This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/1-VQIXd1Dv8dYEwumNhf_Kai60iI.roa File: 1-VQIXd1Dv8dYEwumNhf_Kai60iI.roa (raw, json) Hash identifier: pQJXttwx4tIQGMrCRPK48DSAm3VpqwW1cLlhoOT+fEw= Subject key identifier: F9:54:08:5D:DD:43:BF:C7:58:13:0B:A6:36:17:FF:29:A8:BA:D2:22 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B21A4D701021366183EE5B3FF3D06A313 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/1-VQIXd1Dv8dYEwumNhf_Kai60iI.roa Signing time: Mon 15 Dec 2025 10:53:29 +0000 ROA not before: Mon 15 Dec 2025 10:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152394 IP address blocks: 92.62.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:a4:d7:01:02:13:66:18:3e:e5:b3:ff:3d:06:a3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 15 10:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f954085ddd43bfc758130ba63617ff29a8bad222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d3:1d:14:91:c7:6b:4d:43:44:88:f3:09:1c: ea:36:7c:06:bc:fc:da:09:40:52:fb:5c:38:bf:0c: 93:af:01:03:f5:39:0b:72:c4:7a:bc:e2:a3:94:a1: e4:65:73:b0:45:20:bb:a7:be:99:bd:30:4a:62:4c: ff:b5:79:07:9d:2a:37:79:65:fc:8c:47:e1:e8:ea: 84:4a:b8:5c:87:14:30:62:59:85:47:cb:a4:83:16: e5:a8:8e:cc:f3:7b:7d:3c:39:dc:19:2b:32:49:79: be:7d:3c:77:48:dd:63:8c:9c:16:b3:26:63:db:d5: 87:6f:40:a8:96:6a:84:15:53:b1:1d:f9:41:5b:9b: b6:12:30:ca:34:95:9c:5e:1d:10:b7:b4:c4:5d:b2: f3:1e:38:ce:f9:79:f5:09:15:67:73:bb:70:da:b6: d1:f8:2f:f9:9e:a3:7d:0f:d2:3c:2f:d0:14:36:5f: 19:a0:bb:61:7f:d8:3c:46:43:af:0e:55:c5:dd:ca: 59:14:4e:7f:ba:83:1a:e6:87:00:61:5f:af:e5:a8: 07:70:cf:72:19:08:5b:61:e2:7a:cc:ed:16:40:84: 87:99:c8:f6:c0:22:65:c7:3e:3a:d9:a2:5f:9f:16: 13:c7:fb:f5:5e:c7:7a:e3:30:97:5c:5e:db:40:07: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:54:08:5D:DD:43:BF:C7:58:13:0B:A6:36:17:FF:29:A8:BA:D2:22 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/1-VQIXd1Dv8dYEwumNhf_Kai60iI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.249.0/24 Signature Algorithm: sha256WithRSAEncryption 02:54:2e:22:59:4d:86:63:dd:e3:64:52:dc:e1:fa:b1:ca:f1: 7c:1e:ed:4f:30:62:4f:e4:96:34:bd:48:64:fe:bd:0d:f4:5b: bb:d7:20:82:fb:bd:3d:44:dc:d3:23:89:04:a4:af:50:7e:07: 93:15:77:76:6c:9e:0f:d6:ce:e6:37:dc:49:b5:bf:3f:2f:07: 73:00:e0:22:62:8d:e9:8a:2f:3d:75:e3:51:71:db:a8:c0:72: 5e:e8:57:65:10:16:56:8d:fc:d1:61:4f:3c:31:a1:ec:d0:80: e2:40:8d:97:67:e9:6c:a7:a8:b5:1d:ea:85:c7:74:f0:36:8a: ac:4d:31:e1:fb:18:40:45:d8:b8:63:43:ac:cb:77:e8:08:d1: 52:77:e1:32:e3:0a:eb:cb:c6:1d:f5:cb:cb:56:8a:9e:2b:34: 88:e5:3d:30:49:12:dc:65:7b:0c:24:a0:0c:f2:64:e1:62:7b: 6d:0b:ef:e7:bd:d9:22:ac:eb:0b:aa:8a:41:47:42:e6:c8:11: c5:d8:5a:70:5b:c3:b6:32:4a:6f:f4:a4:76:59:6d:7a:61:68: 59:4c:59:eb:8b:3d:b6:82:59:45:cd:83:21:47:aa:62:d8:91: cb:65:30:e9:16:c6:fd:0d:c5:bf:c0:33:49:64:07:cf:5c:42: 13:cc:bb:4e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZshpNcBAhNmGD7ls/89BqMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjE1MTA1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTU0MDg1ZGRkNDNiZmM3NTgxMzBiYTYzNjE3ZmYyOWE4YmFkMjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9MdFJHHa01DRIjzCRzqNnwGvPza CUBS+1w4vwyTrwED9TkLcsR6vOKjlKHkZXOwRSC7p76ZvTBKYkz/tXkHnSo3eWX8 jEfh6OqESrhchxQwYlmFR8ukgxblqI7M83t9PDncGSsySXm+fTx3SN1jjJwWsyZj 29WHb0ColmqEFVOxHflBW5u2EjDKNJWcXh0Qt7TEXbLzHjjO+Xn1CRVnc7tw2rbR +C/5nqN9D9I8L9AUNl8ZoLthf9g8RkOvDlXF3cpZFE5/uoMa5ocAYV+v5agHcM9y GQhbYeJ6zO0WQISHmcj2wCJlxz462aJfnxYTx/v1Xsd64zCXXF7bQAdjgQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlUCF3dQ7/HWBMLpjYX/ymoutIiMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvMS1WUUlYZDFEdjhkWUV3dW1OaGZfS2FpNjBpSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDcvZTVlYTk4LTk2MDEtNGFkZC1hN2Y4LTRmNTdkOWNmNWNh YS8xL0tkTGFfeHhidGhvS3lMUEs2dFM0b2Zvb1RROC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFw++TAN BgkqhkiG9w0BAQsFAAOCAQEAAlQuIllNhmPd42RS3OH6scrxfB7tTzBiT+SWNL1I ZP69DfRbu9cggvu9PUTc0yOJBKSvUH4HkxV3dmyeD9bO5jfcSbW/Py8HcwDgImKN 6YovPXXjUXHbqMByXuhXZRAWVo380WFPPDGh7NCA4kCNl2fpbKeotR3qhcd08DaK rE0x4fsYQEXYuGNDrMt36AjRUnfhMuMK68vGHfXLy1aKnis0iOU9MEkS3GV7DCSg DPJk4WJ7bQvv573ZIqzrC6qKQUdC5sgRxdhacFvDtjJKb/SkdlltemFoWUxZ64s9 toJZRc2DIUeqYtiRy2Uw6RbG/Q3Fv8AzSWQHz1xCE8y7Tg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:06 2025 by rpki-client