This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qnZR9VaSsOOfrhsj5Bt1GyUVda8.roa File: qnZR9VaSsOOfrhsj5Bt1GyUVda8.roa (raw, json) Hash identifier: KlJKabjLqBMjXBDWD6pTh9q5rQLbQzDGNU5QmSRukX0= Subject key identifier: AA:76:51:F5:56:92:B0:E3:9F:AE:1B:23:E4:1B:75:1B:25:15:75:AF Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B210EB17B79D1D3633B2D90ECC0C94B86 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qnZR9VaSsOOfrhsj5Bt1GyUVda8.roa Signing time: Mon 15 Dec 2025 08:09:29 +0000 ROA not before: Mon 15 Dec 2025 08:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203114 IP address blocks: 45.136.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:0e:b1:7b:79:d1:d3:63:3b:2d:90:ec:c0:c9:4b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Dec 15 08:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa7651f55692b0e39fae1b23e41b751b251575af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:5a:4e:b3:7d:e3:47:8b:cd:a2:c4:5f:f5: 4f:88:e9:64:40:ef:9b:67:66:d3:f1:e8:cf:54:64: 3f:9e:a3:1b:df:94:e6:e9:20:6a:c5:70:ff:c2:f5: e0:20:dd:37:3d:c9:64:17:60:1d:fc:b0:ed:95:a3: 27:85:44:f4:d3:b4:3f:46:fe:b8:3b:4f:e3:80:19: e0:c4:f9:10:0f:de:55:1c:2e:26:71:2c:d0:fd:c8: b1:c0:b7:25:31:db:16:9a:d0:ad:93:90:de:8b:03: ba:38:51:cc:c8:0b:74:9c:4e:cd:cd:55:b9:59:ed: 3c:35:07:11:d4:1f:cd:a6:88:b1:f2:c3:a7:52:35: 39:3f:53:84:3d:7c:84:0f:63:89:f7:1b:4a:6e:10: e5:bd:12:63:d4:5f:e7:6c:56:6a:dd:f0:a4:80:88: df:69:fd:9b:dc:6f:dc:98:5a:8f:a2:f3:ab:0f:49: d0:3b:5b:8f:2d:27:64:e3:4a:83:0f:08:74:38:59: 15:53:0f:e8:68:91:c4:3a:44:80:40:6e:ae:50:30: f8:93:59:b0:cc:3c:06:2f:34:a6:37:93:e1:63:13: 5a:e8:01:91:ab:e3:40:55:d3:ee:51:10:36:7f:1c: ba:29:8a:54:c3:4b:bf:95:a0:98:49:2d:55:64:9a: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:76:51:F5:56:92:B0:E3:9F:AE:1B:23:E4:1B:75:1B:25:15:75:AF X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qnZR9VaSsOOfrhsj5Bt1GyUVda8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.7.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:99:8a:a1:50:7a:83:98:80:3c:63:8b:05:3a:ca:0b:33:7a: f2:16:22:64:2c:f6:e7:bf:7f:f0:be:52:60:c2:54:b3:78:9f: 73:c8:f1:63:7d:d9:32:a4:e7:9f:92:01:5a:be:ed:00:ac:09: ac:9a:9f:29:02:d1:76:ed:6f:d3:0e:f3:c4:35:0f:3b:ac:d4: 93:f5:39:46:cd:18:24:d9:3e:3b:f3:19:f8:0a:42:5f:e3:16: d0:63:0e:ac:27:7d:76:e9:d9:d4:31:21:fa:cd:53:bf:d8:2a: 3b:d6:e3:4f:d1:65:14:bd:4e:09:a5:fc:47:b8:c4:51:93:2b: 14:fa:8d:d5:3a:5d:ee:d5:08:7e:09:20:e4:a8:9c:ec:5f:ed: 41:5c:31:2b:ee:3c:14:84:48:c1:33:33:37:8f:c4:ee:bb:48: 6b:72:4b:ab:3b:9d:11:92:d2:d0:aa:a8:76:bf:41:58:45:5a: 47:8e:66:64:13:c1:95:a9:e2:4c:17:8e:df:66:e6:c4:99:54: 21:51:36:fa:34:00:f2:05:05:2f:8c:1e:cf:fb:26:bb:18:1f: 19:7a:f8:7c:7f:e8:b6:a1:e3:8f:11:67:97:ef:9e:ce:86:ca: 0d:af:21:cb:60:29:ca:58:74:d2:b2:4e:ed:a9:c5:d2:39:55: fa:fd:f3:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshDrF7edHTYzstkOzAyUuGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMjE1MDgwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTc2NTFmNTU2OTJiMGUzOWZhZTFiMjNlNDFiNzUxYjI1MTU3NWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm5aTrN940eLzaLEX/VPiOlkQO+b Z2bT8ejPVGQ/nqMb35Tm6SBqxXD/wvXgIN03PclkF2Ad/LDtlaMnhUT007Q/Rv64 O0/jgBngxPkQD95VHC4mcSzQ/cixwLclMdsWmtCtk5DeiwO6OFHMyAt0nE7NzVW5 We08NQcR1B/Npoix8sOnUjU5P1OEPXyED2OJ9xtKbhDlvRJj1F/nbFZq3fCkgIjf af2b3G/cmFqPovOrD0nQO1uPLSdk40qDDwh0OFkVUw/oaJHEOkSAQG6uUDD4k1mw zDwGLzSmN5PhYxNa6AGRq+NAVdPuURA2fxy6KYpUw0u/laCYSS1VZJooIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKp2UfVWkrDjn64bI+QbdRslFXWvMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvcW5aUjlWYVNzT09mcmhzajVCdDFHeVVWZGE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYgHMA0G CSqGSIb3DQEBCwUAA4IBAQArmYqhUHqDmIA8Y4sFOsoLM3ryFiJkLPbnv3/wvlJg wlSzeJ9zyPFjfdkypOefkgFavu0ArAmsmp8pAtF27W/TDvPENQ87rNST9TlGzRgk 2T478xn4CkJf4xbQYw6sJ3126dnUMSH6zVO/2Co71uNP0WUUvU4JpfxHuMRRkysU +o3VOl3u1Qh+CSDkqJzsX+1BXDEr7jwUhEjBMzM3j8Tuu0hrckurO50RktLQqqh2 v0FYRVpHjmZkE8GVqeJMF47fZubEmVQhUTb6NADyBQUvjB7P+ya7GB8Zevh8f+i2 oeOPEWeX757OhsoNryHLYCnKWHTSsk7tqcXSOVX6/fPt -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:08 2025 by rpki-client