This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/qOUiptvnquwLum7BmuZWax2v-e8.roa File: qOUiptvnquwLum7BmuZWax2v-e8.roa (raw, json) Hash identifier: jmPVQ2WH4XMTQXLE07r7foOrUdpp6hND+pptpQWP7JQ= Subject key identifier: A8:E5:22:A6:DB:E7:AA:EC:0B:BA:6E:C1:9A:E6:56:6B:1D:AF:F9:EF Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Certificate serial: 019B039A6A0A53AA380DC07FB4104315F58A Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/qOUiptvnquwLum7BmuZWax2v-e8.roa Signing time: Tue 09 Dec 2025 14:53:29 +0000 ROA not before: Tue 09 Dec 2025 14:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207489 IP address blocks: 194.76.145.0/24 maxlen: 24 194.76.149.0/24 maxlen: 24 194.76.150.0/24 maxlen: 24 2a0f:ae40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:9a:6a:0a:53:aa:38:0d:c0:7f:b4:10:43:15:f5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Validity Not Before: Dec 9 14:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a8e522a6dbe7aaec0bba6ec19ae6566b1daff9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:cb:92:f8:a6:1b:a7:a3:74:68:73:23:d6: 4c:38:87:50:37:c7:33:db:51:ff:1a:a2:c0:55:07: db:af:40:27:4c:13:e9:9b:c8:aa:75:1c:9d:95:42: 23:dc:1b:fc:22:f2:15:70:6e:44:06:26:6b:38:59: a9:d1:d0:c3:e0:24:20:72:eb:6b:23:22:7a:fc:0d: e3:8c:5f:2e:4f:90:7e:8e:9a:fc:18:0b:60:d0:58: 27:d4:b6:7a:55:95:3b:bb:ed:d8:21:0b:b5:48:11: b9:14:64:3a:d6:2c:61:22:e8:d8:63:5c:13:d5:91: 70:90:cd:51:01:ac:41:a2:5f:83:ee:78:b3:ed:70: f2:c4:a0:56:d3:90:4b:33:d9:25:00:f5:ac:6e:12: 60:53:52:ac:4a:42:3b:2a:31:7d:07:e9:1f:bd:7a: 95:07:49:e9:d1:c5:55:24:8d:7b:16:4e:bd:a1:61: c0:f9:d0:ce:79:53:6d:30:3a:47:84:96:73:e3:8c: 15:e7:88:03:96:ca:28:db:64:5d:90:2c:da:ff:de: fe:8c:5d:e0:5c:4b:b6:6f:a9:34:e1:82:ee:30:32: 60:33:27:18:6b:79:55:39:0d:a6:cb:c4:52:4c:ea: 19:e3:f7:43:6c:f7:9f:00:5d:ef:ae:a3:63:a2:b0: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E5:22:A6:DB:E7:AA:EC:0B:BA:6E:C1:9A:E6:56:6B:1D:AF:F9:EF X509v3 Authority Key Identifier: keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/qOUiptvnquwLum7BmuZWax2v-e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.145.0/24 194.76.149.0-194.76.150.255 IPv6: 2a0f:ae40::/32 Signature Algorithm: sha256WithRSAEncryption 46:90:d3:d1:84:6e:5b:7a:20:51:9e:7c:b7:07:7c:ba:3d:7f: c9:13:51:be:9e:dc:d7:84:4e:1f:13:e3:47:46:22:ac:bd:e6: 62:ea:ed:05:44:f1:64:4e:c5:e6:f4:b9:cb:87:5c:e7:43:ca: d1:d1:00:6d:2d:e2:63:5e:1f:9a:31:09:9e:d1:cb:21:90:c3: 63:f4:65:a1:2d:02:66:f3:7b:b5:3e:7a:8b:a3:cc:00:09:2b: 17:ea:2d:82:41:39:9a:e1:f5:52:00:4b:3d:ec:84:5c:1f:52: 11:10:e7:ba:15:d2:ad:2a:a0:f1:9a:29:26:79:a6:67:43:80: 8b:a4:cd:9f:58:07:bf:b3:7b:d2:a1:aa:8d:c8:75:f0:1d:84: d5:24:ca:c8:51:43:d3:f1:17:ff:45:ac:5d:ad:12:ad:18:16: 2b:c3:1c:bc:8d:da:1e:9b:fa:71:6a:08:40:ae:6f:4f:84:25: f3:fa:f1:f4:0f:cd:81:87:65:1f:2c:65:e8:94:6b:ea:bc:5c: e3:eb:8a:c6:c3:38:87:be:28:3d:9b:29:85:34:a3:50:82:c7: 1f:21:d2:2f:2a:de:e1:12:e7:d5:aa:37:75:b4:f5:e8:27:24: 9d:fe:e4:eb:be:04:c7:ce:24:b3:34:d7:16:c2:4c:23:56:15: 7e:30:c2:fa -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZsDmmoKU6o4DcB/tBBDFfWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjdkYmU2YWM3NTVhOTA2M2MzNjBiMTUyNWU4NDRmZDJh NTdiOTMwHhcNMjUxMjA5MTQ1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGU1MjJhNmRiZTdhYWVjMGJiYTZlYzE5YWU2NTY2YjFkYWZmOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoALLkvimG6ejdGhzI9ZMOIdQN8cz 21H/GqLAVQfbr0AnTBPpm8iqdRydlUIj3Bv8IvIVcG5EBiZrOFmp0dDD4CQgcutr IyJ6/A3jjF8uT5B+jpr8GAtg0Fgn1LZ6VZU7u+3YIQu1SBG5FGQ61ixhIujYY1wT 1ZFwkM1RAaxBol+D7niz7XDyxKBW05BLM9klAPWsbhJgU1KsSkI7KjF9B+kfvXqV B0np0cVVJI17Fk69oWHA+dDOeVNtMDpHhJZz44wV54gDlsoo22RdkCza/97+jF3g XEu2b6k04YLuMDJgMycYa3lVOQ2my8RSTOoZ4/dDbPefAF3vrqNjorA1mQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFKjlIqbb56rsC7puwZrmVmsdr/nvMB8GA1UdIwQY MBaAFORn2+asdVqQY8NgsVJehE/SpXuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYt ZWNlNTc3ZTMwN2FkLzEvcU9VaXB0dm5xdXdMdW03Qm11WldheDJ2LWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYtZWNlNTc3ZTMwN2Fk LzEvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQAwkyRMAwD BADCTJUDBADCTJYwDQQCAAIwBwMFACoPrkAwDQYJKoZIhvcNAQELBQADggEBAEaQ 09GEblt6IFGefLcHfLo9f8kTUb6e3NeETh8T40dGIqy95mLq7QVE8WROxeb0ucuH XOdDytHRAG0t4mNeH5oxCZ7RyyGQw2P0ZaEtAmbze7U+eoujzAAJKxfqLYJBOZrh 9VIASz3shFwfUhEQ57oV0q0qoPGaKSZ5pmdDgIukzZ9YB7+ze9Khqo3IdfAdhNUk yshRQ9PxF/9FrF2tEq0YFivDHLyN2h6b+nFqCECub0+EJfP68fQPzYGHZR8sZeiU a+q8XOPrisbDOIe+KD2bKYU0o1CCxx8h0i8q3uES59WqN3W09egnJJ3+5Ou+BMfO JLM01xbCTCNWFX4wwvo= -----END CERTIFICATE-----Generated at Mon Dec 15 05:52:43 2025 by rpki-client