This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/8qjrXxf9jtNr47FRVKRSz85TGS4.roa File: 8qjrXxf9jtNr47FRVKRSz85TGS4.roa (raw, json) Hash identifier: SsaCooTIDNTfCCpDTLMFLudJKmMFgJLb1xwsYYcdMzw= Subject key identifier: F2:A8:EB:5F:17:FD:8E:D3:6B:E3:B1:51:54:A4:52:CF:CE:53:19:2E Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019A9B51C1201E7140DC2CB096810A81A200 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/8qjrXxf9jtNr47FRVKRSz85TGS4.roa Signing time: Wed 19 Nov 2025 08:53:37 +0000 ROA not before: Wed 19 Nov 2025 08:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.136.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:51:c1:20:1e:71:40:dc:2c:b0:96:81:0a:81:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Nov 19 08:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f2a8eb5f17fd8ed36be3b15154a452cfce53192e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:65:f3:e1:3a:a2:06:93:22:6f:c4:ac:25: be:2f:05:4e:db:f9:35:ee:cd:2e:0b:e3:e5:52:4e: c6:92:84:0b:f6:d4:8c:50:bd:cc:6b:30:ef:a9:57: c6:db:5b:bd:6d:94:4b:54:f1:22:eb:47:0d:a0:f4: 6a:cb:18:82:37:c9:f5:d1:a9:5f:e0:c2:84:25:7a: a6:ed:61:23:ee:a8:f4:1b:d2:7e:91:b8:d9:ab:4d: 72:f4:f7:f5:c3:1d:1a:88:ce:d9:8f:21:d8:5e:01: 0d:24:8f:a5:7b:9e:1c:d9:b7:04:87:05:a6:bf:0e: 20:5d:ec:b6:10:a5:31:ba:ca:f9:c9:05:d0:94:29: 84:9f:73:e0:64:61:52:cd:16:f2:a8:25:3e:07:5d: 32:85:b8:d5:22:3a:23:dd:63:48:ce:39:62:e9:b4: ad:77:4f:34:bb:01:53:5e:e8:e6:b1:48:e1:e7:cc: 9b:5b:93:e7:76:19:6f:86:51:d2:27:ea:24:ad:72: c2:43:f8:ac:a3:ee:ab:c4:0b:ac:90:9e:82:7a:40: d3:bc:6b:0f:ca:f4:58:8e:e1:fb:a9:04:cd:80:5a: 92:d4:08:86:db:50:e3:e1:f1:39:44:50:f0:6e:97: f2:9f:57:b1:af:3b:bf:ab:72:03:8b:4e:19:16:33: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A8:EB:5F:17:FD:8E:D3:6B:E3:B1:51:54:A4:52:CF:CE:53:19:2E X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/8qjrXxf9jtNr47FRVKRSz85TGS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.39.0/24 Signature Algorithm: sha256WithRSAEncryption bd:90:38:af:aa:c5:6d:e1:3f:3b:13:27:2b:8d:b1:8b:54:22: 02:ea:aa:74:ec:80:ba:5f:ca:8f:16:87:c6:09:e9:9c:0e:ef: 27:0c:40:50:5e:17:f4:99:fa:b6:a8:99:58:aa:8a:44:07:09: a2:de:d4:7a:d1:1c:e2:28:97:28:13:56:85:78:0b:78:49:58: cb:49:da:be:ea:a5:77:b3:e8:7a:52:10:3a:17:76:b6:46:97: 1a:12:fd:b8:03:41:24:31:d9:e0:47:51:f9:27:af:d9:b7:2f: 42:5a:e6:ea:8e:d5:ac:dc:f4:32:86:f2:d2:41:60:d0:71:56: ec:32:a8:78:8d:fb:c0:f2:c2:43:ed:45:fd:71:0c:ce:fb:5f: b1:6b:6c:50:42:49:a5:58:cd:65:fc:fc:71:4b:ad:3f:90:35: 46:9b:e5:b3:ab:aa:20:e0:17:fc:52:13:61:c3:27:bc:a1:37: 57:11:ba:e3:fa:48:b1:f5:11:60:38:af:fc:58:d1:9f:82:67: 41:e0:3e:9c:e6:fc:3b:ce:08:a1:4e:c7:23:66:3f:6b:70:e0: 5c:b0:d7:fc:84:ef:46:23:78:80:60:45:94:7d:41:29:4b:8a: c6:21:23:af:20:88:02:9c:f6:48:d2:86:05:90:bb:cb:4b:c5: 54:9e:56:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqbUcEgHnFA3CywloEKgaIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUxMTE5MDg1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmE4ZWI1ZjE3ZmQ4ZWQzNmJlM2IxNTE1NGE0NTJjZmNlNTMxOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ell8+E6ogaTIm/ErCW+LwVO2/k1 7s0uC+PlUk7GkoQL9tSMUL3MazDvqVfG21u9bZRLVPEi60cNoPRqyxiCN8n10alf 4MKEJXqm7WEj7qj0G9J+kbjZq01y9Pf1wx0aiM7ZjyHYXgENJI+le54c2bcEhwWm vw4gXey2EKUxusr5yQXQlCmEn3PgZGFSzRbyqCU+B10yhbjVIjoj3WNIzjli6bSt d080uwFTXujmsUjh58ybW5PndhlvhlHSJ+okrXLCQ/iso+6rxAuskJ6CekDTvGsP yvRYjuH7qQTNgFqS1AiG21Dj4fE5RFDwbpfyn1exrzu/q3IDi04ZFjNFHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPKo618X/Y7Ta+OxUVSkUs/OUxkuMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvOHFqclh4ZjlqdE5yNDdGUlZLUlN6ODVUR1M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYgnMA0G CSqGSIb3DQEBCwUAA4IBAQC9kDivqsVt4T87EycrjbGLVCIC6qp07IC6X8qPFofG CemcDu8nDEBQXhf0mfq2qJlYqopEBwmi3tR60RziKJcoE1aFeAt4SVjLSdq+6qV3 s+h6UhA6F3a2RpcaEv24A0EkMdngR1H5J6/Zty9CWubqjtWs3PQyhvLSQWDQcVbs Mqh4jfvA8sJD7UX9cQzO+1+xa2xQQkmlWM1l/PxxS60/kDVGm+Wzq6og4Bf8UhNh wye8oTdXEbrj+kix9RFgOK/8WNGfgmdB4D6c5vw7zgihTscjZj9rcOBcsNf8hO9G I3iAYEWUfUEpS4rGISOvIIgCnPZI0oYFkLvLS8VUnlZM -----END CERTIFICATE-----Generated at Sun Dec 14 17:30:41 2025 by rpki-client