This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qW-z1NqVJpZzbMMFVNzSxFioXy8.roa File: qW-z1NqVJpZzbMMFVNzSxFioXy8.roa (raw, json) Hash identifier: QunYGlgYVKPULUvmUcPEARpF1M0xEQTpKf8GGDzh0DM= Subject key identifier: A9:6F:B3:D4:DA:95:26:96:73:6C:C3:05:54:DC:D2:C4:58:A8:5F:2F Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019A819B1E27F9AEB25AC69A95A769A693CC Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qW-z1NqVJpZzbMMFVNzSxFioXy8.roa Signing time: Fri 14 Nov 2025 09:03:37 +0000 ROA not before: Fri 14 Nov 2025 09:03:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 267708 IP address blocks: 45.137.136.0/23 maxlen: 23 45.137.136.0/24 maxlen: 24 45.137.137.0/24 maxlen: 24 185.231.184.0/23 maxlen: 23 185.231.184.0/24 maxlen: 24 185.231.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:9b:1e:27:f9:ae:b2:5a:c6:9a:95:a7:69:a6:93:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Nov 14 09:03:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a96fb3d4da952696736cc30554dcd2c458a85f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:cf:16:d4:b9:21:40:a1:d2:be:72:2e:87: eb:69:4c:6a:54:9a:b6:bd:53:30:b6:12:6e:00:90: cc:f4:69:1d:fb:81:7a:01:b5:6c:65:79:16:e3:7d: 52:78:10:f7:e1:57:d1:4f:dd:0e:a8:b1:fa:e6:c0: 19:f9:f1:db:6b:c8:12:49:1f:1c:49:06:36:77:ff: 68:03:9f:b6:9f:64:13:6b:e3:04:c6:83:8a:20:e7: d6:ce:53:9e:4c:fb:9f:bf:ab:58:5d:97:f5:08:1a: 45:23:d0:74:b1:72:d3:10:53:71:dd:15:e8:21:1f: 76:97:1b:8d:f9:96:21:46:42:30:3d:4c:4f:1c:f9: 6e:97:79:98:35:60:73:4e:51:84:b3:2e:0a:c8:7a: 19:69:90:87:17:de:5a:f8:06:e8:6a:c2:ca:79:04: d9:4a:c6:10:45:7a:18:d1:93:98:6e:e0:3a:12:a9: d4:9c:32:57:ba:ef:e0:f2:04:45:bc:7d:8c:5b:66: ff:6b:fb:d9:1f:57:ff:9d:66:f6:ea:55:3a:b3:10: 85:f4:5d:a1:6e:ff:27:b1:c2:e7:9a:cf:7f:71:be: 80:19:47:e4:3f:68:a4:9a:1e:38:bf:b3:db:ed:32: 1d:04:5a:fa:1c:1a:3f:8a:f0:3f:2a:d2:48:0d:d2: 36:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6F:B3:D4:DA:95:26:96:73:6C:C3:05:54:DC:D2:C4:58:A8:5F:2F X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qW-z1NqVJpZzbMMFVNzSxFioXy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.136.0/23 185.231.184.0/23 Signature Algorithm: sha256WithRSAEncryption 68:7e:02:5d:04:ab:10:dc:a2:5e:16:1b:bd:3b:4b:f8:1f:90: fe:ac:f6:93:df:d3:aa:26:95:7e:0a:39:c2:00:e3:06:1a:1b: 07:c3:df:b8:5b:b0:5e:81:83:d7:b2:b5:a5:0b:ca:cb:d2:1c: 75:ef:9c:02:54:d0:37:b5:55:4f:7e:53:15:6d:5d:37:43:fc: b5:15:d8:c7:1b:fc:2a:1e:6f:ca:11:b2:8e:c4:c3:c2:0b:83: 3c:c4:89:f2:61:e1:5f:97:3f:d4:f2:4f:1b:72:85:c8:50:bc: 4f:f7:ec:32:d7:38:42:b5:4e:a9:5f:2d:cf:43:71:9b:65:be: 55:12:04:2a:40:67:cd:93:02:85:fc:73:95:7e:86:8b:c7:c9: 8e:28:70:95:6c:15:56:62:e2:d4:d4:27:9d:15:4e:f9:12:67: 53:6b:8e:86:b1:9c:a3:88:ec:38:5b:9e:1f:49:f5:97:ef:0d: 3c:67:eb:18:b6:2f:a2:d1:32:b9:b2:6d:ed:6c:f7:bd:a7:70: ca:6d:f1:3d:a8:20:d7:ba:03:2d:98:8f:31:4a:d5:fc:70:11: 37:e6:c9:81:92:3b:06:02:08:f0:53:06:c8:8d:85:c4:1e:15: cc:0e:19:30:70:e9:a1:3a:47:05:8e:7a:1c:30:04:d2:9d:b4: bf:9a:19:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqBmx4n+a6yWsaaladpppPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMTE0MDkwMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTZmYjNkNGRhOTUyNjk2NzM2Y2MzMDU1NGRjZDJjNDU4YTg1ZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7rPFtS5IUCh0r5yLofraUxqVJq2 vVMwthJuAJDM9Gkd+4F6AbVsZXkW431SeBD34VfRT90OqLH65sAZ+fHba8gSSR8c SQY2d/9oA5+2n2QTa+MExoOKIOfWzlOeTPufv6tYXZf1CBpFI9B0sXLTEFNx3RXo IR92lxuN+ZYhRkIwPUxPHPlul3mYNWBzTlGEsy4KyHoZaZCHF95a+AboasLKeQTZ SsYQRXoY0ZOYbuA6EqnUnDJXuu/g8gRFvH2MW2b/a/vZH1f/nWb26lU6sxCF9F2h bv8nscLnms9/cb6AGUfkP2ikmh44v7Pb7TIdBFr6HBo/ivA/KtJIDdI2KwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKlvs9TalSaWc2zDBVTc0sRYqF8vMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvcVctejFOcVZKcFp6Yk1NRlZOelN4RmlvWHk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLYmIAwQB uee4MA0GCSqGSIb3DQEBCwUAA4IBAQBofgJdBKsQ3KJeFhu9O0v4H5D+rPaT39Oq JpV+CjnCAOMGGhsHw9+4W7BegYPXsrWlC8rL0hx175wCVNA3tVVPflMVbV03Q/y1 FdjHG/wqHm/KEbKOxMPCC4M8xInyYeFflz/U8k8bcoXIULxP9+wy1zhCtU6pXy3P Q3GbZb5VEgQqQGfNkwKF/HOVfoaLx8mOKHCVbBVWYuLU1CedFU75EmdTa46GsZyj iOw4W54fSfWX7w08Z+sYti+i0TK5sm3tbPe9p3DKbfE9qCDXugMtmI8xStX8cBE3 5smBkjsGAgjwUwbIjYXEHhXMDhkwcOmhOkcFjnocMATSnbS/mhm2 -----END CERTIFICATE-----Generated at Sat Dec 6 19:18:05 2025 by rpki-client