This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/qrKl-rcRUKxNmBfUngwMFX-9LNE.roa File: qrKl-rcRUKxNmBfUngwMFX-9LNE.roa (raw, json) Hash identifier: PaYLCeAW4XuOfyFRVE6QF7zqDhxSffbvadtvWZrAG8s= Subject key identifier: AA:B2:A5:FA:B7:11:50:AC:4D:98:17:D4:9E:0C:0C:15:7F:BD:2C:D1 Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478 Certificate serial: 019B146D0D35DD87BEE55666660F9B62E217 Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/qrKl-rcRUKxNmBfUngwMFX-9LNE.roa Signing time: Fri 12 Dec 2025 21:17:29 +0000 ROA not before: Fri 12 Dec 2025 21:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204607 IP address blocks: 83.143.120.0/23 maxlen: 23 83.143.120.0/24 maxlen: 24 193.162.108.0/23 maxlen: 23 193.162.108.0/24 maxlen: 24 193.162.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:6d:0d:35:dd:87:be:e5:56:66:66:0f:9b:62:e2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478 Validity Not Before: Dec 12 21:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aab2a5fab71150ac4d9817d49e0c0c157fbd2cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:89:46:bf:ee:17:41:a6:e6:d2:2b:c6:8b: 15:9b:26:74:f9:57:f4:42:bd:fb:6a:1b:5e:fe:eb: f8:45:b0:5d:b8:5c:c2:8f:41:fa:66:6b:6d:dc:31: 4a:63:6c:fb:cc:32:24:4e:29:b4:03:8c:55:6e:24: 1d:47:2a:57:95:9c:81:96:d5:c9:73:fa:08:01:9e: 29:8e:76:b1:24:a7:ad:8e:04:a8:4b:cb:be:cc:83: ba:c8:eb:02:fb:ea:9b:17:5f:8e:26:c3:56:7f:3c: 6f:1d:65:f4:be:f5:fd:e1:93:6a:f0:c6:5c:f7:b6: 71:61:5e:c9:ef:98:6a:49:4c:77:50:3d:5d:6f:47: 07:72:cb:13:1b:fe:2d:83:53:11:99:99:45:f1:f9: 2a:54:8e:51:49:ad:90:38:28:7a:69:ec:01:d2:b5: bc:2b:0e:6e:0c:4c:ea:1b:e4:ae:c5:13:49:89:47: 50:e7:9b:9e:f9:31:19:59:4f:99:73:9c:01:e0:56: 2c:ed:41:8c:84:d2:49:a8:c9:c9:1a:f2:ba:9c:2e: cc:f0:d8:15:7d:09:bd:76:8a:c5:f7:e0:a2:bb:5b: 10:64:1b:3e:2a:70:c8:54:04:57:bf:c4:8e:af:5a: 67:48:7d:d9:2a:ca:b6:f6:82:99:69:88:50:9f:3a: fe:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B2:A5:FA:B7:11:50:AC:4D:98:17:D4:9E:0C:0C:15:7F:BD:2C:D1 X509v3 Authority Key Identifier: keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/qrKl-rcRUKxNmBfUngwMFX-9LNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.120.0/23 193.162.108.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:3d:99:e9:67:95:c7:ed:8a:6b:42:3a:47:c5:1c:5d:f6:3c: ec:f8:26:4a:e1:f4:07:ed:99:6e:1e:2b:c7:32:35:90:31:33: c4:fa:9b:17:83:8f:0b:27:4b:31:4d:e2:62:b3:7e:d5:bf:1e: b1:55:e5:82:89:2a:b2:1d:5c:4a:1c:4d:5d:bc:cd:80:71:b2: 74:3d:f7:69:74:e2:90:d1:04:03:86:44:97:a4:5e:ee:1f:a6: 3e:00:f9:4c:6f:e1:28:8f:f4:a7:91:30:b5:de:19:26:2a:d3: 11:9f:84:52:6f:b1:04:d0:52:cc:2a:1c:af:4a:df:91:fe:5d: 69:aa:89:ef:e7:eb:de:da:ed:12:ec:fc:7d:a7:93:76:58:55: 16:ca:02:55:1a:93:a1:af:10:25:77:d3:84:70:5d:8f:b0:7c: 51:a0:7a:56:99:23:72:79:bb:5d:30:2e:5d:e9:fe:db:3f:8b: 0c:3d:38:4d:3a:48:43:ae:16:ca:30:dd:19:f3:11:ef:13:80: 2e:a4:15:f2:9c:75:ff:2e:78:7e:53:e6:cf:e9:1a:99:95:79: 99:e6:f9:80:87:be:33:61:4d:a1:9d:75:cc:33:f0:4f:e4:c4: b7:a6:01:14:ff:be:96:d1:88:e9:b6:a7:a8:59:ab:42:f2:71: be:f9:9d:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsUbQ013Ye+5VZmZg+bYuIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDdkOWQyOWNlY2Y4ZTU5MTIyMjMzZDcxNmU2YjA1MGU3 MTg0NzgwHhcNMjUxMjEyMjExNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWIyYTVmYWI3MTE1MGFjNGQ5ODE3ZDQ5ZTBjMGMxNTdmYmQyY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxuJRr/uF0Gm5tIrxosVmyZ0+Vf0 Qr37ahte/uv4RbBduFzCj0H6Zmtt3DFKY2z7zDIkTim0A4xVbiQdRypXlZyBltXJ c/oIAZ4pjnaxJKetjgSoS8u+zIO6yOsC++qbF1+OJsNWfzxvHWX0vvX94ZNq8MZc 97ZxYV7J75hqSUx3UD1db0cHcssTG/4tg1MRmZlF8fkqVI5RSa2QOCh6aewB0rW8 Kw5uDEzqG+SuxRNJiUdQ55ue+TEZWU+Zc5wB4FYs7UGMhNJJqMnJGvK6nC7M8NgV fQm9dorF9+Ciu1sQZBs+KnDIVARXv8SOr1pnSH3ZKsq29oKZaYhQnzr+8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKqypfq3EVCsTZgX1J4MDBV/vSzRMB8GA1UdIwQY MBaAFDHX2dKc7PjlkSIjPXFuawUOcYR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYt NDBmNGM2OGU5YTMxLzEvcXJLbC1yY1JVS3hObUJmVW5nd01GWC05TE5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYtNDBmNGM2OGU5YTMx LzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBU494AwQB waJsMA0GCSqGSIb3DQEBCwUAA4IBAQB6PZnpZ5XH7YprQjpHxRxd9jzs+CZK4fQH 7ZluHivHMjWQMTPE+psXg48LJ0sxTeJis37Vvx6xVeWCiSqyHVxKHE1dvM2AcbJ0 PfdpdOKQ0QQDhkSXpF7uH6Y+APlMb+Eoj/SnkTC13hkmKtMRn4RSb7EE0FLMKhyv St+R/l1pqonv5+ve2u0S7Px9p5N2WFUWygJVGpOhrxAld9OEcF2PsHxRoHpWmSNy ebtdMC5d6f7bP4sMPThNOkhDrhbKMN0Z8xHvE4AupBXynHX/Lnh+U+bP6RqZlXmZ 5vmAh74zYU2hnXXMM/BP5MS3pgEU/76W0YjptqeoWatC8nG++Z2s -----END CERTIFICATE-----Generated at Thu Dec 25 09:12:33 2025 by rpki-client