This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/Q-bsBachBMtwcvzNA3WxdmDQJE4.roa File: Q-bsBachBMtwcvzNA3WxdmDQJE4.roa (raw, json) Hash identifier: Z4u+RuGIS4q5UGPThpBHI1wSGtrQyiFyAijCmbYDh84= Subject key identifier: 43:E6:EC:05:A7:21:04:CB:70:72:FC:CD:03:75:B1:76:60:D0:24:4E Certificate issuer: /CN=70797db07bf6d4597ac2dc8be34f89298008f2cd Certificate serial: 019B36C03A5552D688686AA901A6365E81AC Authority key identifier: 70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/Q-bsBachBMtwcvzNA3WxdmDQJE4.roa Signing time: Fri 19 Dec 2025 13:15:25 +0000 ROA not before: Fri 19 Dec 2025 13:15:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200044 IP address blocks: 89.249.16.0/20 maxlen: 24 89.249.31.0/24 maxlen: 24 93.158.192.0/21 maxlen: 21 93.158.192.0/22 maxlen: 22 93.158.192.0/23 maxlen: 23 93.158.192.0/24 maxlen: 24 93.158.193.0/24 maxlen: 24 93.158.194.0/23 maxlen: 23 93.158.194.0/24 maxlen: 24 93.158.195.0/24 maxlen: 24 93.158.196.0/24 maxlen: 24 93.158.197.0/24 maxlen: 24 93.158.198.0/23 maxlen: 23 93.158.198.0/24 maxlen: 24 93.158.199.0/24 maxlen: 24 109.238.240.0/20 maxlen: 24 109.238.246.0/24 maxlen: 24 185.159.64.0/22 maxlen: 24 185.159.64.0/24 maxlen: 24 2a00:eb8::/32 maxlen: 32 2a0d:380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:c0:3a:55:52:d6:88:68:6a:a9:01:a6:36:5e:81:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70797db07bf6d4597ac2dc8be34f89298008f2cd Validity Not Before: Dec 19 13:15:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=43e6ec05a72104cb7072fccd0375b17660d0244e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b6:ec:60:e1:2a:a0:6f:0c:5c:a4:a4:75:28: d3:dd:5d:36:42:9e:a4:44:f4:8f:6b:72:1f:67:aa: e0:b4:f2:92:33:04:7d:bc:8c:c1:5a:06:09:af:bb: 11:aa:2b:d5:e6:df:b8:a0:08:96:7d:8c:4b:48:ce: b3:94:d9:32:2d:56:bb:03:15:a1:40:65:94:76:3f: 9a:89:c5:e6:26:1f:5b:8e:b1:52:c9:fd:01:2d:9f: a5:1d:03:b4:7e:42:7e:80:61:33:86:27:14:ec:e0: 6a:f6:02:78:65:d1:2f:3f:c4:a5:41:fe:ec:9c:df: 31:14:cf:31:81:b8:7e:93:93:9a:78:f8:4b:9c:16: 7f:8e:f7:5f:db:83:2d:cd:32:33:fa:c5:c6:53:62: c7:33:32:b2:c5:2e:bd:7a:84:9d:44:e0:78:bb:04: 68:8b:fa:d5:92:66:b0:16:65:0b:4b:cf:e2:09:56: 73:a9:46:c6:b2:ae:bf:0e:30:4d:e2:92:56:17:18: d9:0f:a8:27:6f:5f:29:39:76:91:3c:50:f5:d8:ef: 25:3d:92:0a:b2:f7:de:18:34:5a:68:7e:c7:4f:4f: e0:21:06:aa:77:8d:61:ae:46:5f:a5:f7:1b:6d:c3: 27:5c:c1:7d:23:55:67:6d:37:81:ef:7e:ba:8b:fc: d7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E6:EC:05:A7:21:04:CB:70:72:FC:CD:03:75:B1:76:60:D0:24:4E X509v3 Authority Key Identifier: keyid:70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/Q-bsBachBMtwcvzNA3WxdmDQJE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.16.0/20 