This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Qb3tr77KowtzgTL9aw1f3gQCVLE.roa File: Qb3tr77KowtzgTL9aw1f3gQCVLE.roa (raw, json) Hash identifier: Zxsg9qCXLsm0Y5Wh/HJWGmHZtHZnJeva8aly7zFHMd8= Subject key identifier: 41:BD:ED:AF:BE:CA:A3:0B:73:81:32:FD:6B:0D:5F:DE:04:02:54:B1 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019AF28D2CD474B5780E6170386DB8CB8F12 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Qb3tr77KowtzgTL9aw1f3gQCVLE.roa Signing time: Sat 06 Dec 2025 07:25:29 +0000 ROA not before: Sat 06 Dec 2025 07:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203144 IP address blocks: 45.15.209.0/24 maxlen: 24 45.86.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:8d:2c:d4:74:b5:78:0e:61:70:38:6d:b8:cb:8f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Dec 6 07:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=41bdedafbecaa30b738132fd6b0d5fde040254b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:0d:ae:6f:ab:a0:ec:39:0d:25:ce:56:20: 72:fb:1e:72:19:20:2b:35:c1:fe:be:f8:42:87:99: 10:82:93:38:80:d2:e6:1c:fb:0d:a5:2b:af:1f:06: 7a:ec:7b:83:ba:00:99:6c:ee:d3:8f:55:4e:14:d6: b8:b6:0f:69:26:90:08:8b:b5:1e:e2:e9:c6:73:2a: fb:3d:98:e7:26:0b:6a:fc:76:52:64:b6:37:1d:45: 01:47:67:e5:00:3a:e0:0f:1b:80:da:dd:76:47:43: e5:2b:08:66:6b:0c:aa:3e:b4:03:6f:12:a7:45:65: 73:70:ce:62:b1:21:39:eb:68:1a:4d:74:5d:50:fe: c6:cc:6e:a6:d6:1a:d8:91:fd:ad:56:32:9f:46:48: e5:68:6a:a5:21:01:cd:b4:0e:63:75:75:c4:de:1d: 2d:d7:3f:2b:43:95:87:58:0a:fe:7b:b0:97:ac:58: 1b:da:5a:a5:43:5e:b7:6c:e9:fb:97:30:f0:fd:55: 19:58:d9:5b:af:65:2a:7d:4b:5b:b5:cd:c6:fb:d8: d5:b8:5b:93:26:e3:a8:42:0b:e1:63:9b:c9:b1:82: 6d:9d:ad:9c:2e:bb:3b:74:63:e6:8c:11:cf:76:74: 83:2c:21:b0:34:0b:c3:f5:c6:98:8f:02:3d:2e:c7: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BD:ED:AF:BE:CA:A3:0B:73:81:32:FD:6B:0D:5F:DE:04:02:54:B1 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Qb3tr77KowtzgTL9aw1f3gQCVLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.209.0/24 45.86.190.0/23 Signature Algorithm: sha256WithRSAEncryption c1:c5:6a:45:46:40:9b:c9:36:08:37:01:b7:0c:30:f5:79:2d: 6e:7e:a6:cc:00:5a:8f:fb:c2:33:8e:ac:0a:cc:6b:df:f3:94: 98:f9:cb:c5:aa:95:94:76:ce:36:a8:dd:b7:7a:8f:db:bc:4e: 42:12:1a:6e:e5:7d:61:d4:a6:48:1c:a3:93:57:ab:58:95:f9: 73:49:60:48:ce:3e:78:72:55:5d:f7:e9:21:c4:d9:4a:8b:6e: c8:b0:a8:dd:f4:cb:30:f8:08:b5:91:22:71:ab:de:b4:dd:91: 75:15:f2:b9:8d:32:5d:1c:4e:4b:46:f4:d6:74:1a:c2:f3:25: 45:52:94:ce:d5:9e:53:74:73:fe:97:95:d6:65:cd:c7:33:79: 0a:a3:d1:61:1b:4a:b0:d2:f0:74:af:cb:39:9e:96:0f:03:c8: 7d:8f:d0:df:a3:ec:3d:fb:71:f3:85:5d:d7:d5:53:b4:5c:d1: 33:39:d5:dd:24:e8:8e:b2:cc:3b:75:df:9e:70:62:97:da:e7: 62:d7:51:b4:ff:01:82:72:36:a5:82:14:9c:d6:99:90:c5:18: 19:f1:97:26:f6:1b:4c:5c:2f:f6:98:18:3e:ab:0c:40:64:fd: 16:8c:e6:da:a6:f0:56:3b:8c:79:95:86:a7:8c:06:4c:7b:ce: bf:0d:b4:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZryjSzUdLV4DmFwOG24y48SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjUxMjA2MDcyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWJkZWRhZmJlY2FhMzBiNzM4MTMyZmQ2YjBkNWZkZTA0MDI1NGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOkNrm+roOw5DSXOViBy+x5yGSAr NcH+vvhCh5kQgpM4gNLmHPsNpSuvHwZ67HuDugCZbO7Tj1VOFNa4tg9pJpAIi7Ue 4unGcyr7PZjnJgtq/HZSZLY3HUUBR2flADrgDxuA2t12R0PlKwhmawyqPrQDbxKn RWVzcM5isSE562gaTXRdUP7GzG6m1hrYkf2tVjKfRkjlaGqlIQHNtA5jdXXE3h0t 1z8rQ5WHWAr+e7CXrFgb2lqlQ163bOn7lzDw/VUZWNlbr2UqfUtbtc3G+9jVuFuT JuOoQgvhY5vJsYJtna2cLrs7dGPmjBHPdnSDLCGwNAvD9caYjwI9LsfN/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEG97a++yqMLc4Ey/WsNX94EAlSxMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvUWIzdHI3N0tvd3R6Z1RMOWF3MWYzZ1FDVkxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQ/RAwQB LVa+MA0GCSqGSIb3DQEBCwUAA4IBAQDBxWpFRkCbyTYINwG3DDD1eS1ufqbMAFqP +8IzjqwKzGvf85SY+cvFqpWUds42qN23eo/bvE5CEhpu5X1h1KZIHKOTV6tYlflz SWBIzj54clVd9+khxNlKi27IsKjd9Msw+Ai1kSJxq9603ZF1FfK5jTJdHE5LRvTW dBrC8yVFUpTO1Z5TdHP+l5XWZc3HM3kKo9FhG0qw0vB0r8s5npYPA8h9j9Dfo+w9 +3HzhV3X1VO0XNEzOdXdJOiOssw7dd+ecGKX2udi11G0/wGCcjalghSc1pmQxRgZ 8Zcm9htMXC/2mBg+qwxAZP0WjObapvBWO4x5lYanjAZMe86/DbSo -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:19 2025 by rpki-client