This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dFMSfN7MRHvmo2z77TleB1icwq8.roa File: dFMSfN7MRHvmo2z77TleB1icwq8.roa (raw, json) Hash identifier: /EIF28RJEmpawXw8Jts26G5tvzRqBblkps3qt2KKi+I= Subject key identifier: 74:53:12:7C:DE:CC:44:7B:E6:A3:6C:FB:ED:39:5E:07:58:9C:C2:AF Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907 Certificate serial: 019A9CCDB26779B06E00B812D2E1187E3D4F Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dFMSfN7MRHvmo2z77TleB1icwq8.roa Signing time: Wed 19 Nov 2025 15:48:37 +0000 ROA not before: Wed 19 Nov 2025 15:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30781 IP address blocks: 45.90.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:cd:b2:67:79:b0:6e:00:b8:12:d2:e1:18:7e:3d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907 Validity Not Before: Nov 19 15:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7453127cdecc447be6a36cfbed395e07589cc2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:e3:ba:99:ba:6b:de:bc:19:b4:f2:7c:5d: 98:f0:75:07:c3:0b:f7:dc:68:be:bb:96:7d:b7:f3: a0:40:f8:f4:7e:a8:40:dd:4b:b0:a2:d6:ad:ed:5f: bd:4c:b5:78:a2:12:f3:63:1e:c2:e0:43:75:44:b3: 3e:11:c5:15:71:f1:ce:9a:c2:69:1b:64:40:e1:c7: f8:1f:50:d2:21:79:a1:85:4f:f2:86:ad:b7:1f:f5: aa:17:da:07:00:0c:de:b3:b4:5f:25:dc:bf:d5:2a: de:b5:5f:1e:59:78:ef:f9:e7:24:d2:b6:72:b6:fe: 2b:79:df:53:d2:03:91:cf:e1:cc:c9:0d:5e:dd:2c: df:0e:70:a7:7a:08:d4:5a:c5:72:c2:d3:ec:81:ec: c6:7f:b7:72:f5:88:8b:71:d7:6f:33:cf:0e:84:7e: d6:09:a8:49:fe:86:63:95:9e:37:1b:af:4c:6c:b3: 46:57:55:a6:30:34:dd:de:fb:12:15:fd:81:21:06: fd:a8:f4:e8:f9:95:21:fd:32:9f:56:91:02:3f:69: 57:19:d5:65:bc:62:06:1e:1c:94:dd:8f:a6:cf:82: b5:3c:be:15:36:2d:9d:ef:59:71:df:50:20:71:6c: e2:eb:aa:dd:54:12:cf:a3:4e:81:41:f8:9d:62:d4: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:53:12:7C:DE:CC:44:7B:E6:A3:6C:FB:ED:39:5E:07:58:9C:C2:AF X509v3 Authority Key Identifier: keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dFMSfN7MRHvmo2z77TleB1icwq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.136.0/22 Signature Algorithm: sha256WithRSAEncryption 85:aa:30:34:e7:71:d5:5e:ad:76:c1:0a:9f:ec:96:7a:c5:34: 77:73:6f:be:12:e8:7b:d2:67:31:6a:4b:64:a1:99:49:0f:3e: ae:53:23:4a:fe:d7:a3:e3:5a:f2:38:4b:41:58:3e:86:67:1a: 53:2c:a8:43:a5:55:38:f2:f5:a1:6d:82:e0:c6:6f:55:ee:ff: 24:63:29:85:4f:3c:4f:22:26:e3:0e:78:a5:90:d4:a9:1c:94: 3c:99:ed:3e:2e:6c:d4:4c:02:27:67:ec:e2:04:2e:fb:bb:55: 71:ed:c4:53:7a:ab:48:57:0f:3f:0b:87:82:20:b9:07:e6:41: a9:ef:a0:8c:32:7a:b2:f0:2b:0d:a5:80:f3:a8:54:51:0e:ed: 57:77:e3:01:dd:b1:83:a9:02:d2:21:b7:4f:f7:06:ba:50:a6: 0f:d5:3b:16:99:6c:c8:5e:19:bb:c9:c6:7b:06:fe:9b:5e:38: 61:6d:88:d9:b4:71:62:92:ca:a3:68:ca:fb:70:e4:19:60:dc: cb:6b:d6:cf:4e:7d:be:b6:e7:19:07:ad:13:83:8f:f1:d4:21: 14:c5:ef:dc:3f:02:8c:9b:e4:7c:3f:12:8a:39:6f:59:67:2b: 9a:15:bb:dd:25:0f:2b:fb:36:d9:10:5c:81:83:94:9e:55:da: 66:7d:99:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqczbJnebBuALgS0uEYfj1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTQzZjllNWFlM2Y2ZWFmYjUwNjhhZTg4ZjE4YzI5ZTQ0 MzU5MDcwHhcNMjUxMTE5MTU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDUzMTI3Y2RlY2M0NDdiZTZhMzZjZmJlZDM5NWUwNzU4OWNjMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldbjupm6a968GbTyfF2Y8HUHwwv3 3Gi+u5Z9t/OgQPj0fqhA3Uuwotat7V+9TLV4ohLzYx7C4EN1RLM+EcUVcfHOmsJp G2RA4cf4H1DSIXmhhU/yhq23H/WqF9oHAAzes7RfJdy/1SretV8eWXjv+eck0rZy tv4red9T0gORz+HMyQ1e3SzfDnCnegjUWsVywtPsgezGf7dy9YiLcddvM88OhH7W CahJ/oZjlZ43G69MbLNGV1WmMDTd3vsSFf2BIQb9qPTo+ZUh/TKfVpECP2lXGdVl vGIGHhyU3Y+mz4K1PL4VNi2d71lx31AgcWzi66rdVBLPo06BQfidYtQtpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHRTEnzezER75qNs++05XgdYnMKvMB8GA1UdIwQY MBaAFHTkP55a4/bq+1BorojxjCnkQ1kHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9RX25scmo5dXI3VUdpdWlQR01LZVJEV1FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kYTMzYWUtMTZjYy00YzlhLWJmOWMt NzE3OTk4YWEzY2ZmLzEvZEZNU2ZON01SSHZtbzJ6NzdUbGVCMWljd3E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kYTMzYWUtMTZjYy00YzlhLWJmOWMtNzE3OTk4YWEzY2Zm LzEvZE9RX25scmo5dXI3VUdpdWlQR01LZVJEV1FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVqIMA0G CSqGSIb3DQEBCwUAA4IBAQCFqjA053HVXq12wQqf7JZ6xTR3c2++Euh70mcxaktk oZlJDz6uUyNK/tej41ryOEtBWD6GZxpTLKhDpVU48vWhbYLgxm9V7v8kYymFTzxP IibjDnilkNSpHJQ8me0+LmzUTAInZ+ziBC77u1Vx7cRTeqtIVw8/C4eCILkH5kGp 76CMMnqy8CsNpYDzqFRRDu1Xd+MB3bGDqQLSIbdP9wa6UKYP1TsWmWzIXhm7ycZ7 Bv6bXjhhbYjZtHFiksqjaMr7cOQZYNzLa9bPTn2+tucZB60Tg4/x1CEUxe/cPwKM m+R8PxKKOW9ZZyuaFbvdJQ8r+zbZEFyBg5SeVdpmfZnW -----END CERTIFICATE-----Generated at Sat Dec 6 20:43:28 2025 by rpki-client