This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/QloRDIKTEZhfXHaICtLsAB5855M.roa File: QloRDIKTEZhfXHaICtLsAB5855M.roa (raw, json) Hash identifier: 6dN32+ZxNcv1OwuColAYRgerHnHygcTXioeLI2iN5kA= Subject key identifier: 42:5A:11:0C:82:93:11:98:5F:5C:76:88:0A:D2:EC:00:1E:7C:E7:93 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B2D4C8C44B887D1A91119D8E7DDF77F61 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/QloRDIKTEZhfXHaICtLsAB5855M.roa Signing time: Wed 17 Dec 2025 17:12:29 +0000 ROA not before: Wed 17 Dec 2025 17:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198584 IP address blocks: 185.113.10.0/24 maxlen: 24 195.254.165.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:4c:8c:44:b8:87:d1:a9:11:19:d8:e7:dd:f7:7f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 17 17:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=425a110c829311985f5c76880ad2ec001e7ce793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:d5:87:66:94:66:3f:7e:dd:28:05:05:5c: bd:95:06:c2:9c:24:81:5e:d1:23:37:c6:55:c1:68: f0:f2:c3:2b:86:f1:5a:8b:ba:b2:12:1f:5d:84:a6: 79:88:fc:5e:33:8c:5e:c3:7a:24:b2:f7:66:ee:4d: bd:14:61:47:16:27:6e:00:07:45:b7:e1:dd:01:7b: 8a:b7:a7:3a:b9:fc:a6:61:04:78:13:d4:b2:bf:fc: 8e:bb:8e:21:77:c5:ef:d9:b2:f4:3a:13:10:ae:d2: 6c:5f:16:9c:1c:8a:60:59:16:94:ed:27:b6:e8:5d: 68:6a:32:ad:97:12:31:15:71:9d:43:18:07:45:f2: 88:f4:42:c0:e6:b4:56:b2:a1:5d:4b:ae:94:9f:01: c7:b9:bb:98:ab:30:ec:49:0d:4d:5b:bc:dc:af:d6: a8:bf:5d:7b:a2:15:64:40:49:2d:ad:4c:31:6d:91: 91:34:e1:71:d5:d5:ed:a0:fd:3c:9b:37:98:bb:28: c0:3d:d9:a6:f3:e7:a4:62:8a:7c:8e:b4:0b:99:ad: 35:17:ca:9a:e9:20:1b:64:e1:4c:42:bd:2f:63:e2: be:44:e4:18:b6:1b:de:10:85:2f:fd:4f:3e:02:ce: 68:0c:55:ef:16:f4:97:f5:bd:b6:c4:de:54:a6:b0: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5A:11:0C:82:93:11:98:5F:5C:76:88:0A:D2:EC:00:1E:7C:E7:93 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/QloRDIKTEZhfXHaICtLsAB5855M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.10.0/24 195.254.165.0/24 IPv6: 2a05:9080:5::/48 Signature Algorithm: sha256WithRSAEncryption 6a:00:78:68:03:e8:ff:bd:5b:a0:7b:f6:2e:4b:29:86:e5:ed: ee:07:33:c5:63:f0:ec:66:4f:88:4c:e5:49:7a:4d:b3:38:34: 44:97:55:7e:f2:d3:d6:3b:4e:54:57:e1:b2:10:7f:46:9e:31: 72:8c:31:cd:f7:31:86:42:f5:29:14:ba:f0:90:e0:49:fd:71: 3c:4b:26:2e:99:41:bc:7e:12:6f:fc:a0:b1:0e:27:48:cc:cd: 35:12:43:ae:bf:45:72:40:56:93:5e:d7:22:49:2c:02:4e:ad: 93:6a:a9:66:6b:f3:5e:25:9f:6e:eb:13:b3:e8:ed:1f:39:f5: 18:c0:f9:40:39:cc:f2:9b:1a:52:e3:04:2a:7d:f1:6c:1b:94: b4:75:da:dd:f0:30:46:60:cc:a4:a1:d0:74:c1:a2:0d:72:c8: 73:ab:d6:d7:83:b5:48:4d:66:d4:9d:4c:d9:07:00:cc:ed:9d: 6d:90:ac:74:fa:6d:c3:f6:10:c0:94:b9:06:36:b5:63:e9:c3: dc:2e:82:a3:ea:a8:6b:70:ec:d0:c1:ac:a0:43:88:50:f6:b3: 2a:2c:c9:d0:f7:b1:1d:f2:8b:b4:92:eb:af:b7:79:87:93:c4: e2:c0:f2:96:e2:ee:f0:68:50:d4:50:32:72:1c:bb:0e:46:9a: b8:95:16:0a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZstTIxEuIfRqREZ2Ofd939hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjE3MTcxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjVhMTEwYzgyOTMxMTk4NWY1Yzc2ODgwYWQyZWMwMDFlN2NlNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAHVh2aUZj9+3SgFBVy9lQbCnCSB XtEjN8ZVwWjw8sMrhvFai7qyEh9dhKZ5iPxeM4xew3oksvdm7k29FGFHFiduAAdF t+HdAXuKt6c6ufymYQR4E9Syv/yOu44hd8Xv2bL0OhMQrtJsXxacHIpgWRaU7Se2 6F1oajKtlxIxFXGdQxgHRfKI9ELA5rRWsqFdS66UnwHHubuYqzDsSQ1NW7zcr9ao v117ohVkQEktrUwxbZGRNOFx1dXtoP08mzeYuyjAPdmm8+ekYop8jrQLma01F8qa 6SAbZOFMQr0vY+K+ROQYthveEIUv/U8+As5oDFXvFvSX9b22xN5UprChBQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEJaEQyCkxGYX1x2iArS7AAefOeTMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvUWxvUkRJS1RFWmhmWEhhSUN0THNBQjU4NTVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuXEKAwQA w/6lMA8EAgACMAkDBwAqBZCAAAUwDQYJKoZIhvcNAQELBQADggEBAGoAeGgD6P+9 W6B79i5LKYbl7e4HM8Vj8OxmT4hM5Ul6TbM4NESXVX7y09Y7TlRX4bIQf0aeMXKM Mc33MYZC9SkUuvCQ4En9cTxLJi6ZQbx+Em/8oLEOJ0jMzTUSQ66/RXJAVpNe1yJJ LAJOrZNqqWZr814ln27rE7Po7R859RjA+UA5zPKbGlLjBCp98WwblLR12t3wMEZg zKSh0HTBog1yyHOr1teDtUhNZtSdTNkHAMztnW2QrHT6bcP2EMCUuQY2tWPpw9wu gqPqqGtw7NDBrKBDiFD2syosydD3sR3yi7SS66+3eYeTxOLA8pbi7vBoUNRQMnIc uw5GmriVFgo= -----END CERTIFICATE-----Generated at Thu Dec 18 18:50:07 2025 by rpki-client