This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Qwx3WgNEqkGWC-3NxKYIRyCNJgc.roa File: Qwx3WgNEqkGWC-3NxKYIRyCNJgc.roa (raw, json) Hash identifier: WjWVZYpc7N2cGXePFkp7yh3uEwvNlNjrBAXvoVpEyR4= Subject key identifier: 43:0C:77:5A:03:44:AA:41:96:0B:ED:CD:C4:A6:08:47:20:8D:26:07 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019A838EFE144F0F8E308D648AD22C60B9D3 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Qwx3WgNEqkGWC-3NxKYIRyCNJgc.roa Signing time: Fri 14 Nov 2025 18:09:37 +0000 ROA not before: Fri 14 Nov 2025 18:09:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215391 IP address blocks: 45.43.143.0/24 maxlen: 24 45.43.161.0/24 maxlen: 24 104.238.21.0/24 maxlen: 24 104.238.23.0/24 maxlen: 24 216.173.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 19 Nov 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:83:8e:fe:14:4f:0f:8e:30:8d:64:8a:d2:2c:60:b9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Nov 14 18:09:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=430c775a0344aa41960bedcdc4a60847208d2607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:c8:b8:0a:34:0e:26:6b:f0:df:58:82:7c: c0:e4:df:c0:ed:91:44:db:21:c1:ad:0d:9b:98:68: 3a:82:20:2b:cb:a0:85:18:1b:35:ab:53:0c:f6:39: 82:06:d5:92:98:f6:97:5f:58:a0:8f:66:0d:db:3f: ac:3d:c4:01:88:18:f5:6a:cc:d7:0f:42:86:87:73: e1:80:a9:f6:37:90:92:f8:79:e3:dc:29:7c:e1:43: 7e:fb:18:b7:b0:bd:bf:64:e5:1b:55:78:17:cb:56: d4:c2:bf:77:76:25:fb:ca:40:df:19:22:ac:cb:d3: 62:a5:48:08:7d:92:80:52:58:91:3e:3a:ef:aa:a7: fb:7e:38:a1:a5:48:21:ed:43:e4:4e:25:1a:c4:0b: 63:c0:75:8a:7f:b1:cb:da:91:b8:b9:4c:68:75:41: 44:b7:21:96:97:27:23:4b:df:f7:6b:00:d3:bf:f4: 68:f8:86:13:13:52:e7:e5:07:e8:f1:23:37:13:7c: 7f:6c:21:71:31:4a:cf:8a:94:2d:c6:99:2e:14:37: c8:74:9b:36:fe:e8:7f:53:5b:17:31:8b:ae:73:af: ce:67:8d:22:c7:70:10:a5:2c:b4:d1:ca:2a:10:ea: 0e:ea:76:f6:80:b3:66:be:74:21:e5:e1:fa:84:bd: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0C:77:5A:03:44:AA:41:96:0B:ED:CD:C4:A6:08:47:20:8D:26:07 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Qwx3WgNEqkGWC-3NxKYIRyCNJgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.143.0/24 45.43.161.0/24 104.238.21.0/24 104.238.23.0/24 216.173.108.0/24 Signature Algorithm: sha256WithRSAEncryption 03:36:5c:90:66:ec:d4:ac:6e:50:a4:7a:86:06:d6:fe:51:a5: 11:ec:54:81:a4:44:03:94:e8:92:c1:f2:12:d8:5d:a6:1c:0f: 7c:e6:7a:85:9f:05:34:60:e2:3b:36:0e:82:9a:c2:ae:d4:01: a9:bf:e3:63:60:07:9b:ad:04:a2:7d:6b:d6:7c:d1:57:8f:29: f0:06:8c:33:35:fe:f9:bc:24:2d:c3:77:65:c7:d7:aa:21:06: 91:90:b6:de:a1:a5:83:e4:91:cc:8d:3e:de:18:39:c5:90:63: e1:a1:e8:10:19:02:b8:e0:f5:8b:33:38:d9:99:1f:0b:cd:3a: 5b:53:e4:b9:ae:4a:75:ef:8e:2d:75:eb:28:7d:06:4f:4f:d4: dc:ad:e4:ff:9b:42:2a:d9:c6:f0:ab:5b:48:cc:ec:9b:a3:2e: 83:2a:34:1e:fa:cf:81:c5:9e:67:83:c5:67:df:56:94:50:c2: 13:ba:5c:5d:18:db:62:85:45:0e:d9:92:47:a0:66:16:62:4b: 99:58:dc:a3:9b:2c:85:36:06:9f:2c:2d:d4:5b:9d:43:54:21: d8:3f:22:50:1a:08:46:3a:a2:4e:9d:50:01:55:83:2d:57:13: 75:00:24:f4:8e:8d:ee:c8:d0:09:2f:90:42:72:4c:65:36:d4: a3:55:54:9e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqDjv4UTw+OMI1kitIsYLnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjUxMTE0MTgwOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzBjNzc1YTAzNDRhYTQxOTYwYmVkY2RjNGE2MDg0NzIwOGQyNjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyHIuAo0DiZr8N9YgnzA5N/A7ZFE 2yHBrQ2bmGg6giAry6CFGBs1q1MM9jmCBtWSmPaXX1igj2YN2z+sPcQBiBj1aszX D0KGh3PhgKn2N5CS+Hnj3Cl84UN++xi3sL2/ZOUbVXgXy1bUwr93diX7ykDfGSKs y9NipUgIfZKAUliRPjrvqqf7fjihpUgh7UPkTiUaxAtjwHWKf7HL2pG4uUxodUFE tyGWlycjS9/3awDTv/Ro+IYTE1Ln5Qfo8SM3E3x/bCFxMUrPipQtxpkuFDfIdJs2 /uh/U1sXMYuuc6/OZ40ix3AQpSy00coqEOoO6nb2gLNmvnQh5eH6hL3X5wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEMMd1oDRKpBlgvtzcSmCEcgjSYHMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvUXd4M1dnTkVxa0dXQy0zTnhLWUlSeUNOSmdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALSuPAwQA LSuhAwQAaO4VAwQAaO4XAwQA2K1sMA0GCSqGSIb3DQEBCwUAA4IBAQADNlyQZuzU rG5QpHqGBtb+UaUR7FSBpEQDlOiSwfIS2F2mHA985nqFnwU0YOI7Ng6CmsKu1AGp v+NjYAebrQSifWvWfNFXjynwBowzNf75vCQtw3dlx9eqIQaRkLbeoaWD5JHMjT7e GDnFkGPhoegQGQK44PWLMzjZmR8LzTpbU+S5rkp1744tdesofQZPT9TcreT/m0Iq 2cbwq1tIzOyboy6DKjQe+s+BxZ5ng8Vn31aUUMITulxdGNtihUUO2ZJHoGYWYkuZ WNyjmyyFNgafLC3UW51DVCHYPyJQGghGOqJOnVABVYMtVxN1ACT0jo3uyNAJL5BC ckxlNtSjVVSe -----END CERTIFICATE-----Generated at Tue Nov 18 15:29:30 2025 by rpki-client