This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/qGx9a8MEF9OXy58djy_mCruf3WM.roa File: qGx9a8MEF9OXy58djy_mCruf3WM.roa (raw, json) Hash identifier: XwWNw6/nVyc0EM8BYpG7R7D5OC3oOrQM3PzBabqrllU= Subject key identifier: A8:6C:7D:6B:C3:04:17:D3:97:CB:9F:1D:8F:2F:E6:0A:BB:9F:DD:63 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B272EFDB802299BAE3F6BA9BB7AADFC94 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/qGx9a8MEF9OXy58djy_mCruf3WM.roa Signing time: Tue 16 Dec 2025 12:42:29 +0000 ROA not before: Tue 16 Dec 2025 12:42:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215402 IP address blocks: 45.150.66.0/24 maxlen: 24 138.124.181.0/24 maxlen: 24 2a0e:4005:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:2e:fd:b8:02:29:9b:ae:3f:6b:a9:bb:7a:ad:fc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Dec 16 12:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a86c7d6bc30417d397cb9f1d8f2fe60abb9fdd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:43:c2:f9:24:7e:14:ec:04:d5:56:b7:b3: 70:0d:19:93:a0:8e:a7:2e:5e:1e:56:cb:4e:2e:93: 86:61:fe:e0:0b:50:fd:a5:45:0d:a5:30:4e:65:30: 59:c5:c2:83:2e:49:08:72:9c:f1:c0:71:ed:86:73: cc:51:02:71:8f:c2:07:21:80:0c:b8:8c:f3:2d:fa: 6d:de:05:70:0e:a1:13:50:b7:2e:03:b5:b1:c8:c5: 92:fb:0c:5d:84:dd:9b:f3:17:1e:4c:b3:10:2d:71: f2:d9:10:36:ad:c7:15:25:47:87:39:37:4c:18:f5: a9:4c:fb:88:53:61:b0:5e:c8:90:24:89:f0:a4:0a: 9b:73:2e:3c:3e:4f:d7:8c:1f:70:58:df:7c:f7:1d: 1d:bd:64:73:1b:ab:0a:17:c2:ca:25:17:2b:a3:fe: 54:34:c2:29:42:a0:e4:2e:32:f7:3e:c8:1e:e4:ec: 6b:eb:b4:97:67:8a:99:83:37:58:70:c0:d3:f0:4f: 75:c7:ff:92:a7:ce:e1:11:91:20:28:3f:6a:1f:68: e8:60:43:8d:69:76:36:2b:53:5c:8e:20:89:f0:9a: 1f:5c:4e:ed:dd:ef:86:a2:c5:56:06:35:55:69:44: 04:ed:86:e2:bb:82:aa:c0:c0:de:84:2b:24:6a:6a: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6C:7D:6B:C3:04:17:D3:97:CB:9F:1D:8F:2F:E6:0A:BB:9F:DD:63 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/qGx9a8MEF9OXy58djy_mCruf3WM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.66.0/24 138.124.181.0/24 IPv6: 2a0e:4005:1000::/48 Signature Algorithm: sha256WithRSAEncryption 07:56:f1:74:ff:58:19:7b:ed:c7:18:0f:71:94:05:8f:d8:49: c6:e6:fb:86:ae:26:a2:53:8d:f6:86:0e:66:d3:03:ad:c1:09: f1:7f:c7:74:a7:8b:83:59:55:3d:56:1c:df:da:40:83:9a:1d: a7:7f:21:91:ab:55:1a:64:c2:85:73:b3:8a:15:a1:ed:3a:97: dc:a3:bd:ce:dd:bf:1b:79:7c:be:c1:e5:81:f7:76:08:5b:95: 62:8b:90:0c:6b:ae:48:60:d5:72:d8:1d:3e:7c:79:42:ed:ec: 25:5c:37:de:93:e7:32:aa:b8:f1:24:15:6f:31:ef:0f:9b:e2: 2b:f6:17:3a:e1:50:26:b0:0d:a2:e2:96:d7:2a:cf:d0:ec:78: 5a:be:60:6d:12:72:c4:51:75:62:db:59:a5:ca:69:ff:61:4a: bd:ea:0f:d8:b2:08:58:0e:d2:4b:9c:b7:76:f1:09:5b:ed:74: ea:16:ec:b7:77:a9:ca:b0:6c:2b:db:45:04:fb:60:dd:70:dd: 8f:7f:eb:6c:fd:4d:51:2f:33:5a:7a:48:f4:08:97:06:d3:c1: e7:68:b8:c1:1b:0d:fc:93:68:7d:41:89:a6:23:78:33:8a:50: 27:01:09:ad:e6:d3:e4:2a:98:77:96:52:26:8e:92:a6:66:d6: 5f:d5:d9:e6 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZsnLv24Aimbrj9rqbt6rfyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMjE2MTI0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODZjN2Q2YmMzMDQxN2QzOTdjYjlmMWQ4ZjJmZTYwYWJiOWZkZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHhDwvkkfhTsBNVWt7NwDRmToI6n Ll4eVstOLpOGYf7gC1D9pUUNpTBOZTBZxcKDLkkIcpzxwHHthnPMUQJxj8IHIYAM uIzzLfpt3gVwDqETULcuA7WxyMWS+wxdhN2b8xceTLMQLXHy2RA2rccVJUeHOTdM GPWpTPuIU2GwXsiQJInwpAqbcy48Pk/XjB9wWN989x0dvWRzG6sKF8LKJRcro/5U NMIpQqDkLjL3Psge5Oxr67SXZ4qZgzdYcMDT8E91x/+Sp87hEZEgKD9qH2joYEON aXY2K1NcjiCJ8JofXE7t3e+GosVWBjVVaUQE7Ybiu4KqwMDehCskamparQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKhsfWvDBBfTl8ufHY8v5gq7n91jMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvcUd4OWE4TUVGOU9YeTU4ZGp5X21DcnVmM1dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALZZCAwQA iny1MA8EAgACMAkDBwAqDkAFEAAwDQYJKoZIhvcNAQELBQADggEBAAdW8XT/WBl7 7ccYD3GUBY/YScbm+4auJqJTjfaGDmbTA63BCfF/x3Sni4NZVT1WHN/aQIOaHad/ IZGrVRpkwoVzs4oVoe06l9yjvc7dvxt5fL7B5YH3dghblWKLkAxrrkhg1XLYHT58 eULt7CVcN96T5zKquPEkFW8x7w+b4iv2FzrhUCawDaLiltcqz9DseFq+YG0ScsRR dWLbWaXKaf9hSr3qD9iyCFgO0kuct3bxCVvtdOoW7Ld3qcqwbCvbRQT7YN1w3Y9/ 62z9TVEvM1p6SPQIlwbTwedouMEbDfyTaH1BiaYjeDOKUCcBCa3m0+QqmHeWUiaO kqZm1l/V2eY= -----END CERTIFICATE-----Generated at Thu Dec 18 17:55:18 2025 by rpki-client