This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/xQirsaiZ-HOMXJs3cfu910IL9Do.roa File: xQirsaiZ-HOMXJs3cfu910IL9Do.roa (raw, json) Hash identifier: l1ex6Iykh1HBp5nbi2qzE8pp6Urs1SdDzWGI7oHWqys= Subject key identifier: C5:08:AB:B1:A8:99:F8:73:8C:5C:9B:37:71:FB:BD:D7:42:0B:F4:3A Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Certificate serial: 019A72D7D1A39755DEB88527CEF25CF8838E Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/xQirsaiZ-HOMXJs3cfu910IL9Do.roa Signing time: Tue 11 Nov 2025 12:15:37 +0000 ROA not before: Tue 11 Nov 2025 12:15:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215620 IP address blocks: 45.15.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:d7:d1:a3:97:55:de:b8:85:27:ce:f2:5c:f8:83:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Validity Not Before: Nov 11 12:15:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c508abb1a899f8738c5c9b3771fbbdd7420bf43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:21:b2:92:4b:ba:e3:48:ff:3f:62:19:6c: a2:91:61:e2:0f:51:bf:d1:2c:e4:2f:c2:b5:96:df: 1a:b3:4c:db:cc:e5:b8:b5:d6:5d:9a:c0:12:ae:72: dd:03:10:9a:83:ae:d1:ba:b5:aa:c4:71:69:ae:b6: 39:59:f5:47:fc:93:ef:a5:e2:0b:ae:de:85:32:74: 02:39:72:59:87:e6:d3:a9:a7:57:95:af:a4:d2:3d: 8d:23:12:5e:a1:bf:6d:d8:f1:63:54:af:62:aa:fe: 85:4a:74:fa:39:eb:6a:f8:01:e5:6f:91:2f:4e:10: 1a:20:27:99:ce:1f:bd:dc:06:d9:d9:b4:50:b5:a6: 1a:5e:44:60:76:1d:2a:84:ae:78:14:8d:e2:ff:d3: 18:23:b6:99:01:71:03:be:5c:0c:2d:d9:8b:41:94: f9:e2:7a:9b:d2:a1:77:9e:41:05:c5:c8:9b:2c:46: 57:46:83:d0:5c:90:d6:8f:33:df:05:8d:fb:14:fc: 89:9b:1b:2e:3f:93:5b:64:ce:f9:db:ac:91:1d:92: 84:b6:a8:7e:3d:fd:51:bf:4d:68:62:0e:f6:84:d6: 55:6c:53:d6:f3:31:d8:e0:cd:54:f0:d4:d3:de:79: 5b:e0:e3:e0:15:f5:9e:cc:67:fb:76:27:bc:d3:86: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:08:AB:B1:A8:99:F8:73:8C:5C:9B:37:71:FB:BD:D7:42:0B:F4:3A X509v3 Authority Key Identifier: keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/xQirsaiZ-HOMXJs3cfu910IL9Do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.41.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:b2:ed:99:1d:3b:50:e4:fb:51:b8:86:ce:da:52:51:d0:7a: dd:24:d0:ac:d6:d4:6b:87:84:51:c0:7f:33:e9:95:ed:fb:94: 10:b6:a1:22:60:71:ea:41:4d:54:79:ef:00:09:db:a7:b7:70: ad:eb:e9:9b:c1:9d:db:da:18:e7:3d:96:7e:76:5e:6e:a8:4b: d4:08:d4:f6:21:db:45:0d:6b:47:45:32:b2:c0:2f:d1:ee:de: 62:b4:b4:64:ed:88:24:a6:49:2f:20:84:5c:97:51:f4:6d:46: 04:6c:57:ee:c4:c1:33:7c:31:9b:ac:5b:c2:4f:05:de:76:44: 09:3f:2a:57:07:26:af:2b:59:c2:c4:a6:50:0f:24:af:ca:3c: 58:19:b1:f3:64:7c:45:6f:b0:ca:cd:64:13:0c:48:45:40:24: c7:2c:08:e9:19:1e:67:ea:68:9d:fc:08:64:b6:37:3a:c0:a2: 60:29:cd:df:05:88:8d:af:6b:f3:1d:12:74:ec:50:d2:23:dd: 18:5d:7b:61:08:de:19:79:22:cd:ab:41:b2:83:1d:c8:fe:5c: 25:79:a6:ca:85:1e:eb:d4:81:dd:41:dd:ba:f7:00:08:34:49: de:e9:1b:ed:9b:49:dd:b9:6f:1f:70:96:e6:3d:09:29:11:7a: 16:dd:3a:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpy19Gjl1XeuIUnzvJc+IOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzI5Y2IzYWJlNGU5NDBjZmM2MmEyMGUyYTZlMmMyOGZj MjgzMjkwHhcNMjUxMTExMTIxNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTA4YWJiMWE4OTlmODczOGM1YzliMzc3MWZiYmRkNzQyMGJmNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWkhspJLuuNI/z9iGWyikWHiD1G/ 0SzkL8K1lt8as0zbzOW4tdZdmsASrnLdAxCag67RurWqxHFprrY5WfVH/JPvpeIL rt6FMnQCOXJZh+bTqadXla+k0j2NIxJeob9t2PFjVK9iqv6FSnT6Oetq+AHlb5Ev ThAaICeZzh+93AbZ2bRQtaYaXkRgdh0qhK54FI3i/9MYI7aZAXEDvlwMLdmLQZT5 4nqb0qF3nkEFxcibLEZXRoPQXJDWjzPfBY37FPyJmxsuP5NbZM7526yRHZKEtqh+ Pf1Rv01oYg72hNZVbFPW8zHY4M1U8NTT3nlb4OPgFfWezGf7die804YiXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMUIq7GomfhzjFybN3H7vddCC/Q6MB8GA1UdIwQY MBaAFCMynLOr5OlAz8YqIOKm4sKPwoMpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTIt NTE4ZjJjOGY4NDZiLzEveFFpcnNhaVotSE9NWEpzM2NmdTkxMElMOURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTItNTE4ZjJjOGY4NDZi LzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ8pMA0G CSqGSIb3DQEBCwUAA4IBAQAvsu2ZHTtQ5PtRuIbO2lJR0HrdJNCs1tRrh4RRwH8z 6ZXt+5QQtqEiYHHqQU1Uee8ACdunt3Ct6+mbwZ3b2hjnPZZ+dl5uqEvUCNT2IdtF DWtHRTKywC/R7t5itLRk7YgkpkkvIIRcl1H0bUYEbFfuxMEzfDGbrFvCTwXedkQJ PypXByavK1nCxKZQDySvyjxYGbHzZHxFb7DKzWQTDEhFQCTHLAjpGR5n6mid/Ahk tjc6wKJgKc3fBYiNr2vzHRJ07FDSI90YXXthCN4ZeSLNq0Gygx3I/lwleabKhR7r 1IHdQd269wAINEne6Rvtm0nduW8fcJbmPQkpEXoW3TpC -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:23 2025 by rpki-client