This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/G1rdveNEgTFZ99kvbSXOg5QFk6M.roa File: G1rdveNEgTFZ99kvbSXOg5QFk6M.roa (raw, json) Hash identifier: vabgtdS7B3q6JlTZcsvZkLXZywawkDhFH9zCwUw8KqE= Subject key identifier: 1B:5A:DD:BD:E3:44:81:31:59:F7:D9:2F:6D:25:CE:83:94:05:93:A3 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B130BAC0713937B204FFA64133C27F509 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/G1rdveNEgTFZ99kvbSXOg5QFk6M.roa Signing time: Fri 12 Dec 2025 14:51:30 +0000 ROA not before: Fri 12 Dec 2025 14:51:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211750 IP address blocks: 45.128.157.0/24 maxlen: 24 45.128.158.0/24 maxlen: 24 185.228.81.0/24 maxlen: 24 185.228.82.0/24 maxlen: 24 195.88.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:0b:ac:07:13:93:7b:20:4f:fa:64:13:3c:27:f5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 12 14:51:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1b5addbde344813159f7d92f6d25ce83940593a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:0c:05:08:f6:b3:fb:65:93:77:8d:1f:88: 0b:d4:9d:60:b9:59:48:96:14:6a:96:2a:0c:0c:64: b3:3a:7b:be:c2:b8:89:36:ac:de:24:eb:d2:22:ba: 6f:4a:b9:c3:e2:a6:68:d4:2a:01:71:f3:1b:67:17: 2c:a0:f9:3f:6c:f3:e8:e7:6f:37:42:16:13:2b:31: 0e:c5:9b:ef:e8:f5:d7:e5:56:ff:18:5c:5e:8c:d6: 8b:39:ac:38:3b:5a:52:9c:93:01:97:98:62:2a:73: 81:61:be:e0:04:de:65:d3:08:16:72:d7:0d:da:4e: 5e:c0:b0:60:8a:a7:c3:0f:d1:10:33:1f:37:87:b7: 8b:13:e4:b2:d4:4c:39:8a:36:1f:04:f1:15:72:54: 86:e7:ab:36:37:f6:14:55:af:22:e8:cf:fa:82:5d: ff:d0:ef:79:24:ab:ae:00:e4:82:76:25:77:c2:38: d4:6d:29:c5:93:63:85:ea:a3:ee:bc:18:fc:6c:41: 0b:2d:be:7f:70:34:0c:2d:ef:87:b6:c0:68:f7:25: 5e:9a:1e:51:37:70:4d:f7:58:aa:02:22:d3:3a:fc: 01:13:4e:29:d4:e1:e3:00:95:8b:a2:db:69:9a:87: 32:6f:58:89:7f:51:9b:43:ae:94:43:4d:c5:26:79: ba:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5A:DD:BD:E3:44:81:31:59:F7:D9:2F:6D:25:CE:83:94:05:93:A3 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/G1rdveNEgTFZ99kvbSXOg5QFk6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.157.0-45.128.158.255 185.228.81.0-185.228.82.255 195.88.190.0/24 Signature Algorithm: sha256WithRSAEncryption 09:7f:89:1f:76:54:2a:c7:a9:24:e1:e3:be:37:d1:5a:df:79: 7b:74:7d:c3:4b:52:46:6f:c2:07:c0:d8:2c:83:c0:f6:4d:62: d9:95:43:09:6e:8a:80:c8:ef:c3:ee:65:77:66:dc:67:26:0b: c0:3d:9f:49:2f:e6:2e:6d:64:1b:1b:ce:32:44:8a:82:b8:17: d0:dd:59:f3:89:c9:1d:8d:b2:84:62:74:97:d3:d5:62:5e:95: b5:f6:59:aa:ad:f9:d4:63:8d:2d:e8:86:6e:d6:40:8d:e7:51: cb:09:e9:44:d5:69:55:6b:f9:0a:a8:2f:45:f3:1d:35:4e:51: 1b:d7:81:53:1c:7d:08:c8:9e:97:61:9f:f0:8a:f0:d8:3b:15: fd:0b:e7:39:00:13:1b:62:eb:49:b9:da:d0:2c:c6:20:6b:dc: c5:10:de:fd:f0:47:32:dd:03:5f:d3:0b:3b:06:36:b7:5b:11: 4b:6d:e5:7f:1b:aa:f8:ba:41:68:55:9f:c6:91:b7:66:db:34: 5e:00:4c:e3:eb:8d:69:c7:54:77:23:0e:fa:c9:f6:c6:1a:11: 4b:d1:06:75:7e:d7:01:5d:f1:0d:42:69:53:46:66:d2:89:89: 90:4b:72:f3:1c:c2:28:d9:b0:81:16:76:d1:ac:f4:6a:7a:82: 27:4a:05:42 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsTC6wHE5N7IE/6ZBM8J/UJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjEyMTQ1MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjVhZGRiZGUzNDQ4MTMxNTlmN2Q5MmY2ZDI1Y2U4Mzk0MDU5M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9wMBQj2s/tlk3eNH4gL1J1guVlI lhRqlioMDGSzOnu+wriJNqzeJOvSIrpvSrnD4qZo1CoBcfMbZxcsoPk/bPPo5283 QhYTKzEOxZvv6PXX5Vb/GFxejNaLOaw4O1pSnJMBl5hiKnOBYb7gBN5l0wgWctcN 2k5ewLBgiqfDD9EQMx83h7eLE+Sy1Ew5ijYfBPEVclSG56s2N/YUVa8i6M/6gl3/ 0O95JKuuAOSCdiV3wjjUbSnFk2OF6qPuvBj8bEELLb5/cDQMLe+HtsBo9yVemh5R N3BN91iqAiLTOvwBE04p1OHjAJWLottpmocyb1iJf1GbQ66UQ03FJnm6ywIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBta3b3jRIExWffZL20lzoOUBZOjMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvRzFyZHZlTkVnVEZaOTlrdmJTWE9nNVFGazZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAAtgJ0D BAAtgJ4wDAMEALnkUQMEALnkUgMEAMNYvjANBgkqhkiG9w0BAQsFAAOCAQEACX+J H3ZUKsepJOHjvjfRWt95e3R9w0tSRm/CB8DYLIPA9k1i2ZVDCW6KgMjvw+5ld2bc ZyYLwD2fSS/mLm1kGxvOMkSKgrgX0N1Z84nJHY2yhGJ0l9PVYl6VtfZZqq351GON LeiGbtZAjedRywnpRNVpVWv5CqgvRfMdNU5RG9eBUxx9CMiel2Gf8Irw2DsV/Qvn OQATG2LrSbna0CzGIGvcxRDe/fBHMt0DX9MLOwY2t1sRS23lfxuq+LpBaFWfxpG3 Zts0XgBM4+uNacdUdyMO+sn2xhoRS9EGdX7XAV3xDUJpU0Zm0omJkEty8xzCKNmw gRZ20az0anqCJ0oFQg== -----END CERTIFICATE-----Generated at Thu Dec 18 15:15:12 2025 by rpki-client