This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/quSTgECR-nRDPPj0OCWhGZFFVfU.roa File: quSTgECR-nRDPPj0OCWhGZFFVfU.roa (raw, json) Hash identifier: K7gA66smBcTNEkfl44Uf935+vZh3qkk8aZfuV/+TpHk= Subject key identifier: AA:E4:93:80:40:91:FA:74:43:3C:F8:F4:38:25:A1:19:91:45:55:F5 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79115161980BF2DAC6810565A7F04340 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/quSTgECR-nRDPPj0OCWhGZFFVfU.roa Signing time: Thu 01 Jan 2026 10:18:56 +0000 ROA not before: Thu 01 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 45.150.32.0/24 maxlen: 24 45.150.33.0/24 maxlen: 24 104.238.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:51:61:98:0b:f2:da:c6:81:05:65:a7:f0:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aae493804091fa74433cf8f43825a119914555f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:03:1e:38:fd:3e:f3:aa:64:30:2f:b7:38:7f: f1:95:fb:e3:a6:3a:f3:77:38:9c:bc:96:b2:f4:81: ab:26:91:3a:7f:b0:80:f4:ba:f1:ab:6f:38:21:40: a1:8c:97:0d:31:ed:7a:f1:1a:a0:72:55:cc:f4:bd: 5a:ee:28:17:e9:57:bc:d1:eb:75:b4:6f:c2:9a:03: fb:b0:62:41:43:9e:a2:9e:c3:5f:95:8b:e1:05:a8: c9:ea:99:0d:2b:00:ed:be:b0:d7:ac:ba:1d:ff:60: 66:db:67:d6:b9:e8:b0:85:dc:84:80:66:a0:a5:a8: b0:24:45:b0:4a:e1:74:12:8b:b0:69:d5:70:02:6b: 8d:86:d4:e8:6f:e4:c8:73:ce:60:41:58:4f:da:b5: b5:cc:22:05:f1:0b:ad:a9:0b:0d:44:18:04:76:4a: 04:d6:4a:8f:72:87:bc:f2:b2:5b:57:45:a7:ae:72: 08:e9:3f:6b:31:61:ac:2d:de:ea:6d:46:38:3d:86: 7a:47:c2:14:c0:c3:36:f1:fd:32:3a:a4:cc:04:f7: 10:0f:e8:95:fe:48:fb:06:71:cd:1e:ef:78:8b:1f: a6:2b:07:b1:7b:e2:e5:47:aa:0e:e7:31:91:80:4e: 23:61:73:0f:cb:eb:fd:f3:67:07:f9:32:6e:45:35: 33:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E4:93:80:40:91:FA:74:43:3C:F8:F4:38:25:A1:19:91:45:55:F5 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/quSTgECR-nRDPPj0OCWhGZFFVfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.32.0/23 104.238.29.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:dc:2c:2e:eb:a6:8e:41:4b:e5:71:45:60:9a:96:e7:98:35: 71:5a:94:17:89:23:fd:86:42:48:ee:36:42:0c:e6:31:f4:1a: 7e:e8:f3:ce:92:5b:4d:0e:98:79:53:6d:3e:d6:59:1c:5b:f8: 8f:24:0e:68:61:14:ea:4e:66:ef:3e:91:11:21:42:8f:ee:0e: 47:9b:ec:0f:26:cc:27:45:4f:5f:7a:37:03:a1:5a:93:bf:36: 8f:ba:68:43:d0:59:1e:d8:a5:63:f3:41:8e:68:74:9b:e6:a9: 83:f0:e6:80:9f:60:f7:3f:ad:a2:9b:e3:ca:f4:71:3f:68:23: 67:58:8b:43:52:48:d9:43:51:3f:3a:7e:dc:fa:1a:b1:8a:fa: f8:c3:60:73:57:7b:25:39:57:da:1d:27:4f:ea:6b:15:68:25: 42:20:67:17:73:43:4a:2b:26:d6:29:79:9e:df:b5:c3:4f:64: 65:77:af:67:d9:e9:e9:3b:86:02:59:51:4a:5f:7c:4a:c4:f1: 19:c9:44:1f:8d:de:e4:b1:0a:1d:48:5c:20:62:b8:50:f5:33: 41:0e:60:93:0d:9d:68:e0:2a:49:b8:43:0c:ad:6c:3c:af:67: 30:c2:c3:32:3a:72:32:45:5e:04:6b:e6:75:bb:84:9d:f6:27: ea:82:73:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EVFhmAvy2saBBWWn8ENAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWU0OTM4MDQwOTFmYTc0NDMzY2Y4ZjQzODI1YTExOTkxNDU1NWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AMeOP0+86pkMC+3OH/xlfvjpjrz dzicvJay9IGrJpE6f7CA9Lrxq284IUChjJcNMe168RqgclXM9L1a7igX6Ve80et1 tG/CmgP7sGJBQ56insNflYvhBajJ6pkNKwDtvrDXrLod/2Bm22fWueiwhdyEgGag paiwJEWwSuF0EouwadVwAmuNhtTob+TIc85gQVhP2rW1zCIF8QutqQsNRBgEdkoE 1kqPcoe88rJbV0WnrnII6T9rMWGsLd7qbUY4PYZ6R8IUwMM28f0yOqTMBPcQD+iV /kj7BnHNHu94ix+mKwexe+LlR6oO5zGRgE4jYXMPy+v982cH+TJuRTUzWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKrkk4BAkfp0Qzz49DgloRmRRVX1MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvcXVTVGdFQ1ItblJEUFBqME9DV2hHWkZGVmZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZYgAwQA aO4dMA0GCSqGSIb3DQEBCwUAA4IBAQCN3Cwu66aOQUvlcUVgmpbnmDVxWpQXiSP9 hkJI7jZCDOYx9Bp+6PPOkltNDph5U20+1lkcW/iPJA5oYRTqTmbvPpERIUKP7g5H m+wPJswnRU9fejcDoVqTvzaPumhD0Fke2KVj80GOaHSb5qmD8OaAn2D3P62im+PK 9HE/aCNnWItDUkjZQ1E/On7c+hqxivr4w2BzV3slOVfaHSdP6msVaCVCIGcXc0NK KybWKXme37XDT2Rld69n2enpO4YCWVFKX3xKxPEZyUQfjd7ksQodSFwgYrhQ9TNB DmCTDZ1o4CpJuEMMrWw8r2cwwsMyOnIyRV4Ea+Z1u4Sd9ifqgnPb -----END CERTIFICATE-----Generated at Fri Jan 2 02:37:37 2026 by rpki-client