This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Neik1JAo9TbLduAqiVjxzXH21a4.roa File: Neik1JAo9TbLduAqiVjxzXH21a4.roa (raw, json) Hash identifier: QpteV15PgClaDUVgLnBWaxY0k9UUYyoR0UTELduV8qk= Subject key identifier: 35:E8:A4:D4:90:28:F5:36:CB:76:E0:2A:89:58:F1:CD:71:F6:D5:AE Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019AEEFB7B628832D25014F47F07B32A526A Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Neik1JAo9TbLduAqiVjxzXH21a4.roa Signing time: Fri 05 Dec 2025 14:47:29 +0000 ROA not before: Fri 05 Dec 2025 14:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 45.148.51.0/24 maxlen: 24 45.152.37.0/24 maxlen: 24 45.154.237.0/24 maxlen: 24 185.208.211.0/24 maxlen: 24 185.232.85.0/24 maxlen: 24 193.57.9.0/24 maxlen: 24 195.60.177.0/24 maxlen: 24 195.88.210.0/24 maxlen: 24 213.185.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:fb:7b:62:88:32:d2:50:14:f4:7f:07:b3:2a:52:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 5 14:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=35e8a4d49028f536cb76e02a8958f1cd71f6d5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:91:91:8c:4c:ff:c1:57:75:fb:82:c4:fe: 5a:52:99:5f:ce:4e:f9:92:00:f1:bd:c7:54:cb:de: b4:89:03:eb:70:58:bb:7e:1f:b5:6c:37:88:1d:62: 5a:69:4f:6b:e1:0c:c4:30:e5:0b:1c:4b:35:07:af: 61:f0:81:39:a5:62:13:bb:13:aa:25:1d:b1:d0:3b: 6e:ec:99:6b:e8:09:8a:08:ec:01:02:1e:0e:24:da: 32:b2:f1:42:5c:ff:d7:a3:bf:1b:63:23:a0:d2:10: b8:0d:ee:50:16:66:47:fa:ee:ba:b7:39:25:a4:37: ee:09:30:dd:07:0f:b7:d4:f9:b3:39:d3:40:b7:ed: df:4b:68:53:79:72:9c:d3:ca:ac:8c:68:6f:9b:f5: e4:4c:34:5d:e0:ce:95:b9:2b:27:b2:e9:97:c3:d3: a6:54:da:55:f4:d6:15:0a:fc:48:62:f5:1b:11:9f: 2d:57:1e:f3:dd:c2:b7:62:96:dc:21:29:52:e5:f5: df:8b:28:a4:f7:14:ff:86:c6:66:0e:29:b6:67:a2: 78:ff:d1:bd:00:ac:b7:8e:90:7a:9d:7e:34:d0:51: 8e:7b:dd:9d:a4:bb:84:70:98:5f:49:89:9f:fc:ff: 07:8c:52:6e:8b:31:1e:45:ac:f5:91:e8:37:0c:2b: 1e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E8:A4:D4:90:28:F5:36:CB:76:E0:2A:89:58:F1:CD:71:F6:D5:AE X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Neik1JAo9TbLduAqiVjxzXH21a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.51.0/24 45.152.37.0/24 45.154.237.0/24 185.208.211.0/24 185.232.85.0/24 193.57.9.0/24 195.60.177.0/24 195.88.210.0/24 213.185.92.0/22 Signature Algorithm: sha256WithRSAEncryption b7:7c:85:e4:30:d9:c2:e3:ad:9f:ee:07:c9:4d:eb:cd:d3:0f: fb:93:f9:6e:c2:f7:b5:c1:9f:9c:3b:e9:52:d7:90:9a:0c:c3: 49:f9:ef:d8:e9:1a:83:af:f0:cd:f4:96:fe:b7:37:60:79:4d: 4b:e9:c3:1a:e8:48:d2:4b:26:be:b4:5b:59:65:52:81:6f:df: c9:74:df:23:c2:ae:14:e0:a0:a6:47:41:c1:a3:ea:f5:cb:14: 8e:dc:40:87:91:db:f5:6b:6a:40:b8:d0:19:99:ce:8d:ec:12: e9:4c:fa:2f:35:b9:f9:92:9c:99:7a:d4:16:c0:d1:5b:cb:75: 8e:98:45:af:42:b6:88:f1:65:e7:f0:a4:45:47:9a:fb:62:7e: b1:66:ee:6d:b7:97:ce:6d:98:2d:3f:da:8a:31:d7:8d:98:42: da:80:d4:27:71:84:94:65:ca:b9:eb:a7:a4:50:d5:48:ca:70: 19:49:86:5b:38:fb:eb:21:ea:06:45:b4:56:14:f2:ff:7e:27: 81:bf:44:3a:95:b6:c7:af:02:c7:1b:43:82:04:69:1e:5f:c9: b9:12:6b:4f:fd:ef:35:fe:80:77:c7:e0:e1:30:64:02:c0:c8: 45:0f:63:a0:e1:73:cd:b4:f2:3f:9b:6b:e0:7a:85:64:5b:47: 0b:56:b4:cb -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZru+3tiiDLSUBT0fwezKlJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjA1MTQ0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWU4YTRkNDkwMjhmNTM2Y2I3NmUwMmE4OTU4ZjFjZDcxZjZkNWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+KRkYxM/8FXdfuCxP5aUplfzk75 kgDxvcdUy960iQPrcFi7fh+1bDeIHWJaaU9r4QzEMOULHEs1B69h8IE5pWITuxOq JR2x0Dtu7Jlr6AmKCOwBAh4OJNoysvFCXP/Xo78bYyOg0hC4De5QFmZH+u66tzkl pDfuCTDdBw+31PmzOdNAt+3fS2hTeXKc08qsjGhvm/XkTDRd4M6VuSsnsumXw9Om VNpV9NYVCvxIYvUbEZ8tVx7z3cK3YpbcISlS5fXfiyik9xT/hsZmDim2Z6J4/9G9 AKy3jpB6nX400FGOe92dpLuEcJhfSYmf/P8HjFJuizEeRaz1keg3DCseEQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFDXopNSQKPU2y3bgKolY8c1x9tWuMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvTmVpazFKQW85VGJMZHVBcWlWanh6WEgyMWE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALZQzAwQA LZglAwQALZrtAwQAudDTAwQAuehVAwQAwTkJAwQAwzyxAwQAw1jSAwQC1blcMA0G CSqGSIb3DQEBCwUAA4IBAQC3fIXkMNnC462f7gfJTevN0w/7k/luwve1wZ+cO+lS 15CaDMNJ+e/Y6RqDr/DN9Jb+tzdgeU1L6cMa6EjSSya+tFtZZVKBb9/JdN8jwq4U 4KCmR0HBo+r1yxSO3ECHkdv1a2pAuNAZmc6N7BLpTPovNbn5kpyZetQWwNFby3WO mEWvQraI8WXn8KRFR5r7Yn6xZu5tt5fObZgtP9qKMdeNmELagNQncYSUZcq566ek UNVIynAZSYZbOPvrIeoGRbRWFPL/fieBv0Q6lbbHrwLHG0OCBGkeX8m5EmtP/e81 /oB3x+DhMGQCwMhFD2Og4XPNtPI/m2vgeoVkW0cLVrTL -----END CERTIFICATE-----Generated at Sat Dec 6 13:09:51 2025 by rpki-client