This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/a_vqQ_dpJ86k-sfo8QYIVPIue8k.roa File: a_vqQ_dpJ86k-sfo8QYIVPIue8k.roa (raw, json) Hash identifier: F5HdqHfdDR2gLHVN1eM7f61dVLu6vUvw7JEvDQ7zXws= Subject key identifier: 6B:FB:EA:43:F7:69:27:CE:A4:FA:C7:E8:F1:06:08:54:F2:2E:7B:C9 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B0704BD54F64AD475DB11A6E230AD893D Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/a_vqQ_dpJ86k-sfo8QYIVPIue8k.roa Signing time: Wed 10 Dec 2025 06:48:29 +0000 ROA not before: Wed 10 Dec 2025 06:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213200 IP address blocks: 185.244.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:04:bd:54:f6:4a:d4:75:db:11:a6:e2:30:ad:89:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Dec 10 06:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6bfbea43f76927cea4fac7e8f1060854f22e7bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:5d:17:11:ef:21:22:b8:39:bc:7c:4c:d7: 1f:2a:ac:b4:1e:d4:3a:ad:2d:55:60:4f:e6:30:35: 8f:60:f2:a0:bb:dc:65:e5:88:24:38:34:ef:a9:06: bd:66:bc:6b:71:08:70:e9:05:02:f5:4a:34:14:b8: 34:f5:04:cf:50:38:a4:60:9c:9d:54:7f:b7:13:93: 6b:dd:8e:76:05:26:99:9e:b6:80:53:8e:9d:9e:31: b2:b2:d9:62:ac:55:09:06:46:7e:e6:41:62:84:02: d7:e8:2b:e6:6c:1f:c9:fd:5a:2f:97:96:05:31:40: e3:92:67:7e:4e:f4:90:19:d1:d8:6a:f9:74:bc:ef: 19:b3:a9:5b:dd:0d:f0:34:78:d2:93:40:31:0a:44: dc:23:17:a0:f5:35:e6:84:9c:b1:b2:49:ba:2e:58: e2:87:0e:bb:64:82:c8:c6:9c:c3:32:df:a0:36:7b: 21:9b:fe:d2:c2:c3:f4:00:24:0c:4c:a2:fc:46:7c: 0e:37:71:57:fb:f4:f1:51:ff:4c:ce:9b:0a:e6:96: 3e:35:c4:2b:b7:fd:6b:2b:26:8f:c6:7d:98:6d:b6: 53:7d:7c:6f:c6:1e:cf:26:3f:4c:ce:f8:ed:1f:14: fa:0d:06:9a:19:d4:3a:ae:fd:56:07:77:69:5f:bb: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FB:EA:43:F7:69:27:CE:A4:FA:C7:E8:F1:06:08:54:F2:2E:7B:C9 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/a_vqQ_dpJ86k-sfo8QYIVPIue8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.104.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:20:d4:0c:8a:fa:4f:f1:57:09:e4:fd:da:47:72:3e:74:10: 46:be:87:f1:66:cc:68:7b:4b:4f:a3:66:39:1e:cd:7e:6f:f2: 06:5b:2a:bd:21:4e:05:aa:43:40:63:1d:3e:7f:52:33:0d:31: cb:f0:ca:02:0f:4b:61:6d:24:29:c5:e1:f7:e4:5d:c5:b9:b5: 55:c2:ca:8c:3a:20:30:4c:93:8a:c6:5f:ab:53:e2:26:8c:39: b8:97:16:4e:9a:db:ca:93:30:9f:18:ff:b0:69:a3:9b:85:dd: ad:d0:68:b4:91:00:fb:cb:10:c1:80:7c:e5:fe:7b:ed:62:ba: f0:91:81:36:47:89:eb:11:8d:f5:11:d2:bd:28:ba:25:01:33: 36:19:2d:35:76:49:ae:39:ad:ab:7b:52:d3:e2:63:94:8b:8e: 5b:ed:43:d6:44:a3:ba:d9:6d:b8:20:07:fb:07:df:54:b3:99: ae:95:a5:31:b4:fc:01:40:5f:20:e6:1e:e3:62:97:ef:49:22: b1:77:ff:f8:48:c7:ff:29:9e:e9:1a:55:19:70:40:74:a1:64: 20:00:e6:03:4a:e5:e6:29:98:e1:08:78:7e:4a:8a:15:12:f8: ca:15:94:9a:70:0c:40:e5:4f:1f:60:c0:94:a5:b3:03:dc:38: e6:78:f1:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHBL1U9krUddsRpuIwrYk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMjEwMDY0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmZiZWE0M2Y3NjkyN2NlYTRmYWM3ZThmMTA2MDg1NGYyMmU3YmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnhdFxHvISK4Obx8TNcfKqy0HtQ6 rS1VYE/mMDWPYPKgu9xl5YgkODTvqQa9ZrxrcQhw6QUC9Uo0FLg09QTPUDikYJyd VH+3E5Nr3Y52BSaZnraAU46dnjGystlirFUJBkZ+5kFihALX6CvmbB/J/Vovl5YF MUDjkmd+TvSQGdHYavl0vO8Zs6lb3Q3wNHjSk0AxCkTcIxeg9TXmhJyxskm6Llji hw67ZILIxpzDMt+gNnshm/7SwsP0ACQMTKL8RnwON3FX+/TxUf9MzpsK5pY+NcQr t/1rKyaPxn2YbbZTfXxvxh7PJj9MzvjtHxT6DQaaGdQ6rv1WB3dpX7vySQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGv76kP3aSfOpPrH6PEGCFTyLnvJMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvYV92cVFfZHBKODZrLXNmbzhRWUlWUEl1ZThrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufRoMA0G CSqGSIb3DQEBCwUAA4IBAQCdINQMivpP8VcJ5P3aR3I+dBBGvofxZsxoe0tPo2Y5 Hs1+b/IGWyq9IU4FqkNAYx0+f1IzDTHL8MoCD0thbSQpxeH35F3FubVVwsqMOiAw TJOKxl+rU+ImjDm4lxZOmtvKkzCfGP+waaObhd2t0Gi0kQD7yxDBgHzl/nvtYrrw kYE2R4nrEY31EdK9KLolATM2GS01dkmuOa2re1LT4mOUi45b7UPWRKO62W24IAf7 B99Us5mulaUxtPwBQF8g5h7jYpfvSSKxd//4SMf/KZ7pGlUZcEB0oWQgAOYDSuXm KZjhCHh+SooVEvjKFZSacAxA5U8fYMCUpbMD3DjmePE6 -----END CERTIFICATE-----Generated at Tue Dec 16 04:32:55 2025 by rpki-client