This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/q373nxjkgYoatUUnQ4t03LHPP7I.roa File: q373nxjkgYoatUUnQ4t03LHPP7I.roa (raw, json) Hash identifier: uM8UOVBmhuPT8FIqg0Hi1bXmnpOXQYRW3BE2uJZF/Ek= Subject key identifier: AB:7E:F7:9F:18:E4:81:8A:1A:B5:45:27:43:8B:74:DC:B1:CF:3F:B2 Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Certificate serial: 019B043856CA02923F5AD011D747A5D5B7D0 Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/q373nxjkgYoatUUnQ4t03LHPP7I.roa Signing time: Tue 09 Dec 2025 17:45:59 +0000 ROA not before: Tue 09 Dec 2025 17:45:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 185.54.80.0/22 maxlen: 24 2a02:4460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:38:56:ca:02:92:3f:5a:d0:11:d7:47:a5:d5:b7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Validity Not Before: Dec 9 17:45:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab7ef79f18e4818a1ab54527438b74dcb1cf3fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:78:39:7c:f2:eb:a8:9b:e1:e6:4e:a1:02:3a: f5:a4:77:02:a5:b0:89:2d:42:24:42:97:24:b9:e7: db:2c:94:0b:cf:05:83:61:c0:63:56:dc:03:2d:a9: ec:e2:c2:f4:84:8f:6f:68:68:71:95:9b:65:bf:33: 86:da:16:08:b7:3c:c4:ee:d5:9e:fa:91:59:49:31: e1:36:13:e8:9f:a3:82:d0:7d:6e:9c:e9:77:39:17: f9:e0:cf:1a:aa:c3:0c:9a:32:d5:51:c4:9f:77:bc: 46:62:11:d8:cd:19:af:17:52:39:94:2d:6a:2b:36: 1d:f5:92:50:1c:f3:5a:36:4b:0a:91:32:1e:f2:0e: 7c:fc:03:74:64:d3:62:3e:85:a9:cf:ba:2b:2a:c5: 1b:9a:93:83:b2:2f:45:c4:41:dc:d3:10:46:d9:4f: 7d:20:1e:71:63:58:08:b9:5d:e5:e7:89:8a:48:be: 20:d4:e4:6e:55:b5:16:59:90:d4:36:0a:cc:02:56: 0f:ee:7a:6b:02:91:4f:0b:02:c3:eb:be:12:0b:f5: 1a:54:4f:52:fd:cf:3c:30:3a:2e:10:96:a9:e8:93: 4c:12:6e:b1:00:d8:29:89:ab:33:0a:d2:a5:9d:e6: 67:6e:ad:9f:51:29:28:7e:21:f6:cc:82:bb:5f:82: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7E:F7:9F:18:E4:81:8A:1A:B5:45:27:43:8B:74:DC:B1:CF:3F:B2 X509v3 Authority Key Identifier: keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/q373nxjkgYoatUUnQ4t03LHPP7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.80.0/22 IPv6: 2a02:4460::/32 Signature Algorithm: sha256WithRSAEncryption aa:fc:57:a6:6d:89:88:7f:68:9c:24:6d:63:47:95:68:dc:15: f2:a4:7a:50:33:8d:d3:cb:33:7d:38:e4:48:3d:64:c4:39:4a: 8f:ac:ed:f3:4d:b2:e9:48:65:fa:2b:58:61:64:fe:46:93:18: 1f:97:60:4b:8e:00:4a:83:4f:75:be:0b:87:73:be:b3:a2:e3: a6:e9:31:8d:27:45:4b:56:92:7c:03:f9:23:53:03:32:15:8a: 07:00:01:37:f3:71:11:24:9d:3f:32:da:a6:56:8d:ce:ba:71: 30:2f:6b:2f:c9:0f:86:ad:ca:51:5b:7a:4d:cd:70:c5:21:35: cd:ba:1b:9f:b1:7c:26:91:c8:9a:be:b2:a9:c2:40:76:15:dd: 18:ab:5b:3b:c4:a9:83:53:9b:01:e5:60:ba:e6:69:7e:dc:66: 92:19:4e:44:7a:52:c5:40:f1:d9:7a:be:7c:ac:62:df:ae:0b: bf:71:ed:58:02:05:ee:e7:48:74:7b:cf:24:fb:3a:21:0f:91: 68:2e:6e:33:e8:83:2e:b4:72:45:7a:0b:b4:47:12:7b:68:e1: 4a:d1:ea:43:d3:d6:fb:31:82:17:d2:91:66:f2:1f:7b:a6:45: 2a:5e:6d:b0:7f:9e:9f:dd:50:47:fc:c7:88:15:23:77:73:24: 20:85:a2:3b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsEOFbKApI/WtAR10el1bfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh YjZkYjQwHhcNMjUxMjA5MTc0NTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjdlZjc5ZjE4ZTQ4MThhMWFiNTQ1Mjc0MzhiNzRkY2IxY2YzZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAing5fPLrqJvh5k6hAjr1pHcCpbCJ LUIkQpckuefbLJQLzwWDYcBjVtwDLans4sL0hI9vaGhxlZtlvzOG2hYItzzE7tWe +pFZSTHhNhPon6OC0H1unOl3ORf54M8aqsMMmjLVUcSfd7xGYhHYzRmvF1I5lC1q KzYd9ZJQHPNaNksKkTIe8g58/AN0ZNNiPoWpz7orKsUbmpODsi9FxEHc0xBG2U99 IB5xY1gIuV3l54mKSL4g1ORuVbUWWZDUNgrMAlYP7nprApFPCwLD674SC/UaVE9S /c88MDouEJap6JNMEm6xANgpiaszCtKlneZnbq2fUSkofiH2zIK7X4KFIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKt+958Y5IGKGrVFJ0OLdNyxzz+yMB8GA1UdIwQY MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt MWY2NmZhYWI0YWI1LzEvcTM3M254amtnWW9hdFVVblE0dDAzTEhQUDdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1 LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTZQMA0E AgACMAcDBQAqAkRgMA0GCSqGSIb3DQEBCwUAA4IBAQCq/FembYmIf2icJG1jR5Vo 3BXypHpQM43TyzN9OORIPWTEOUqPrO3zTbLpSGX6K1hhZP5Gkxgfl2BLjgBKg091 vguHc76zouOm6TGNJ0VLVpJ8A/kjUwMyFYoHAAE383ERJJ0/MtqmVo3OunEwL2sv yQ+GrcpRW3pNzXDFITXNuhufsXwmkciavrKpwkB2Fd0Yq1s7xKmDU5sB5WC65ml+ 3GaSGU5EelLFQPHZer58rGLfrgu/ce1YAgXu50h0e88k+zohD5FoLm4z6IMutHJF egu0RxJ7aOFK0epD09b7MYIX0pFm8h97pkUqXm2wf56f3VBH/MeIFSN3cyQghaI7 -----END CERTIFICATE-----Generated at Tue Dec 16 20:55:42 2025 by rpki-client