This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/cqEZPfiDuRq1a3OKI0xyzSj-ORc.roa File: cqEZPfiDuRq1a3OKI0xyzSj-ORc.roa (raw, json) Hash identifier: HZLlwTwqVGDVRhnQhZwHiZITP6bwZxdPXUhaAFygvWw= Subject key identifier: 72:A1:19:3D:F8:83:B9:1A:B5:6B:73:8A:23:4C:72:CD:28:FE:39:17 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019AA59A791049E47A277B43A26C6D6096F1 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/cqEZPfiDuRq1a3OKI0xyzSj-ORc.roa Signing time: Fri 21 Nov 2025 08:49:15 +0000 ROA not before: Fri 21 Nov 2025 08:49:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5511 IP address blocks: 45.11.52.0/24 maxlen: 24 45.11.176.0/24 maxlen: 24 45.133.141.0/24 maxlen: 24 45.133.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:9a:79:10:49:e4:7a:27:7b:43:a2:6c:6d:60:96:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Nov 21 08:49:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=72a1193df883b91ab56b738a234c72cd28fe3917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:3c:69:7e:00:57:9c:3b:04:71:57:e0:2d: 69:70:13:00:64:ba:3a:3b:f9:d8:bf:8f:ce:2a:e7: 4d:1e:fe:db:aa:05:61:f2:b8:bb:5c:ae:12:d7:4c: b4:15:77:0f:3d:e9:42:87:d9:3d:cd:44:26:c4:73: bb:23:01:15:b4:fb:14:eb:81:54:c2:1e:4e:e8:72: d2:cf:67:5d:4c:ea:3f:c2:d4:da:d4:82:10:49:c4: 50:02:13:c3:81:27:1e:52:b0:5b:23:36:5b:a1:50: 11:89:60:27:46:5a:02:59:d6:b0:20:6e:22:38:15: 51:05:f9:05:6a:f6:a7:6d:72:2b:1b:3a:90:a7:f4: 0a:99:78:c6:7e:31:30:e9:f8:fa:eb:25:69:a7:e5: f8:07:96:85:db:76:fb:80:0c:4b:29:25:78:b0:90: 9a:c8:78:c1:c0:01:fe:6a:86:f3:1f:82:b7:fd:a2: 03:f7:2a:1f:f5:21:df:dd:73:2c:96:66:dc:24:f3: 87:fb:ab:de:d6:a8:b8:1b:7e:0e:23:4d:f5:87:fb: 56:0a:53:70:28:f6:3a:72:af:66:dc:b4:6a:2a:1e: 13:6a:f1:80:c4:1c:1d:ca:30:2f:db:9c:57:78:4f: cc:97:2f:de:9a:9e:e2:40:29:93:27:b7:d6:91:07: 37:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A1:19:3D:F8:83:B9:1A:B5:6B:73:8A:23:4C:72:CD:28:FE:39:17 X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/cqEZPfiDuRq1a3OKI0xyzSj-ORc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.52.0/24 45.11.176.0/24 45.133.141.0/24 45.133.143.0/24 Signature Algorithm: sha256WithRSAEncryption 41:c5:27:d6:e6:86:6c:55:1e:df:7e:ff:70:29:87:82:8d:8b: 8f:a1:a5:a5:60:e8:44:2e:99:e3:8e:22:df:1f:72:b2:31:49: 38:e7:e1:4a:d6:93:4a:73:4a:03:f0:1c:d8:72:38:73:ff:bc: ac:7c:51:6e:9a:4b:04:46:ea:f5:de:09:67:58:f9:b3:a3:ba: 16:d8:90:9b:15:47:49:89:30:16:c9:04:ee:a0:3a:dc:d4:44: 7f:2a:70:8f:32:f6:9b:92:5b:62:1c:70:20:07:81:28:18:2f: cf:97:f7:75:56:2b:d5:ee:80:b6:17:74:dd:fb:32:b7:a8:ae: d2:12:55:72:e9:a9:78:26:e3:e4:26:c9:2a:6f:9d:b2:1f:23: 99:9f:1b:0d:db:6c:94:4a:f4:c2:01:74:84:ab:a8:4e:81:c6: 3f:7b:18:20:c1:40:75:0e:74:60:49:bb:50:dd:d2:da:67:f6: 16:f6:89:45:45:d9:d4:85:91:b3:d0:8d:e0:c8:43:55:59:db: d3:57:e1:82:d2:8b:ea:cf:29:1e:86:6f:62:ad:53:0d:de:ef: 5e:c8:04:cb:ea:0d:44:3c:63:e9:cf:0f:8c:28:56:a0:bd:90: 73:02:ce:6b:ae:ab:7f:dd:49:0f:10:40:b7:af:8e:6c:d4:b1: e8:2e:b2:8e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqlmnkQSeR6J3tDomxtYJbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjUxMTIxMDg0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmExMTkzZGY4ODNiOTFhYjU2YjczOGEyMzRjNzJjZDI4ZmUzOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMw8aX4AV5w7BHFX4C1pcBMAZLo6 O/nYv4/OKudNHv7bqgVh8ri7XK4S10y0FXcPPelCh9k9zUQmxHO7IwEVtPsU64FU wh5O6HLSz2ddTOo/wtTa1IIQScRQAhPDgSceUrBbIzZboVARiWAnRloCWdawIG4i OBVRBfkFavanbXIrGzqQp/QKmXjGfjEw6fj66yVpp+X4B5aF23b7gAxLKSV4sJCa yHjBwAH+aobzH4K3/aID9yof9SHf3XMslmbcJPOH+6ve1qi4G34OI031h/tWClNw KPY6cq9m3LRqKh4TavGAxBwdyjAv25xXeE/Mly/emp7iQCmTJ7fWkQc3aQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHKhGT34g7katWtziiNMcs0o/jkXMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvY3FFWlBmaUR1UnExYTNPS0kweHl6U2otT1JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQs0AwQA LQuwAwQALYWNAwQALYWPMA0GCSqGSIb3DQEBCwUAA4IBAQBBxSfW5oZsVR7ffv9w KYeCjYuPoaWlYOhELpnjjiLfH3KyMUk45+FK1pNKc0oD8BzYcjhz/7ysfFFumksE Rur13glnWPmzo7oW2JCbFUdJiTAWyQTuoDrc1ER/KnCPMvabkltiHHAgB4EoGC/P l/d1VivV7oC2F3Td+zK3qK7SElVy6al4JuPkJskqb52yHyOZnxsN22yUSvTCAXSE q6hOgcY/exggwUB1DnRgSbtQ3dLaZ/YW9olFRdnUhZGz0I3gyENVWdvTV+GC0ovq zykehm9irVMN3u9eyATL6g1EPGPpzw+MKFagvZBzAs5rrqt/3UkPEEC3r45s1LHo LrKO -----END CERTIFICATE-----Generated at Thu Dec 4 07:45:37 2025 by rpki-client