This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/171evle6xv8dLow-ZtnVHLHtHQE.roa File: 171evle6xv8dLow-ZtnVHLHtHQE.roa (raw, json) Hash identifier: TVeCCzIKcWOQCI6aciVTZUu7vPhtLccr6X4BeHNVra4= Subject key identifier: D7:BD:5E:BE:57:BA:C6:FF:1D:2E:8C:3E:66:D9:D5:1C:B1:ED:1D:01 Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75 Certificate serial: 019AE6CF2E71C4002F1A313ED327BD6C168A Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/171evle6xv8dLow-ZtnVHLHtHQE.roa Signing time: Thu 04 Dec 2025 00:42:08 +0000 ROA not before: Thu 04 Dec 2025 00:42:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35489 IP address blocks: 45.133.100.0/24 maxlen: 24 45.133.101.0/24 maxlen: 24 193.8.4.0/23 maxlen: 23 193.8.4.0/24 maxlen: 24 193.8.5.0/24 maxlen: 24 193.8.6.0/24 maxlen: 24 193.8.7.0/24 maxlen: 24 2a0c:7cc0::/29 maxlen: 29 2a0c:7cc0::/48 maxlen: 48 2a0c:7cc2:297::/48 maxlen: 48 2a0c:7cc7::/32 maxlen: 32 2a0c:7cc7:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:cf:2e:71:c4:00:2f:1a:31:3e:d3:27:bd:6c:16:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75 Validity Not Before: Dec 4 00:42:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7bd5ebe57bac6ff1d2e8c3e66d9d51cb1ed1d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4c:fe:c0:e5:0b:37:e8:84:30:aa:f3:ec:33: 02:89:ad:3c:ec:dd:ba:9f:0f:42:1c:25:bf:ff:60: 19:9c:22:05:ad:62:6e:93:4f:99:bd:a4:38:bd:d9: 02:52:b1:29:cd:91:f4:3c:c0:e5:61:30:75:4f:5c: 67:9f:9a:fa:c7:46:92:85:71:64:68:23:17:24:4d: 6f:09:22:e3:49:42:7e:47:b5:3e:14:a4:d3:fe:83: 46:de:75:2e:be:8c:b8:ad:6b:64:f8:d4:d1:44:b8: 2c:b5:ab:7f:89:dd:43:52:df:80:46:e9:79:34:c6: 14:ba:2f:14:5a:33:d8:c6:40:f4:36:9c:a2:73:81: 47:ef:50:77:f1:82:f2:e9:f9:48:83:a5:29:10:2b: 90:48:6a:5c:a3:b2:7a:88:80:75:24:91:fc:35:13: 63:55:73:79:d5:62:a6:86:4a:e7:d3:48:0c:49:32: 68:0d:49:4a:97:71:84:a3:39:1f:5e:42:c9:3b:4d: 07:ff:e2:9f:71:51:eb:91:e0:c6:45:4f:ab:5e:c1: 24:18:e9:4c:10:98:9c:4b:04:ff:18:3c:f2:e9:1f: 89:7e:5a:f8:f4:8b:7a:90:45:d8:2e:26:f2:a3:a7: db:41:d6:6b:c9:4f:82:b6:7f:49:1e:f3:76:3c:1d: 35:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BD:5E:BE:57:BA:C6:FF:1D:2E:8C:3E:66:D9:D5:1C:B1:ED:1D:01 X509v3 Authority Key Identifier: keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/171evle6xv8dLow-ZtnVHLHtHQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.100.0/23 193.8.4.0/22 IPv6: 2a0c:7cc0::/29 