This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/_VNci0CcXhqQlp-7ibbk2c6er8o.roa File: _VNci0CcXhqQlp-7ibbk2c6er8o.roa (raw, json) Hash identifier: 5KlbSxEJ+Lpv1MXHETwLf3XDOUs4Vpm0vwOM11754ko= Subject key identifier: FD:53:5C:8B:40:9C:5E:1A:90:96:9F:BB:89:B6:E4:D9:CE:9E:AF:CA Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019AF28E170138EAFADCAB3C71B2207828FA Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/_VNci0CcXhqQlp-7ibbk2c6er8o.roa Signing time: Sat 06 Dec 2025 07:26:29 +0000 ROA not before: Sat 06 Dec 2025 07:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203144 IP address blocks: 45.134.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:8e:17:01:38:ea:fa:dc:ab:3c:71:b2:20:78:28:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Dec 6 07:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd535c8b409c5e1a90969fbb89b6e4d9ce9eafca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:fc:29:8f:22:ce:20:f6:f9:43:b7:91:3a: 1d:65:a6:8d:73:75:56:fb:b6:37:a7:cf:e2:a7:99: d7:8a:b5:8c:f2:e7:2e:2a:2e:ea:d2:88:c6:e2:40: f8:3c:66:a2:82:e0:51:3d:1f:64:16:ee:3d:c0:eb: 06:19:c0:03:6c:16:c1:2a:2c:1d:ab:11:35:e2:de: 4f:83:87:01:fd:2b:5c:4b:21:75:e9:32:78:5c:35: 78:44:78:10:86:c1:6b:f1:11:95:b6:ad:e4:8f:72: 68:17:35:8c:78:a1:51:9a:f0:d2:77:ff:5e:5d:1f: 6e:26:46:1e:34:6c:04:de:61:f5:c9:40:4e:f7:2a: ba:22:87:e8:0f:00:c9:76:8b:ed:ee:a1:5a:2d:42: 51:a0:07:be:64:f1:4e:4f:fe:d6:42:7e:b6:ae:de: 7d:97:6e:79:05:71:cf:26:04:85:62:48:a8:b3:d1: 0d:e9:6a:66:23:1d:a1:00:b4:23:61:59:ab:16:d5: 84:00:db:b8:35:c5:ff:9f:5b:15:77:e6:02:c1:52: a1:86:d7:da:e4:ca:66:eb:24:30:78:31:c4:d0:98: fb:b8:55:af:37:02:62:c9:a3:35:63:2e:69:03:06: e0:ce:61:e6:17:44:f5:ea:e4:a2:01:87:cc:18:3a: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:53:5C:8B:40:9C:5E:1A:90:96:9F:BB:89:B6:E4:D9:CE:9E:AF:CA X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/_VNci0CcXhqQlp-7ibbk2c6er8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.21.0/24 Signature Algorithm: sha256WithRSAEncryption 78:5b:03:61:5e:69:68:6e:d7:1e:ba:59:ec:e5:70:23:12:98: 6b:9f:51:a7:f6:de:0f:7c:a4:77:ea:90:11:42:55:0b:db:24: ed:38:80:3d:5d:6b:2d:ac:5b:99:10:0d:5a:fe:43:2e:71:92: 0b:9d:c4:bc:b0:6e:83:2a:26:2f:38:f1:a2:c2:17:d4:30:5e: 17:1b:33:97:5d:a3:bc:d9:81:bf:2a:45:f5:82:88:13:80:b0: 30:a7:60:88:c1:3a:c1:08:09:0f:6d:ff:ee:e9:a9:6c:f3:95: 80:eb:09:28:96:94:38:05:3f:46:5e:1e:8e:aa:8f:c6:66:26: 46:9a:6b:16:48:43:05:52:0c:67:ba:ce:f6:2b:ac:f1:f7:c4: ee:a6:ac:b4:9e:c2:1f:5e:aa:2d:fb:93:9c:d7:58:63:39:b7: 10:4b:39:3e:98:f7:99:28:72:83:90:cd:c6:42:b1:bb:a0:9c: 8d:96:36:30:2c:0d:89:41:b2:81:20:da:9e:54:e7:dd:ec:1f: 98:c8:9d:54:8d:c6:12:d2:e1:09:69:ce:af:c5:aa:ac:62:59: 89:6f:ab:40:ae:8e:ef:da:b6:8d:a7:4d:19:55:ac:41:4c:27: cb:de:78:62:1b:e2:2c:cc:a7:d1:22:76:5e:01:3b:54:bf:4d: f5:e9:a4:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZryjhcBOOr63Ks8cbIgeCj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjUxMjA2MDcyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDUzNWM4YjQwOWM1ZTFhOTA5NjlmYmI4OWI2ZTRkOWNlOWVhZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn78KY8iziD2+UO3kTodZaaNc3VW +7Y3p8/ip5nXirWM8ucuKi7q0ojG4kD4PGaiguBRPR9kFu49wOsGGcADbBbBKiwd qxE14t5Pg4cB/StcSyF16TJ4XDV4RHgQhsFr8RGVtq3kj3JoFzWMeKFRmvDSd/9e XR9uJkYeNGwE3mH1yUBO9yq6IofoDwDJdovt7qFaLUJRoAe+ZPFOT/7WQn62rt59 l255BXHPJgSFYkios9EN6WpmIx2hALQjYVmrFtWEANu4NcX/n1sVd+YCwVKhhtfa 5Mpm6yQweDHE0Jj7uFWvNwJiyaM1Yy5pAwbgzmHmF0T16uSiAYfMGDoFoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1TXItAnF4akJafu4m25NnOnq/KMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvX1ZOY2kwQ2NYaHFRbHAtN2liYmsyYzZlcjhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYYVMA0G CSqGSIb3DQEBCwUAA4IBAQB4WwNhXmlobtceulns5XAjEphrn1Gn9t4PfKR36pAR QlUL2yTtOIA9XWstrFuZEA1a/kMucZILncS8sG6DKiYvOPGiwhfUMF4XGzOXXaO8 2YG/KkX1gogTgLAwp2CIwTrBCAkPbf/u6als85WA6wkolpQ4BT9GXh6Oqo/GZiZG mmsWSEMFUgxnus72K6zx98Tupqy0nsIfXqot+5Oc11hjObcQSzk+mPeZKHKDkM3G QrG7oJyNljYwLA2JQbKBINqeVOfd7B+YyJ1UjcYS0uEJac6vxaqsYlmJb6tAro7v 2raNp00ZVaxBTCfL3nhiG+IszKfRInZeATtUv0316aRK -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:13 2025 by rpki-client