This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qAUfMZBmvMBpx58p9ssoSKrIxO4.roa File: qAUfMZBmvMBpx58p9ssoSKrIxO4.roa (raw, json) Hash identifier: 1KNb3PsilnulYdf46+8Tq4CWg6YLv6qiCNo27aReeS4= Subject key identifier: A8:05:1F:31:90:66:BC:C0:69:C7:9F:29:F6:CB:28:48:AA:C8:C4:EE Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2E1132C7653672F0936EB73FEEC5D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qAUfMZBmvMBpx58p9ssoSKrIxO4.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16589 IP address blocks: 45.84.88.0/24 maxlen: 24 45.89.244.0/24 maxlen: 24 45.91.193.0/24 maxlen: 24 45.149.235.0/24 maxlen: 24 109.206.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e1:13:2c:76:53:67:2f:09:36:eb:73:fe:ec:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8051f319066bcc069c79f29f6cb2848aac8c4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b7:b9:39:14:3c:67:ec:5b:9b:4f:8a:02:29: d2:7a:01:ab:e9:4c:8e:c7:f4:2a:25:09:47:95:1b: 17:db:fb:51:67:25:60:8b:86:1a:89:f8:d9:85:6e: 38:a4:3d:08:89:dd:05:78:3c:29:f9:c1:96:03:92: 84:9c:b4:0b:d2:ab:b5:2d:5a:45:c7:0b:45:fb:3f: 10:9a:32:87:8a:92:e9:a9:7c:de:87:b6:80:46:ee: 70:5a:70:53:e3:20:a6:01:34:3e:e3:e0:d1:ab:d1: 2a:4e:94:ce:dc:a1:52:89:32:2b:c4:81:2f:e4:00: 97:38:cc:b6:95:d8:60:34:14:df:09:6f:f2:57:a2: ad:47:2d:71:7d:51:bd:a6:e6:75:1f:cf:5a:c7:ab: 7c:b9:b9:16:33:fa:5b:28:08:02:aa:66:5b:d2:54: e0:c6:f3:f0:3d:ce:31:13:a2:ef:c8:a1:2d:95:a4: 51:7c:fc:e7:42:4e:27:83:71:3a:09:d6:64:81:06: d2:aa:86:de:30:1e:46:75:c2:94:7c:08:ce:5e:4f: 41:a8:cd:d3:48:30:77:6f:e9:3a:bd:ba:5d:50:86: 7d:17:f8:b4:5a:7b:d4:9c:35:46:9c:74:aa:ad:fd: ff:d2:40:8f:d4:62:23:52:3a:80:ce:67:cd:5b:c5: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:05:1F:31:90:66:BC:C0:69:C7:9F:29:F6:CB:28:48:AA:C8:C4:EE X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qAUfMZBmvMBpx58p9ssoSKrIxO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.88.0/24 45.89.244.0/24 45.91.193.0/24 45.149.235.0/24 109.206.242.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:6f:3d:97:39:d6:53:9f:22:6c:fd:cf:4d:96:1f:9d:aa:8a: c2:46:2e:ee:93:16:2b:9e:d9:a9:a8:fa:25:4f:90:cf:a1:ee: d4:e9:99:30:36:40:08:da:f2:8f:68:76:03:d9:51:c5:11:8b: d6:23:c2:f5:7e:0d:68:39:60:9c:ce:9d:39:08:70:28:5f:f3: 3a:65:d6:33:0f:6c:64:c3:2b:f7:85:db:5a:17:d6:ff:5c:ea: 07:c6:ee:b9:4b:f4:e9:21:61:ef:ea:e4:69:33:74:e5:01:af: e9:36:85:7b:3a:1f:a2:f7:79:18:ee:5c:cc:5c:7a:f4:8e:19: 68:75:1d:61:69:d5:cb:d2:3b:e2:14:3d:be:72:81:3c:f0:71: 02:e0:02:a0:af:cc:26:25:5d:ca:d8:09:e7:90:bb:e1:fa:90: 66:15:d3:52:e1:4f:5b:39:56:0b:9b:7e:2c:c1:41:3c:6c:e7: 75:93:54:23:d8:a7:ff:50:39:98:08:b4:57:ee:91:b3:39:94: eb:ea:8d:0b:84:28:b2:7e:3c:3e:6f:6c:4f:a5:81:aa:8a:2e: 87:78:f7:55:0e:58:90:03:26:24:02:8e:5b:30:35:cf:45:97: 5e:16:27:1c:e9:42:7c:05:0b:5d:61:db:80:72:26:96:da:6f: 92:6b:39:89 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4ouETLHZTZy8JNutz/uxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODA1MWYzMTkwNjZiY2MwNjljNzlmMjlmNmNiMjg0OGFhYzhjNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLe5ORQ8Z+xbm0+KAinSegGr6UyO x/QqJQlHlRsX2/tRZyVgi4YaifjZhW44pD0Iid0FeDwp+cGWA5KEnLQL0qu1LVpF xwtF+z8QmjKHipLpqXzeh7aARu5wWnBT4yCmATQ+4+DRq9EqTpTO3KFSiTIrxIEv 5ACXOMy2ldhgNBTfCW/yV6KtRy1xfVG9puZ1H89ax6t8ubkWM/pbKAgCqmZb0lTg xvPwPc4xE6LvyKEtlaRRfPznQk4ng3E6CdZkgQbSqobeMB5GdcKUfAjOXk9BqM3T SDB3b+k6vbpdUIZ9F/i0WnvUnDVGnHSqrf3/0kCP1GIjUjqAzmfNW8VpkQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKgFHzGQZrzAacefKfbLKEiqyMTuMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcUFVZk1aQm12TUJweDU4cDlzc29TS3JJeE80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVRYAwQA LVn0AwQALVvBAwQALZXrAwQAbc7yMA0GCSqGSIb3DQEBCwUAA4IBAQBabz2XOdZT nyJs/c9Nlh+dqorCRi7ukxYrntmpqPolT5DPoe7U6ZkwNkAI2vKPaHYD2VHFEYvW I8L1fg1oOWCczp05CHAoX/M6ZdYzD2xkwyv3hdtaF9b/XOoHxu65S/TpIWHv6uRp M3TlAa/pNoV7Oh+i93kY7lzMXHr0jhlodR1hadXL0jviFD2+coE88HEC4AKgr8wm JV3K2AnnkLvh+pBmFdNS4U9bOVYLm34swUE8bOd1k1Qj2Kf/UDmYCLRX7pGzOZTr 6o0LhCiyfjw+b2xPpYGqii6HePdVDliQAyYkAo5bMDXPRZdeFicc6UJ8BQtdYduA ciaW2m+SazmJ -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:23 2026 by rpki-client