This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qVej5yQTm_Qck4_lWDyxDk8tC1o.roa File: qVej5yQTm_Qck4_lWDyxDk8tC1o.roa (raw, json) Hash identifier: G9ILlI5T77jhT0pnQfTUOVhmUJ+HqFUlXgLXd80a7yk= Subject key identifier: A9:57:A3:E7:24:13:9B:F4:1C:93:8F:E5:58:3C:B1:0E:4F:2D:0B:5A Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B0A2D286F7B232700B30C6C2892B27BBA Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qVej5yQTm_Qck4_lWDyxDk8tC1o.roa Signing time: Wed 10 Dec 2025 21:31:30 +0000 ROA not before: Wed 10 Dec 2025 21:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39347 IP address blocks: 85.121.208.0/21 maxlen: 24 85.122.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:2d:28:6f:7b:23:27:00:b3:0c:6c:28:92:b2:7b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Dec 10 21:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a957a3e724139bf41c938fe5583cb10e4f2d0b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:b3:9a:b1:0c:ea:cb:8e:9e:d3:b3:2f:53: 13:4e:15:9c:7f:7a:b1:09:97:5e:d1:a2:7d:16:7e: d2:69:4b:de:15:f3:1c:11:0d:f8:fd:fe:41:cc:6c: f6:17:9a:fb:68:51:af:5e:e5:77:75:23:e8:c0:fd: 08:d3:3a:10:df:27:5c:94:4c:ad:5a:63:1d:ea:0f: 38:35:10:43:5a:e5:6e:20:d8:6f:22:f9:84:61:85: 5f:82:08:3c:8f:16:ca:cc:a8:c5:cc:dd:d6:d0:af: a2:ab:c6:c7:9b:54:cd:0b:c5:42:1e:ff:5b:23:ab: 65:0a:9b:73:e5:08:1f:f5:78:72:fe:8f:e4:04:8f: cb:a4:90:bb:8e:80:34:d4:c8:00:42:b9:c9:1c:3a: 66:12:fc:41:f2:ed:56:d6:7a:85:68:ba:d0:bc:98: 0c:1a:98:0c:8c:aa:a8:14:a0:38:96:ae:ad:c8:45: 6c:34:6e:04:51:c7:c6:6c:1f:00:69:05:48:bf:14: 9e:8f:fb:82:5b:8f:26:57:84:2e:67:48:8e:74:2a: 03:e4:2f:85:fe:a9:b5:1d:82:62:2e:fb:6c:ae:a9: 42:95:13:29:56:26:d2:59:75:94:9e:c0:ff:7a:bc: 3d:74:22:7f:18:71:33:1a:4e:33:d6:0a:3a:e4:82: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:57:A3:E7:24:13:9B:F4:1C:93:8F:E5:58:3C:B1:0E:4F:2D:0B:5A X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qVej5yQTm_Qck4_lWDyxDk8tC1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.121.208.0/21 85.122.120.0/22 Signature Algorithm: sha256WithRSAEncryption 12:09:7f:28:94:4b:8b:44:e3:ee:c4:c5:cd:be:da:8b:95:4b: 0b:df:86:4d:d9:60:5e:cb:12:2f:80:ea:af:50:e6:bd:e2:68: fa:46:78:35:a9:85:e1:08:2d:54:8f:28:fa:8a:0d:33:df:07: e9:33:62:fd:0b:fb:4d:2e:2f:f0:69:3c:da:a9:3b:f3:f4:e2: 23:70:af:b3:95:56:89:9e:31:70:b3:1a:d2:bf:f3:53:96:fd: 34:f2:84:a7:47:b2:bf:13:59:4c:2c:5d:d2:6b:da:40:00:0f: e5:77:e6:91:79:15:8c:6b:eb:1b:25:e3:63:b2:46:05:61:85: 27:11:d2:a2:f7:1e:91:9f:97:4d:49:f8:6b:40:0b:af:97:84: 54:a2:3b:86:5c:5f:27:16:e4:bf:e1:86:24:7b:b3:2c:be:2d: ef:22:ba:1c:7a:be:75:aa:48:88:56:ac:42:33:fd:64:34:68: c4:da:c2:a7:cc:5e:0b:78:87:d8:00:3b:74:fc:cd:c9:27:0a: d4:f0:86:98:c9:b4:10:19:ec:67:49:74:d5:ff:7b:b1:0e:46: 3c:c1:81:50:a8:e0:5a:6a:da:be:9a:50:95:cc:29:be:cc:b6: 38:33:72:d8:e3:2f:0b:d5:09:43:a2:73:ab:d5:6d:24:54:3a: 77:9a:12:3c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsKLShveyMnALMMbCiSsnu6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjUxMjEwMjEzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTU3YTNlNzI0MTM5YmY0MWM5MzhmZTU1ODNjYjEwZTRmMmQwYjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwCzmrEM6suOntOzL1MTThWcf3qx CZde0aJ9Fn7SaUveFfMcEQ34/f5BzGz2F5r7aFGvXuV3dSPowP0I0zoQ3ydclEyt WmMd6g84NRBDWuVuINhvIvmEYYVfggg8jxbKzKjFzN3W0K+iq8bHm1TNC8VCHv9b I6tlCptz5Qgf9Xhy/o/kBI/LpJC7joA01MgAQrnJHDpmEvxB8u1W1nqFaLrQvJgM GpgMjKqoFKA4lq6tyEVsNG4EUcfGbB8AaQVIvxSej/uCW48mV4QuZ0iOdCoD5C+F /qm1HYJiLvtsrqlClRMpVibSWXWUnsD/erw9dCJ/GHEzGk4z1go65IKlBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKlXo+ckE5v0HJOP5Vg8sQ5PLQtaMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvcVZlajV5UVRtX1FjazRfbFdEeXhEazh0QzFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVXnQAwQC VXp4MA0GCSqGSIb3DQEBCwUAA4IBAQASCX8olEuLROPuxMXNvtqLlUsL34ZN2WBe yxIvgOqvUOa94mj6Rng1qYXhCC1Ujyj6ig0z3wfpM2L9C/tNLi/waTzaqTvz9OIj cK+zlVaJnjFwsxrSv/NTlv008oSnR7K/E1lMLF3Sa9pAAA/ld+aReRWMa+sbJeNj skYFYYUnEdKi9x6Rn5dNSfhrQAuvl4RUojuGXF8nFuS/4YYke7Msvi3vIrocer51 qkiIVqxCM/1kNGjE2sKnzF4LeIfYADt0/M3JJwrU8IaYybQQGexnSXTV/3uxDkY8 wYFQqOBaatq+mlCVzCm+zLY4M3LY4y8L1QlDonOr1W0kVDp3mhI8 -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:32 2025 by rpki-client