This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QUhkJe0TlhZmvViUCZElQxmkDok.roa File: QUhkJe0TlhZmvViUCZElQxmkDok.roa (raw, json) Hash identifier: oi/jKF77Csrbx6BN00YTOCCXmMxpsEWs/2FAsKM2f6U= Subject key identifier: 41:48:64:25:ED:13:96:16:66:BD:58:94:09:91:25:43:19:A4:0E:89 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B2CFDA0BB248C16D09DDF27B51F91DB72 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QUhkJe0TlhZmvViUCZElQxmkDok.roa Signing time: Wed 17 Dec 2025 15:46:17 +0000 ROA not before: Wed 17 Dec 2025 15:46:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 174 IP address blocks: 185.150.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:fd:a0:bb:24:8c:16:d0:9d:df:27:b5:1f:91:db:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Dec 17 15:46:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=41486425ed13961666bd58940991254319a40e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:a4:25:58:a8:24:9e:ab:a8:0c:29:ce:76: 24:0e:1e:f7:86:a6:ba:a6:f5:40:af:b5:02:47:99: 23:aa:38:7b:9d:25:6d:50:11:4b:bc:07:ce:5a:63: ff:5a:e8:7b:74:3e:88:23:c1:f0:db:b4:10:df:6b: 10:ca:2c:11:5a:32:1c:52:51:7c:2f:8c:e6:01:c4: 5b:0d:72:e7:f1:df:21:10:69:85:be:89:f5:df:1c: 16:74:e8:ae:37:72:30:37:06:3f:9a:7e:7d:ab:2a: b9:b1:d7:06:5a:45:93:48:37:f3:7c:da:ec:27:b5: ee:8f:f4:42:2c:f0:a2:27:62:98:fc:3c:61:2d:14: 2a:c5:39:7b:89:34:d0:6c:cc:fa:85:ce:fb:87:c3: 8a:09:55:56:8d:8c:99:ff:6e:05:e0:2f:0a:cb:38: 45:76:35:11:9e:a2:27:d9:c8:cc:c2:65:48:ef:34: c7:e4:57:63:c5:aa:15:bd:5a:6c:bf:76:a5:de:78: 20:3d:b9:a9:0d:2e:b4:a2:aa:c1:75:dd:8d:e4:95: 72:bf:50:e2:4d:7d:c9:65:78:65:d6:6d:36:7c:0f: a6:5d:20:50:54:1b:f0:58:c1:21:1e:79:b5:fc:d2: 9c:b9:48:7d:2a:f2:3f:24:96:2a:b0:36:56:aa:b7: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:48:64:25:ED:13:96:16:66:BD:58:94:09:91:25:43:19:A4:0E:89 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QUhkJe0TlhZmvViUCZElQxmkDok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.204.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:d0:aa:58:d8:86:dc:36:d3:94:16:f5:0f:0a:e7:28:3d:96: b4:79:f1:d0:87:58:64:7c:42:bd:5b:c0:59:3e:47:d6:69:cd: b6:a8:45:ca:f4:bc:b0:36:33:d2:a0:dc:c9:b3:79:61:f8:4b: b6:cc:83:65:f8:51:36:16:89:a9:94:b7:7f:9e:8d:79:ed:ff: 30:79:68:39:34:47:b2:44:ca:ac:b6:31:bb:7c:35:4d:08:d0: 04:49:a2:ac:2b:f3:1e:63:dd:a8:88:1f:86:09:22:02:c8:88: 9e:44:c4:e6:1f:c6:19:32:a7:f4:62:b5:20:7b:18:d6:ad:27: 72:34:5d:dd:2f:c6:32:20:2c:ce:95:11:f0:9e:c2:09:19:24: 41:f1:61:5b:69:2b:8a:93:c1:55:ad:16:1c:16:ab:bc:e3:58: 42:15:84:e5:f0:0d:07:a8:60:d1:28:69:36:f5:0e:d5:9a:fa: d3:1c:46:2e:ea:44:38:e5:76:22:f9:ef:c1:d1:97:bc:eb:9f: 29:9c:12:03:45:ba:b7:89:54:ce:b3:7f:b9:a8:fc:fa:95:21: ca:1e:5f:05:ab:75:0e:65:4e:54:5e:14:7a:70:3c:52:c6:9e: 28:21:a2:2c:1a:79:81:05:1e:b1:94:e0:29:bc:ab:63:79:71: c3:90:dc:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZss/aC7JIwW0J3fJ7UfkdtyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMjE3MTU0NjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTQ4NjQyNWVkMTM5NjE2NjZiZDU4OTQwOTkxMjU0MzE5YTQwZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUykJVioJJ6rqAwpznYkDh73hqa6 pvVAr7UCR5kjqjh7nSVtUBFLvAfOWmP/Wuh7dD6II8Hw27QQ32sQyiwRWjIcUlF8 L4zmAcRbDXLn8d8hEGmFvon13xwWdOiuN3IwNwY/mn59qyq5sdcGWkWTSDfzfNrs J7Xuj/RCLPCiJ2KY/DxhLRQqxTl7iTTQbMz6hc77h8OKCVVWjYyZ/24F4C8KyzhF djURnqIn2cjMwmVI7zTH5FdjxaoVvVpsv3al3nggPbmpDS60oqrBdd2N5JVyv1Di TX3JZXhl1m02fA+mXSBQVBvwWMEhHnm1/NKcuUh9KvI/JJYqsDZWqrdbXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEFIZCXtE5YWZr1YlAmRJUMZpA6JMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvUVVoa0plMFRsaFptdlZpVUNaRWxReG1rRG9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZbMMA0G CSqGSIb3DQEBCwUAA4IBAQB60KpY2IbcNtOUFvUPCucoPZa0efHQh1hkfEK9W8BZ PkfWac22qEXK9LywNjPSoNzJs3lh+Eu2zINl+FE2FomplLd/no157f8weWg5NEey RMqstjG7fDVNCNAESaKsK/MeY92oiB+GCSICyIieRMTmH8YZMqf0YrUgexjWrSdy NF3dL8YyICzOlRHwnsIJGSRB8WFbaSuKk8FVrRYcFqu841hCFYTl8A0HqGDRKGk2 9Q7VmvrTHEYu6kQ45XYi+e/B0Ze8658pnBIDRbq3iVTOs3+5qPz6lSHKHl8Fq3UO ZU5UXhR6cDxSxp4oIaIsGnmBBR6xlOApvKtjeXHDkNx7 -----END CERTIFICATE-----Generated at Fri Dec 19 14:15:55 2025 by rpki-client