This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/qaPYBIHSJO0VtmaPK-yj9xChj44.roa File: qaPYBIHSJO0VtmaPK-yj9xChj44.roa (raw, json) Hash identifier: SCU2ZI+jqejXCddMhNIesbEWUHlrPpsz2jIcNDVRX0Q= Subject key identifier: A9:A3:D8:04:81:D2:24:ED:15:B6:66:8F:2B:EC:A3:F7:10:A1:8F:8E Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 019B13BF19FC546E89AA5D065114B1C4A32E Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/qaPYBIHSJO0VtmaPK-yj9xChj44.roa Signing time: Fri 12 Dec 2025 18:07:29 +0000 ROA not before: Fri 12 Dec 2025 18:07:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198584 IP address blocks: 45.135.192.0/24 maxlen: 24 45.135.195.0/24 maxlen: 24 45.153.33.0/24 maxlen: 24 92.246.87.0/24 maxlen: 24 195.62.32.0/24 maxlen: 24 2a10:ca80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:bf:19:fc:54:6e:89:aa:5d:06:51:14:b1:c4:a3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Dec 12 18:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a9a3d80481d224ed15b6668f2beca3f710a18f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:17:c0:75:97:f9:33:44:7a:fc:56:2b:cb: 91:a9:13:83:1d:8d:0f:c2:36:5c:4f:65:ac:cf:85: 78:3e:46:cf:a2:dc:84:b1:d9:e5:77:51:80:60:f3: 5c:02:8e:dd:9f:63:ba:69:38:d8:b0:8e:d1:42:58: 93:2e:90:aa:86:64:73:8f:c1:91:b7:1d:7d:54:7f: e5:e1:1b:66:c0:e4:45:1c:16:12:a6:fd:06:d0:b1: 55:09:7c:6f:33:b1:a2:de:3a:e6:7b:08:e6:18:d1: 48:77:60:ba:3f:8f:64:2d:33:a9:4f:b3:35:4b:ce: 4f:fa:20:dd:98:dc:32:f2:a5:9e:89:3f:07:da:79: 90:7c:75:30:3a:fa:e7:75:4e:7e:61:6e:e9:8e:69: f7:76:4d:ad:3a:8b:4e:be:43:ec:a1:d8:fe:23:ca: 39:0d:ee:f6:2c:aa:a8:25:c8:13:9b:ff:c4:d3:6c: bf:3a:ec:3d:a9:0f:16:fe:ec:de:59:e2:26:57:80: 88:62:c3:64:23:ab:6c:b9:a3:23:1b:54:07:d0:cf: 30:4f:9d:ba:9c:8f:b6:68:eb:82:77:af:06:d8:df: 30:5d:1f:ba:3c:1f:eb:33:d5:66:b2:f3:e0:93:ab: 1c:00:f0:b3:ee:1b:90:75:59:34:ca:12:fc:3f:30: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A3:D8:04:81:D2:24:ED:15:B6:66:8F:2B:EC:A3:F7:10:A1:8F:8E X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/qaPYBIHSJO0VtmaPK-yj9xChj44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.192.0/24 45.135.195.0/24 45.153.33.0/24 92.246.87.0/24 195.62.32.0/24 IPv6: 2a10:ca80::/48 Signature Algorithm: sha256WithRSAEncryption 17:ec:87:f1:5f:84:b9:b8:e9:94:2e:6f:bc:f4:3c:3a:d9:9e: 04:d5:e1:30:ef:2c:10:c7:60:f7:98:88:54:54:75:ac:27:33: 4c:20:a9:71:45:d0:1c:1a:13:39:97:ed:f1:d8:8e:ad:d3:2d: 48:42:8a:51:2f:2e:a0:27:73:86:f3:5e:db:79:d9:c1:d3:31: a0:9d:93:fa:2c:01:61:7c:60:3d:ef:4c:60:14:a0:52:41:5c: ea:24:9e:1c:ef:60:39:2f:b0:28:5b:00:f3:d5:4e:98:d0:a9: 7b:5e:75:87:f4:ef:8d:05:d8:ec:f9:11:5d:4e:e7:41:7f:c0: 2b:62:a5:3b:06:9a:5a:3c:ce:dd:5d:95:77:72:8f:68:79:98: b1:d5:97:ba:6d:aa:5a:fa:69:45:56:07:72:43:ae:c2:77:95: f2:c3:1c:91:8e:72:cb:37:8e:4e:27:df:75:04:62:af:1e:ef: 4f:77:64:a4:f6:04:c4:62:bb:dd:b1:33:f9:8e:ed:1c:44:58: 63:e6:e0:d7:fd:9a:5d:1c:11:fe:1c:6d:82:a4:55:fd:47:ec: 19:b3:e5:0f:6b:25:73:d8:fa:cb:84:20:fd:92:3e:dd:bc:7b: e5:72:e8:06:20:b0:74:1a:e9:84:2b:e3:99:bc:4e:8f:aa:4c: 9e:eb:16:9d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZsTvxn8VG6Jql0GURSxxKMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjUxMjEyMTgwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWEzZDgwNDgxZDIyNGVkMTViNjY2OGYyYmVjYTNmNzEwYTE4ZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl08XwHWX+TNEevxWK8uRqRODHY0P wjZcT2Wsz4V4PkbPotyEsdnld1GAYPNcAo7dn2O6aTjYsI7RQliTLpCqhmRzj8GR tx19VH/l4RtmwORFHBYSpv0G0LFVCXxvM7Gi3jrmewjmGNFId2C6P49kLTOpT7M1 S85P+iDdmNwy8qWeiT8H2nmQfHUwOvrndU5+YW7pjmn3dk2tOotOvkPsodj+I8o5 De72LKqoJcgTm//E02y/Ouw9qQ8W/uzeWeImV4CIYsNkI6tsuaMjG1QH0M8wT526 nI+2aOuCd68G2N8wXR+6PB/rM9VmsvPgk6scAPCz7huQdVk0yhL8PzDnFwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFKmj2ASB0iTtFbZmjyvso/cQoY+OMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEvcWFQWUJJSFNKTzBWdG1hUEsteWo5eENoajQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQALYfAAwQA LYfDAwQALZkhAwQAXPZXAwQAwz4gMA8EAgACMAkDBwAqEMqAAAAwDQYJKoZIhvcN AQELBQADggEBABfsh/FfhLm46ZQub7z0PDrZngTV4TDvLBDHYPeYiFRUdawnM0wg qXFF0BwaEzmX7fHYjq3TLUhCilEvLqAnc4bzXtt52cHTMaCdk/osAWF8YD3vTGAU oFJBXOoknhzvYDkvsChbAPPVTpjQqXtedYf0740F2Oz5EV1O50F/wCtipTsGmlo8 zt1dlXdyj2h5mLHVl7ptqlr6aUVWB3JDrsJ3lfLDHJGOcss3jk4n33UEYq8e7093 ZKT2BMRiu92xM/mO7RxEWGPm4Nf9ml0cEf4cbYKkVf1H7Bmz5Q9rJXPY+suEIP2S Pt28e+Vy6AYgsHQa6YQr45m8To+qTJ7rFp0= -----END CERTIFICATE-----Generated at Tue Dec 16 19:18:57 2025 by rpki-client