This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/0X4Mkrt6RHt5xbUnB42Nc8_CJJ0.roa File: 0X4Mkrt6RHt5xbUnB42Nc8_CJJ0.roa (raw, json) Hash identifier: Y3zhErD2fvOZ7YMVCPvi9YGS4yfBp7uytHtEq8brQEk= Subject key identifier: D1:7E:0C:92:BB:7A:44:7B:79:C5:B5:27:07:8D:8D:73:CF:C2:24:9D Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019B0770C629EB81D9F8CAD3AA95DA8430B9 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/0X4Mkrt6RHt5xbUnB42Nc8_CJJ0.roa Signing time: Wed 10 Dec 2025 08:46:29 +0000 ROA not before: Wed 10 Dec 2025 08:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55201 IP address blocks: 45.140.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:70:c6:29:eb:81:d9:f8:ca:d3:aa:95:da:84:30:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Dec 10 08:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d17e0c92bb7a447b79c5b527078d8d73cfc2249d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:51:73:3e:73:fa:0d:dd:75:32:ba:86:f5:f3: 18:b7:bb:dd:85:aa:68:d1:74:34:ee:25:1d:91:8b: 58:43:d0:8a:f0:72:d7:ea:16:be:51:8c:18:69:72: 14:c1:12:04:90:97:c9:58:7b:dc:55:43:67:19:c9: 5f:b2:ec:7d:2a:02:e7:88:e2:ce:61:7d:74:50:84: 62:9b:08:5f:b3:eb:c7:17:4f:d0:17:ad:65:60:46: a6:d1:4d:98:45:0a:e1:15:06:17:ca:e2:f7:fd:b5: 39:95:ae:8b:b4:fe:74:23:25:a6:f7:57:cb:08:55: 57:76:04:ed:d1:8d:d2:28:db:6f:c3:97:21:1f:e3: 27:75:16:06:0b:c9:47:fe:c7:d4:6a:22:0e:b8:47: 77:18:68:b3:a7:e0:ad:f0:02:cc:7c:25:3d:fa:88: c2:67:20:08:07:c8:ec:8e:4b:7a:ac:3f:12:f0:7b: a6:0c:08:2c:31:96:62:06:5e:2a:10:5d:f0:2f:58: 1d:3e:74:02:24:c5:e8:79:ed:6b:b3:05:83:5b:83: 87:67:a8:58:d0:69:e9:61:4a:d9:62:86:6e:a2:2e: f9:dd:49:cc:ec:89:7a:c3:84:f0:c8:03:99:46:1c: 67:26:13:d2:eb:dd:f7:99:23:e0:95:fe:74:af:74: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7E:0C:92:BB:7A:44:7B:79:C5:B5:27:07:8D:8D:73:CF:C2:24:9D X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/0X4Mkrt6RHt5xbUnB42Nc8_CJJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.210.0/24 Signature Algorithm: sha256WithRSAEncryption d7:f3:4b:33:b1:6b:39:e3:5a:c1:da:33:e1:69:30:e9:16:99: 39:c7:fa:b7:49:bd:04:c1:bb:47:45:1d:37:b5:b2:0b:2b:d7: f4:d9:1d:97:be:f3:cd:26:af:f6:26:76:13:f7:cb:76:7e:15: 52:50:86:f0:11:af:34:76:08:3b:ca:f1:8d:5d:86:6b:fe:c8: 82:99:47:1e:e0:6a:64:e6:41:dd:27:12:e9:09:45:07:45:e0: 18:e5:97:10:82:11:14:55:f8:4a:b4:59:b0:0c:0e:eb:95:b7: 08:56:51:61:4f:03:3a:11:18:d9:cf:2d:77:bd:8b:45:15:84: 0a:ba:44:b0:a9:94:79:3c:98:81:9a:d1:7b:cf:b2:c1:49:c0: 02:6d:24:d6:21:25:7c:50:d3:bd:c6:7d:9c:f6:10:7f:b0:a0: 0b:ab:68:92:f3:85:62:e9:be:cb:51:ec:32:ed:53:a3:a7:84: 82:60:b9:0f:40:30:3b:20:1b:84:5a:93:2b:6e:37:7c:f5:41: 1f:64:3a:90:87:2d:a1:aa:2d:8e:b5:97:69:ab:19:fa:21:39: d1:f0:08:7e:10:3c:1e:b0:23:48:dd:af:2b:85:43:6a:54:8a: 5a:6e:de:14:0c:91:1e:a1:d4:a0:0d:62:97:ce:3a:5e:bb:52: a8:c4:46:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHcMYp64HZ+MrTqpXahDC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUxMjEwMDg0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTdlMGM5MmJiN2E0NDdiNzljNWI1MjcwNzhkOGQ3M2NmYzIyNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlFzPnP6Dd11MrqG9fMYt7vdhapo 0XQ07iUdkYtYQ9CK8HLX6ha+UYwYaXIUwRIEkJfJWHvcVUNnGclfsux9KgLniOLO YX10UIRimwhfs+vHF0/QF61lYEam0U2YRQrhFQYXyuL3/bU5la6LtP50IyWm91fL CFVXdgTt0Y3SKNtvw5chH+MndRYGC8lH/sfUaiIOuEd3GGizp+Ct8ALMfCU9+ojC ZyAIB8jsjkt6rD8S8HumDAgsMZZiBl4qEF3wL1gdPnQCJMXoee1rswWDW4OHZ6hY 0GnpYUrZYoZuoi753UnM7Il6w4TwyAOZRhxnJhPS6933mSPglf50r3T09wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNF+DJK7ekR7ecW1JweNjXPPwiSdMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEvMFg0TWtydDZSSHQ1eGJVbkI0Mk5jOF9DSkowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzSMA0G CSqGSIb3DQEBCwUAA4IBAQDX80szsWs541rB2jPhaTDpFpk5x/q3Sb0EwbtHRR03 tbILK9f02R2XvvPNJq/2JnYT98t2fhVSUIbwEa80dgg7yvGNXYZr/siCmUce4Gpk 5kHdJxLpCUUHReAY5ZcQghEUVfhKtFmwDA7rlbcIVlFhTwM6ERjZzy13vYtFFYQK ukSwqZR5PJiBmtF7z7LBScACbSTWISV8UNO9xn2c9hB/sKALq2iS84Vi6b7LUewy 7VOjp4SCYLkPQDA7IBuEWpMrbjd89UEfZDqQhy2hqi2OtZdpqxn6ITnR8Ah+EDwe sCNI3a8rhUNqVIpabt4UDJEeodSgDWKXzjpeu1KoxEbp -----END CERTIFICATE-----Generated at Tue Dec 16 06:14:08 2025 by rpki-client