This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/hQq_Mzj6yvSFG9yKT5t3-faZTLc.roa File: hQq_Mzj6yvSFG9yKT5t3-faZTLc.roa (raw, json) Hash identifier: BBc6f7cproUgj+FmpvLZwr/JuHZHEz2FSSvrDPt/yFI= Subject key identifier: 85:0A:BF:33:38:FA:CA:F4:85:1B:DC:8A:4F:9B:77:F9:F6:99:4C:B7 Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3 Certificate serial: 019B26F37B96A094B187DEABB9548A0A43DE Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/hQq_Mzj6yvSFG9yKT5t3-faZTLc.roa Signing time: Tue 16 Dec 2025 11:37:29 +0000 ROA not before: Tue 16 Dec 2025 11:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2856 IP address blocks: 2.24.0.0/13 maxlen: 13 31.64.0.0/12 maxlen: 12 31.90.0.0/15 maxlen: 15 31.92.0.0/15 maxlen: 15 31.94.0.0/16 maxlen: 16 31.96.0.0/16 maxlen: 16 31.100.0.0/14 maxlen: 14 31.104.0.0/16 maxlen: 16 31.106.0.0/15 maxlen: 15 31.112.0.0/14 maxlen: 14 31.116.0.0/14 maxlen: 14 31.116.0.0/16 maxlen: 16 31.117.0.0/16 maxlen: 16 31.118.0.0/16 maxlen: 16 31.119.0.0/16 maxlen: 16 31.120.0.0/16 maxlen: 16 31.121.0.0/16 maxlen: 16 31.122.0.0/15 maxlen: 15 31.124.0.0/16 maxlen: 16 31.126.0.0/15 maxlen: 15 46.68.0.0/15 maxlen: 15 46.68.66.0/24 maxlen: 24 82.192.112.0/20 maxlen: 20 91.110.0.0/16 maxlen: 16 91.111.0.0/16 maxlen: 16 95.144.0.0/13 maxlen: 13 109.180.0.0/15 maxlen: 15 178.98.0.0/15 maxlen: 15 178.100.0.0/14 maxlen: 14 178.107.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:f3:7b:96:a0:94:b1:87:de:ab:b9:54:8a:0a:43:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b98127943e7175734964010c89ef821416a31b3 Validity Not Before: Dec 16 11:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=850abf3338facaf4851bdc8a4f9b77f9f6994cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:6b:23:ee:b1:f9:3b:2c:df:53:01:f2:6a: 83:a9:32:25:29:72:ac:1a:bd:d5:f0:86:af:14:20: 10:04:28:4b:bb:0a:4a:9b:84:07:9f:8b:86:dc:82: f4:ee:a8:f4:f3:33:9e:96:14:2a:6c:75:99:b5:f3: b8:26:5e:49:dd:56:b6:09:1e:06:19:50:60:39:77: 74:cc:d0:84:d7:af:6b:83:bf:1f:f8:60:56:ef:f1: af:dc:59:9b:3b:b1:e5:49:eb:c6:df:ff:18:0c:21: 06:9c:40:8a:da:68:5a:76:c9:8d:17:2f:66:8d:c2: 24:bc:c8:c3:55:3e:e7:cf:32:c7:ce:5b:dc:7b:91: 88:fe:f4:34:69:73:6d:9c:88:8c:c0:e3:0b:dc:5f: 7a:d9:49:35:70:2a:a0:fa:07:ee:83:55:a3:3c:d1: 78:63:da:90:c8:c7:b7:c0:b9:57:75:18:36:0f:1e: 33:61:ec:f5:c3:b7:df:9b:be:48:df:85:70:92:02: 5a:b3:65:6b:c0:f4:a9:fb:fd:64:63:b3:1e:1b:1b: 09:c4:eb:15:7c:74:0c:37:77:0f:8d:6e:38:49:b1: 6d:42:bb:bf:c8:29:a3:39:0b:65:ad:4f:dc:00:90: af:5e:97:ef:42:35:24:6a:9b:ae:34:b2:4e:36:47: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0A:BF:33:38:FA:CA:F4:85:1B:DC:8A:4F:9B:77:F9:F6:99:4C:B7 X509v3 Authority Key Identifier: keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/hQq_Mzj6yvSFG9yKT5t3-faZTLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.24.0.0/13 31.64.0.0/12 31.90.0.0-31.94.255.255 31.96.0.0/16 31.100.0.0-31.104.255.255 31.106.0.0/15 31.112.0.0-31.124.255.255 31.126.0.0/15 46.68.0.0/15 82.192.112.0/20 91.110.0.0/15 95.144.0.0/13 109.180.0.0/15 178.98.0.0-178.103.255.255 178.107.128.0/17 Signature Algorithm: sha256WithRSAEncryption 8b:04:a3:78:5b:2a:13:a1:73:3b:c6:82:ab:d3:27:0d:ac:c3: 23:8c:8a:c3:66:eb:81:fe:06:8a:3d:49:25:dc:35:86:9c:49: 49:d6:90:80:6e:0c:b7:6d:2e:6e:66:76:f3:1e:69:a7:95:bd: 71:12:7f:21:21:0b:6e:11:50:d2:b6:4c:89:e0:ea:f9:a0:d5: dc:09:a7:67:26:2c:9e:5b:96:66:01:16:73:19:55:ef:e3:d1: 40:e6:d0:da:b0:4d:34:0b:a3:22:8f:fa:6d:b4:3f:37:aa:c4: 27:8a:6b:cf:17:6a:05:26:fe:2b:f2:d4:d0:10:a0:3c:eb:b7: 64:ab:87:85:e7:d0:ea:60:72:eb:96:1d:1a:d2:41:97:75:57: 14:c8:5f:90:dd:52:af:e8:23:5c:1c:61:87:90:48:5c:5a:27: b0:38:6a:9b:ca:db:89:c8:78:32:e2:f4:7c:95:44:b3:8e:fe: 73:05:a1:23:61:b8:a7:d5:fe:b8:bc:14:51:e8:1c:43:5b:54: 10:dd:dc:af:c1:83:e8:7f:e7:d8:0d:85:c1:54:55:f5:b5:34: fc:eb:43:26:e6:da:09:59:5d:74:76:15:7d:d9:be:81:94:16: a9:85:34:01:d3:e4:bc:0d:b6:ef:e6:71:e4:55:d4:86:7a:47: b2:ab:22:ce -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZsm83uWoJSxh96ruVSKCkPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2 YTMxYjMwHhcNMjUxMjE2MTEzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTBhYmYzMzM4ZmFjYWY0ODUxYmRjOGE0ZjliNzdmOWY2OTk0Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpRrI+6x+Tss31MB8mqDqTIlKXKs Gr3V8IavFCAQBChLuwpKm4QHn4uG3IL07qj08zOelhQqbHWZtfO4Jl5J3Va2CR4G GVBgOXd0zNCE169rg78f+GBW7/Gv3FmbO7HlSevG3/8YDCEGnECK2mhadsmNFy9m jcIkvMjDVT7nzzLHzlvce5GI/vQ0aXNtnIiMwOML3F962Uk1cCqg+gfug1WjPNF4 Y9qQyMe3wLlXdRg2Dx4zYez1w7ffm75I34VwkgJas2VrwPSp+/1kY7MeGxsJxOsV fHQMN3cPjW44SbFtQru/yCmjOQtlrU/cAJCvXpfvQjUkapuuNLJONkd86QIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFIUKvzM4+sr0hRvcik+bd/n2mUy3MB8GA1UdIwQY MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt NjIxNzkyZjdlNTZhLzEvaFFxX016ajZ5dlNGRzl5S1Q1dDMtZmFaVExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAEwaQMDAwIYAwME H0AwCgMDAR9aAwMAH14DAwAfYDAKAwMCH2QDAwAfaAMDAR9qMAoDAwQfcAMDAB98 AwMBH34DAwEuRAMEBFLAcAMDAVtuAwMDX5ADAwFttDAKAwMBsmIDAwOyYAMEB7Jr gDANBgkqhkiG9w0BAQsFAAOCAQEAiwSjeFsqE6FzO8aCq9MnDazDI4yKw2brgf4G ij1JJdw1hpxJSdaQgG4Mt20ubmZ28x5pp5W9cRJ/ISELbhFQ0rZMieDq+aDV3Amn ZyYsnluWZgEWcxlV7+PRQObQ2rBNNAujIo/6bbQ/N6rEJ4przxdqBSb+K/LU0BCg POu3ZKuHhefQ6mBy65YdGtJBl3VXFMhfkN1Sr+gjXBxhh5BIXFonsDhqm8rbich4 MuL0fJVEs47+cwWhI2G4p9X+uLwUUegcQ1tUEN3cr8GD6H/n2A2FwVRV9bU0/OtD JubaCVlddHYVfdm+gZQWqYU0AdPkvA227+Zx5FXUhnpHsqsizg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:34:39 2025 by rpki-client