This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/9wsdpuMjZ1XS6bK3aGRYfsYZqMY.roa File: 9wsdpuMjZ1XS6bK3aGRYfsYZqMY.roa (raw, json) Hash identifier: /bubvvyyCfe3wByISey49bBzc5BKqpBJ33FyIFj7ql0= Subject key identifier: F7:0B:1D:A6:E3:23:67:55:D2:E9:B2:B7:68:64:58:7E:C6:19:A8:C6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019AB65E7704A097E62E806B6D3170E3608B Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/9wsdpuMjZ1XS6bK3aGRYfsYZqMY.roa Signing time: Mon 24 Nov 2025 14:57:15 +0000 ROA not before: Mon 24 Nov 2025 14:57:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203446 IP address blocks: 45.84.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:5e:77:04:a0:97:e6:2e:80:6b:6d:31:70:e3:60:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Nov 24 14:57:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f70b1da6e3236755d2e9b2b76864587ec619a8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:df:11:12:46:1f:4d:8b:da:65:60:07:9b: ad:af:62:4b:42:26:b4:36:fc:11:62:53:ec:a5:99: a0:b9:8b:ad:c5:f3:84:dc:fd:1f:7d:8c:bf:85:02: e2:36:3d:14:f8:b3:be:24:e8:48:1b:81:d1:6b:07: 7a:33:8b:03:f7:8c:f1:9e:36:94:93:85:8c:6b:b8: d0:a0:2b:bd:5d:65:bb:05:31:56:fa:d7:73:4d:4a: 2f:ab:fe:aa:63:8a:4b:e8:a1:8f:fb:0d:35:26:98: 28:7d:71:2b:13:94:4d:1c:a2:aa:ed:36:28:e9:e7: 75:2e:79:9c:e0:43:f8:9b:2e:be:45:f7:4f:e9:61: a3:c8:39:33:98:2c:65:dc:25:6c:52:09:1b:dd:77: 2e:d5:96:0e:c2:13:76:f9:f2:eb:e8:0e:8d:ea:33: 18:76:c6:79:b2:fc:72:4a:7d:23:2b:50:e5:2e:6d: 8c:84:03:24:b5:38:f0:3a:f8:c2:20:92:8d:27:e0: cc:99:0f:b2:ea:00:61:bd:68:ec:18:9f:fa:ce:d4: 8f:31:df:b6:c6:2f:62:b1:ed:34:ce:98:69:61:98: f7:c1:48:fe:bc:08:af:84:ad:71:00:15:13:19:97: fc:51:32:67:7a:b8:21:a1:85:f8:85:63:91:e4:b6: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0B:1D:A6:E3:23:67:55:D2:E9:B2:B7:68:64:58:7E:C6:19:A8:C6 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/9wsdpuMjZ1XS6bK3aGRYfsYZqMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.240.0/24 Signature Algorithm: sha256WithRSAEncryption a1:69:67:7b:f0:78:11:ab:1e:e1:fb:76:8e:29:d0:16:1d:0c: 70:f0:b3:af:77:fb:83:d8:1d:31:f5:b7:d1:02:d0:34:b6:f7: 0c:18:a8:64:5f:40:fd:3e:27:63:fe:25:59:fc:84:f4:3d:1f: 07:23:ef:24:2b:3e:34:7f:1c:3e:99:7d:4c:9c:8d:eb:bc:35: b3:a2:79:34:e1:ba:9b:4c:7f:d3:3e:64:cd:d2:21:eb:6f:26: e7:8c:fe:95:52:9b:76:17:11:29:a0:32:7b:4c:5f:4d:b9:83: 44:64:10:7b:67:fb:38:10:f5:2a:cf:8b:cb:81:3d:41:c6:8e: 8b:96:ca:cd:ec:1f:69:c4:65:13:2d:62:39:cc:d0:6a:39:af: 7a:35:fc:1a:eb:e4:a0:53:f7:7a:05:5b:a8:b1:46:5d:3e:8d: cf:ba:bb:4e:84:37:83:fb:5c:28:01:ff:cc:7a:69:2b:c9:95: ee:26:e0:ea:21:f7:d2:49:59:e8:6d:4a:e4:c4:6f:20:e6:75: 1e:72:c4:dd:a8:41:60:5f:28:7c:12:81:68:05:15:9b:ea:48: 97:4d:50:61:d3:27:88:e1:bd:37:01:f4:c6:5d:b3:4d:29:74: 9f:bc:09:47:0e:71:da:58:cd:6c:39:51:3f:0e:c7:90:18:bb: 7c:ae:c4:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq2XncEoJfmLoBrbTFw42CLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUxMTI0MTQ1NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzBiMWRhNmUzMjM2NzU1ZDJlOWIyYjc2ODY0NTg3ZWM2MTlhOGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwbfERJGH02L2mVgB5utr2JLQia0 NvwRYlPspZmguYutxfOE3P0ffYy/hQLiNj0U+LO+JOhIG4HRawd6M4sD94zxnjaU k4WMa7jQoCu9XWW7BTFW+tdzTUovq/6qY4pL6KGP+w01JpgofXErE5RNHKKq7TYo 6ed1Lnmc4EP4my6+RfdP6WGjyDkzmCxl3CVsUgkb3Xcu1ZYOwhN2+fLr6A6N6jMY dsZ5svxySn0jK1DlLm2MhAMktTjwOvjCIJKNJ+DMmQ+y6gBhvWjsGJ/6ztSPMd+2 xi9ise00zphpYZj3wUj+vAivhK1xABUTGZf8UTJnerghoYX4hWOR5La34wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPcLHabjI2dV0umyt2hkWH7GGajGMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvOXdzZHB1TWpaMVhTNmJLM2FHUllmc1lacU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTwMA0G CSqGSIb3DQEBCwUAA4IBAQChaWd78HgRqx7h+3aOKdAWHQxw8LOvd/uD2B0x9bfR AtA0tvcMGKhkX0D9Pidj/iVZ/IT0PR8HI+8kKz40fxw+mX1MnI3rvDWzonk04bqb TH/TPmTN0iHrbybnjP6VUpt2FxEpoDJ7TF9NuYNEZBB7Z/s4EPUqz4vLgT1Bxo6L lsrN7B9pxGUTLWI5zNBqOa96Nfwa6+SgU/d6BVuosUZdPo3PurtOhDeD+1woAf/M emkryZXuJuDqIffSSVnobUrkxG8g5nUecsTdqEFgXyh8EoFoBRWb6kiXTVBh0yeI 4b03AfTGXbNNKXSfvAlHDnHaWM1sOVE/DseQGLt8rsTO -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:29 2025 by rpki-client