This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/QGLMqaCJPT38Acp6hcxFsfLowlw.roa File: QGLMqaCJPT38Acp6hcxFsfLowlw.roa (raw, json) Hash identifier: 4sijIF9r70OKgj/VQlkAIXGxvo5BA3s2HWewEdphRzg= Subject key identifier: 40:62:CC:A9:A0:89:3D:3D:FC:01:CA:7A:85:CC:45:B1:F2:E8:C2:5C Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B07EA8B75EEB67EBD0E3E477CA1936C91 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/QGLMqaCJPT38Acp6hcxFsfLowlw.roa Signing time: Wed 10 Dec 2025 10:59:30 +0000 ROA not before: Wed 10 Dec 2025 10:59:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210705 IP address blocks: 212.23.214.0/24 maxlen: 24 2a05:9080:3::/48 maxlen: 48 2a05:9080:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ea:8b:75:ee:b6:7e:bd:0e:3e:47:7c:a1:93:6c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 10 10:59:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4062cca9a0893d3dfc01ca7a85cc45b1f2e8c25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:1e:89:bf:a8:fd:0d:05:47:a2:d0:ab:49: 61:b8:c5:5c:a6:1d:6b:f0:8c:48:97:60:f9:b8:c0: 29:e6:52:f2:ad:f0:36:42:87:19:2e:fe:a5:44:62: 01:26:85:fc:ff:b5:29:29:40:0e:5e:a2:99:ea:0e: 72:23:0e:fa:a2:08:6b:7a:fd:fa:7e:38:81:f5:2e: 4f:73:2e:ae:0f:51:a1:cd:a3:0a:7b:28:91:79:08: d5:f1:0e:8c:6c:cf:14:79:f3:85:61:a3:59:d1:41: 2f:95:02:9f:42:a2:24:e8:a8:28:57:fc:22:e2:58: a0:39:b3:98:5d:39:75:fe:bd:22:eb:d2:ce:15:16: 56:e7:57:2c:0f:6c:84:4f:3d:6a:e0:b9:4c:19:1d: 7d:6c:1b:46:79:73:9f:3e:40:52:54:3c:15:83:c0: 93:c8:e2:6a:8f:dd:87:74:fd:0c:c5:ac:4b:e6:bf: 2e:8e:f9:f7:e3:6d:55:50:5c:5f:d7:73:09:99:ae: f1:d8:fe:f5:64:aa:eb:6c:fd:7c:e5:91:6f:65:e0: b4:89:b1:b4:14:e2:1e:df:9f:91:6f:25:31:a2:86: 97:6a:95:39:ee:6b:29:18:f3:43:f3:c9:32:d1:ad: 4c:14:13:8e:be:7c:82:e4:2f:a4:69:47:80:91:a1: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:62:CC:A9:A0:89:3D:3D:FC:01:CA:7A:85:CC:45:B1:F2:E8:C2:5C X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/QGLMqaCJPT38Acp6hcxFsfLowlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.23.214.0/24 IPv6: 2a05:9080:3::/48 2a05:9080:11::/48 Signature Algorithm: sha256WithRSAEncryption c0:5d:ef:f1:0e:e2:b3:7e:75:b8:a9:b7:30:41:92:59:0b:f9: d3:b8:de:85:1d:f6:2b:b3:9c:7d:11:2b:0a:93:27:16:70:31: e4:ff:f6:5a:49:f1:23:c7:54:2c:39:f1:f2:83:e4:34:a5:00: 62:3d:d6:20:00:9d:96:07:48:b3:e5:47:31:bc:5e:7c:48:92: 24:7a:2e:75:59:1e:dd:cb:e6:dd:d3:7d:64:2f:7d:85:13:c6: bc:6d:c8:c7:61:2b:77:ca:c5:bc:87:f2:43:32:43:6e:d2:1f: 4c:b5:0e:aa:d2:d1:64:c4:32:5d:4f:67:69:ca:6b:77:f4:85: da:17:6e:d6:ec:65:85:b7:d2:2a:63:9f:c0:77:30:10:65:49: 82:77:62:0d:38:fc:ab:60:5c:9b:d2:d1:53:77:67:04:f4:b4: b2:4c:04:2e:fc:be:e7:6d:8d:b8:22:4c:85:fe:88:5b:83:25: 42:3f:56:43:69:ad:3c:59:df:77:4d:fe:25:e4:d0:d8:b5:95: d8:8a:42:04:28:90:56:75:0e:a1:69:0a:03:b6:dc:bc:bd:94: 2d:02:68:16:bb:fb:3f:6f:e9:2c:7c:8f:12:8f:6c:5c:73:6e: db:7c:26:25:bf:82:b2:a7:23:ee:2b:b4:8a:88:6f:fa:25:74: 85:3b:21:d1 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZsH6ot17rZ+vQ4+R3yhk2yRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjEwMTA1OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDYyY2NhOWEwODkzZDNkZmMwMWNhN2E4NWNjNDViMWYyZThjMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9ceib+o/Q0FR6LQq0lhuMVcph1r 8IxIl2D5uMAp5lLyrfA2QocZLv6lRGIBJoX8/7UpKUAOXqKZ6g5yIw76oghrev36 fjiB9S5Pcy6uD1GhzaMKeyiReQjV8Q6MbM8UefOFYaNZ0UEvlQKfQqIk6KgoV/wi 4ligObOYXTl1/r0i69LOFRZW51csD2yETz1q4LlMGR19bBtGeXOfPkBSVDwVg8CT yOJqj92HdP0MxaxL5r8ujvn3421VUFxf13MJma7x2P71ZKrrbP185ZFvZeC0ibG0 FOIe35+RbyUxooaXapU57mspGPND88ky0a1MFBOOvnyC5C+kaUeAkaFZpwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFEBizKmgiT09/AHKeoXMRbHy6MJcMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvUUdMTXFhQ0pQVDM4QWNwNmhjeEZzZkxvd2x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQA1BfWMBgE AgACMBIDBwAqBZCAAAMDBwAqBZCAABEwDQYJKoZIhvcNAQELBQADggEBAMBd7/EO 4rN+dbiptzBBklkL+dO43oUd9iuznH0RKwqTJxZwMeT/9lpJ8SPHVCw58fKD5DSl AGI91iAAnZYHSLPlRzG8XnxIkiR6LnVZHt3L5t3TfWQvfYUTxrxtyMdhK3fKxbyH 8kMyQ27SH0y1DqrS0WTEMl1PZ2nKa3f0hdoXbtbsZYW30ipjn8B3MBBlSYJ3Yg04 /KtgXJvS0VN3ZwT0tLJMBC78vudtjbgiTIX+iFuDJUI/VkNprTxZ33dN/iXk0Ni1 ldiKQgQokFZ1DqFpCgO23Ly9lC0CaBa7+z9v6Sx8jxKPbFxzbtt8JiW/grKnI+4r tIqIb/oldIU7IdE= -----END CERTIFICATE-----Generated at Mon Dec 15 06:04:22 2025 by rpki-client