This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/QFMNSaA1AgOll9Rhq3-mt61hLMk.roa File: QFMNSaA1AgOll9Rhq3-mt61hLMk.roa (raw, json) Hash identifier: +xD5AYj4TTeFCJ4bmxTQKDayuztzAdCF4gvCsORl2KQ= Subject key identifier: 40:53:0D:49:A0:35:02:03:A5:97:D4:61:AB:7F:A6:B7:AD:61:2C:C9 Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Certificate serial: 019AFEF523677FBD77132172CAE0E07C3438 Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/QFMNSaA1AgOll9Rhq3-mt61hLMk.roa Signing time: Mon 08 Dec 2025 17:14:29 +0000 ROA not before: Mon 08 Dec 2025 17:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 216.25.124.0/24 maxlen: 24 216.25.125.0/24 maxlen: 24 216.25.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:f5:23:67:7f:bd:77:13:21:72:ca:e0:e0:7c:34:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Validity Not Before: Dec 8 17:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=40530d49a0350203a597d461ab7fa6b7ad612cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:d0:07:17:12:19:39:ca:cb:f4:bf:08:e7: 71:ca:4e:08:6d:17:e3:f7:2d:ac:fb:f7:58:5e:20: 35:bf:f0:d5:e0:91:a1:2c:5e:68:4b:e9:8c:5b:03: 41:1c:54:8f:b6:5c:1b:17:b0:78:0a:1f:ab:48:83: fc:c5:ea:f1:9b:84:87:c9:d4:c4:3e:f5:1b:79:9f: 41:d2:c0:fb:47:75:69:16:ae:cb:69:d3:f8:4f:66: b9:14:ca:a0:1b:b6:a1:c4:8a:06:a6:06:45:00:e7: 7d:ee:36:7b:c6:f5:41:85:69:a1:13:4f:23:54:dc: bf:ce:b0:cc:42:d7:1f:de:fb:79:76:b8:5c:e2:7f: a8:1e:df:e5:e0:68:f9:1f:8f:2a:8f:0a:7a:33:2d: b4:72:3d:a2:39:48:47:d4:6f:27:60:79:56:f2:e9: d5:ef:56:3f:22:b0:26:04:d6:30:48:0d:7a:9d:27: 82:c5:e7:f2:f9:52:d7:9c:f2:78:9a:76:cf:d7:c8: 3e:78:7b:b3:fe:1e:6c:74:96:aa:4e:8f:23:33:1e: 83:7d:af:bf:94:55:5e:b5:5c:89:01:eb:fc:72:aa: 7a:5a:20:77:58:2a:fb:44:3f:bd:ab:1f:f5:59:dd: 55:c0:0f:ce:0c:6a:be:0e:1c:1b:9c:10:20:b7:de: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:0D:49:A0:35:02:03:A5:97:D4:61:AB:7F:A6:B7:AD:61:2C:C9 X509v3 Authority Key Identifier: keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/QFMNSaA1AgOll9Rhq3-mt61hLMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.25.124.0-216.25.126.255 Signature Algorithm: sha256WithRSAEncryption 7b:83:39:65:c0:90:71:d4:0d:6d:c5:da:bd:22:8f:d7:d6:e9: 71:59:03:90:8d:24:c8:11:18:38:34:d4:f6:a2:2d:75:bb:fc: cf:5a:6d:a9:b6:0a:7c:46:f4:85:e1:20:c5:61:c8:40:5f:30: ef:2a:7d:4e:4d:5f:f7:3f:de:19:94:c7:dc:c4:c8:a6:48:1f: 93:e0:5b:41:97:a8:4e:a8:f3:9e:23:26:06:80:b5:5e:d3:af: 4b:50:3f:dc:ac:73:86:c7:ab:2c:32:cb:45:66:4b:c3:3c:3b: a4:13:53:82:14:2d:20:31:36:c7:ca:69:fd:d0:28:45:96:ad: c9:8e:41:19:08:98:f0:52:11:67:7e:52:7f:b8:bd:eb:03:c8: e0:ca:61:c9:c1:13:5c:7d:6a:79:6b:12:59:f0:83:24:c1:64: c7:3b:a6:08:2a:63:7c:2c:0c:0f:e9:93:c7:04:2b:9c:6d:21: 9c:6d:86:11:da:98:be:94:cb:23:4a:8e:ff:24:03:88:0d:ea: f0:71:dd:80:21:0c:f3:34:29:f5:22:57:aa:5a:41:fb:14:5c: 9a:7d:04:8a:14:50:c2:0e:2b:ec:c6:76:8b:36:9f:92:c1:ee: ef:99:c1:d2:45:c6:7d:23:7e:a6:4c:24:f7:cc:d5:b6:e6:f0: 4f:66:88:98 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZr+9SNnf713EyFyyuDgfDQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOWZjOGEwNjdmYTZkMjQ3NmJkY2UyNGFmZmZhZDE3MTMx ZDllODYwHhcNMjUxMjA4MTcxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDUzMGQ0OWEwMzUwMjAzYTU5N2Q0NjFhYjdmYTZiN2FkNjEyY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArevQBxcSGTnKy/S/COdxyk4IbRfj 9y2s+/dYXiA1v/DV4JGhLF5oS+mMWwNBHFSPtlwbF7B4Ch+rSIP8xerxm4SHydTE PvUbeZ9B0sD7R3VpFq7LadP4T2a5FMqgG7ahxIoGpgZFAOd97jZ7xvVBhWmhE08j VNy/zrDMQtcf3vt5drhc4n+oHt/l4Gj5H48qjwp6My20cj2iOUhH1G8nYHlW8unV 71Y/IrAmBNYwSA16nSeCxefy+VLXnPJ4mnbP18g+eHuz/h5sdJaqTo8jMx6Dfa+/ lFVetVyJAev8cqp6WiB3WCr7RD+9qx/1Wd1VwA/ODGq+DhwbnBAgt965FwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEBTDUmgNQIDpZfUYat/pretYSzJMB8GA1UdIwQY MBaAFMCfyKBn+m0kdr3OJK//rRcTHZ6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYt OGU5MjRmZmJlNTg0LzEvUUZNTlNhQTFBZ09sbDlSaHEzLW10NjFoTE1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYtOGU5MjRmZmJlNTg0 LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALYGXwD BADYGX4wDQYJKoZIhvcNAQELBQADggEBAHuDOWXAkHHUDW3F2r0ij9fW6XFZA5CN JMgRGDg01PaiLXW7/M9abam2CnxG9IXhIMVhyEBfMO8qfU5NX/c/3hmUx9zEyKZI H5PgW0GXqE6o854jJgaAtV7Tr0tQP9ysc4bHqywyy0VmS8M8O6QTU4IULSAxNsfK af3QKEWWrcmOQRkImPBSEWd+Un+4vesDyODKYcnBE1x9anlrElnwgyTBZMc7pggq Y3wsDA/pk8cEK5xtIZxthhHamL6UyyNKjv8kA4gN6vBx3YAhDPM0KfUiV6paQfsU XJp9BIoUUMIOK+zGdos2n5LB7u+ZwdJFxn0jfqZMJPfM1bbm8E9miJg= -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:54 2025 by rpki-client