93.158.192.0/21 109.238.240.0/20 185.159.64.0/22 IPv6: 2a00:eb8::/32 2a0d:380::/29 Signature Algorithm: sha256WithRSAEncryption 4c:94:fc:24:b4:d5:c3:43:93:2e:c1:70:da:be:5f:c8:32:76: 3f:8d:de:b1:d6:83:b4:9e:54:ca:71:8e:c9:84:48:7c:19:ab: 79:47:b6:8a:00:ff:ae:1a:8f:58:c7:4a:60:e2:1e:c2:20:d0: 4a:66:07:bc:fc:d6:a9:f7:aa:f4:68:19:ac:0c:a8:45:5d:d1: e7:c4:fa:00:a7:a3:d1:11:4b:3b:ac:b0:06:d6:de:b6:89:02: 2f:bb:d4:b8:37:ee:41:a3:3b:a7:62:65:42:09:ab:6f:d9:88: e5:ee:53:7e:1a:59:9c:6c:92:33:8f:31:30:46:3a:51:da:24: ca:de:ec:86:d1:04:fe:1c:0a:68:59:97:34:3e:40:27:54:f6: 1d:21:4c:8d:30:be:21:f8:6b:fa:26:e2:93:d2:63:8a:c7:e8: f9:3e:75:7b:9b:56:e6:4a:ff:88:01:e0:16:ca:de:b0:73:4b: 44:d1:22:a4:f1:4e:b1:b0:0a:0d:cf:4e:71:b1:d9:93:b5:e9: 72:d4:da:1a:57:b8:b9:f9:b0:69:db:5d:82:35:f0:24:0a:cc: 75:cb:59:0f:c3:5a:e2:40:f7:75:fa:12:0c:95:fa:94:f1:2b: 49:77:bd:3d:76:d0:31:32:16:a4:56:f3:28:da:97:b3:ed:e6: 33:03:6f:72 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZs2wDpVUtaIaGqpAaY2XoGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNzk3ZGIwN2JmNmQ0NTk3YWMyZGM4YmUzNGY4OTI5ODAw OGYyY2QwHhcNMjUxMjE5MTMxNTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2U2ZWMwNWE3MjEwNGNiNzA3MmZjY2QwMzc1YjE3NjYwZDAyNDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LbsYOEqoG8MXKSkdSjT3V02Qp6k RPSPa3IfZ6rgtPKSMwR9vIzBWgYJr7sRqivV5t+4oAiWfYxLSM6zlNkyLVa7AxWh QGWUdj+aicXmJh9bjrFSyf0BLZ+lHQO0fkJ+gGEzhicU7OBq9gJ4ZdEvP8SlQf7s nN8xFM8xgbh+k5OaePhLnBZ/jvdf24MtzTIz+sXGU2LHMzKyxS69eoSdROB4uwRo i/rVkmawFmULS8/iCVZzqUbGsq6/DjBN4pJWFxjZD6gnb18pOXaRPFD12O8lPZIK svfeGDRaaH7HT0/gIQaqd41hrkZfpfcbbcMnXMF9I1VnbTeB7366i/zXeQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFEPm7AWnIQTLcHL8zQN1sXZg0CROMB8GA1UdIwQY MBaAFHB5fbB79tRZesLci+NPiSmACPLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0hsOXNIdjIxRmw2d3R5TDQwLUpLWUFJOHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jMmVlN2EtY2JiNy00NzBlLWI5NjUt OTA3ZGFhNDY0NjNiLzEvUS1ic0JhY2hCTXR3Y3Z6TkEzV3hkbURRSkU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jMmVlN2EtY2JiNy00NzBlLWI5NjUtOTA3ZGFhNDY0NjNi LzEvY0hsOXNIdjIxRmw2d3R5TDQwLUpLWUFJOHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQEWfkQAwQD XZ7AAwQEbe7wAwQCuZ9AMBQEAgACMA4DBQAqAA64AwUDKg0DgDANBgkqhkiG9w0B AQsFAAOCAQEATJT8JLTVw0OTLsFw2r5fyDJ2P43esdaDtJ5UynGOyYRIfBmreUe2 igD/rhqPWMdKYOIewiDQSmYHvPzWqfeq9GgZrAyoRV3R58T6AKej0RFLO6ywBtbe tokCL7vUuDfuQaM7p2JlQgmrb9mI5e5TfhpZnGySM48xMEY6Udokyt7shtEE/hwK aFmXND5AJ1T2HSFMjTC+Ifhr+ibik9Jjisfo+T51e5tW5kr/iAHgFsresHNLRNEi pPFOsbAKDc9OcbHZk7XpctTaGle4ufmwadtdgjXwJArMdctZD8Na4kD3dfoSDJX6 lPErSXe9PXbQMTIWpFbzKNqXs+3mMwNvcg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:51:57 2025 by rpki-client