This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/qpRtX4nTQAXf7W0iXup_p_c22k0.roa File: qpRtX4nTQAXf7W0iXup_p_c22k0.roa (raw, json) Hash identifier: oaoByfuIIELfDuNhi1s5K/79IREcQBqmDkYcHlpZHyI= Subject key identifier: AA:94:6D:5F:89:D3:40:05:DF:ED:6D:22:5E:EA:7F:A7:F7:36:DA:4D Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Certificate serial: 019AE52F89D456FEB4CC8486417B6AA5A030 Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/qpRtX4nTQAXf7W0iXup_p_c22k0.roa Signing time: Wed 03 Dec 2025 17:08:09 +0000 ROA not before: Wed 03 Dec 2025 17:08:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.95.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:2f:89:d4:56:fe:b4:cc:84:86:41:7b:6a:a5:a0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Validity Not Before: Dec 3 17:08:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa946d5f89d34005dfed6d225eea7fa7f736da4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:35:a1:b3:18:2f:7a:22:03:e4:73:3e:15: b6:82:d3:f4:56:d7:36:12:c3:09:25:4c:6f:75:88: d9:ea:45:d1:5f:83:2b:9d:e4:8f:1b:0d:38:b0:e9: 81:4e:f2:fd:73:9a:4c:65:65:00:99:ab:12:68:ff: 6f:18:9b:18:a5:80:49:a4:02:05:e2:5e:ec:20:45: 96:18:77:a5:83:93:58:17:fe:d5:a4:cc:f1:25:55: 53:b2:0a:44:45:50:6d:72:15:9f:48:ba:fa:d8:60: 71:7d:77:8f:98:28:1c:10:73:78:b5:8d:ed:54:8f: 4e:b2:ef:94:41:c8:77:88:d8:db:2a:cb:0a:64:e3: 22:e0:1d:ba:f4:18:10:e5:82:60:fb:27:b4:e3:ab: b0:83:13:cd:b1:35:73:3d:91:00:6a:4b:57:97:75: 70:f3:5b:4a:e1:68:73:88:92:a2:8a:b9:b8:ae:26: 70:44:c9:46:2a:de:2e:10:eb:cf:8c:72:67:ed:f4: a3:1e:1f:cd:a0:c8:a5:45:78:67:97:bf:7c:6f:f1: 34:1c:34:35:53:b4:a2:7d:f0:83:63:05:ae:28:b8: cc:f3:4e:ca:ea:05:ef:90:9d:3a:bf:17:25:61:5d: 12:86:d8:e2:88:67:6d:ef:72:45:f1:c7:34:f8:64: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:94:6D:5F:89:D3:40:05:DF:ED:6D:22:5E:EA:7F:A7:F7:36:DA:4D X509v3 Authority Key Identifier: keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/qpRtX4nTQAXf7W0iXup_p_c22k0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.114.0/24 Signature Algorithm: sha256WithRSAEncryption b2:2c:aa:53:ea:b6:d0:1c:52:75:a5:da:66:0a:d4:c4:17:28: 1b:7f:60:66:c3:57:6a:e6:fa:99:88:75:76:bf:97:b6:6f:5e: 27:42:16:e7:39:be:3a:2f:4f:b7:81:fe:8f:ad:05:14:41:63: 8a:8e:20:f8:00:d1:88:16:a0:f5:d1:b0:e7:9a:37:73:cd:8d: cf:fa:fa:1b:34:08:90:b8:a0:84:58:cd:dc:68:7e:b9:25:85: f9:19:6a:ed:7a:df:9f:00:0a:74:88:92:e1:6c:6f:70:5f:38: 45:d6:f0:45:8d:f4:0b:c6:be:45:e9:37:bc:6c:f4:c7:e2:77: 98:ae:50:4a:2e:e5:51:5a:3d:2b:10:c2:a1:61:21:b6:00:36: d7:1e:d9:66:65:ff:b6:10:a4:e3:d5:eb:90:70:17:25:c5:59: a5:9a:11:ad:d6:64:46:a1:e0:e9:b0:3d:91:77:ac:97:f0:e9: da:db:f9:66:12:67:30:77:94:59:58:e3:7a:0a:88:ad:f5:34: b8:da:ae:e3:42:11:c4:cb:32:5f:d8:e8:05:ac:37:67:ec:dc: e0:8a:a2:70:e7:c3:21:48:23:97:ad:3c:05:bf:16:e1:2e:73: 10:94:bb:fc:e3:3c:91:50:ab:ab:69:d1:96:80:20:30:0d:8a: e8:49:9a:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrlL4nUVv60zISGQXtqpaAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4 MWQyMDQwHhcNMjUxMjAzMTcwODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTk0NmQ1Zjg5ZDM0MDA1ZGZlZDZkMjI1ZWVhN2ZhN2Y3MzZkYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJs1obMYL3oiA+RzPhW2gtP0Vtc2 EsMJJUxvdYjZ6kXRX4MrneSPGw04sOmBTvL9c5pMZWUAmasSaP9vGJsYpYBJpAIF 4l7sIEWWGHelg5NYF/7VpMzxJVVTsgpERVBtchWfSLr62GBxfXePmCgcEHN4tY3t VI9Osu+UQch3iNjbKssKZOMi4B269BgQ5YJg+ye046uwgxPNsTVzPZEAaktXl3Vw 81tK4WhziJKiirm4riZwRMlGKt4uEOvPjHJn7fSjHh/NoMilRXhnl798b/E0HDQ1 U7SiffCDYwWuKLjM807K6gXvkJ06vxclYV0ShtjiiGdt73JF8cc0+GSnqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKqUbV+J00AF3+1tIl7qf6f3NtpNMB8GA1UdIwQY MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct MWMyMmVmZjcyODE4LzEvcXBSdFg0blRRQVhmN1cwaVh1cF9wX2MyMmswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4 LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9yMA0G CSqGSIb3DQEBCwUAA4IBAQCyLKpT6rbQHFJ1pdpmCtTEFygbf2Bmw1dq5vqZiHV2 v5e2b14nQhbnOb46L0+3gf6PrQUUQWOKjiD4ANGIFqD10bDnmjdzzY3P+vobNAiQ uKCEWM3caH65JYX5GWrtet+fAAp0iJLhbG9wXzhF1vBFjfQLxr5F6Te8bPTH4neY rlBKLuVRWj0rEMKhYSG2ADbXHtlmZf+2EKTj1euQcBclxVmlmhGt1mRGoeDpsD2R d6yX8Ona2/lmEmcwd5RZWON6Coit9TS42q7jQhHEyzJf2OgFrDdn7NzgiqJw58Mh SCOXrTwFvxbhLnMQlLv84zyRUKuradGWgCAwDYroSZpl -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:19 2025 by rpki-client