This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/jPQhWSPbJrDgBisE3QHlP-LQn3M.roa File: jPQhWSPbJrDgBisE3QHlP-LQn3M.roa (raw, json) Hash identifier: aNePKBPywT8UKvj1ZcaWKnrp38Gzd5gq2H+pwRm93KE= Subject key identifier: 8C:F4:21:59:23:DB:26:B0:E0:06:2B:04:DD:01:E5:3F:E2:D0:9F:73 Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Certificate serial: 019B2286FC740A7AC1055ED234EFF8555835 Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/jPQhWSPbJrDgBisE3QHlP-LQn3M.roa Signing time: Mon 15 Dec 2025 15:00:30 +0000 ROA not before: Mon 15 Dec 2025 15:00:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204457 IP address blocks: 188.125.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:86:fc:74:0a:7a:c1:05:5e:d2:34:ef:f8:55:58:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Validity Not Before: Dec 15 15:00:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8cf4215923db26b0e0062b04dd01e53fe2d09f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:86:33:87:4b:2e:fa:9b:54:e4:72:e5:dc:27: 7f:e3:db:53:29:51:c5:b9:dc:41:3d:2a:59:6b:11: b9:eb:5f:f2:30:d4:26:6a:2f:1d:3e:0b:20:51:83: 46:b6:3d:27:ea:70:20:36:a9:1a:be:0b:b2:47:20: 4f:b5:45:11:39:82:b9:72:53:12:b2:46:ba:e0:6e: 6a:8a:d1:b8:db:4a:4e:7c:10:33:7a:20:43:ef:82: ac:0e:5e:9e:0b:14:af:10:80:62:7b:ff:1b:27:a4: cd:a2:19:c9:f1:81:49:ab:24:da:dc:d0:3e:e0:cd: 5b:51:0d:c0:32:30:aa:e1:f4:1c:4c:25:d3:0e:71: e1:33:af:f6:22:ee:79:a0:c3:ae:e3:55:c2:8d:a6: ee:5e:83:ee:b6:ae:07:53:57:5b:44:20:f4:7b:31: 64:09:6c:e2:fe:95:7e:1d:ae:aa:6d:5f:0c:34:7a: 5c:31:b8:05:ed:83:7c:11:bb:7a:86:6a:eb:d3:7e: 51:47:cc:89:b9:9c:a1:82:98:f2:eb:f5:13:cb:3c: 38:04:9f:6a:0f:3c:e1:19:3c:b6:d7:f0:2b:63:6a: 0e:e2:df:59:4e:f5:91:54:2e:9a:e7:2e:25:d7:28: 8e:6a:74:6e:dd:70:0f:29:29:44:4c:41:23:d8:b9: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F4:21:59:23:DB:26:B0:E0:06:2B:04:DD:01:E5:3F:E2:D0:9F:73 X509v3 Authority Key Identifier: keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/jPQhWSPbJrDgBisE3QHlP-LQn3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.163.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:a2:40:4c:fa:02:06:2a:a2:03:47:8c:7f:af:0e:a1:dc:f0: bd:51:31:ea:a5:89:a1:62:77:12:1b:14:ed:70:eb:8e:eb:7d: dd:98:f3:f8:cf:ea:cb:fc:4d:42:8c:87:dd:1e:30:22:9a:1d: 1f:c4:93:20:63:51:c1:2e:30:26:78:86:65:76:2b:81:66:f9: ca:d4:60:a1:d3:6a:26:d2:59:2a:4e:6e:22:b7:5c:51:59:ea: 76:0d:d1:ba:02:30:7b:64:f2:59:a1:85:7f:85:28:9d:de:1d: 01:c9:00:ad:43:57:57:02:97:3b:ad:7b:64:06:ba:1d:56:d7: 68:7f:c3:f4:94:30:37:4a:75:87:07:65:29:62:43:95:82:07: bc:1b:b5:a8:56:ed:45:b2:01:09:02:c3:70:78:5a:85:f2:01: 47:77:b9:12:48:5e:b9:f8:80:18:7f:a5:6b:b4:e2:ca:c9:81: ec:ed:ba:41:f7:f0:8f:f1:3d:a7:98:40:7a:d3:2a:9a:01:f5: 0c:90:75:e3:17:b2:fb:66:10:53:92:ec:08:89:ce:d2:14:97: fe:dd:83:8d:f1:8b:34:ff:f7:78:19:5d:8d:3c:7f:1c:a3:31: bf:87:ae:c2:46:8d:ce:0e:1e:2a:30:3d:5c:b4:d3:6f:83:d3: af:6d:be:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsihvx0CnrBBV7SNO/4VVg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0 M2Q4MGMwHhcNMjUxMjE1MTUwMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2Y0MjE1OTIzZGIyNmIwZTAwNjJiMDRkZDAxZTUzZmUyZDA5ZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloYzh0su+ptU5HLl3Cd/49tTKVHF udxBPSpZaxG561/yMNQmai8dPgsgUYNGtj0n6nAgNqkavguyRyBPtUUROYK5clMS ska64G5qitG420pOfBAzeiBD74KsDl6eCxSvEIBie/8bJ6TNohnJ8YFJqyTa3NA+ 4M1bUQ3AMjCq4fQcTCXTDnHhM6/2Iu55oMOu41XCjabuXoPutq4HU1dbRCD0ezFk CWzi/pV+Ha6qbV8MNHpcMbgF7YN8Ebt6hmrr035RR8yJuZyhgpjy6/UTyzw4BJ9q DzzhGTy21/ArY2oO4t9ZTvWRVC6a5y4l1yiOanRu3XAPKSlETEEj2LkFIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIz0IVkj2yaw4AYrBN0B5T/i0J9zMB8GA1UdIwQY MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt NjliOTUzYzlkNWFhLzEvalBRaFdTUGJKckRnQmlzRTNRSGxQLUxRbjNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvH2jMA0G CSqGSIb3DQEBCwUAA4IBAQAsokBM+gIGKqIDR4x/rw6h3PC9UTHqpYmhYncSGxTt cOuO633dmPP4z+rL/E1CjIfdHjAimh0fxJMgY1HBLjAmeIZldiuBZvnK1GCh02om 0lkqTm4it1xRWep2DdG6AjB7ZPJZoYV/hSid3h0ByQCtQ1dXApc7rXtkBrodVtdo f8P0lDA3SnWHB2UpYkOVgge8G7WoVu1FsgEJAsNweFqF8gFHd7kSSF65+IAYf6Vr tOLKyYHs7bpB9/CP8T2nmEB60yqaAfUMkHXjF7L7ZhBTkuwIic7SFJf+3YON8Ys0 //d4GV2NPH8cozG/h67CRo3ODh4qMD1ctNNvg9Ovbb5/ -----END CERTIFICATE-----Generated at Sat Dec 20 03:59:36 2025 by rpki-client