This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/wqeaVxmTKX-JD4H8O0LxYj5BDcA.roa File: wqeaVxmTKX-JD4H8O0LxYj5BDcA.roa (raw, json) Hash identifier: z61rvdq/pxjCh7Rc2Im5uqBwppcKVRcSlRupK0edjoU= Subject key identifier: C2:A7:9A:57:19:93:29:7F:89:0F:81:FC:3B:42:F1:62:3E:41:0D:C0 Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d Certificate serial: 019B021455282504142394A2575A54866572 Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/wqeaVxmTKX-JD4H8O0LxYj5BDcA.roa Signing time: Tue 09 Dec 2025 07:47:25 +0000 ROA not before: Tue 09 Dec 2025 07:47:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400992 IP address blocks: 45.150.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:14:55:28:25:04:14:23:94:a2:57:5a:54:86:65:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2614411899d721f343ed2a39629969417b5b655d Validity Not Before: Dec 9 07:47:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c2a79a571993297f890f81fc3b42f1623e410dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:46:51:3e:fb:82:8d:d3:84:6b:39:4a:d0: 6d:88:60:35:44:78:fd:49:cc:db:03:de:e0:1e:4f: 4a:2a:d9:b6:27:36:d4:97:db:5c:68:5b:88:cf:99: b1:af:7f:94:d8:15:b6:b5:61:e3:91:fa:3a:b8:61: 2e:31:1f:97:8a:0a:52:da:84:7a:5a:24:2f:18:f5: 16:04:85:2d:1d:a3:59:a6:07:ee:6e:7f:1a:74:7f: ff:90:dc:ce:4e:ce:bc:7c:d9:c8:1d:07:d4:fe:c5: 86:29:b0:9b:0f:8c:b8:0c:15:6b:12:3e:04:1d:8b: 2a:b5:91:d9:2d:4c:b0:5a:30:09:04:82:17:1c:56: b0:63:91:af:4b:7b:b9:0e:f0:0f:c9:9e:ec:27:8a: 58:10:ef:da:c7:d3:3f:76:65:99:97:77:d7:02:4a: c8:cc:7b:7e:7f:80:71:89:9b:fc:de:87:d6:70:35: bc:76:ad:6a:a6:0a:43:fb:2a:5b:8b:f8:2d:97:c8: 2d:93:de:7b:65:5c:c1:a4:a5:b7:c2:35:5f:ba:d2: 02:0e:76:53:d3:ed:50:29:a3:10:f8:75:de:ab:eb: 7a:33:e2:66:c2:f9:15:12:6d:8b:8f:db:c3:c3:93: b2:b7:dc:35:85:53:1e:12:c9:94:af:b0:cc:32:31: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A7:9A:57:19:93:29:7F:89:0F:81:FC:3B:42:F1:62:3E:41:0D:C0 X509v3 Authority Key Identifier: keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/wqeaVxmTKX-JD4H8O0LxYj5BDcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.192.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:1a:7b:3a:ef:77:2f:4d:17:61:48:a8:3b:9d:dc:23:54:81: 4f:42:fa:02:84:ad:93:83:7c:96:46:bd:d1:12:3e:13:ec:e5: 60:56:a0:a5:08:82:9a:fd:6a:af:fc:c8:71:c1:73:2b:c4:aa: c3:3b:86:21:ea:3d:30:d9:99:27:4a:ef:01:cd:f0:0e:a6:30: 20:25:78:f1:e5:35:e2:bf:23:09:7a:86:05:a1:4e:0b:13:29: 76:d5:a4:96:db:f7:9e:05:b9:a9:da:7c:d1:44:28:74:53:21: fd:f7:4c:e6:91:32:6c:30:cc:48:fc:49:ff:7b:7d:2a:b3:fc: e7:47:c8:60:c4:4a:5c:ae:65:d0:12:be:b7:88:e7:b3:42:01: 9d:46:62:d2:99:5b:66:04:e9:e7:97:2e:e9:72:63:7d:ca:e4: 72:3b:f8:4d:68:ab:36:99:0b:96:d9:12:e6:30:f3:ba:20:47: bb:fd:78:30:10:a8:86:ae:2f:03:74:24:46:2b:04:e1:e9:c0: 12:92:47:c3:57:7e:97:7e:fd:46:74:ef:84:23:be:ce:65:7a: 25:d3:4b:68:23:10:14:66:f9:07:8c:f2:db:87:ce:01:62:50: 6d:16:6b:5e:d8:ea:4e:93:2c:76:3f:68:52:92:7e:c3:5e:f2: ac:b6:96:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsCFFUoJQQUI5SiV1pUhmVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MTQ0MTE4OTlkNzIxZjM0M2VkMmEzOTYyOTk2OTQxN2I1 YjY1NWQwHhcNMjUxMjA5MDc0NzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmE3OWE1NzE5OTMyOTdmODkwZjgxZmMzYjQyZjE2MjNlNDEwZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0FGUT77go3ThGs5StBtiGA1RHj9 SczbA97gHk9KKtm2JzbUl9tcaFuIz5mxr3+U2BW2tWHjkfo6uGEuMR+XigpS2oR6 WiQvGPUWBIUtHaNZpgfubn8adH//kNzOTs68fNnIHQfU/sWGKbCbD4y4DBVrEj4E HYsqtZHZLUywWjAJBIIXHFawY5GvS3u5DvAPyZ7sJ4pYEO/ax9M/dmWZl3fXAkrI zHt+f4BxiZv83ofWcDW8dq1qpgpD+ypbi/gtl8gtk957ZVzBpKW3wjVfutICDnZT 0+1QKaMQ+HXeq+t6M+JmwvkVEm2Lj9vDw5Oyt9w1hVMeEsmUr7DMMjHl9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMKnmlcZkyl/iQ+B/DtC8WI+QQ3AMB8GA1UdIwQY MBaAFCYUQRiZ1yHzQ+0qOWKZaUF7W2VdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQt MDIxNDQ1NTEyOTlmLzEvd3FlYVZ4bVRLWC1KRDRIOE8wTHhZajVCRGNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQtMDIxNDQ1NTEyOTlm LzEvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZbAMA0G CSqGSIb3DQEBCwUAA4IBAQB+Gns673cvTRdhSKg7ndwjVIFPQvoChK2Tg3yWRr3R Ej4T7OVgVqClCIKa/Wqv/MhxwXMrxKrDO4Yh6j0w2ZknSu8BzfAOpjAgJXjx5TXi vyMJeoYFoU4LEyl21aSW2/eeBbmp2nzRRCh0UyH990zmkTJsMMxI/En/e30qs/zn R8hgxEpcrmXQEr63iOezQgGdRmLSmVtmBOnnly7pcmN9yuRyO/hNaKs2mQuW2RLm MPO6IEe7/XgwEKiGri8DdCRGKwTh6cASkkfDV36Xfv1GdO+EI77OZXol00toIxAU ZvkHjPLbh84BYlBtFmte2OpOkyx2P2hSkn7DXvKstpbV -----END CERTIFICATE-----Generated at Fri Dec 12 01:01:19 2025 by rpki-client