This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/QXeX_hj0YihTkx3SqV3PC2T0syM.roa File: QXeX_hj0YihTkx3SqV3PC2T0syM.roa (raw, json) Hash identifier: MR5IJFaW2NtmqgjhgTv+2teNHPIAKkBRldoN04grSBs= Subject key identifier: 41:77:97:FE:18:F4:62:28:53:93:1D:D2:A9:5D:CF:0B:64:F4:B3:23 Certificate issuer: /CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Certificate serial: 019ADDFA6D5DAA7D8819691DD5D576AAD9A3 Authority key identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/QXeX_hj0YihTkx3SqV3PC2T0syM.roa Signing time: Tue 02 Dec 2025 07:32:48 +0000 ROA not before: Tue 02 Dec 2025 07:32:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 45.159.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:fa:6d:5d:aa:7d:88:19:69:1d:d5:d5:76:aa:d9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Validity Not Before: Dec 2 07:32:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=417797fe18f4622853931dd2a95dcf0b64f4b323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8d:66:cd:e5:f0:93:89:8b:76:12:c3:32:b6: 0d:25:61:7d:87:70:1e:a2:b9:77:52:8c:05:26:4c: c7:db:ba:b6:98:9b:9a:3b:cc:da:c7:41:31:25:1d: 5f:7b:bb:9d:80:6b:fd:49:89:8f:bf:63:53:94:2d: 3e:58:ea:33:a0:be:8a:12:f0:63:ef:b8:8e:cf:74: 5f:13:d6:53:b8:0a:f4:52:7f:84:63:68:2b:f1:5f: 5d:f0:01:70:18:99:89:f4:f2:a4:64:8d:c2:8c:18: 48:45:20:6d:65:38:cb:9a:1e:52:6d:f2:2c:69:0b: aa:1b:05:3a:c7:b6:c1:22:b3:fa:a4:c9:33:53:b5: f0:91:04:ff:bc:02:9a:36:c4:ca:de:7c:e5:56:4a: 63:c2:db:cf:b1:c2:52:28:86:d5:98:d2:5b:81:de: 4d:9f:74:a9:95:25:ec:50:79:d2:27:d8:44:d8:33: 72:8d:cc:69:4f:61:ae:d0:6c:7a:90:b9:74:4a:76: f2:ed:ff:d3:d2:40:13:b2:85:33:dc:48:71:79:96: 53:22:0f:28:75:ba:cb:a2:cf:ac:66:03:8e:ba:a9: 8c:60:ec:31:c7:56:cb:0e:c3:d6:54:d1:e3:d4:1d: e6:04:f6:e1:33:ec:b4:c9:4e:54:9f:b3:13:cd:01: 6b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:77:97:FE:18:F4:62:28:53:93:1D:D2:A9:5D:CF:0B:64:F4:B3:23 X509v3 Authority Key Identifier: keyid:6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/QXeX_hj0YihTkx3SqV3PC2T0syM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.80.0/24 Signature Algorithm: sha256WithRSAEncryption 14:c8:25:c7:f2:f5:7d:e5:bf:a8:49:f0:6f:ea:40:ab:e1:90: d6:4e:06:1a:12:53:dd:b9:5a:87:22:5c:b1:df:06:24:e6:8e: 81:64:fb:b1:53:53:f5:e8:f4:d0:c7:11:a1:84:dc:1c:27:a7: 1e:d7:05:23:b8:e7:e0:90:7d:38:2b:3e:3c:31:a0:c8:23:b6: 80:3f:93:8e:b4:09:91:12:70:44:be:4f:5c:2b:87:7d:2b:2e: 9c:70:f2:18:e4:11:3b:1c:33:05:c4:a1:6c:ef:b7:4c:c1:43: 16:4a:1a:24:2f:53:b3:58:27:87:27:b5:25:49:44:d0:2e:b4: 71:6d:1a:c2:af:5c:33:7d:ec:3c:4e:b9:ff:52:26:94:9a:95: bc:7e:46:34:e8:63:32:68:ea:20:31:c1:98:7d:08:bc:07:2a: e0:a4:90:f0:af:ee:89:6c:b7:ad:0e:91:73:87:db:c0:41:82: 94:ce:cb:01:34:46:94:ee:c4:de:94:ea:4e:ae:48:a7:23:39: 91:3e:9e:5e:d4:c2:e5:d2:a6:1f:a4:af:b7:d4:c9:9f:e5:e0: 5d:1e:eb:90:bf:a2:3d:ab:71:b7:54:f7:12:b1:07:ef:90:9c: 4c:55:98:6f:61:bf:0f:fa:ab:56:02:f9:8c:5e:b2:0d:fe:ec: 0a:3a:02:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrd+m1dqn2IGWkd1dV2qtmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWYyM2E2M2FkNjI1YTdlZDMwZGE2ZGEyY2RjOWU4YjVi YjgwM2UwHhcNMjUxMjAyMDczMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTc3OTdmZTE4ZjQ2MjI4NTM5MzFkZDJhOTVkY2YwYjY0ZjRiMzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA541mzeXwk4mLdhLDMrYNJWF9h3Ae orl3UowFJkzH27q2mJuaO8zax0ExJR1fe7udgGv9SYmPv2NTlC0+WOozoL6KEvBj 77iOz3RfE9ZTuAr0Un+EY2gr8V9d8AFwGJmJ9PKkZI3CjBhIRSBtZTjLmh5SbfIs aQuqGwU6x7bBIrP6pMkzU7XwkQT/vAKaNsTK3nzlVkpjwtvPscJSKIbVmNJbgd5N n3SplSXsUHnSJ9hE2DNyjcxpT2Gu0Gx6kLl0Snby7f/T0kATsoUz3EhxeZZTIg8o dbrLos+sZgOOuqmMYOwxx1bLDsPWVNHj1B3mBPbhM+y0yU5Un7MTzQFrtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEF3l/4Y9GIoU5Md0qldzwtk9LMjMB8GA1UdIwQY MBaAFG+fI6Y61iWn7TDabaLNyei1u4A+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYt ZDQyYmQ2ODI2MzhkLzEvUVhlWF9oajBZaWhUa3gzU3FWM1BDMlQwc3lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYtZDQyYmQ2ODI2Mzhk LzEvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ9QMA0G CSqGSIb3DQEBCwUAA4IBAQAUyCXH8vV95b+oSfBv6kCr4ZDWTgYaElPduVqHIlyx 3wYk5o6BZPuxU1P16PTQxxGhhNwcJ6ce1wUjuOfgkH04Kz48MaDII7aAP5OOtAmR EnBEvk9cK4d9Ky6ccPIY5BE7HDMFxKFs77dMwUMWShokL1OzWCeHJ7UlSUTQLrRx bRrCr1wzfew8Trn/UiaUmpW8fkY06GMyaOogMcGYfQi8ByrgpJDwr+6JbLetDpFz h9vAQYKUzssBNEaU7sTelOpOrkinIzmRPp5e1MLl0qYfpK+31Mmf5eBdHuuQv6I9 q3G3VPcSsQfvkJxMVZhvYb8P+qtWAvmMXrIN/uwKOgJk -----END CERTIFICATE-----Generated at Wed Dec 3 11:46:08 2025 by rpki-client