This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/i3xX1599xgNxL22d4djGr80Q_rw.roa File: i3xX1599xgNxL22d4djGr80Q_rw.roa (raw, json) Hash identifier: 1BxiMsO8OvGqAGG8edwl7bhQeOG+6VcdpuZMZtSePJM= Subject key identifier: 8B:7C:57:D7:9F:7D:C6:03:71:2F:6D:9D:E1:D8:C6:AF:CD:10:FE:BC Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019AD9AB38FE399AB8F3F7DE28AFFEC3E1B3 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/i3xX1599xgNxL22d4djGr80Q_rw.roa Signing time: Mon 01 Dec 2025 11:27:48 +0000 ROA not before: Mon 01 Dec 2025 11:27:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211750 IP address blocks: 45.128.157.0/24 maxlen: 24 45.128.158.0/24 maxlen: 24 185.228.81.0/24 maxlen: 24 185.228.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:ab:38:fe:39:9a:b8:f3:f7:de:28:af:fe:c3:e1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 1 11:27:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b7c57d79f7dc603712f6d9de1d8c6afcd10febc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:fe:a0:cb:f2:e4:e5:8b:76:57:9a:48:91: ce:fa:aa:24:3a:9c:b1:bb:e2:d1:e0:58:f6:84:2f: dc:e0:64:61:78:f8:fa:c3:04:e3:62:6e:70:42:b1: 30:2e:65:19:35:1c:b8:f6:cc:08:f7:81:67:6d:34: 7d:40:c5:00:ae:20:13:1b:ef:06:db:aa:4b:8f:05: 79:f3:2c:90:29:92:67:c3:12:56:24:d7:7e:c2:43: 4a:b3:0a:57:d7:95:d1:d9:d3:92:20:82:75:10:e2: d4:86:fc:48:f8:b8:cc:9d:05:d4:6d:a3:75:c7:a8: 3c:99:28:bd:36:fa:64:28:84:a5:be:fb:2b:53:1b: ab:f3:53:5e:2c:98:06:4a:9c:a7:b6:2d:6f:3d:c1: 9c:95:ae:3f:06:e8:ae:ff:69:67:dd:de:7d:a5:a9: ce:8d:fa:ff:4a:37:c7:d6:e5:d7:a0:1d:e0:a3:e2: f7:7f:6d:4f:50:99:9c:03:c0:bf:96:b2:be:1d:4d: 87:f2:e8:b0:85:28:38:cd:91:49:92:dd:2c:1d:38: 65:df:cc:e6:6c:3e:56:3a:15:69:18:2d:bd:af:7f: 5a:1b:75:b4:35:37:da:f1:22:33:13:9b:22:47:de: ff:8f:20:7c:6c:cd:a7:e0:9b:78:66:96:8a:9b:93: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7C:57:D7:9F:7D:C6:03:71:2F:6D:9D:E1:D8:C6:AF:CD:10:FE:BC X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/i3xX1599xgNxL22d4djGr80Q_rw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.157.0-45.128.158.255 185.228.81.0-185.228.82.255 Signature Algorithm: sha256WithRSAEncryption 6a:08:c1:2d:8d:0e:cd:4b:4c:04:50:ed:20:35:e4:64:01:df: 43:ae:1f:04:90:df:b5:55:b9:bc:4b:0e:ca:66:27:f5:71:e5: fa:60:bc:27:cc:1e:7b:b9:db:56:21:29:68:34:db:a3:dd:2b: d8:cf:c1:f4:22:a9:2f:90:eb:b3:f8:76:ee:0c:31:4f:53:9d: da:7f:c5:bd:3a:54:07:05:ca:41:3a:f9:5c:d6:ca:80:57:55: 9a:fc:d2:e7:67:f6:54:eb:80:3e:15:b3:c2:72:45:72:ef:1b: 79:6c:76:18:a9:5a:54:b3:48:76:f8:64:0e:bc:6a:a0:8f:36: c8:58:75:00:16:da:6f:a5:33:5a:b1:91:6b:e0:ec:78:a6:82: ad:7a:7c:d5:a5:67:86:2b:ee:b9:7f:eb:e6:d4:6b:97:9c:03: a8:a4:03:8b:f0:36:98:a0:90:38:13:97:af:4c:bb:69:48:ca: 77:4c:db:f3:0e:f0:54:da:51:a3:5f:1e:bf:e9:17:ab:30:a2: e6:8a:c5:2a:36:11:f3:7b:01:41:ba:93:90:9d:f5:b8:cc:2b: 5c:aa:56:c4:91:0f:d1:14:4d:57:9b:21:3a:69:b9:b5:eb:a3: 6c:24:5d:da:0c:dc:73:48:63:68:17:e8:39:52:e4:08:a3:2a: ee:33:01:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZrZqzj+OZq48/feKK/+w+GzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjAxMTEyNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjdjNTdkNzlmN2RjNjAzNzEyZjZkOWRlMWQ4YzZhZmNkMTBmZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTH+oMvy5OWLdleaSJHO+qokOpyx u+LR4Fj2hC/c4GRhePj6wwTjYm5wQrEwLmUZNRy49swI94FnbTR9QMUAriATG+8G 26pLjwV58yyQKZJnwxJWJNd+wkNKswpX15XR2dOSIIJ1EOLUhvxI+LjMnQXUbaN1 x6g8mSi9NvpkKISlvvsrUxur81NeLJgGSpynti1vPcGcla4/Buiu/2ln3d59panO jfr/SjfH1uXXoB3go+L3f21PUJmcA8C/lrK+HU2H8uiwhSg4zZFJkt0sHThl38zm bD5WOhVpGC29r39aG3W0NTfa8SIzE5siR97/jyB8bM2n4Jt4ZpaKm5NG/wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFIt8V9effcYDcS9tneHYxq/NEP68MB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvaTN4WDE1OTl4Z054TDIyZDRkakdyODBRX3J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAAtgJ0D BAAtgJ4wDAMEALnkUQMEALnkUjANBgkqhkiG9w0BAQsFAAOCAQEAagjBLY0OzUtM BFDtIDXkZAHfQ64fBJDftVW5vEsOymYn9XHl+mC8J8wee7nbViEpaDTbo90r2M/B 9CKpL5Drs/h27gwxT1Od2n/FvTpUBwXKQTr5XNbKgFdVmvzS52f2VOuAPhWzwnJF cu8beWx2GKlaVLNIdvhkDrxqoI82yFh1ABbab6UzWrGRa+DseKaCrXp81aVnhivu uX/r5tRrl5wDqKQDi/A2mKCQOBOXr0y7aUjKd0zb8w7wVNpRo18ev+kXqzCi5orF KjYR83sBQbqTkJ31uMwrXKpWxJEP0RRNV5shOmm5teujbCRd2gzcc0hjaBfoOVLk CKMq7jMBuw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:58:29 2025 by rpki-client