Signature Algorithm: sha256WithRSAEncryption 8d:7b:6d:66:38:ff:7c:81:5b:57:1d:0f:fa:9f:84:fd:56:56: 71:0f:97:c7:65:22:70:06:c9:58:ec:6b:13:1c:9f:f4:89:ae: 90:23:92:88:57:31:fb:31:2f:32:e6:be:8b:ee:31:ee:2f:38: db:fd:0d:7c:5e:74:ed:c0:0b:a3:22:2f:b1:1b:90:db:4a:b0: 8c:ed:0b:d1:8f:69:8c:b6:5d:22:32:5c:0b:e1:e2:16:da:f4: 34:fa:de:46:e2:03:0f:fb:16:ce:01:9c:bd:f9:d1:09:a6:5b: 26:89:80:ae:39:fd:76:a9:60:5b:33:36:2e:a1:90:db:10:c3: 7d:8e:e1:c6:0b:8a:30:4f:bd:9e:3e:d3:2d:eb:d2:11:02:5a: fc:48:5e:35:9a:0b:07:bb:08:03:c8:7b:38:f1:2a:85:b5:f5: c5:ab:03:1f:52:bc:73:2c:95:44:23:70:33:6b:e3:8e:1f:90: ec:13:74:52:fa:8f:13:a3:04:49:5d:a9:3a:b8:4b:19:66:3e: 82:7c:9c:ee:6e:4b:63:9f:2a:fa:d6:17:c7:79:8b:78:8c:e6: a6:80:4c:a3:3d:ec:01:61:cc:69:1d:50:8e:c6:a2:0a:66:37: 0c:32:78:e9:28:93:d4:3a:b1:c0:3a:c3:4a:08:1b:78:18:08: 44:23:5d:fb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrmzy5xxAAvGjE+0ye9bBaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMWNlMWQxMzViZjJjZjhlOGMxM2YzM2VjMTFjODUyMzcw M2RjNzUwHhcNMjUxMjA0MDA0MjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2JkNWViZTU3YmFjNmZmMWQyZThjM2U2NmQ5ZDUxY2IxZWQxZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ez+wOULN+iEMKrz7DMCia087N26 nw9CHCW//2AZnCIFrWJuk0+ZvaQ4vdkCUrEpzZH0PMDlYTB1T1xnn5r6x0aShXFk aCMXJE1vCSLjSUJ+R7U+FKTT/oNG3nUuvoy4rWtk+NTRRLgstat/id1DUt+ARul5 NMYUui8UWjPYxkD0Npyic4FH71B38YLy6flIg6UpECuQSGpco7J6iIB1JJH8NRNj VXN51WKmhkrn00gMSTJoDUlKl3GEozkfXkLJO00H/+KfcVHrkeDGRU+rXsEkGOlM EJicSwT/GDzy6R+Jflr49It6kEXYLibyo6fbQdZryU+Ctn9JHvN2PB01wQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNe9Xr5Xusb/HS6MPmbZ1Ryx7R0BMB8GA1UdIwQY MBaAFIoc4dE1vyz46ME/M+wRyFI3A9x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDIt ZGVlMjkyZWE4N2EzLzEvMTcxZXZsZTZ4djhkTG93LVp0blZITEh0SFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDItZGVlMjkyZWE4N2Ez LzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLYVkAwQC wQgEMA0EAgACMAcDBQMqDHzAMA0GCSqGSIb3DQEBCwUAA4IBAQCNe21mOP98gVtX HQ/6n4T9VlZxD5fHZSJwBslY7GsTHJ/0ia6QI5KIVzH7MS8y5r6L7jHuLzjb/Q18 XnTtwAujIi+xG5DbSrCM7QvRj2mMtl0iMlwL4eIW2vQ0+t5G4gMP+xbOAZy9+dEJ plsmiYCuOf12qWBbMzYuoZDbEMN9juHGC4owT72ePtMt69IRAlr8SF41mgsHuwgD yHs48SqFtfXFqwMfUrxzLJVEI3Aza+OOH5DsE3RS+o8TowRJXak6uEsZZj6CfJzu bktjnyr61hfHeYt4jOamgEyjPewBYcxpHVCOxqIKZjcMMnjpKJPUOrHAOsNKCBt4 GAhEI137 -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:35 2025 by rpki-client