This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/kq56qkz3yFyhTWTclWQs9GofbW8.roa File: kq56qkz3yFyhTWTclWQs9GofbW8.roa (raw, json) Hash identifier: U2ETgi9N1vdCcSaDvEYZmHRu6NYMtvbYpcr6l8+r5Rg= Subject key identifier: 92:AE:7A:AA:4C:F7:C8:5C:A1:4D:64:DC:95:64:2C:F4:6A:1F:6D:6F Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Certificate serial: 019A8C94DDAEE279F0F55DA3C8C316C87F91 Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/kq56qkz3yFyhTWTclWQs9GofbW8.roa Signing time: Sun 16 Nov 2025 12:12:37 +0000 ROA not before: Sun 16 Nov 2025 12:12:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43309 IP address blocks: 2.56.168.0/24 maxlen: 24 185.234.252.0/24 maxlen: 24 2a0f:ca00::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8c:94:dd:ae:e2:79:f0:f5:5d:a3:c8:c3:16:c8:7f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Validity Not Before: Nov 16 12:12:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=92ae7aaa4cf7c85ca14d64dc95642cf46a1f6d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:72:c6:b3:c8:48:01:68:64:93:64:d3:d7: 99:25:4a:9c:13:c1:f9:74:06:1a:d6:08:9b:02:00: d7:62:3f:6b:c3:9c:75:f2:e4:2a:c2:2e:4b:94:cf: 34:36:db:d8:4f:ce:e5:a1:8d:52:39:f9:3e:c8:35: 53:21:50:a4:96:c5:1b:56:f3:d9:c1:82:34:f6:c8: 15:95:de:e9:2d:e9:35:66:2b:00:5b:5b:d0:81:5a: 28:5a:1b:b8:a8:a2:b4:23:65:c2:6b:18:98:f4:4e: fc:9b:6f:ef:63:dd:87:22:d2:5f:23:bb:0f:b8:3d: 30:59:b9:c8:62:f2:a9:3d:5b:d8:1e:02:a7:9b:4e: 77:e1:60:37:6c:5e:37:08:be:5d:0d:e7:87:94:18: 5e:52:15:a9:d3:49:cf:da:44:f5:1c:c7:ba:f8:92: 00:c5:3a:14:08:ff:a8:b0:f1:e5:1f:93:75:d9:73: cc:4a:d1:89:df:41:a2:ca:22:5a:22:1d:88:42:63: e3:7a:e8:ab:c1:f3:cc:91:7d:67:f0:08:b6:e5:51: 2c:ef:89:32:3b:c4:aa:c5:1f:cf:17:ae:ab:d9:65: 66:ba:f9:9c:82:01:8b:44:b1:3b:34:ec:9c:fb:95: 27:8c:e4:8f:7b:96:8b:f9:73:34:fd:45:d7:0e:5a: 10:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AE:7A:AA:4C:F7:C8:5C:A1:4D:64:DC:95:64:2C:F4:6A:1F:6D:6F X509v3 Authority Key Identifier: keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/kq56qkz3yFyhTWTclWQs9GofbW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.168.0/24 185.234.252.0/24 IPv6: 2a0f:ca00::/33 Signature Algorithm: sha256WithRSAEncryption a9:a7:a1:d5:ce:c8:27:87:cb:31:c1:1c:07:cb:4d:a8:4f:58: 9d:4a:46:8f:58:8b:1f:ea:b5:24:b3:36:59:30:82:7d:4a:72: 89:4d:f4:54:1a:e7:ea:9d:87:29:99:49:65:dc:46:f7:9b:ae: 10:16:dc:9e:7b:ac:ab:fd:73:36:dd:62:1c:2e:a9:4f:47:e9: d8:6b:11:23:f4:99:5d:8a:fd:fc:e4:33:46:e8:ef:bf:28:5a: b6:24:27:08:90:39:70:eb:85:9c:83:55:81:aa:a6:af:2a:cb: b0:2b:b1:a7:b5:5e:2b:3a:ef:de:7c:b5:f0:e5:13:43:1c:d5: 67:ff:a4:eb:ef:37:20:62:59:14:01:11:cd:b3:55:de:d0:5a: 66:b2:59:f4:7b:3e:d7:e1:46:0f:91:e1:b0:82:c6:83:9c:71: e0:56:f1:c1:89:e9:80:29:16:70:c7:ff:8e:56:1a:1e:95:0a: 42:48:ce:c3:d8:ef:d4:72:03:a7:1e:79:f7:df:e7:33:40:01: da:3f:d5:f6:29:33:c6:56:db:87:fe:c1:00:91:ea:58:28:0f: 77:13:24:ad:2a:c6:c0:05:cc:91:b1:48:09:9e:54:91:0e:c7: c0:8e:51:be:43:c5:9c:3f:3d:6b:49:f5:d9:2b:cd:ec:f4:98: 64:4f:8d:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZqMlN2u4nnw9V2jyMMWyH+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4 ZmUzY2EwHhcNMjUxMTE2MTIxMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmFlN2FhYTRjZjdjODVjYTE0ZDY0ZGM5NTY0MmNmNDZhMWY2ZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCdyxrPISAFoZJNk09eZJUqcE8H5 dAYa1gibAgDXYj9rw5x18uQqwi5LlM80NtvYT87loY1SOfk+yDVTIVCklsUbVvPZ wYI09sgVld7pLek1ZisAW1vQgVooWhu4qKK0I2XCaxiY9E78m2/vY92HItJfI7sP uD0wWbnIYvKpPVvYHgKnm0534WA3bF43CL5dDeeHlBheUhWp00nP2kT1HMe6+JIA xToUCP+osPHlH5N12XPMStGJ30GiyiJaIh2IQmPjeuirwfPMkX1n8Ai25VEs74ky O8SqxR/PF66r2WVmuvmcggGLRLE7NOyc+5UnjOSPe5aL+XM0/UXXDloQJQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFJKueqpM98hcoU1k3JVkLPRqH21vMB8GA1UdIwQY MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt MjBhMGQxMzBjNDU2LzEva3E1NnFrejN5RnloVFdUY2xXUXM5R29mYlc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2 LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAAjioAwQA uer8MA4EAgACMAgDBgcqD8oAADANBgkqhkiG9w0BAQsFAAOCAQEAqaeh1c7IJ4fL McEcB8tNqE9YnUpGj1iLH+q1JLM2WTCCfUpyiU30VBrn6p2HKZlJZdxG95uuEBbc nnusq/1zNt1iHC6pT0fp2GsRI/SZXYr9/OQzRujvvyhatiQnCJA5cOuFnINVgaqm ryrLsCuxp7VeKzrv3ny18OUTQxzVZ/+k6+83IGJZFAERzbNV3tBaZrJZ9Hs+1+FG D5HhsILGg5xx4FbxwYnpgCkWcMf/jlYaHpUKQkjOw9jv1HIDpx5599/nM0AB2j/V 9ikzxlbbh/7BAJHqWCgPdxMkrSrGwAXMkbFICZ5UkQ7HwI5RvkPFnD89a0n12SvN 7PSYZE+Nyw== -----END CERTIFICATE-----Generated at Wed Dec 10 16:05:54 2025 by rpki-client