmYsl2Ja23wKYJNOXYA8kvAD96Pi5vskQugLpTkv/yRTfjKSeSnw5kDQIDAQAB o4IDtjCCA7IwHQYDVR0OBBYEFENfynMikTnLblnJK4bEEmOQ6+ZHMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvUTFfS2N5S1JPY3R1V2NrcmhzUVNZNURyNWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBygYIKwYBBQUHAQcBAf8EggG5MIIBtTCCAbEEAgACMIIB qQMFAyoFswADBwAqBhGEABEDBwAqBjXDAQADBwAqCRfBAEoDBwAqCi0GAGYDBwAq DHiCAAIDBwAqDhXHAQEDBwAqDhqDAJkDBwAqDseGASIDBwAqDseHEAADBwAqDvYA ACoDBwAqDxIAABADBwAqDxIGAGYDBwAqDxWEAAYDBwAqDx6AGYYDBwAqDzBGAIUD BwAqDzBH/kgDBwAqDz2AExIDBwAqD30AAQADBwAqD7wEEAQDBQMqD9pAAwUDKg/e QAMHACoP4cATEgMHACoP4ccAdwMHACoP4gIAMwMHACoP4gf9OAMFAyoP50ADBwAq D+fHALQDBwAqD+pEAFUDBwAqD+pErKsDBQMqD+wAAwcAKhBnwgDWAwcAKhBnxQAC AwUDKhBvAAMFAyoQdwADBwAqEqxGAHcDBwAqEqxGAJkDBwAqEuzAABEDBwAqEuzA A+IDBwAqExjFABEDBwAqExjGAQEDBwAqExjGhRIDBQMqE4EAAwcAKhOMhgCIAwcA KhOMhgEKAwcAKhOShQEAAwcAKhPJAAEgAwcAKhPhAAMjAwcAKhPhAgABMA0GCSqG SIb3DQEBCwUAA4IBAQBqrfDyBd7631IgF3JbT0rb/qMzcM91lbU1pxxrl4oYKqKo NHXVvDFBxv82qi37WiuH71/Sc+8SFEWczC97BRZ99nZHN1EyuQqry+OyycLOios9 RGihbWXImFU0ZiqL7bV+oKWAbw7Dqj6Y2dWdyrV+hBdH6dxr2sDxt+ISG7wT2OYB 5/OOaxDf3Inu8WPfqjpgVYe1a2Jnpxf2h9rVEub/1oT44P7ri8Mv8d+yFE12pHi8 DRVPB3YfH23Ek8c3nHs3eaWXuWgNxogOXag2LSUHDnPgOAUSTrDxYaQUH9tDZXih GDJWq/nCXKtw4z68fi5eMvGr24XBk08IM5wS36v+ -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:48 2025 by rpki-client