This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bXqGrtPxlanCwZBmfe1rRANABDc.roa File: bXqGrtPxlanCwZBmfe1rRANABDc.roa (raw, json) Hash identifier: t5k+i+kB+7zSE8mRV1cP/4Uq7WgvCEro2Yq0+7QQVJA= Subject key identifier: 6D:7A:86:AE:D3:F1:95:A9:C2:C1:90:66:7D:ED:6B:44:03:40:04:37 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019A503467D1C47887BDD1AD8B233A10A9C3 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bXqGrtPxlanCwZBmfe1rRANABDc.roa Signing time: Tue 04 Nov 2025 18:50:03 +0000 ROA not before: Tue 04 Nov 2025 18:50:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 45.133.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:34:67:d1:c4:78:87:bd:d1:ad:8b:23:3a:10:a9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Nov 4 18:50:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6d7a86aed3f195a9c2c190667ded6b4403400437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:41:21:3d:61:d0:89:d8:72:c4:81:c3:26:48: e8:c5:99:6b:ec:48:cc:98:32:70:30:04:e7:36:99: 25:ae:70:ce:be:86:8d:d0:98:f3:74:99:da:f6:dd: 11:89:45:de:44:18:e4:97:93:38:ea:d4:fa:58:14: 23:25:a2:47:ae:3b:cf:0c:44:71:fe:c3:57:59:ba: bf:42:7f:50:0e:f9:fb:99:9e:f9:75:2c:47:4f:cb: 92:7d:0d:49:ce:34:38:c2:c6:c8:dd:44:95:a7:4c: 30:6c:c8:28:ae:20:28:bd:7b:d3:35:2b:a1:b1:ab: fd:ef:33:fa:17:27:ff:a6:be:74:59:0e:60:7d:7f: 2a:99:11:1c:a6:ce:8d:75:9a:c3:1c:80:5b:b3:e9: 19:72:90:83:95:09:c5:e2:01:26:6e:fe:ed:01:07: 07:f7:4b:c1:19:59:14:59:14:77:5f:1a:9a:01:32: 36:f1:fa:71:99:4e:20:18:68:d0:d4:42:18:7f:67: 37:ef:3c:da:0d:b3:16:fb:79:9b:1b:65:5c:59:25: 26:94:a2:a5:5b:b2:19:2a:c3:10:90:e3:d3:17:92: fd:cd:ae:aa:ee:53:66:6c:07:eb:48:d3:25:1b:1b: 77:ee:6a:c7:fd:4d:7f:8b:b6:c7:7b:de:71:f3:7e: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7A:86:AE:D3:F1:95:A9:C2:C1:90:66:7D:ED:6B:44:03:40:04:37 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bXqGrtPxlanCwZBmfe1rRANABDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.36.0/24 Signature Algorithm: sha256WithRSAEncryption 43:72:c3:ea:d3:bc:4c:e8:8e:b8:16:30:5e:62:17:c8:e0:b4: a0:83:62:8f:e1:fd:5a:7a:3c:e5:d0:1b:23:cf:8f:19:ca:f7: 0e:d4:02:f7:67:f8:60:9f:24:2a:29:c9:2a:60:0b:fd:0c:86: 22:9d:3c:62:2e:f8:83:08:96:6b:05:b0:fb:f6:02:91:43:dd: 0e:6a:8c:78:7d:cd:4c:43:cb:91:2a:37:cf:09:62:d5:19:38: 19:4f:7d:af:e8:71:da:f7:19:9b:73:71:93:5b:53:af:a6:6c: f9:05:ac:2c:b6:ca:69:64:6f:27:5c:f6:42:4d:de:7a:24:4d: eb:77:f0:fd:40:d2:32:61:45:0b:38:2b:8c:5e:12:37:a4:c5: 01:d9:c5:99:12:d2:0c:c6:3b:44:25:2e:d0:41:52:e5:06:85: 95:6c:c3:64:fa:43:d0:b4:db:b1:8d:3c:9f:e8:53:e6:4f:40: 1c:55:31:a4:f8:61:85:72:69:aa:9f:09:fd:4a:54:b0:5b:de: 10:ba:e0:2e:c6:fb:7b:f1:61:0b:39:12:1c:85:26:57:4b:7b: 5f:12:9b:fa:c9:fd:62:84:29:1a:8d:66:07:c2:2d:49:d1:d2: 40:80:f0:63:b4:12:88:2d:e2:6e:10:af:1e:2b:77:ad:ab:57: fe:53:5c:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpQNGfRxHiHvdGtiyM6EKnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjUxMTA0MTg1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDdhODZhZWQzZjE5NWE5YzJjMTkwNjY3ZGVkNmI0NDAzNDAwNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EEhPWHQidhyxIHDJkjoxZlr7EjM mDJwMATnNpklrnDOvoaN0JjzdJna9t0RiUXeRBjkl5M46tT6WBQjJaJHrjvPDERx /sNXWbq/Qn9QDvn7mZ75dSxHT8uSfQ1JzjQ4wsbI3USVp0wwbMgoriAovXvTNSuh sav97zP6Fyf/pr50WQ5gfX8qmREcps6NdZrDHIBbs+kZcpCDlQnF4gEmbv7tAQcH 90vBGVkUWRR3XxqaATI28fpxmU4gGGjQ1EIYf2c37zzaDbMW+3mbG2VcWSUmlKKl W7IZKsMQkOPTF5L9za6q7lNmbAfrSNMlGxt37mrH/U1/i7bHe95x836biQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG16hq7T8ZWpwsGQZn3ta0QDQAQ3MB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvYlhxR3J0UHhsYW5Dd1pCbWZlMXJSQU5BQkRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYUkMA0G CSqGSIb3DQEBCwUAA4IBAQBDcsPq07xM6I64FjBeYhfI4LSgg2KP4f1aejzl0Bsj z48ZyvcO1AL3Z/hgnyQqKckqYAv9DIYinTxiLviDCJZrBbD79gKRQ90Oaox4fc1M Q8uRKjfPCWLVGTgZT32v6HHa9xmbc3GTW1Ovpmz5BawstsppZG8nXPZCTd56JE3r d/D9QNIyYUULOCuMXhI3pMUB2cWZEtIMxjtEJS7QQVLlBoWVbMNk+kPQtNuxjTyf 6FPmT0AcVTGk+GGFcmmqnwn9SlSwW94QuuAuxvt78WELORIchSZXS3tfEpv6yf1i hCkajWYHwi1J0dJAgPBjtBKILeJuEK8eK3etq1f+U1xQ -----END CERTIFICATE-----Generated at Fri Dec 5 07:04:04 2025 by rpki-client