This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa File: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (raw, json) Hash identifier: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc= Subject key identifier: A9:45:F6:8B:00:79:56:FC:23:93:DC:64:86:A2:63:BC:02:29:1F:23 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019B77C6DCFB385B79E71DF1A487053605B2 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401650 IP address blocks: 45.139.36.0/22 maxlen: 24 45.139.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dc:fb:38:5b:79:e7:1d:f1:a4:87:05:36:05:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a945f68b007956fc2393dc6486a263bc02291f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:45:b8:43:90:b7:64:e9:72:54:f0:00:96: d5:83:e0:fa:3e:d8:49:09:35:bc:22:2b:a6:ba:5e: aa:35:45:9b:3f:12:65:26:e1:a9:5a:56:84:f6:a1: 81:0c:69:70:c2:e5:aa:f3:4e:47:6f:ff:b7:22:08: a4:d1:74:52:42:8c:8c:d2:27:f7:38:f0:3a:e0:fb: 7a:bd:bb:2c:51:91:2d:5d:36:64:50:a3:ef:bd:fc: 25:97:fd:78:7d:0e:e1:5f:f5:cc:a8:89:78:ab:ae: ae:f8:87:1e:1d:11:47:1e:0f:c0:7a:ed:54:d3:17: 6c:2a:80:a2:b7:ae:7e:1c:98:53:36:db:c5:fe:74: f5:34:ec:13:4a:22:e3:a4:00:9b:d8:96:c2:0c:d2: 80:84:d1:4c:22:dd:04:fc:60:29:74:8c:51:30:0f: 1c:7b:8a:8e:fb:a3:b7:85:ca:65:a6:cf:8f:8f:7d: a7:de:21:25:b7:d4:dc:8b:e1:7c:62:5e:54:2c:86: 6e:ee:53:77:6f:fe:6d:4c:d4:9e:17:a9:51:e0:cf: 4d:81:72:b0:3e:d2:9f:05:1e:ff:6f:44:f0:bb:e0: d4:63:51:9d:a4:ed:28:e6:9d:3d:14:68:54:61:64: ab:06:f0:6d:8b:0b:b7:e8:d8:50:8b:59:bc:2f:52: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:45:F6:8B:00:79:56:FC:23:93:DC:64:86:A2:63:BC:02:29:1F:23 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.36.0/22 45.139.64.0/22 Signature Algorithm: sha256WithRSAEncryption cd:cf:45:18:5b:f7:94:d3:10:50:55:1c:12:40:4a:10:f5:24: fa:ab:42:6b:66:6e:ee:3a:f0:99:a8:8f:12:ee:8e:87:2d:52: f1:fd:75:79:90:35:a1:27:1e:61:b0:e9:16:74:fa:77:00:86: 93:db:17:79:5f:36:af:53:40:ef:a4:ae:df:95:46:ad:0f:e9: d3:3f:65:d6:ca:ac:06:c7:cd:95:53:42:42:67:b7:87:6d:87: 79:c5:60:bd:12:74:1d:e7:7f:ed:d2:a7:ef:d4:a4:07:1a:e4: 54:22:93:ea:e2:a0:28:4b:99:ec:6f:bc:88:68:4f:94:44:9a: 58:f0:17:83:e6:ae:38:aa:c2:26:8a:32:ac:de:f3:92:25:55: d4:12:2a:98:1b:d7:2b:97:08:91:ef:42:13:2a:a8:f2:02:f8: 3a:ff:20:0f:a5:59:e8:c8:58:74:2e:77:27:fa:f5:13:00:71: e7:0e:b6:99:58:a0:87:a4:07:0a:5c:75:1d:be:29:27:fd:02: f5:35:ba:4e:1c:43:96:70:24:74:a5:86:5f:8f:cb:41:02:ae: 38:83:25:77:80:9a:d7:09:e0:63:15:f4:a9:ec:9d:a4:8e:5e: f7:d1:31:3a:7f:95:e7:fe:79:7a:f3:b1:86:b9:3c:e9:27:f6: a0:82:23:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xtz7OFt55x3xpIcFNgWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTQ1ZjY4YjAwNzk1NmZjMjM5M2RjNjQ4NmEyNjNiYzAyMjkxZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul9FuEOQt2TpclTwAJbVg+D6PthJ CTW8Iiumul6qNUWbPxJlJuGpWlaE9qGBDGlwwuWq805Hb/+3Igik0XRSQoyM0if3 OPA64Pt6vbssUZEtXTZkUKPvvfwll/14fQ7hX/XMqIl4q66u+IceHRFHHg/Aeu1U 0xdsKoCit65+HJhTNtvF/nT1NOwTSiLjpACb2JbCDNKAhNFMIt0E/GApdIxRMA8c e4qO+6O3hcplps+Pj32n3iElt9Tci+F8Yl5ULIZu7lN3b/5tTNSeF6lR4M9NgXKw PtKfBR7/b0Twu+DUY1GdpO0o5p09FGhUYWSrBvBtiwu36NhQi1m8L1ILDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKlF9osAeVb8I5PcZIaiY7wCKR8jMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvcVVYMml3QjVWdndqazl4a2hxSmp2QUlwSHlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYskAwQC LYtAMA0GCSqGSIb3DQEBCwUAA4IBAQDNz0UYW/eU0xBQVRwSQEoQ9ST6q0JrZm7u OvCZqI8S7o6HLVLx/XV5kDWhJx5hsOkWdPp3AIaT2xd5XzavU0DvpK7flUatD+nT P2XWyqwGx82VU0JCZ7eHbYd5xWC9EnQd53/t0qfv1KQHGuRUIpPq4qAoS5nsb7yI aE+URJpY8BeD5q44qsImijKs3vOSJVXUEiqYG9crlwiR70ITKqjyAvg6/yAPpVno yFh0Lncn+vUTAHHnDraZWKCHpAcKXHUdvikn/QL1NbpOHEOWcCR0pYZfj8tBAq44 gyV3gJrXCeBjFfSp7J2kjl730TE6f5Xn/nl687GGuTzpJ/aggiNH -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:56 2026 by rpki-client