This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qBzheCaNhIxanRT-J8XPoyRZBA0.roa File: qBzheCaNhIxanRT-J8XPoyRZBA0.roa (raw, json) Hash identifier: TEuCVtUkfxi+FCLNDJ4ileXcO8zIcQUw8LywQQg1CLg= Subject key identifier: A8:1C:E1:78:26:8D:84:8C:5A:9D:14:FE:27:C5:CF:A3:24:59:04:0D Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B2A7CF21AF8350563FAB4FF8A2B96CFC4 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qBzheCaNhIxanRT-J8XPoyRZBA0.roa Signing time: Wed 17 Dec 2025 04:06:30 +0000 ROA not before: Wed 17 Dec 2025 04:06:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207483 IP address blocks: 31.14.10.0/24 maxlen: 24 176.223.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:7c:f2:1a:f8:35:05:63:fa:b4:ff:8a:2b:96:cf:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 17 04:06:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a81ce178268d848c5a9d14fe27c5cfa32459040d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:68:6e:45:d2:71:40:54:ff:fc:d7:70:93:6f: 3d:67:76:c5:c4:63:14:b5:8a:38:22:ee:fb:22:99: e9:52:21:f2:f7:9b:b4:a8:de:0a:69:77:fe:77:19: 43:5c:13:8d:aa:84:49:ad:0a:b5:32:f6:af:8a:5d: 72:9e:e1:ab:ed:c5:00:39:c3:9d:bb:b1:fb:01:8f: 46:39:b0:49:80:51:2b:17:1a:51:62:2e:ca:24:ef: a5:7d:98:e6:39:21:72:3d:33:cd:cc:cd:07:c6:3a: 43:9b:94:d3:35:2f:96:86:d7:64:f1:13:2a:2e:21: 83:56:cb:31:08:6e:7b:04:d8:4f:7b:f8:c0:d4:be: 7c:e6:4a:42:0d:4c:90:80:5b:87:1d:c9:91:50:89: 67:b7:2c:f9:a3:83:c4:e1:40:bf:7e:f7:d8:ad:e2: 75:bc:ae:0c:ca:16:2c:1e:e8:8e:5a:fe:e8:28:45: b3:97:cf:5a:07:ea:b5:26:69:a5:cb:64:6c:a9:18: e8:c8:af:52:32:b0:1a:25:44:47:88:2e:9d:d3:5f: 76:ad:d7:24:a2:b0:fa:8e:15:2a:a7:2e:f9:e2:75: 7f:62:b8:d6:72:69:52:9d:81:8e:1b:6c:74:27:d4: 6b:42:45:5c:1f:80:db:f1:95:c2:de:f4:e7:1e:0a: 9e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1C:E1:78:26:8D:84:8C:5A:9D:14:FE:27:C5:CF:A3:24:59:04:0D X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qBzheCaNhIxanRT-J8XPoyRZBA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.10.0/24 176.223.66.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:3e:6d:8d:57:9d:52:58:29:45:03:dc:c3:15:89:5f:e6:4b: 6c:24:d8:dd:8d:e7:a6:90:8e:05:2a:dd:4e:89:ce:2c:cd:81: 4e:d5:c5:40:7c:5a:e3:9f:19:cf:df:48:19:e4:b9:41:00:ea: 8a:ea:f3:6e:9f:6f:d4:ca:a8:0f:b2:82:34:59:ad:09:e3:64: 3a:6f:45:bb:f3:96:61:67:e6:da:8d:39:d0:64:19:72:66:c7: 64:f3:bd:be:0f:4a:39:c9:a9:0e:7e:d8:10:f8:06:c2:5d:4c: c8:23:e7:0b:08:86:3b:81:e5:ce:9a:b1:8e:b3:32:42:76:a3: cd:4c:ce:dd:a3:cc:6c:34:fa:da:de:99:1b:a8:d6:ab:d5:3d: ba:c1:94:f8:ea:18:41:2e:5f:d3:7f:f5:50:07:f3:ab:45:10: e5:5d:6b:9b:b5:6f:46:0b:27:4b:3e:b2:51:0a:19:52:f8:7c: 74:f5:6e:77:63:20:89:18:99:2d:07:50:2c:ae:37:54:82:d8: 6e:76:1d:34:3d:b1:a4:4e:8d:f0:e8:ca:82:c2:98:b1:1f:3f: 67:1e:f4:be:64:6c:71:25:1d:41:6b:01:22:33:99:71:b3:8c: 87:45:98:3b:5d:7a:a8:aa:90:08:9b:f3:6f:d0:e4:da:18:1a: 37:76:aa:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsqfPIa+DUFY/q0/4orls/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjE3MDQwNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODFjZTE3ODI2OGQ4NDhjNWE5ZDE0ZmUyN2M1Y2ZhMzI0NTkwNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WhuRdJxQFT//Ndwk289Z3bFxGMU tYo4Iu77IpnpUiHy95u0qN4KaXf+dxlDXBONqoRJrQq1Mvavil1ynuGr7cUAOcOd u7H7AY9GObBJgFErFxpRYi7KJO+lfZjmOSFyPTPNzM0HxjpDm5TTNS+Whtdk8RMq LiGDVssxCG57BNhPe/jA1L585kpCDUyQgFuHHcmRUIlntyz5o4PE4UC/fvfYreJ1 vK4MyhYsHuiOWv7oKEWzl89aB+q1Jmmly2RsqRjoyK9SMrAaJURHiC6d0192rdck orD6jhUqpy754nV/YrjWcmlSnYGOG2x0J9RrQkVcH4Db8ZXC3vTnHgqeQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKgc4XgmjYSMWp0U/ifFz6MkWQQNMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvcUJ6aGVDYU5oSXhhblJULUo4WFBveVJaQkEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHw4KAwQA sN9CMA0GCSqGSIb3DQEBCwUAA4IBAQBLPm2NV51SWClFA9zDFYlf5ktsJNjdjeem kI4FKt1Oic4szYFO1cVAfFrjnxnP30gZ5LlBAOqK6vNun2/UyqgPsoI0Wa0J42Q6 b0W785ZhZ+bajTnQZBlyZsdk872+D0o5yakOftgQ+AbCXUzII+cLCIY7geXOmrGO szJCdqPNTM7do8xsNPra3pkbqNar1T26wZT46hhBLl/Tf/VQB/OrRRDlXWubtW9G CydLPrJRChlS+Hx09W53YyCJGJktB1AsrjdUgthudh00PbGkTo3w6MqCwpixHz9n HvS+ZGxxJR1BawEiM5lxs4yHRZg7XXqoqpAIm/Nv0OTaGBo3dqpf -----END CERTIFICATE-----Generated at Sat Dec 20 09:32:56 2025 by rpki-client