This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/q3GCN4iQvJTU28gnbQCnCEYUMnQ.roa File: q3GCN4iQvJTU28gnbQCnCEYUMnQ.roa (raw, json) Hash identifier: d6Y19/wtiI8UJK/QYVcrXYLkgOaEUXo71E9pTZEyXf0= Subject key identifier: AB:71:82:37:88:90:BC:94:D4:DB:C8:27:6D:00:A7:08:46:14:32:74 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B033A48B2714F9D5C93DE78131A62ECAD Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/q3GCN4iQvJTU28gnbQCnCEYUMnQ.roa Signing time: Tue 09 Dec 2025 13:08:29 +0000 ROA not before: Tue 09 Dec 2025 13:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213541 IP address blocks: 45.43.166.0/24 maxlen: 24 104.239.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:3a:48:b2:71:4f:9d:5c:93:de:78:13:1a:62:ec:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Dec 9 13:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab7182378890bc94d4dbc8276d00a70846143274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:c7:e7:df:a5:0f:07:b8:9d:da:ec:0b:90: be:d5:e7:8d:90:ff:3d:88:3a:15:3b:3e:0e:e2:52: ed:af:cf:b4:8c:23:2e:ce:05:b7:84:20:d0:49:af: 17:0a:9d:34:0a:3f:ba:a1:1b:6f:a7:7a:79:cc:73: 2c:26:be:f7:31:8e:ce:59:1c:26:d1:c8:28:fd:a7: 52:c2:51:80:c4:d3:0f:62:c3:e0:a6:d0:91:e0:e2: 70:e3:e9:70:97:db:23:be:03:ed:04:99:ca:40:02: cb:7d:09:bd:ae:e8:e0:3e:91:9e:88:55:72:02:72: 76:af:68:81:7c:26:f3:2d:5a:dc:56:44:3e:10:9e: 99:06:53:b6:60:08:8b:31:0c:6e:c8:bb:0c:97:9e: db:91:ec:38:b3:46:a4:5f:3a:7d:9c:0d:2e:aa:8a: 30:2f:dc:a5:3b:94:1a:b7:49:a2:b8:40:d0:7f:75: c4:01:dd:0a:20:3b:35:5e:a9:a7:c6:78:f6:81:69: 65:25:f8:5a:8e:7b:7a:f3:46:5f:4d:36:4d:12:98: cb:00:72:dd:ce:9f:35:37:18:e3:93:8b:d7:d0:b6: cf:7d:c7:5e:8b:0f:ed:e6:09:f9:7d:7d:74:51:8a: 82:3a:1a:1a:cc:0d:1d:b5:b3:23:82:7d:30:63:2b: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:71:82:37:88:90:BC:94:D4:DB:C8:27:6D:00:A7:08:46:14:32:74 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/q3GCN4iQvJTU28gnbQCnCEYUMnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.166.0/24 104.239.15.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:a0:72:43:08:65:bd:fa:1d:3f:30:bb:b1:a6:01:b6:7f:aa: 61:54:ac:10:96:d4:59:86:92:98:25:4c:79:55:e2:2b:97:f0: 6f:e6:75:83:3c:83:ce:12:89:36:82:18:fe:01:6a:5f:89:26: f8:43:e1:1a:1f:9a:36:a2:02:23:f5:91:70:20:d0:0d:ca:a7: 39:9b:93:69:b5:1a:d9:8e:96:19:72:b7:1e:4a:ca:61:e0:60: 09:14:60:ec:af:5e:29:30:48:98:9c:47:be:0e:f6:a0:31:1f: 88:3a:ee:bf:da:0a:19:45:d5:80:22:69:bd:c6:b7:61:19:0a: 30:d0:6f:2c:fd:8d:49:25:9c:95:7b:66:9d:03:f6:a2:84:72: f9:19:37:4c:13:a0:7e:cb:98:eb:dc:41:5b:d9:5a:3f:95:df: c7:02:63:5f:ca:40:03:ed:e0:ba:36:77:4d:c8:17:b1:a2:80: 9d:51:c6:e8:40:b3:15:0f:fe:5f:dd:91:ae:b1:8b:6d:45:5f: 50:21:48:6f:5e:a1:04:b4:db:18:6e:66:03:cc:24:0e:da:a4: 8a:e5:be:26:da:7e:c9:11:87:34:85:22:6e:5d:78:ca:6d:31: da:06:5e:16:57:4c:96:84:3f:6c:29:a6:ed:5c:b4:63:a3:22: bf:26:4f:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsDOkiycU+dXJPeeBMaYuytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjUxMjA5MTMwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjcxODIzNzg4OTBiYzk0ZDRkYmM4Mjc2ZDAwYTcwODQ2MTQzMjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhDH59+lDwe4ndrsC5C+1eeNkP89 iDoVOz4O4lLtr8+0jCMuzgW3hCDQSa8XCp00Cj+6oRtvp3p5zHMsJr73MY7OWRwm 0cgo/adSwlGAxNMPYsPgptCR4OJw4+lwl9sjvgPtBJnKQALLfQm9rujgPpGeiFVy AnJ2r2iBfCbzLVrcVkQ+EJ6ZBlO2YAiLMQxuyLsMl57bkew4s0akXzp9nA0uqoow L9ylO5Qat0miuEDQf3XEAd0KIDs1Xqmnxnj2gWllJfhajnt680ZfTTZNEpjLAHLd zp81Nxjjk4vX0LbPfcdeiw/t5gn5fX10UYqCOhoazA0dtbMjgn0wYyvKOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKtxgjeIkLyU1NvIJ20ApwhGFDJ0MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvcTNHQ040aVF2SlRVMjhnbmJRQ25DRVlVTW5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSumAwQA aO8PMA0GCSqGSIb3DQEBCwUAA4IBAQAsoHJDCGW9+h0/MLuxpgG2f6phVKwQltRZ hpKYJUx5VeIrl/Bv5nWDPIPOEok2ghj+AWpfiSb4Q+EaH5o2ogIj9ZFwINANyqc5 m5NptRrZjpYZcrceSsph4GAJFGDsr14pMEiYnEe+DvagMR+IOu6/2goZRdWAImm9 xrdhGQow0G8s/Y1JJZyVe2adA/aihHL5GTdME6B+y5jr3EFb2Vo/ld/HAmNfykAD 7eC6NndNyBexooCdUcboQLMVD/5f3ZGusYttRV9QIUhvXqEEtNsYbmYDzCQO2qSK 5b4m2n7JEYc0hSJuXXjKbTHaBl4WV0yWhD9sKabtXLRjoyK/Jk/F -----END CERTIFICATE-----Generated at Thu Dec 11 06:50:17 2025 by rpki-client