This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/QRXUHF37F-opsyYWxXP7VgAa1i8.roa File: QRXUHF37F-opsyYWxXP7VgAa1i8.roa (raw, json) Hash identifier: Rd6zDiWkrBTIuMj25R/o3LbSCqV2kuQDIEMGjWq9WXE= Subject key identifier: 41:15:D4:1C:5D:FB:17:EA:29:B3:26:16:C5:73:FB:56:00:1A:D6:2F Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019B7910656E6894BF7DD8DA7BACF9C2322D Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/QRXUHF37F-opsyYWxXP7VgAa1i8.roa Signing time: Thu 01 Jan 2026 10:17:56 +0000 ROA not before: Thu 01 Jan 2026 10:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216138 IP address blocks: 45.136.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:65:6e:68:94:bf:7d:d8:da:7b:ac:f9:c2:32:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jan 1 10:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4115d41c5dfb17ea29b32616c573fb56001ad62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:98:28:93:e7:d8:00:29:af:b7:57:df:08: 54:db:2c:19:eb:9b:43:50:0d:c3:71:3b:e9:35:9e: 84:80:cf:7c:37:2b:22:02:35:ba:7e:4f:e7:e5:04: cd:47:5f:30:5c:9f:52:c2:af:f5:5e:45:ca:3a:7a: 99:e8:24:aa:d1:ae:3e:41:69:00:74:41:0a:d4:74: cd:7c:c5:a3:77:8b:33:7c:61:fc:fd:a1:89:41:ea: 64:5d:8c:0c:1e:62:4e:a8:76:65:2e:24:33:d7:df: de:ce:26:be:78:e1:3b:7b:c4:45:8d:c3:a5:65:12: 6c:f3:72:3f:23:26:0c:95:f3:e6:53:42:bb:54:a1: c3:de:3c:19:05:8b:89:2b:a0:38:7a:05:df:5d:14: 05:06:d7:f2:09:fd:31:e2:78:9e:10:31:ed:6f:8e: 8d:d5:9d:fd:5c:8e:e8:23:6a:2a:57:6e:ea:39:cf: 12:54:6f:f5:8a:75:40:d5:eb:67:19:d2:7a:cc:a4: 7d:d8:1c:14:51:46:4d:fa:10:78:dc:c7:a3:92:dd: c6:6d:25:2d:0e:c0:b4:df:15:68:4c:a3:dd:f0:f1: 6a:2e:94:52:f3:3c:cd:69:58:89:f1:18:30:32:9f: 8a:3b:d8:f5:e6:72:5c:06:64:fd:72:3f:81:03:87: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:15:D4:1C:5D:FB:17:EA:29:B3:26:16:C5:73:FB:56:00:1A:D6:2F X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/QRXUHF37F-opsyYWxXP7VgAa1i8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.37.0/24 Signature Algorithm: sha256WithRSAEncryption 11:ac:1d:3a:4e:83:f5:96:46:6b:48:09:5d:c1:8d:f0:4a:54: 29:31:17:7f:99:9b:8d:60:54:56:dd:06:84:18:6c:e5:86:34: 15:3b:38:f0:f1:4e:bd:57:5c:19:49:1f:5c:66:6e:84:7e:ba: 32:ef:d2:f0:1c:90:51:ae:66:c4:b1:46:0e:0d:c0:48:7e:38: d1:0e:d5:57:6c:3f:55:85:bd:b9:9b:4b:14:09:cc:d6:e8:dd: 50:f6:f9:3f:39:44:79:4b:4a:52:18:dd:1a:92:a4:a3:bf:e0: c7:ee:30:d4:60:c6:3c:9f:fd:0e:63:bf:fc:53:06:df:32:1b: e9:62:30:39:fc:9e:c5:f5:ea:7d:dd:89:86:e1:21:0b:07:cf: c3:50:fe:b9:21:4d:cf:33:11:96:8e:f3:49:4c:af:d0:fa:58: 16:27:86:ad:19:09:6f:87:b9:19:b5:77:b4:40:ba:d3:53:e1: a6:db:cc:9d:0c:80:6c:7f:1f:f5:66:b1:b2:92:38:af:06:f8: a0:fd:7a:e1:6c:3d:0c:cf:90:d6:d7:b7:8a:72:44:a9:c1:e8: e8:d9:b7:b5:8f:0b:f4:e3:f1:31:82:27:fe:3b:f5:9d:20:73: e7:cf:fa:45:e5:2f:2b:69:cc:ad:5c:4c:ab:55:f1:88:fe:82: ca:53:1c:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGVuaJS/fdjae6z5wjItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjYwMTAxMTAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTE1ZDQxYzVkZmIxN2VhMjliMzI2MTZjNTczZmI1NjAwMWFkNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzCYKJPn2AApr7dX3whU2ywZ65tD UA3DcTvpNZ6EgM98NysiAjW6fk/n5QTNR18wXJ9Swq/1XkXKOnqZ6CSq0a4+QWkA dEEK1HTNfMWjd4szfGH8/aGJQepkXYwMHmJOqHZlLiQz19/ezia+eOE7e8RFjcOl ZRJs83I/IyYMlfPmU0K7VKHD3jwZBYuJK6A4egXfXRQFBtfyCf0x4nieEDHtb46N 1Z39XI7oI2oqV27qOc8SVG/1inVA1etnGdJ6zKR92BwUUUZN+hB43Mejkt3GbSUt DsC03xVoTKPd8PFqLpRS8zzNaViJ8RgwMp+KO9j15nJcBmT9cj+BA4cwGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEEV1Bxd+xfqKbMmFsVz+1YAGtYvMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvUVJYVUhGMzdGLW9wc3lZV3hYUDdWZ0FhMWk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYglMA0G CSqGSIb3DQEBCwUAA4IBAQARrB06ToP1lkZrSAldwY3wSlQpMRd/mZuNYFRW3QaE GGzlhjQVOzjw8U69V1wZSR9cZm6Efroy79LwHJBRrmbEsUYODcBIfjjRDtVXbD9V hb25m0sUCczW6N1Q9vk/OUR5S0pSGN0akqSjv+DH7jDUYMY8n/0OY7/8UwbfMhvp YjA5/J7F9ep93YmG4SELB8/DUP65IU3PMxGWjvNJTK/Q+lgWJ4atGQlvh7kZtXe0 QLrTU+Gm28ydDIBsfx/1ZrGykjivBvig/XrhbD0Mz5DW17eKckSpwejo2be1jwv0 4/Exgif+O/WdIHPnz/pF5S8racytXEyrVfGI/oLKUxz5 -----END CERTIFICATE-----Generated at Sun Jan 11 23:38:33 2026 by rpki-client