This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/qThv5Dn9-qqsuNIICPACaTpfi2Y.roa File: qThv5Dn9-qqsuNIICPACaTpfi2Y.roa (raw, json) Hash identifier: MxnlHH8jSB1lnRDj8hbwISSVcoLyKx3BOa7K+Kz+tQY= Subject key identifier: A9:38:6F:E4:39:FD:FA:AA:AC:B8:D2:08:08:F0:02:69:3A:5F:8B:66 Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Certificate serial: 019AD98B2D6F8D9029BE807E72B454BDDED4 Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/qThv5Dn9-qqsuNIICPACaTpfi2Y.roa Signing time: Mon 01 Dec 2025 10:52:48 +0000 ROA not before: Mon 01 Dec 2025 10:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44547 IP address blocks: 89.35.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:8b:2d:6f:8d:90:29:be:80:7e:72:b4:54:bd:de:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Validity Not Before: Dec 1 10:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a9386fe439fdfaaaacb8d20808f002693a5f8b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:c2:7e:b4:12:6e:76:cf:84:de:45:fa:a2: af:85:c0:2b:57:20:ec:e5:b1:ef:91:a5:0f:58:38: b1:d2:69:e3:a7:1b:8d:a8:c3:e8:c6:c6:1f:f1:84: 92:08:4a:93:f9:18:a7:ea:54:f6:5c:da:f9:c6:1f: 90:4c:67:24:95:5f:8c:49:a5:dc:3b:5b:26:b7:2c: 8b:b8:9b:45:a7:b7:d7:35:ef:1d:35:74:1e:b4:9b: 28:86:17:69:be:2e:ab:22:2a:b4:fb:15:48:bb:bb: 7b:f4:65:90:1b:c0:23:e3:9a:e0:43:53:e1:a5:14: 3f:a9:d5:15:2f:fd:0c:b9:00:07:bf:09:1b:80:17: 22:53:e9:08:48:7c:6c:6f:37:a9:7b:8e:90:da:1f: 37:1f:9c:f2:63:a9:fd:16:b4:64:46:c8:c0:48:10: 34:fb:0c:ad:58:58:fc:78:5c:83:52:2b:49:d1:b6: 39:b4:71:9d:90:08:54:28:b7:b5:f7:2f:63:53:b9: aa:c8:e5:23:74:c2:02:62:9d:93:aa:73:d8:2a:48: ae:98:42:db:9b:2f:62:46:f8:5b:9d:5a:33:24:3e: 34:5d:b1:d7:13:cf:cf:4c:c2:07:0f:31:b1:37:f3: 70:a4:45:31:1a:b4:6a:7f:01:c3:22:14:c2:3d:2f: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:38:6F:E4:39:FD:FA:AA:AC:B8:D2:08:08:F0:02:69:3A:5F:8B:66 X509v3 Authority Key Identifier: keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/qThv5Dn9-qqsuNIICPACaTpfi2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.52.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:86:c7:ee:12:a2:cc:16:5e:29:b9:e3:ab:b1:82:b5:df:33: 94:b8:b4:0d:6a:0e:a1:83:af:39:ed:57:a9:03:3a:81:4a:5b: 52:75:c0:dc:f1:3e:31:bd:3c:21:d4:dc:3d:cc:bd:63:8d:f6: 7f:3a:be:b0:9d:6d:74:09:19:95:af:63:dc:fa:a6:d9:e1:0a: 3c:4c:9f:8b:c1:65:31:52:8a:2f:0d:17:39:3e:5b:39:55:f8: 45:87:fc:f2:09:d2:d7:c5:bb:e4:e9:8d:89:c2:4d:e5:7a:07: f3:8c:08:f6:d8:13:63:f8:1a:8c:63:b5:a3:1b:99:51:c3:f5: 83:ad:ac:69:1f:85:66:29:13:96:71:4c:98:1e:73:a8:a7:22: 34:33:03:7a:59:ff:75:13:ed:0b:7e:70:0c:c1:94:1e:d2:25: 4d:a8:cc:41:b2:28:1e:52:ab:a9:71:35:0e:23:28:0b:3c:47: ae:40:72:22:aa:0a:0c:27:cc:a5:d9:fd:8a:51:49:28:91:65: 6f:dc:6b:5e:ed:5e:59:f4:df:2f:fd:c8:59:10:3e:9e:7b:6d: 4a:ad:df:d3:8a:24:3c:c4:c8:c1:45:a2:db:03:5d:c3:45:a7: 3c:d1:0e:52:8e:a6:97:21:43:2c:9a:20:64:ee:7d:1c:5e:fc: a1:1e:7c:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZiy1vjZApvoB+crRUvd7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYmM5ZmIzMzEyYTRhYmYxZGRjMjg1MThlNzYwOGUwZWMz Mjc1ZGYwHhcNMjUxMjAxMTA1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTM4NmZlNDM5ZmRmYWFhYWNiOGQyMDgwOGYwMDI2OTNhNWY4YjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGnCfrQSbnbPhN5F+qKvhcArVyDs 5bHvkaUPWDix0mnjpxuNqMPoxsYf8YSSCEqT+Rin6lT2XNr5xh+QTGcklV+MSaXc O1smtyyLuJtFp7fXNe8dNXQetJsohhdpvi6rIiq0+xVIu7t79GWQG8Aj45rgQ1Ph pRQ/qdUVL/0MuQAHvwkbgBciU+kISHxsbzepe46Q2h83H5zyY6n9FrRkRsjASBA0 +wytWFj8eFyDUitJ0bY5tHGdkAhUKLe19y9jU7mqyOUjdMICYp2TqnPYKkiumELb my9iRvhbnVozJD40XbHXE8/PTMIHDzGxN/NwpEUxGrRqfwHDIhTCPS/KHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKk4b+Q5/fqqrLjSCAjwAmk6X4tmMB8GA1UdIwQY MBaAFBq8n7MxKkq/HdwoUY52CODsMnXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2Qt ZDFkNmRlYTk4NzkwLzEvcVRodjVEbjktcXFzdU5JSUNQQUNhVHBmaTJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2QtZDFkNmRlYTk4Nzkw LzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSM0MA0G CSqGSIb3DQEBCwUAA4IBAQAfhsfuEqLMFl4pueOrsYK13zOUuLQNag6hg6857Vep AzqBSltSdcDc8T4xvTwh1Nw9zL1jjfZ/Or6wnW10CRmVr2Pc+qbZ4Qo8TJ+LwWUx UoovDRc5Pls5VfhFh/zyCdLXxbvk6Y2Jwk3legfzjAj22BNj+BqMY7WjG5lRw/WD raxpH4VmKROWcUyYHnOopyI0MwN6Wf91E+0LfnAMwZQe0iVNqMxBsigeUqupcTUO IygLPEeuQHIiqgoMJ8yl2f2KUUkokWVv3Gte7V5Z9N8v/chZED6ee21Krd/TiiQ8 xMjBRaLbA13DRac80Q5SjqaXIUMsmiBk7n0cXvyhHnyU -----END CERTIFICATE-----Generated at Fri Dec 5 17:38:12 2025 by rpki-client