This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/q9UYksE_sHmea6wfEQrfwGgpmwE.roa File: q9UYksE_sHmea6wfEQrfwGgpmwE.roa (raw, json) Hash identifier: 5Bt4JVKOrIwCEEPR6m1sA2phYDt1tPyULZmfxbW9OYQ= Subject key identifier: AB:D5:18:92:C1:3F:B0:79:9E:6B:AC:1F:11:0A:DF:C0:68:29:9B:01 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019A9C1FBF85F6D95EDCB8CBA0B4058F573D Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/q9UYksE_sHmea6wfEQrfwGgpmwE.roa Signing time: Wed 19 Nov 2025 12:38:37 +0000 ROA not before: Wed 19 Nov 2025 12:38:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 93.88.157.0/24 maxlen: 24 93.88.158.0/24 maxlen: 24 152.89.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:1f:bf:85:f6:d9:5e:dc:b8:cb:a0:b4:05:8f:57:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Nov 19 12:38:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=abd51892c13fb0799e6bac1f110adfc068299b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:fa:32:43:cc:5b:ec:ba:f4:a1:e2:0b:cf: 48:1b:19:6b:9e:7e:e9:12:91:6e:7b:f5:a5:bc:5a: b9:be:53:10:53:16:6f:fc:bb:5b:f9:ed:3a:f9:05: 25:20:82:5e:f8:00:51:00:e0:6d:e0:5a:2d:14:39: 41:9e:9f:fd:eb:73:e8:0d:9d:e5:0e:76:ee:11:1e: 53:41:f0:bd:05:19:5d:10:4e:99:ae:c0:ce:47:11: 09:fa:9c:2e:aa:45:2a:a1:1c:37:f2:e0:fb:69:88: ff:70:36:9a:e3:0b:d1:ab:ee:12:8a:b1:d7:47:7b: db:f8:a8:f9:0e:69:b2:39:61:c7:d4:eb:36:04:52: 5d:9a:bb:a3:45:58:c9:3e:63:fb:87:5d:a5:ca:b0: 69:ac:f6:bf:06:c6:9f:2f:fb:47:23:2b:60:89:96: 4e:36:4f:e9:af:e8:43:b2:2b:58:c4:21:40:43:85: 26:ee:2a:01:e0:8f:ca:50:6b:ec:bb:79:17:cc:70: af:d8:d2:73:25:ba:da:9e:9a:d0:12:e2:48:2e:9a: 31:16:af:73:dd:93:11:f8:09:26:4a:8d:54:2f:96: 67:c1:1e:14:65:c8:98:1b:3d:b0:db:8b:a4:cb:23: 1b:04:09:42:a2:a1:b3:0e:c4:e0:89:b9:0a:1b:f7: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:18:92:C1:3F:B0:79:9E:6B:AC:1F:11:0A:DF:C0:68:29:9B:01 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/q9UYksE_sHmea6wfEQrfwGgpmwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.157.0-93.88.158.255 152.89.87.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:9f:ba:17:e5:c3:ef:a8:8c:51:ef:30:52:e3:b7:ea:1b:92: 32:13:1b:41:e2:68:69:b8:02:d3:3c:e5:bf:51:d9:48:6e:02: e3:60:d6:a9:7a:8b:88:35:38:3b:ac:79:99:c2:fb:06:58:73: c3:d5:8d:3a:0c:ad:13:78:06:9f:25:37:64:5e:d5:53:4b:7c: 1d:49:84:63:8b:25:15:87:1f:4a:7f:d0:f3:3e:1b:b6:85:8d: c5:d0:f3:25:e3:0d:66:f6:57:c6:6f:c8:55:3c:44:c5:cd:ce: 4b:27:14:ae:65:c7:fd:39:72:56:50:95:5b:17:0c:da:e8:63: a4:34:65:ba:4b:30:9a:bb:f0:f0:27:f4:9b:71:ce:87:4a:d7: 3a:c9:74:5f:58:27:4a:eb:f6:7e:5c:5c:c0:5f:09:ac:b8:07: 10:12:03:ec:85:a7:18:32:6b:af:0e:61:4a:42:57:c4:5e:23: 1c:aa:bd:a8:6f:64:cb:df:00:7f:6b:3d:1b:39:48:96:e6:be: 2b:cb:dc:60:ce:44:29:63:a5:07:74:86:c8:2c:53:45:f1:50: 31:9e:52:40:da:d1:4f:a0:fa:dc:3a:b4:3b:5f:d1:90:8a:e8: d6:bc:51:38:94:71:14:d9:ea:5c:d9:82:6d:c0:23:05:76:14: 06:0e:f7:39 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZqcH7+F9tle3LjLoLQFj1c9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUxMTE5MTIzODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmQ1MTg5MmMxM2ZiMDc5OWU2YmFjMWYxMTBhZGZjMDY4Mjk5YjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPP6MkPMW+y69KHiC89IGxlrnn7p EpFue/WlvFq5vlMQUxZv/Ltb+e06+QUlIIJe+ABRAOBt4FotFDlBnp/963PoDZ3l DnbuER5TQfC9BRldEE6ZrsDORxEJ+pwuqkUqoRw38uD7aYj/cDaa4wvRq+4SirHX R3vb+Kj5DmmyOWHH1Os2BFJdmrujRVjJPmP7h12lyrBprPa/BsafL/tHIytgiZZO Nk/pr+hDsitYxCFAQ4Um7ioB4I/KUGvsu3kXzHCv2NJzJbranprQEuJILpoxFq9z 3ZMR+AkmSo1UL5ZnwR4UZciYGz2w24ukyyMbBAlCoqGzDsTgibkKG/e6HQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKvVGJLBP7B5nmusHxEK38BoKZsBMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvcTlVWWtzRV9zSG1lYTZ3ZkVRcmZ3R2dwbXdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABdWJ0D BABdWJ4DBACYWVcwDQYJKoZIhvcNAQELBQADggEBAC2fuhflw++ojFHvMFLjt+ob kjITG0HiaGm4AtM85b9R2UhuAuNg1ql6i4g1ODuseZnC+wZYc8PVjToMrRN4Bp8l N2Re1VNLfB1JhGOLJRWHH0p/0PM+G7aFjcXQ8yXjDWb2V8ZvyFU8RMXNzksnFK5l x/05clZQlVsXDNroY6Q0ZbpLMJq78PAn9JtxzodK1zrJdF9YJ0rr9n5cXMBfCay4 BxASA+yFpxgya68OYUpCV8ReIxyqvahvZMvfAH9rPRs5SJbmvivL3GDORCljpQd0 hsgsU0XxUDGeUkDa0U+g+tw6tDtf0ZCK6Na8UTiUcRTZ6lzZgm3AIwV2FAYO9zk= -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:53 2025 by rpki-client