This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QwvA9UhqLZxUXyrnJM1TpI-Au8A.roa File: QwvA9UhqLZxUXyrnJM1TpI-Au8A.roa (raw, json) Hash identifier: lihDprkn1aFcH0uoiy1zD9QkN4rGerrbTwXErzROCHA= Subject key identifier: 43:0B:C0:F5:48:6A:2D:9C:54:5F:2A:E7:24:CD:53:A4:8F:80:BB:C0 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B357A5ACACBD14C4258A9A753A0A1FF5B Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QwvA9UhqLZxUXyrnJM1TpI-Au8A.roa Signing time: Fri 19 Dec 2025 07:19:29 +0000 ROA not before: Fri 19 Dec 2025 07:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209178 IP address blocks: 185.233.19.0/24 maxlen: 24 185.235.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:7a:5a:ca:cb:d1:4c:42:58:a9:a7:53:a0:a1:ff:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Dec 19 07:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=430bc0f5486a2d9c545f2ae724cd53a48f80bbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:78:8f:e4:d6:29:38:15:30:89:5c:39:61: 84:27:81:c7:1f:c1:7a:5b:3a:53:a0:b4:be:4b:ea: ff:00:84:9c:24:c0:3e:33:fb:c4:4a:ec:bd:ac:c4: 79:91:2b:81:77:d8:66:eb:fe:86:46:91:53:be:b6: 75:8d:ce:dc:1b:5c:db:d0:1d:94:a2:34:62:fe:48: d9:58:74:27:76:2a:d9:68:49:1e:e9:36:88:d2:ad: 85:75:ed:bb:2d:cb:08:24:ac:72:41:0a:28:19:f8: d1:ce:33:82:5c:dd:01:c6:57:ef:f2:d7:e6:1f:24: 98:6c:db:0a:31:5a:50:b5:95:13:66:e4:20:76:c6: 7a:df:3c:e5:fa:b6:5a:fa:22:a7:4f:d7:ee:0c:b8: 05:4f:c5:98:eb:e3:00:05:ce:b6:6d:0f:09:93:8b: da:ea:d9:44:79:a9:de:8b:96:bf:a9:28:7e:16:a3: 23:c7:6c:56:3d:b6:53:28:78:b3:d0:84:aa:9b:a3: b3:ba:c3:e9:b0:77:44:1a:c8:34:df:32:70:a8:9b: 0f:99:8f:49:ed:7c:81:1f:5d:8c:20:a9:d3:42:67: 6b:28:b6:b5:62:b2:e2:9b:5e:0c:23:e4:5f:e6:65: 3d:25:d4:c0:a6:0a:70:eb:98:1c:f8:f4:35:b9:05: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:C0:F5:48:6A:2D:9C:54:5F:2A:E7:24:CD:53:A4:8F:80:BB:C0 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QwvA9UhqLZxUXyrnJM1TpI-Au8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.19.0/24 185.235.165.0/24 Signature Algorithm: sha256WithRSAEncryption 09:dc:68:a9:ad:3f:ce:f7:c7:4c:e7:c9:eb:70:37:36:23:72: 49:97:2d:ec:1e:06:2a:98:12:8d:8d:cf:9e:2c:bc:d1:ba:ac: bb:7f:8c:53:ad:1d:f4:c7:53:13:c4:2b:c0:c4:dd:92:e7:19: f0:49:27:01:c2:b2:86:81:84:7b:33:e1:7e:49:b8:58:3f:de: 99:d1:6c:df:a5:28:33:81:3a:54:49:75:e8:a1:64:99:d0:6b: 4e:20:c3:0e:49:46:54:cd:d8:f9:54:26:94:d3:f0:f6:f3:ae: 04:e8:0b:e9:e8:c7:55:67:f1:7c:be:6c:6b:2e:d1:6b:b7:08: 12:ad:fd:44:54:26:88:ad:b6:07:20:87:c3:8f:d6:74:5b:87: c2:8d:87:31:b6:6e:b1:0a:bd:58:95:99:0b:e7:97:e0:01:f4: 71:39:d5:ce:bb:5a:a9:ca:a7:aa:bb:1d:86:bd:3d:9b:67:c2: e8:41:e4:c4:56:b8:6f:10:ea:3e:60:91:90:dc:e7:1b:af:6b: 8f:11:63:77:20:52:07:3f:06:e6:32:fb:b3:67:26:bf:ed:77: 87:bf:f2:00:23:f9:be:d1:44:cf:95:38:ce:7f:3b:10:f3:b9: a6:38:a6:d6:e2:e3:45:e2:69:27:17:17:db:8d:1b:fc:76:82: dc:c0:30:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZs1elrKy9FMQlipp1Ogof9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjUxMjE5MDcxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzBiYzBmNTQ4NmEyZDljNTQ1ZjJhZTcyNGNkNTNhNDhmODBiYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqol4j+TWKTgVMIlcOWGEJ4HHH8F6 WzpToLS+S+r/AIScJMA+M/vESuy9rMR5kSuBd9hm6/6GRpFTvrZ1jc7cG1zb0B2U ojRi/kjZWHQndirZaEke6TaI0q2Fde27LcsIJKxyQQooGfjRzjOCXN0Bxlfv8tfm HySYbNsKMVpQtZUTZuQgdsZ63zzl+rZa+iKnT9fuDLgFT8WY6+MABc62bQ8Jk4va 6tlEeanei5a/qSh+FqMjx2xWPbZTKHiz0ISqm6OzusPpsHdEGsg03zJwqJsPmY9J 7XyBH12MIKnTQmdrKLa1YrLim14MI+Rf5mU9JdTApgpw65gc+PQ1uQWkewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEMLwPVIai2cVF8q5yTNU6SPgLvAMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvUXd2QTlVaHFMWnhVWHlybkpNMVRwSS1BdThBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuekTAwQA ueulMA0GCSqGSIb3DQEBCwUAA4IBAQAJ3GiprT/O98dM58nrcDc2I3JJly3sHgYq mBKNjc+eLLzRuqy7f4xTrR30x1MTxCvAxN2S5xnwSScBwrKGgYR7M+F+SbhYP96Z 0WzfpSgzgTpUSXXooWSZ0GtOIMMOSUZUzdj5VCaU0/D2864E6Avp6MdVZ/F8vmxr LtFrtwgSrf1EVCaIrbYHIIfDj9Z0W4fCjYcxtm6xCr1YlZkL55fgAfRxOdXOu1qp yqequx2GvT2bZ8LoQeTEVrhvEOo+YJGQ3Ocbr2uPEWN3IFIHPwbmMvuzZya/7XeH v/IAI/m+0UTPlTjOfzsQ87mmOKbW4uNF4mknFxfbjRv8doLcwDDV -----END CERTIFICATE-----Generated at Sat Dec 20 01:38:16 2025 by rpki-client