This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/nqxuwNOWEBcBg_suquuqHCXgzIk.roa File: nqxuwNOWEBcBg_suquuqHCXgzIk.roa (raw, json) Hash identifier: l41FOHuACDOAavEW4jpVIC/+gjSMokyDWa6Y9bS/LHQ= Subject key identifier: 9E:AC:6E:C0:D3:96:10:17:01:83:FB:2E:AA:EB:AA:1C:25:E0:CC:89 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019AD8D5E6EEAB2C55C1B6D6F89C5B4EEA23 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/nqxuwNOWEBcBg_suquuqHCXgzIk.roa Signing time: Mon 01 Dec 2025 07:34:48 +0000 ROA not before: Mon 01 Dec 2025 07:34:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.155.242.0/24 maxlen: 24 194.143.206.0/23 maxlen: 24 194.143.207.0/24 maxlen: 24 194.143.221.0/24 maxlen: 24 194.143.223.0/24 maxlen: 24 195.114.196.0/24 maxlen: 24 195.114.197.0/24 maxlen: 24 195.114.198.0/24 maxlen: 24 213.220.7.0/24 maxlen: 24 213.220.11.0/24 maxlen: 24 213.220.13.0/24 maxlen: 24 213.220.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:d5:e6:ee:ab:2c:55:c1:b6:d6:f8:9c:5b:4e:ea:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Dec 1 07:34:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9eac6ec0d39610170183fb2eaaebaa1c25e0cc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:a4:98:6b:0f:fc:9b:4b:51:eb:bb:c0:1a: c9:7f:c2:a8:21:f2:c9:e6:94:8a:9e:09:75:6b:9e: bf:af:22:d2:3e:b6:c8:84:9f:e6:8f:73:3f:fd:9a: ba:75:b4:2a:66:97:2c:b8:b3:23:1a:d9:8b:2b:6a: bd:3b:c1:47:85:5c:a1:f2:a3:68:e7:e9:5d:5a:ac: 4e:ac:b7:4c:55:d0:09:bd:83:f0:9b:01:61:3f:4b: 35:53:5b:3d:61:c5:ba:3c:9d:0f:6a:1b:bf:77:98: 41:60:6e:e0:f5:b2:e1:34:d1:0d:d4:f3:28:59:03: 4a:11:3f:de:e1:16:c7:d3:7a:fe:51:37:c6:86:76: 63:6e:ee:a2:89:0d:22:81:c3:70:f6:16:a1:c2:92: 99:d8:14:f3:0a:0f:0b:64:6c:ef:74:3d:06:39:3c: 41:0b:21:de:48:0a:15:95:96:a0:03:3e:d2:33:ab: 1f:3a:75:00:9d:16:bc:96:d8:c2:0b:fc:f8:e7:17: 45:21:54:cd:6f:a8:88:ff:6f:67:d0:02:82:ba:57: 5b:3a:1d:b2:f1:50:70:80:3a:88:44:49:81:6c:e1: de:22:8a:6a:22:5d:40:c3:95:16:10:09:e2:ba:09: 14:07:0d:ae:4d:b3:8b:3f:e6:74:a6:3c:60:07:21: 6b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AC:6E:C0:D3:96:10:17:01:83:FB:2E:AA:EB:AA:1C:25:E0:CC:89 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/nqxuwNOWEBcBg_suquuqHCXgzIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.242.0/24 194.143.206.0/23 194.143.221.0/24 194.143.223.0/24 195.114.196.0-195.114.198.255 213.220.7.0/24 213.220.11.0/24 213.220.13.0/24 213.220.62.0/24 Signature Algorithm: sha256WithRSAEncryption a2:9a:41:9f:85:26:8c:da:51:9c:fe:3a:41:49:7a:e5:a5:de: ca:da:a5:27:14:a5:3a:f1:15:9c:8b:eb:34:53:03:fb:5f:de: ea:41:68:93:3f:8f:ac:68:f7:30:14:6e:2c:da:d5:4b:a1:44: 6b:7f:6d:c2:51:ca:1b:6c:9f:4a:69:38:84:96:58:c0:21:e9: 5a:ed:30:4c:66:d9:04:58:8d:ce:de:58:ec:1c:bb:ad:4f:b1: ad:c5:e6:f1:83:d9:06:f6:05:5d:26:cf:81:ca:26:23:5e:a9: 02:80:a1:2b:11:a4:22:cf:64:69:9b:70:0a:8f:88:f5:32:c9: cc:07:e9:4e:b5:6d:ff:f5:93:8f:9e:80:d1:b0:5c:86:d4:5e: 40:d2:32:4c:ae:a8:c1:3f:41:ce:df:2e:a6:db:87:00:fc:0c: ef:40:44:1f:d5:e8:11:8c:0d:24:29:b8:d3:61:49:43:f7:33: 84:01:f9:96:48:9a:4f:56:5b:b3:48:9e:d3:ec:e9:f7:b6:72: 39:94:4e:5f:9a:9e:c7:e0:ab:29:18:ac:58:16:c6:47:10:6e: 28:6f:e8:5d:b6:34:10:5d:3f:b8:0a:cb:82:3a:cc:15:e8:bd: a7:df:86:e8:72:e4:b0:b1:cd:93:a7:9a:21:ca:47:41:38:3b: b8:77:9e:b4 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZrY1ebuqyxVwbbW+JxbTuojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMjAxMDczNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWFjNmVjMGQzOTYxMDE3MDE4M2ZiMmVhYWViYWExYzI1ZTBjYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqSkmGsP/JtLUeu7wBrJf8KoIfLJ 5pSKngl1a56/ryLSPrbIhJ/mj3M//Zq6dbQqZpcsuLMjGtmLK2q9O8FHhVyh8qNo 5+ldWqxOrLdMVdAJvYPwmwFhP0s1U1s9YcW6PJ0Pahu/d5hBYG7g9bLhNNEN1PMo WQNKET/e4RbH03r+UTfGhnZjbu6iiQ0igcNw9hahwpKZ2BTzCg8LZGzvdD0GOTxB CyHeSAoVlZagAz7SM6sfOnUAnRa8ltjCC/z45xdFIVTNb6iI/29n0AKCuldbOh2y 8VBwgDqIREmBbOHeIopqIl1Aw5UWEAniugkUBw2uTbOLP+Z0pjxgByFrawIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJ6sbsDTlhAXAYP7Lqrrqhwl4MyJMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvbnF4dXdOT1dFQmNCZ19zdXF1dXFIQ1hneklrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALZvyAwQB wo/OAwQAwo/dAwQAwo/fMAwDBALDcsQDBADDcsYDBADV3AcDBADV3AsDBADV3A0D BADV3D4wDQYJKoZIhvcNAQELBQADggEBAKKaQZ+FJozaUZz+OkFJeuWl3srapScU pTrxFZyL6zRTA/tf3upBaJM/j6xo9zAUbiza1UuhRGt/bcJRyhtsn0ppOISWWMAh 6VrtMExm2QRYjc7eWOwcu61Psa3F5vGD2Qb2BV0mz4HKJiNeqQKAoSsRpCLPZGmb cAqPiPUyycwH6U61bf/1k4+egNGwXIbUXkDSMkyuqME/Qc7fLqbbhwD8DO9ARB/V 6BGMDSQpuNNhSUP3M4QB+ZZImk9WW7NIntPs6fe2cjmUTl+ansfgqykYrFgWxkcQ bihv6F22NBBdP7gKy4I6zBXovaffhuhy5LCxzZOnmiHKR0E4O7h3nrQ= -----END CERTIFICATE-----Generated at Fri Dec 5 17:47:05 2025 by rpki-client