This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Rx0GsudNXa3NlGsO3A-jTHYF3kc.roa File: Rx0GsudNXa3NlGsO3A-jTHYF3kc.roa (raw, json) Hash identifier: CAOEV8Hvnr7hXFP4sBSOfWBU2brqmyY3T+FnKR9MbjA= Subject key identifier: 47:1D:06:B2:E7:4D:5D:AD:CD:94:6B:0E:DC:0F:A3:4C:76:05:DE:47 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019AF2FF9EC7B5BA18878182C9C5A2514E6A Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Rx0GsudNXa3NlGsO3A-jTHYF3kc.roa Signing time: Sat 06 Dec 2025 09:30:29 +0000 ROA not before: Sat 06 Dec 2025 09:30:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215749 IP address blocks: 213.238.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ff:9e:c7:b5:ba:18:87:81:82:c9:c5:a2:51:4e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Dec 6 09:30:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=471d06b2e74d5dadcd946b0edc0fa34c7605de47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:dd:52:84:04:75:73:98:02:dd:62:f3:bb: 5e:85:a6:cd:78:c3:b6:04:c0:61:31:8a:0a:a2:4a: b1:5c:70:35:93:34:b3:9a:f0:d2:53:56:25:80:b0: ac:3e:72:94:71:91:2b:9b:ca:56:cd:42:e1:dd:69: 51:f0:7d:ba:17:82:34:15:62:be:16:ad:9d:b7:ff: c8:2f:88:18:11:3c:a2:fb:e7:2e:de:d6:10:55:38: a2:4b:95:54:d2:e8:7d:16:f6:47:50:07:95:b5:39: 03:02:c1:7c:20:44:f0:91:c0:d7:08:da:2d:68:31: 79:4b:a3:22:24:df:a7:8d:9b:63:58:54:7a:3f:0b: 55:9a:52:07:70:b1:15:15:58:d1:fc:95:a9:6e:dc: 0b:e5:f3:40:a4:15:6c:0a:26:9e:53:84:9d:71:c8: 6f:42:89:e7:b4:09:4f:c2:ae:bf:4b:ed:43:bb:db: b2:73:4c:1d:71:be:64:2f:2c:b7:73:99:fa:f7:27: ff:08:d9:56:7b:3f:fd:90:17:e5:e2:e4:93:fa:c2: ce:15:a6:17:34:94:79:80:2e:08:6d:86:5a:25:12: a3:3a:e5:ff:51:a5:19:ea:6d:cb:08:97:54:74:9d: 17:fe:1d:08:77:e6:db:68:d9:ea:99:5c:bf:b3:06: d8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1D:06:B2:E7:4D:5D:AD:CD:94:6B:0E:DC:0F:A3:4C:76:05:DE:47 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Rx0GsudNXa3NlGsO3A-jTHYF3kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.170.0/24 Signature Algorithm: sha256WithRSAEncryption 44:00:51:8c:04:42:5d:3c:33:66:0f:b1:39:47:fc:3a:96:b6: dd:92:49:9d:07:3a:ec:d7:59:1c:da:35:99:a8:c6:c6:ed:61: 60:05:9a:a9:1e:fe:f4:08:1d:7a:9c:3d:ac:b3:c6:b1:d0:7d: ec:3e:22:da:ea:c1:86:08:12:4d:72:f9:82:ae:e0:1d:05:92: 50:4b:6c:b5:39:04:d7:c5:0c:67:cb:b4:4d:6d:80:85:06:73: 23:99:49:b1:64:dd:21:85:44:5d:50:20:8b:1b:43:ce:d2:26: 51:23:c9:0b:51:0d:60:27:44:fb:bf:24:33:3e:75:93:40:d5: d8:a5:cb:8f:b8:8f:dc:60:23:28:ab:28:d6:59:85:ef:ba:70: d6:b1:b8:d0:83:27:ba:e4:7f:73:84:c2:af:82:fa:95:58:24: 90:fc:0c:6f:33:19:5c:e8:35:39:e1:60:eb:e2:e3:9f:ee:ea: 42:6c:4d:83:d0:a2:27:6d:0c:2b:b5:05:d1:8a:dc:6c:6a:66: 7a:5a:fe:22:c2:d1:e8:f5:63:b9:47:0a:fb:9a:5f:bf:ec:4d: 7d:26:84:7e:a8:40:95:e1:04:8d:6b:41:59:ed:aa:80:7c:4e: dc:80:b0:92:2f:19:75:41:2b:31:f5:9e:73:80:2e:7e:a7:61: d2:46:99:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZry/57HtboYh4GCycWiUU5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjUxMjA2MDkzMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzFkMDZiMmU3NGQ1ZGFkY2Q5NDZiMGVkYzBmYTM0Yzc2MDVkZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JTdUoQEdXOYAt1i87tehabNeMO2 BMBhMYoKokqxXHA1kzSzmvDSU1YlgLCsPnKUcZErm8pWzULh3WlR8H26F4I0FWK+ Fq2dt//IL4gYETyi++cu3tYQVTiiS5VU0uh9FvZHUAeVtTkDAsF8IETwkcDXCNot aDF5S6MiJN+njZtjWFR6PwtVmlIHcLEVFVjR/JWpbtwL5fNApBVsCiaeU4Sdcchv QonntAlPwq6/S+1Du9uyc0wdcb5kLyy3c5n69yf/CNlWez/9kBfl4uST+sLOFaYX NJR5gC4IbYZaJRKjOuX/UaUZ6m3LCJdUdJ0X/h0Id+bbaNnqmVy/swbYHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEcdBrLnTV2tzZRrDtwPo0x2Bd5HMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvUngwR3N1ZE5YYTNObEdzTzNBLWpUSFlGM2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6qMA0G CSqGSIb3DQEBCwUAA4IBAQBEAFGMBEJdPDNmD7E5R/w6lrbdkkmdBzrs11kc2jWZ qMbG7WFgBZqpHv70CB16nD2ss8ax0H3sPiLa6sGGCBJNcvmCruAdBZJQS2y1OQTX xQxny7RNbYCFBnMjmUmxZN0hhURdUCCLG0PO0iZRI8kLUQ1gJ0T7vyQzPnWTQNXY pcuPuI/cYCMoqyjWWYXvunDWsbjQgye65H9zhMKvgvqVWCSQ/AxvMxlc6DU54WDr 4uOf7upCbE2D0KInbQwrtQXRitxsamZ6Wv4iwtHo9WO5Rwr7ml+/7E19JoR+qECV 4QSNa0FZ7aqAfE7cgLCSLxl1QSsx9Z5zgC5+p2HSRpmv -----END CERTIFICATE-----Generated at Sun Dec 7 01:05:50 2025 by rpki-client