This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/QxRXVgzFK7-XtUX5rZrtM6MomyU.roa File: QxRXVgzFK7-XtUX5rZrtM6MomyU.roa (raw, json) Hash identifier: x/cpWEUkq+gN4A+ymjS6KaS6HF2t6VW/EFTyhN165z0= Subject key identifier: 43:14:57:56:0C:C5:2B:BF:97:B5:45:F9:AD:9A:ED:33:A3:28:9B:25 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B21201729ED24ECDBEE8AA456E0DA3025 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/QxRXVgzFK7-XtUX5rZrtM6MomyU.roa Signing time: Mon 15 Dec 2025 08:28:29 +0000 ROA not before: Mon 15 Dec 2025 08:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 54103 IP address blocks: 157.97.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:20:17:29:ed:24:ec:db:ee:8a:a4:56:e0:da:30:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Dec 15 08:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=431457560cc52bbf97b545f9ad9aed33a3289b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:08:80:1c:17:80:d5:21:d6:70:1a:34:73: 22:56:ce:dd:48:85:27:70:69:bd:6a:dd:19:e9:64: 89:a3:5e:8b:14:9d:3f:47:ff:b9:48:df:cf:06:93: e8:0e:f2:9e:f3:31:fe:a4:d8:da:82:70:3b:5b:7e: c0:c5:95:7a:e1:a9:c8:0c:01:82:d1:f0:5c:a1:da: 3a:e0:70:2b:2d:f5:b9:bf:11:46:dc:e7:b8:ed:59: 17:0e:4a:21:4e:de:60:3a:a8:49:b3:c8:d0:d1:9c: 1b:6f:79:ef:22:b3:64:0f:54:04:2b:42:34:5c:2b: c8:09:7d:de:ef:d1:e7:9b:47:00:1c:f7:10:2e:09: d3:1c:98:9b:ab:d4:c4:6b:25:2e:48:75:79:a0:4f: 35:18:cc:7f:f3:7f:c4:b5:0d:25:6d:5c:d7:14:44: 12:b7:36:86:dd:f5:8f:ea:95:e0:fa:38:3c:fa:4f: 9a:37:de:88:31:42:24:80:f0:34:47:02:61:7a:b7: 1b:f7:f9:ad:3f:80:88:b5:6f:7a:1a:7a:78:00:82: 0c:cf:f9:45:95:d2:1e:32:f6:91:b0:6b:b8:a4:05: 3d:49:4d:05:52:8d:5d:e6:b4:24:d9:47:fe:9c:7f: 3e:47:e5:44:28:c6:54:6b:90:02:47:d7:f7:83:85: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:14:57:56:0C:C5:2B:BF:97:B5:45:F9:AD:9A:ED:33:A3:28:9B:25 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/QxRXVgzFK7-XtUX5rZrtM6MomyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.124.0/22 Signature Algorithm: sha256WithRSAEncryption 61:43:00:89:fa:98:62:ca:fd:6b:cd:55:a4:4c:19:9a:59:d9: 86:c3:61:cc:5e:6d:9d:38:04:84:c3:02:0f:5b:be:fe:a7:2b: 4a:c6:a2:1c:a9:71:6c:b3:76:44:0f:56:fb:f2:2b:b7:88:de: 4e:9f:24:b2:de:e3:5b:4d:7a:d8:b1:69:4d:5b:58:85:30:ae: 48:c7:2f:dd:14:b7:76:cc:72:12:0b:02:5c:0e:a4:45:66:af: 18:ef:14:0b:08:45:55:09:e5:a6:ac:de:56:b8:f9:cc:76:7b: 8c:b6:8a:a3:0d:4c:26:b2:4e:19:29:c3:07:14:ba:6d:e9:10: f9:8f:e5:61:13:78:0f:a0:aa:d4:bc:b7:b5:1c:4f:c7:79:c2: ca:8c:72:2c:36:33:95:68:c1:f0:ac:ba:63:40:6a:40:89:c1: 5b:80:2f:fa:69:10:6f:db:f6:f3:e2:eb:5e:06:f1:dd:5c:15: 4c:6f:15:4d:e9:49:64:b2:80:14:28:63:88:7f:b7:1c:a0:6d: b9:6b:18:ef:d4:3d:e7:88:0e:44:d6:1b:a0:63:1e:8d:a5:cd: cb:e4:3d:70:59:15:b0:0f:bf:48:2d:9e:dd:91:52:f7:5f:e0: c4:cf:38:8c:cb:5f:df:1a:dc:87:74:47:7a:2e:ff:8b:9c:36: 9c:20:c3:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshIBcp7STs2+6KpFbg2jAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjUxMjE1MDgyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzE0NTc1NjBjYzUyYmJmOTdiNTQ1ZjlhZDlhZWQzM2EzMjg5YjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GYIgBwXgNUh1nAaNHMiVs7dSIUn cGm9at0Z6WSJo16LFJ0/R/+5SN/PBpPoDvKe8zH+pNjagnA7W37AxZV64anIDAGC 0fBcodo64HArLfW5vxFG3Oe47VkXDkohTt5gOqhJs8jQ0Zwbb3nvIrNkD1QEK0I0 XCvICX3e79Hnm0cAHPcQLgnTHJibq9TEayUuSHV5oE81GMx/83/EtQ0lbVzXFEQS tzaG3fWP6pXg+jg8+k+aN96IMUIkgPA0RwJhercb9/mtP4CItW96Gnp4AIIMz/lF ldIeMvaRsGu4pAU9SU0FUo1d5rQk2Uf+nH8+R+VEKMZUa5ACR9f3g4ULvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEMUV1YMxSu/l7VF+a2a7TOjKJslMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvUXhSWFZnekZLNy1YdFVYNXJacnRNNk1vbXlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnWF8MA0G CSqGSIb3DQEBCwUAA4IBAQBhQwCJ+phiyv1rzVWkTBmaWdmGw2HMXm2dOASEwwIP W77+pytKxqIcqXFss3ZED1b78iu3iN5OnySy3uNbTXrYsWlNW1iFMK5Ixy/dFLd2 zHISCwJcDqRFZq8Y7xQLCEVVCeWmrN5WuPnMdnuMtoqjDUwmsk4ZKcMHFLpt6RD5 j+VhE3gPoKrUvLe1HE/HecLKjHIsNjOVaMHwrLpjQGpAicFbgC/6aRBv2/bz4ute BvHdXBVMbxVN6UlksoAUKGOIf7ccoG25axjv1D3niA5E1hugYx6Npc3L5D1wWRWw D79ILZ7dkVL3X+DEzziMy1/fGtyHdEd6Lv+LnDacIMPG -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:05 2025 by rpki-client