This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/cQH95dkte5Usdju-IQ199DJqvjY.roa File: cQH95dkte5Usdju-IQ199DJqvjY.roa (raw, json) Hash identifier: 7+1NXHOiz3SkJ2u53PJnA3DPJ+3khS8O93na/I4cju8= Subject key identifier: 71:01:FD:E5:D9:2D:7B:95:2C:76:3B:BE:21:0D:7D:F4:32:6A:BE:36 Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d Certificate serial: 019A5E6DFBF610AB286A4E9E7B8BB48F7551 Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/cQH95dkte5Usdju-IQ199DJqvjY.roa Signing time: Fri 07 Nov 2025 13:07:37 +0000 ROA not before: Fri 07 Nov 2025 13:07:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51765 IP address blocks: 164.138.0.0/22 maxlen: 24 164.138.4.0/22 maxlen: 24 164.138.8.0/22 maxlen: 24 164.138.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5e:6d:fb:f6:10:ab:28:6a:4e:9e:7b:8b:b4:8f:75:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d Validity Not Before: Nov 7 13:07:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7101fde5d92d7b952c763bbe210d7df4326abe36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:e6:de:2a:39:d6:06:05:5a:36:d2:93:65: 70:3d:0b:4e:a4:15:c9:74:8a:57:ab:7b:cc:74:54: 40:8f:f8:a5:c3:69:9c:05:9d:de:e2:c2:0d:6b:1c: 3b:9c:12:0a:d8:32:cd:d9:7a:89:04:52:03:a9:e8: 98:cf:3d:07:6f:76:92:0a:ca:a6:e1:30:99:e2:1d: d1:63:aa:87:f9:a3:6d:d7:b2:ea:fb:57:6a:45:91: 88:51:2d:b4:2a:ec:bd:d9:cc:a7:1c:f2:33:04:1f: 52:b0:8d:da:9f:3c:cf:09:65:bc:eb:91:9e:d8:3b: 9c:40:68:d4:d0:e0:1e:b4:af:bb:36:31:a8:81:2b: c6:35:b1:82:f0:5f:95:65:99:b6:0a:5d:81:19:a4: 82:6a:f6:08:46:c1:29:a3:6c:66:f2:72:22:19:1f: 33:80:86:9a:1c:cc:5c:b7:77:aa:f8:02:c7:0b:e1: e8:c6:a9:a9:5b:8f:94:9b:4f:57:d9:d4:9d:ca:d9: ff:55:8b:d2:1c:85:72:ee:30:24:73:29:47:04:a5: 69:9a:a9:ab:3c:68:a6:38:19:b9:a7:94:78:80:de: 88:2c:b8:ea:1f:0f:92:ad:63:3e:17:f0:95:3f:9a: 54:19:2a:43:ef:23:59:e1:70:3b:43:54:5a:71:d6: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:01:FD:E5:D9:2D:7B:95:2C:76:3B:BE:21:0D:7D:F4:32:6A:BE:36 X509v3 Authority Key Identifier: keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/cQH95dkte5Usdju-IQ199DJqvjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.0.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:f9:44:41:37:06:79:c3:08:80:25:fb:5d:ca:be:39:77:77: 7a:b2:1c:b9:5b:9b:21:86:46:6a:71:47:11:2c:5b:ca:c2:52: 83:0a:dd:02:c4:8f:52:25:17:cf:6c:13:d6:59:6e:2a:ee:43: 20:ca:3c:7a:d0:9b:80:16:35:9a:47:16:85:a5:b1:1e:eb:f7: c0:8c:43:9f:4d:ff:a4:4f:9b:43:3f:21:b9:09:cc:73:e0:d7: 50:65:7d:d5:bb:7c:f0:7f:0e:65:f7:5e:57:4e:0c:e5:81:9e: 70:da:b7:db:e7:fd:72:99:02:6b:a0:12:7e:62:7c:bc:1e:12: e1:31:50:95:6e:b7:65:0a:5d:32:55:58:dc:ea:48:dd:cf:29: 8e:cb:2b:a3:86:cb:09:44:20:30:82:56:66:68:89:5f:76:25: d9:89:73:d4:a9:56:c2:22:59:dd:b5:2f:eb:78:93:09:fb:3b: 7c:3c:05:85:22:a5:ce:36:91:79:c5:96:33:73:45:82:9a:0d: 49:4b:d6:69:cb:91:9d:d9:72:ba:e5:32:7f:49:a4:a2:d1:61: 1e:1c:c5:75:34:91:e1:2d:3d:2b:d8:72:3f:ff:64:53:a3:4a: 97:c5:3b:ad:1a:81:03:6a:b0:7e:25:e6:4a:9c:51:a4:b4:19: cf:b1:f8:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpebfv2EKsoak6ee4u0j3VRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj NzcwMWQwHhcNMjUxMTA3MTMwNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTAxZmRlNWQ5MmQ3Yjk1MmM3NjNiYmUyMTBkN2RmNDMyNmFiZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLHm3io51gYFWjbSk2VwPQtOpBXJ dIpXq3vMdFRAj/ilw2mcBZ3e4sINaxw7nBIK2DLN2XqJBFIDqeiYzz0Hb3aSCsqm 4TCZ4h3RY6qH+aNt17Lq+1dqRZGIUS20Kuy92cynHPIzBB9SsI3anzzPCWW865Ge 2DucQGjU0OAetK+7NjGogSvGNbGC8F+VZZm2Cl2BGaSCavYIRsEpo2xm8nIiGR8z gIaaHMxct3eq+ALHC+HoxqmpW4+Um09X2dSdytn/VYvSHIVy7jAkcylHBKVpmqmr PGimOBm5p5R4gN6ILLjqHw+SrWM+F/CVP5pUGSpD7yNZ4XA7Q1RacdZCLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEB/eXZLXuVLHY7viENffQyar42MB8GA1UdIwQY MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt NmRmZTBmN2Q1M2JkLzEvY1FIOTVka3RlNVVzZGp1LUlRMTk5REpxdmpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpIoAMA0G CSqGSIb3DQEBCwUAA4IBAQAL+URBNwZ5wwiAJftdyr45d3d6shy5W5shhkZqcUcR LFvKwlKDCt0CxI9SJRfPbBPWWW4q7kMgyjx60JuAFjWaRxaFpbEe6/fAjEOfTf+k T5tDPyG5Ccxz4NdQZX3Vu3zwfw5l915XTgzlgZ5w2rfb5/1ymQJroBJ+Yny8HhLh MVCVbrdlCl0yVVjc6kjdzymOyyujhssJRCAwglZmaIlfdiXZiXPUqVbCIlndtS/r eJMJ+zt8PAWFIqXONpF5xZYzc0WCmg1JS9Zpy5Gd2XK65TJ/SaSi0WEeHMV1NJHh LT0r2HI//2RTo0qXxTutGoEDarB+JeZKnFGktBnPsfiV -----END CERTIFICATE-----Generated at Fri Dec 5 19:47:26 2025 by rpki-client