This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/1FirROPNrkHN2m5M_tWz9W6Qht8.roa File: 1FirROPNrkHN2m5M_tWz9W6Qht8.roa (raw, json) Hash identifier: 7SXTMAkSE5AfqMQSsA8zWzP5U/YDv2PQW+l2GzbvIPY= Subject key identifier: D4:58:AB:44:E3:CD:AE:41:CD:DA:6E:4C:FE:D5:B3:F5:6E:90:86:DF Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Certificate serial: 019AA5A4E4D6F686FEF1D5823E5A57E7B659 Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/1FirROPNrkHN2m5M_tWz9W6Qht8.roa Signing time: Fri 21 Nov 2025 09:00:38 +0000 ROA not before: Fri 21 Nov 2025 09:00:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207784 IP address blocks: 84.45.124.0/24 maxlen: 24 109.104.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:a4:e4:d6:f6:86:fe:f1:d5:82:3e:5a:57:e7:b6:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Validity Not Before: Nov 21 09:00:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d458ab44e3cdae41cdda6e4cfed5b3f56e9086df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:45:45:db:dd:d0:ae:96:84:fd:2e:95:ae:a5: ed:56:ae:3e:b9:d8:b4:c3:60:07:fb:51:36:aa:bd: de:6c:ea:79:4f:a0:6d:4f:4b:27:36:3b:8c:e7:e0: 78:92:65:8f:34:f3:c8:15:4d:d6:fd:f0:ee:eb:f1: cc:0e:bd:b5:d4:db:f5:6e:45:1d:81:ec:26:ea:53: 6f:2e:ef:af:80:05:43:84:e5:2f:bc:40:18:23:79: e0:80:d6:46:98:86:9c:dd:df:bb:72:7b:34:07:1c: fa:c9:ca:e2:50:87:56:e7:a9:b4:61:f6:de:bd:0a: 10:cf:9f:5a:3c:69:44:7f:a3:a4:8b:3c:b6:ce:79: 3b:bb:35:e0:68:31:80:68:2f:7d:07:ad:80:c4:ab: 8c:d6:a9:c7:fc:b5:29:2f:75:5c:19:d8:f2:98:fd: 9e:88:60:01:62:ea:5c:f7:8e:1e:34:54:f5:0b:83: 59:96:61:8b:ee:c4:ab:0d:72:1c:ff:5b:5b:5a:05: ce:b6:8a:52:48:2c:cc:8a:37:01:70:eb:35:25:fe: 28:26:0f:37:ca:c3:4e:ed:9e:39:d7:29:7d:e9:8f: 4f:a6:35:c9:4f:ab:8a:fc:0b:89:87:61:39:2e:7d: b6:f2:5a:8d:01:dd:ba:60:45:88:4f:59:87:b9:e1: d5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:58:AB:44:E3:CD:AE:41:CD:DA:6E:4C:FE:D5:B3:F5:6E:90:86:DF X509v3 Authority Key Identifier: keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/1FirROPNrkHN2m5M_tWz9W6Qht8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.45.124.0/24 109.104.97.0/24 Signature Algorithm: sha256WithRSAEncryption 67:e9:65:79:78:e8:80:f0:b9:e3:11:2e:22:e9:53:d8:c9:de: 53:a4:b5:96:2d:3a:0d:e8:14:27:4f:27:d2:11:33:19:f9:70: 3a:2f:b8:05:b1:87:a8:05:46:5f:b1:27:32:3e:e8:de:c5:7e: d6:36:22:b3:ff:df:03:83:f3:c2:e0:7f:72:67:8a:e4:b0:5b: 66:0c:7f:7a:de:98:07:55:04:cf:4d:4a:a9:69:b4:06:73:ba: 1b:b3:db:7d:3f:62:c6:5f:26:a4:64:af:84:d7:06:af:9d:35: 83:e6:a9:1f:5b:27:b5:ed:1b:21:61:2f:ee:da:ff:1b:78:29: 33:07:d7:9a:12:db:9e:5a:5d:05:2c:6c:cd:d0:2b:34:83:75: 8c:21:81:82:41:75:c1:08:85:ba:6b:f8:7b:15:7d:f1:0d:c2: e7:f5:7b:c8:8e:39:87:86:de:e5:6e:d0:d4:34:9a:4a:b0:bb: ae:6c:b9:46:2b:6c:9e:39:de:44:ac:32:ae:d8:75:c3:d1:81: be:bd:be:3a:54:38:9a:e0:cc:50:b2:bb:9f:91:86:2c:9e:86: c3:15:90:32:a7:e6:4c:ff:b8:dd:99:5f:7e:4e:c5:ed:2c:3c: 1b:09:39:c4:e6:e4:b9:ef:d1:d4:1c:49:f3:77:60:7e:87:72: e3:f0:88:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqlpOTW9ob+8dWCPlpX57ZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm Y2FmMmEwHhcNMjUxMTIxMDkwMDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDU4YWI0NGUzY2RhZTQxY2RkYTZlNGNmZWQ1YjNmNTZlOTA4NmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUVF293QrpaE/S6VrqXtVq4+udi0 w2AH+1E2qr3ebOp5T6BtT0snNjuM5+B4kmWPNPPIFU3W/fDu6/HMDr211Nv1bkUd gewm6lNvLu+vgAVDhOUvvEAYI3nggNZGmIac3d+7cns0Bxz6ycriUIdW56m0Yfbe vQoQz59aPGlEf6Okizy2znk7uzXgaDGAaC99B62AxKuM1qnH/LUpL3VcGdjymP2e iGABYupc944eNFT1C4NZlmGL7sSrDXIc/1tbWgXOtopSSCzMijcBcOs1Jf4oJg83 ysNO7Z451yl96Y9PpjXJT6uK/AuJh2E5Ln228lqNAd26YEWIT1mHueHVowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNRYq0Tjza5BzdpuTP7Vs/VukIbfMB8GA1UdIwQY MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt MTYzZmI3MDAzZTVkLzEvMUZpclJPUE5ya0hOMm01TV90V3o5VzZRaHQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVC18AwQA bWhhMA0GCSqGSIb3DQEBCwUAA4IBAQBn6WV5eOiA8LnjES4i6VPYyd5TpLWWLToN 6BQnTyfSETMZ+XA6L7gFsYeoBUZfsScyPujexX7WNiKz/98Dg/PC4H9yZ4rksFtm DH963pgHVQTPTUqpabQGc7obs9t9P2LGXyakZK+E1wavnTWD5qkfWye17RshYS/u 2v8beCkzB9eaEtueWl0FLGzN0Cs0g3WMIYGCQXXBCIW6a/h7FX3xDcLn9XvIjjmH ht7lbtDUNJpKsLuubLlGK2yeOd5ErDKu2HXD0YG+vb46VDia4MxQsrufkYYsnobD FZAyp+ZM/7jdmV9+TsXtLDwbCTnE5uS579HUHEnzd2B+h3Lj8IhG -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:31 2025 by rpki-client