This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/5M71zfuSK_xqpTjKPkO0azEuCEg.roa File: 5M71zfuSK_xqpTjKPkO0azEuCEg.roa (raw, json) Hash identifier: EQV/qG+jN/4sv0IUUwoKPerLsgoGZPmCyJNmiQYWTG0= Subject key identifier: E4:CE:F5:CD:FB:92:2B:FC:6A:A5:38:CA:3E:43:B4:6B:31:2E:08:48 Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Certificate serial: 019A73161220F3E4B26F17B4C81CCE7C1D1D Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/5M71zfuSK_xqpTjKPkO0azEuCEg.roa Signing time: Tue 11 Nov 2025 13:23:37 +0000 ROA not before: Tue 11 Nov 2025 13:23:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60647 IP address blocks: 45.15.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:16:12:20:f3:e4:b2:6f:17:b4:c8:1c:ce:7c:1d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Validity Not Before: Nov 11 13:23:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e4cef5cdfb922bfc6aa538ca3e43b46b312e0848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:34:1d:01:d7:3b:c5:b6:d5:41:a1:5f:88: 8a:e8:36:f1:1f:5c:8c:49:44:fc:d9:c3:16:61:5e: 47:c6:b3:1e:8f:5e:1a:37:7c:33:ed:aa:fc:23:7b: 51:ff:d8:f6:e8:31:ac:c1:f3:1f:88:8e:b2:a4:09: 0c:86:91:0f:1e:47:92:27:e3:c2:5e:36:33:06:e6: b3:2c:0f:13:39:7b:0d:85:b7:0d:a3:91:40:b8:e6: 5d:b1:28:5a:d5:d8:8b:f9:80:b4:57:b9:05:f5:c4: b6:df:80:1c:f4:ed:16:22:bc:ac:7b:ba:20:94:82: 51:ac:12:64:16:c6:81:7d:ed:a8:ba:55:1f:62:0e: 1d:a3:72:1b:4b:87:57:f6:cb:fa:bf:10:20:88:bd: 60:7c:6c:78:7b:c9:0b:06:e8:e9:53:7a:72:df:ed: c7:0d:06:ec:89:2e:86:bf:e8:d0:95:81:51:a9:85: cd:87:dd:5b:40:23:cb:89:e3:cb:05:9b:d2:a8:87: b8:f4:4f:a5:65:89:e3:77:b5:48:e2:83:55:32:9b: 2c:c5:c1:a0:47:70:f1:5c:b3:c2:52:a1:73:83:92: f6:6b:4f:9b:15:e1:de:b1:ae:2a:24:21:d4:2e:30: 9d:c5:b7:df:04:14:08:51:1d:27:ee:ac:e3:e1:9f: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CE:F5:CD:FB:92:2B:FC:6A:A5:38:CA:3E:43:B4:6B:31:2E:08:48 X509v3 Authority Key Identifier: keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/5M71zfuSK_xqpTjKPkO0azEuCEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.41.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:83:17:7f:55:84:7a:49:cd:ba:5d:b9:61:87:d5:26:46:de: 5c:7d:ac:46:e4:7b:8e:c4:08:b3:03:28:56:24:f9:25:c9:bd: 67:59:d6:89:c3:01:cd:65:b8:9e:c6:b6:19:08:8b:cf:01:d2: cb:9c:25:13:21:a2:64:35:c1:73:1f:4d:e1:a8:52:04:f0:43: 16:e2:53:8e:38:19:b7:d4:09:68:06:0b:5e:b3:04:0b:b2:05: 68:ee:8c:54:d4:d0:50:84:cf:36:df:25:08:c1:95:14:80:d2: ff:50:46:74:39:cd:23:aa:84:21:37:82:2b:ac:04:a2:f7:ab: 48:db:d7:6d:8d:85:85:9a:55:08:b0:ee:33:7e:d9:08:af:d8: 50:47:4e:08:e2:90:31:cb:91:49:61:bf:09:b4:78:19:ad:48: 28:ba:b0:64:d0:f0:11:2f:e5:30:90:b0:01:01:94:2f:21:1a: 50:40:5f:ec:91:66:9b:cd:ad:36:12:58:55:8a:08:68:68:8c: db:ce:14:9c:13:93:ff:c8:dc:e1:39:4b:cb:b3:4c:3c:89:f8: ff:93:41:c3:1f:56:b0:3b:6e:4e:6f:01:81:30:dc:56:15:ff: 29:57:41:7c:4b:6b:b8:1c:bd:a7:c8:0f:0a:d1:17:71:b4:6e: 2c:27:66:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpzFhIg8+Sybxe0yBzOfB0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzI5Y2IzYWJlNGU5NDBjZmM2MmEyMGUyYTZlMmMyOGZj MjgzMjkwHhcNMjUxMTExMTMyMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGNlZjVjZGZiOTIyYmZjNmFhNTM4Y2EzZTQzYjQ2YjMxMmUwODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FA0HQHXO8W21UGhX4iK6DbxH1yM SUT82cMWYV5HxrMej14aN3wz7ar8I3tR/9j26DGswfMfiI6ypAkMhpEPHkeSJ+PC XjYzBuazLA8TOXsNhbcNo5FAuOZdsSha1diL+YC0V7kF9cS234Ac9O0WIryse7og lIJRrBJkFsaBfe2oulUfYg4do3IbS4dX9sv6vxAgiL1gfGx4e8kLBujpU3py3+3H DQbsiS6Gv+jQlYFRqYXNh91bQCPLiePLBZvSqIe49E+lZYnjd7VI4oNVMpssxcGg R3DxXLPCUqFzg5L2a0+bFeHesa4qJCHULjCdxbffBBQIUR0n7qzj4Z+MlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOTO9c37kiv8aqU4yj5DtGsxLghIMB8GA1UdIwQY MBaAFCMynLOr5OlAz8YqIOKm4sKPwoMpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTIt NTE4ZjJjOGY4NDZiLzEvNU03MXpmdVNLX3hxcFRqS1BrTzBhekV1Q0VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTItNTE4ZjJjOGY4NDZi LzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ8pMA0G CSqGSIb3DQEBCwUAA4IBAQAdgxd/VYR6Sc26Xblhh9UmRt5cfaxG5HuOxAizAyhW JPklyb1nWdaJwwHNZbiexrYZCIvPAdLLnCUTIaJkNcFzH03hqFIE8EMW4lOOOBm3 1AloBgteswQLsgVo7oxU1NBQhM823yUIwZUUgNL/UEZ0Oc0jqoQhN4IrrASi96tI 29dtjYWFmlUIsO4zftkIr9hQR04I4pAxy5FJYb8JtHgZrUgourBk0PARL+UwkLAB AZQvIRpQQF/skWabza02ElhVighoaIzbzhScE5P/yNzhOUvLs0w8ifj/k0HDH1aw O25ObwGBMNxWFf8pV0F8S2u4HL2nyA8K0RdxtG4sJ2Yn -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:10 2025 by rpki-client