This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/sLoOUnSSa6nYXCPKvYp_V6IOuY4.roa File: sLoOUnSSa6nYXCPKvYp_V6IOuY4.roa (raw, json) Hash identifier: bChaFq62gDaAnOWbCA9DJxsS2gbYsBJKbJ42SILhQpg= Subject key identifier: B0:BA:0E:52:74:92:6B:A9:D8:5C:23:CA:BD:8A:7F:57:A2:0E:B9:8E Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d Certificate serial: 019ADEE4CE4F8B727CE87065E18C11DE10AA Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/sLoOUnSSa6nYXCPKvYp_V6IOuY4.roa Signing time: Tue 02 Dec 2025 11:48:48 +0000 ROA not before: Tue 02 Dec 2025 11:48:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15765 IP address blocks: 45.15.108.0/22 maxlen: 22 213.161.224.0/19 maxlen: 19 213.184.192.0/19 maxlen: 19 2a0b:5100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:e4:ce:4f:8b:72:7c:e8:70:65:e1:8c:11:de:10:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d Validity Not Before: Dec 2 11:48:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b0ba0e5274926ba9d85c23cabd8a7f57a20eb98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:84:e5:13:66:68:f0:4e:75:10:33:85:95: c3:3a:b6:c7:30:a5:e3:70:e5:d2:3b:49:b4:96:58: e0:00:d8:08:49:f0:dc:7e:ec:05:ba:ce:9e:68:e9: dd:0d:19:b6:fe:73:6f:ca:9e:26:fd:97:83:53:86: 89:30:13:61:5b:e3:e5:5d:fa:e9:a0:51:95:ad:94: ef:d8:36:60:16:f2:06:6c:5f:22:04:14:8b:00:60: 90:7f:79:eb:d2:65:ee:c5:08:ac:62:b7:81:dc:18: ab:16:61:19:ea:d0:88:8c:b3:cc:86:dd:37:c3:46: 03:58:fb:1b:8f:6a:84:6e:bd:7f:67:8e:49:a7:4f: eb:0e:35:6e:dc:e2:b0:d4:0a:54:a2:19:9f:4d:8d: e5:04:4b:f4:a7:bd:da:0b:ca:5e:9a:a6:8e:a9:40: b4:0f:07:e6:44:62:9e:ea:0f:a6:2d:6f:9c:31:e8: fd:15:23:5f:da:ed:19:8f:e0:fb:b0:5f:97:a8:ec: ae:08:e4:80:f0:a7:dd:2e:90:44:d3:4c:f8:52:69: 20:78:11:51:c6:91:92:e0:01:3b:31:db:35:b5:a6: 7b:1c:42:1f:91:a9:8a:1e:40:ae:3f:a6:0c:eb:ef: be:a8:e0:c1:36:d0:a2:6f:87:e5:24:9d:38:a8:78: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BA:0E:52:74:92:6B:A9:D8:5C:23:CA:BD:8A:7F:57:A2:0E:B9:8E X509v3 Authority Key Identifier: keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/sLoOUnSSa6nYXCPKvYp_V6IOuY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.108.0/22 213.161.224.0/19 213.184.192.0/19 IPv6: 2a0b:5100::/29 Signature Algorithm: sha256WithRSAEncryption a0:12:c4:19:15:83:fc:15:c6:eb:80:52:a8:8a:15:52:62:8a: 32:26:20:de:19:ed:d4:33:7a:22:b7:84:8c:69:cb:59:ee:84: bd:3e:51:94:fb:86:1b:18:36:1d:7d:3f:bd:a3:61:03:c7:2f: d9:90:1d:56:08:7c:4e:16:30:a9:27:36:e4:fe:c5:7f:90:57: 7e:85:81:37:4a:b2:2d:6a:41:ec:2c:a4:a9:ad:f1:e2:52:4c: e2:7c:45:8c:8f:cc:4b:85:c6:11:32:41:f5:e9:84:d1:78:6e: ba:82:fa:28:fe:bd:3d:da:2c:94:a0:a3:70:11:8e:dc:b5:69: af:5b:a8:71:c1:01:85:e4:d0:ce:98:93:ed:84:09:a6:31:ae: 06:15:0f:1d:4a:f4:3d:03:88:55:e7:92:ea:7e:27:d3:85:b3: 7f:75:12:1e:ab:93:ba:1b:85:2a:06:6f:aa:c4:10:77:17:f9: dd:6e:a3:92:2f:7b:39:88:12:04:4f:06:11:8a:a8:60:1b:19: 7d:32:d3:49:0f:60:d5:84:81:99:5a:95:24:6d:24:dc:a7:a6: 13:5f:6c:90:21:51:9e:00:5d:ec:76:f5:20:dd:1d:b6:69:5d: a6:1c:6a:97:59:6a:31:20:26:d2:f4:cf:ac:73:48:b2:95:7d: 63:c3:98:c0 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZre5M5Pi3J86HBl4YwR3hCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZDkxY2RjYzBjMWIzNjNiNDliZmMzYzJhYzU4ZTkzMDAy ZGYwN2QwHhcNMjUxMjAyMTE0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGJhMGU1Mjc0OTI2YmE5ZDg1YzIzY2FiZDhhN2Y1N2EyMGViOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEiE5RNmaPBOdRAzhZXDOrbHMKXj cOXSO0m0lljgANgISfDcfuwFus6eaOndDRm2/nNvyp4m/ZeDU4aJMBNhW+PlXfrp oFGVrZTv2DZgFvIGbF8iBBSLAGCQf3nr0mXuxQisYreB3BirFmEZ6tCIjLPMht03 w0YDWPsbj2qEbr1/Z45Jp0/rDjVu3OKw1ApUohmfTY3lBEv0p73aC8pemqaOqUC0 DwfmRGKe6g+mLW+cMej9FSNf2u0Zj+D7sF+XqOyuCOSA8KfdLpBE00z4UmkgeBFR xpGS4AE7Mds1taZ7HEIfkamKHkCuP6YM6+++qODBNtCib4flJJ04qHjPtwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLC6DlJ0kmup2Fwjyr2Kf1eiDrmOMB8GA1UdIwQY MBaAFHPZHNzAwbNjtJv8PCrFjpMALfB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgt YjE1NTI0MDliNmQxLzEvc0xvT1VuU1NhNm5ZWENQS3ZZcF9WNklPdVk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgtYjE1NTI0MDliNmQx LzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLQ9sAwQF 1aHgAwQF1bjAMA0EAgACMAcDBQMqC1EAMA0GCSqGSIb3DQEBCwUAA4IBAQCgEsQZ FYP8FcbrgFKoihVSYooyJiDeGe3UM3oit4SMactZ7oS9PlGU+4YbGDYdfT+9o2ED xy/ZkB1WCHxOFjCpJzbk/sV/kFd+hYE3SrItakHsLKSprfHiUkzifEWMj8xLhcYR MkH16YTReG66gvoo/r092iyUoKNwEY7ctWmvW6hxwQGF5NDOmJPthAmmMa4GFQ8d SvQ9A4hV55LqfifThbN/dRIeq5O6G4UqBm+qxBB3F/ndbqOSL3s5iBIETwYRiqhg Gxl9MtNJD2DVhIGZWpUkbSTcp6YTX2yQIVGeAF3sdvUg3R22aV2mHGqXWWoxICbS 9M+sc0iylX1jw5jA -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:42 2025 by rpki-client