This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/CqIfBd5YIIh4t0c6bt4NkpiXtoI.roa File: CqIfBd5YIIh4t0c6bt4NkpiXtoI.roa (raw, json) Hash identifier: vcWmbcMAYQNlXeSuizcIlnlvUxtUyI3AmiP87aetGSc= Subject key identifier: 0A:A2:1F:05:DE:58:20:88:78:B7:47:3A:6E:DE:0D:92:98:97:B6:82 Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Certificate serial: 019B04326309C1307A904D4382824258E591 Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/CqIfBd5YIIh4t0c6bt4NkpiXtoI.roa Signing time: Tue 09 Dec 2025 17:39:29 +0000 ROA not before: Tue 09 Dec 2025 17:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202032 IP address blocks: 185.54.80.0/22 maxlen: 24 2a02:4460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:32:63:09:c1:30:7a:90:4d:43:82:82:42:58:e5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Validity Not Before: Dec 9 17:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0aa21f05de58208878b7473a6ede0d929897b682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:5e:98:d6:cc:2b:a2:75:ab:3c:a0:8e:f4: 6f:ab:95:6b:ad:6d:f2:c1:c3:37:b9:eb:34:3f:0b: 54:35:4a:62:93:58:d0:c8:03:58:77:86:b7:c9:e9: ab:98:5f:68:e4:a5:03:f3:04:89:95:b0:35:f8:97: 97:7b:de:2b:2b:dd:5f:ba:50:36:44:9e:df:43:42: 73:e6:5d:5b:6c:ee:af:8b:76:95:af:21:44:fe:0c: 08:33:aa:fe:bc:bd:1d:64:0e:a6:3c:c8:77:78:49: 82:7c:27:fc:e9:9b:4d:44:18:9a:b5:32:7e:00:c0: 76:67:61:e8:07:29:13:16:fb:fd:01:e4:db:7b:df: 40:03:69:c9:98:0d:1d:84:40:51:b5:1d:22:0a:5e: 90:08:f0:20:cf:be:71:06:96:10:c0:c3:3c:b5:ab: 47:e7:7a:72:df:99:ff:e3:6b:23:ed:65:78:d2:5a: e8:2a:3e:e5:86:b6:11:1c:43:8f:90:6e:ea:3a:85: d5:b9:f0:7e:cb:94:b7:c2:65:18:15:76:3a:d2:6a: 4c:e3:b0:71:93:be:fc:16:1e:89:75:ca:b1:b2:3f: 91:df:d3:fc:6d:a0:38:1e:1d:b2:5f:14:19:b6:69: 0a:23:ea:c0:7a:55:2d:97:f6:96:37:05:d1:74:17: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A2:1F:05:DE:58:20:88:78:B7:47:3A:6E:DE:0D:92:98:97:B6:82 X509v3 Authority Key Identifier: keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/CqIfBd5YIIh4t0c6bt4NkpiXtoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.80.0/22 IPv6: 2a02:4460::/32 Signature Algorithm: sha256WithRSAEncryption 58:e8:1a:1b:3a:56:6d:de:30:72:79:34:cb:76:7c:c0:2e:22: 1b:c5:c7:39:d5:29:7c:0a:5b:b6:34:76:8e:4b:66:59:85:9d: df:fa:5c:c9:72:7d:f5:57:f8:69:1e:8a:07:95:44:1f:c8:78: b7:e6:f1:27:19:45:b5:ea:af:16:06:d4:94:c8:06:d6:01:34: fb:b5:a4:00:55:0d:c0:b4:9c:62:70:4e:e2:b0:7b:29:db:81: ed:5e:13:14:4c:36:99:78:bc:26:19:dc:37:72:4b:6e:66:4d: 1a:c5:c9:f2:e5:0d:e5:a3:b3:0c:ee:f2:bd:94:5f:62:fe:1c: ea:ce:97:bb:a5:2a:1b:1d:3f:1e:06:63:fb:9e:ee:e5:6c:56: dd:34:9d:4c:85:e6:5c:17:b3:e3:ed:c0:f8:7a:ed:f9:f6:13: 61:d6:28:e4:dc:73:9d:83:a6:11:28:3a:46:3c:1f:6f:94:a3: cd:be:87:4e:5b:2d:81:e3:87:31:50:15:63:ad:95:36:84:25: e8:84:da:a6:6a:c2:9b:23:bb:9f:d7:45:73:84:a8:ac:7f:dc: 54:fd:ec:87:4b:6c:5e:8a:75:5b:c0:56:64:24:40:b6:db:75: 51:e4:ae:96:3f:43:49:cd:c0:14:f4:93:01:22:1d:05:67:1f: 7d:5b:0d:7f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsEMmMJwTB6kE1DgoJCWOWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh YjZkYjQwHhcNMjUxMjA5MTczOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWEyMWYwNWRlNTgyMDg4NzhiNzQ3M2E2ZWRlMGQ5Mjk4OTdiNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2hemNbMK6J1qzygjvRvq5VrrW3y wcM3ues0PwtUNUpik1jQyANYd4a3yemrmF9o5KUD8wSJlbA1+JeXe94rK91fulA2 RJ7fQ0Jz5l1bbO6vi3aVryFE/gwIM6r+vL0dZA6mPMh3eEmCfCf86ZtNRBiatTJ+ AMB2Z2HoBykTFvv9AeTbe99AA2nJmA0dhEBRtR0iCl6QCPAgz75xBpYQwMM8tatH 53py35n/42sj7WV40lroKj7lhrYRHEOPkG7qOoXVufB+y5S3wmUYFXY60mpM47Bx k778Fh6Jdcqxsj+R39P8baA4Hh2yXxQZtmkKI+rAelUtl/aWNwXRdBejHQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAqiHwXeWCCIeLdHOm7eDZKYl7aCMB8GA1UdIwQY MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt MWY2NmZhYWI0YWI1LzEvQ3FJZkJkNVlJSWg0dDBjNmJ0NE5rcGlYdG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1 LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTZQMA0E AgACMAcDBQAqAkRgMA0GCSqGSIb3DQEBCwUAA4IBAQBY6BobOlZt3jByeTTLdnzA LiIbxcc51Sl8Clu2NHaOS2ZZhZ3f+lzJcn31V/hpHooHlUQfyHi35vEnGUW16q8W BtSUyAbWATT7taQAVQ3AtJxicE7isHsp24HtXhMUTDaZeLwmGdw3cktuZk0axcny 5Q3lo7MM7vK9lF9i/hzqzpe7pSobHT8eBmP7nu7lbFbdNJ1MheZcF7Pj7cD4eu35 9hNh1ijk3HOdg6YRKDpGPB9vlKPNvodOWy2B44cxUBVjrZU2hCXohNqmasKbI7uf 10VzhKisf9xU/eyHS2xeinVbwFZkJEC223VR5K6WP0NJzcAU9JMBIh0FZx99Ww1/ -----END CERTIFICATE-----Generated at Tue Dec 16 17:41:22 2025 by rpki-client