This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/cxQurBlwQD8hDJHQVVeiU45NqWk.roa File: cxQurBlwQD8hDJHQVVeiU45NqWk.roa (raw, json) Hash identifier: QtyAVyz8VfvE5j6ThLPcJgfpQ0JNwulpFn47sHfnMPY= Subject key identifier: 73:14:2E:AC:19:70:40:3F:21:0C:91:D0:55:57:A2:53:8E:4D:A9:69 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019AA01A6345EB7CBD946ADC6392B1C7E95D Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/cxQurBlwQD8hDJHQVVeiU45NqWk.roa Signing time: Thu 20 Nov 2025 07:11:15 +0000 ROA not before: Thu 20 Nov 2025 07:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 45.117.53.0/24 maxlen: 24 45.123.145.0/24 maxlen: 24 203.78.166.0/23 maxlen: 23 2a0d:3900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:1a:63:45:eb:7c:bd:94:6a:dc:63:92:b1:c7:e9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Nov 20 07:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73142eac1970403f210c91d05557a2538e4da969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:ee:22:d4:e9:57:2e:56:67:48:5e:7a:38: 1b:b4:6f:1e:45:69:d7:50:05:be:e5:0e:8b:19:3f: e0:b6:10:5f:5a:28:88:ca:ec:36:f0:e0:1e:8b:bd: 74:f1:86:03:c7:bf:35:98:64:ce:39:86:97:8e:5e: 12:4c:85:d9:38:da:0a:bf:ee:bc:67:ad:bd:0b:28: e4:fa:81:3d:84:5b:84:be:dc:fe:26:e9:96:1c:5c: 2e:e7:de:40:f7:07:aa:8d:39:e4:85:9f:08:bf:c2: 78:9c:6f:79:08:91:ae:25:f0:3c:9c:9f:fe:ed:00: f9:83:a3:10:3d:2f:ab:45:9e:6c:1d:33:bb:c2:e5: 51:e4:f5:fe:6f:ac:64:fc:19:73:45:95:41:bd:40: b6:88:39:3e:aa:7a:57:9d:07:39:05:ad:41:37:82: fb:82:0d:c7:a8:69:5f:43:c9:56:0d:2c:39:e1:b7: 7e:ac:11:eb:73:79:7a:23:85:d9:c1:ed:83:12:68: cd:3d:21:00:7c:bf:7f:16:fc:e7:e3:34:3f:fb:2d: 26:db:d5:2f:79:1d:c0:e1:48:e7:00:f2:fd:ec:66: ad:c6:3a:51:50:92:13:80:4b:05:7a:a5:03:68:78: fa:26:50:2a:d1:79:16:36:87:f7:23:aa:69:b2:ae: 8d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:14:2E:AC:19:70:40:3F:21:0C:91:D0:55:57:A2:53:8E:4D:A9:69 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/cxQurBlwQD8hDJHQVVeiU45NqWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.53.0/24 45.123.145.0/24 203.78.166.0/23 IPv6: 2a0d:3900::/29 Signature Algorithm: sha256WithRSAEncryption 1b:75:5f:6c:80:ac:e9:65:45:52:77:5c:ea:9d:0f:e2:ec:e4: 8e:7d:63:bb:47:a8:d9:44:73:e3:5b:7d:e2:5e:ca:b5:5c:ad: 00:41:ed:1c:dd:fa:89:43:aa:c5:89:c3:75:2c:6b:d7:94:8b: e3:42:fb:15:7e:c1:08:c2:8d:3a:d3:86:68:54:7c:5e:66:07: 93:04:00:4d:6d:2f:f4:32:7a:9f:1e:02:ec:6c:72:b5:dc:0f: a2:b3:ca:6a:f0:45:39:0a:de:b8:bd:71:0d:cc:5f:52:b7:8f: 19:dc:7e:f5:9b:a1:df:83:e9:9e:b3:50:1f:5f:5c:fc:c1:4e: e5:01:30:95:e1:25:7e:9c:c2:98:2d:98:67:1d:37:b8:28:de: 94:16:53:cc:65:5b:37:98:35:53:8d:ab:13:fb:ca:10:03:db: 57:d3:bb:d3:b5:69:cd:13:7c:2c:27:c7:c4:33:cf:ac:15:b9: 22:be:d3:ad:cb:56:cb:dc:18:b4:b0:54:9a:fc:a7:8c:fa:e2: c5:1d:89:1e:6d:51:b9:21:c1:e1:aa:94:9b:d7:1d:ce:ce:7e: 40:35:da:7b:e3:51:73:32:a8:12:0b:6c:49:f0:96:7c:80:c6: 8c:b3:0d:39:c8:d8:fe:4a:11:58:6c:c0:19:6c:7e:af:d7:06: 94:6d:07:43 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZqgGmNF63y9lGrcY5Kxx+ldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMTIwMDcxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzE0MmVhYzE5NzA0MDNmMjEwYzkxZDA1NTU3YTI1MzhlNGRhOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWzuItTpVy5WZ0heejgbtG8eRWnX UAW+5Q6LGT/gthBfWiiIyuw28OAei7108YYDx781mGTOOYaXjl4STIXZONoKv+68 Z629Cyjk+oE9hFuEvtz+JumWHFwu595A9weqjTnkhZ8Iv8J4nG95CJGuJfA8nJ/+ 7QD5g6MQPS+rRZ5sHTO7wuVR5PX+b6xk/BlzRZVBvUC2iDk+qnpXnQc5Ba1BN4L7 gg3HqGlfQ8lWDSw54bd+rBHrc3l6I4XZwe2DEmjNPSEAfL9/Fvzn4zQ/+y0m29Uv eR3A4UjnAPL97GatxjpRUJITgEsFeqUDaHj6JlAq0XkWNof3I6ppsq6NBwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHMULqwZcEA/IQyR0FVXolOOTalpMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvY3hRdXJCbHdRRDhoREpIUVZWZWlVNDVOcVdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALXU1AwQA LXuRAwQBy06mMA0EAgACMAcDBQMqDTkAMA0GCSqGSIb3DQEBCwUAA4IBAQAbdV9s gKzpZUVSd1zqnQ/i7OSOfWO7R6jZRHPjW33iXsq1XK0AQe0c3fqJQ6rFicN1LGvX lIvjQvsVfsEIwo0604ZoVHxeZgeTBABNbS/0MnqfHgLsbHK13A+is8pq8EU5Ct64 vXENzF9St48Z3H71m6Hfg+mes1AfX1z8wU7lATCV4SV+nMKYLZhnHTe4KN6UFlPM ZVs3mDVTjasT+8oQA9tX07vTtWnNE3wsJ8fEM8+sFbkivtOty1bL3Bi0sFSa/KeM +uLFHYkebVG5IcHhqpSb1x3Ozn5ANdp741FzMqgSC2xJ8JZ8gMaMsw05yNj+ShFY bMAZbH6v1waUbQdD -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:09 2025 by rpki-client