This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/EhMRfoZTp-U32lV428WRXV05Tv4.roa File: EhMRfoZTp-U32lV428WRXV05Tv4.roa (raw, json) Hash identifier: q/xEeC43hnYPZ8R0egzzBxElLR9uRxq4htThdOEU6VU= Subject key identifier: 12:13:11:7E:86:53:A7:E5:37:DA:55:78:DB:C5:91:5D:5D:39:4E:FE Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1 Certificate serial: 019A96014873F63659664979CBA4DE106697 Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/EhMRfoZTp-U32lV428WRXV05Tv4.roa Signing time: Tue 18 Nov 2025 08:07:37 +0000 ROA not before: Tue 18 Nov 2025 08:07:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60203 IP address blocks: 5.45.160.0/21 maxlen: 21 5.45.160.0/24 maxlen: 24 5.45.165.0/24 maxlen: 24 5.45.166.0/24 maxlen: 24 5.45.167.0/24 maxlen: 24 5.45.168.0/21 maxlen: 21 5.45.168.0/22 maxlen: 22 5.45.169.0/24 maxlen: 24 5.45.172.0/24 maxlen: 24 5.45.174.0/23 maxlen: 23 185.43.72.0/24 maxlen: 24 185.43.73.0/24 maxlen: 24 185.43.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:01:48:73:f6:36:59:66:49:79:cb:a4:de:10:66:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1 Validity Not Before: Nov 18 08:07:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1213117e8653a7e537da5578dbc5915d5d394efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:56:e1:ac:ed:ad:46:03:b9:ce:cd:01:fe: 6c:ba:41:4e:88:e3:73:a9:97:12:93:b4:dc:73:00: 3b:2d:36:c6:7c:bd:78:fc:0d:1e:a6:ed:0b:79:7c: 08:12:3f:0a:41:65:6f:a2:2a:ae:f3:5c:86:b7:95: 6c:20:b2:52:14:0d:ad:d5:58:5f:cc:40:66:83:bf: bd:a3:0d:f9:2e:50:35:6d:98:91:20:f5:76:96:b3: 10:39:6b:95:fc:70:91:46:1b:11:97:28:1b:6c:91: 76:36:82:a1:ce:36:db:a6:d2:8f:77:0d:ac:05:cd: 04:16:2a:4e:ed:20:57:39:58:24:1b:ff:21:71:86: 24:39:2e:d0:f8:26:48:74:83:c0:7f:ea:7e:23:52: fa:27:bb:42:46:bf:7f:50:db:a2:5b:5c:84:d9:3e: e0:03:29:39:b5:24:19:7f:f6:a9:80:e4:1b:86:d1: bb:58:04:3a:fd:21:55:40:ff:16:fe:86:66:8f:5e: 8c:d1:cc:e3:47:20:93:63:a7:94:e1:da:df:f8:c0: 0b:90:b1:d0:0c:55:5b:49:bd:f7:3a:9e:b3:fa:ea: 71:28:82:ef:d6:bc:38:bc:fc:74:07:40:23:47:b8: b1:7c:f2:f6:1a:30:59:9f:08:de:d5:db:4b:a1:70: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:13:11:7E:86:53:A7:E5:37:DA:55:78:DB:C5:91:5D:5D:39:4E:FE X509v3 Authority Key Identifier: keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/EhMRfoZTp-U32lV428WRXV05Tv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.160.0/20 185.43.72.0/22 Signature Algorithm: sha256WithRSAEncryption ab:aa:21:d9:67:7e:20:bf:44:ba:5b:b5:12:34:e5:1d:a0:d4: 60:f6:b3:a2:4a:bd:c7:b6:00:27:8a:85:f2:c0:a1:dc:83:f6: 5d:70:24:0c:af:e4:3c:d7:b0:ee:e4:d0:24:b1:7a:b2:ee:49: f6:06:be:20:d5:57:d8:fd:bb:e3:14:b5:85:19:ec:ab:46:03: 57:74:71:72:4d:b6:6b:cb:4c:91:e3:0c:b0:c3:2e:e8:35:db: 6a:e0:7a:d3:0b:51:78:63:c9:cb:a0:64:fc:de:53:c9:06:8a: 29:4c:2a:1f:ff:eb:c7:c9:60:39:a0:d5:66:17:c9:31:3a:f3: 81:35:32:28:dc:2a:d4:32:03:c0:2e:8b:21:53:c6:03:d2:af: e2:07:1e:88:bf:09:99:cd:4d:c2:0f:48:32:03:a4:4a:3f:83: a9:b6:79:62:f1:98:76:98:94:9b:9a:c5:44:89:3b:12:de:82: 1f:ba:19:81:b8:d7:c7:56:e3:28:0a:8e:f7:a3:f8:b9:2b:33: 8d:9d:30:05:9b:7f:9d:a9:d2:b3:ed:98:16:d8:8f:68:ab:58: a9:b3:c1:18:28:06:65:9f:24:c1:f8:94:35:1c:63:f8:ef:21: 7f:1b:d5:cc:bf:82:85:77:78:c7:57:9e:6d:48:cb:05:7a:c9: 66:ce:58:39 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqWAUhz9jZZZkl5y6TeEGaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNmE0NDA5ZWE5MWY1MDZkNjMzODcxYzZjMzU1NDBkNDYw MzM3ZDEwHhcNMjUxMTE4MDgwNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjEzMTE3ZTg2NTNhN2U1MzdkYTU1NzhkYmM1OTE1ZDVkMzk0ZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN5W4aztrUYDuc7NAf5sukFOiONz qZcSk7TccwA7LTbGfL14/A0epu0LeXwIEj8KQWVvoiqu81yGt5VsILJSFA2t1Vhf zEBmg7+9ow35LlA1bZiRIPV2lrMQOWuV/HCRRhsRlygbbJF2NoKhzjbbptKPdw2s Bc0EFipO7SBXOVgkG/8hcYYkOS7Q+CZIdIPAf+p+I1L6J7tCRr9/UNuiW1yE2T7g Ayk5tSQZf/apgOQbhtG7WAQ6/SFVQP8W/oZmj16M0czjRyCTY6eU4drf+MALkLHQ DFVbSb33Op6z+upxKILv1rw4vPx0B0AjR7ixfPL2GjBZnwje1dtLoXD0zwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBITEX6GU6flN9pVeNvFkV1dOU7+MB8GA1UdIwQY MBaAFNJqRAnqkfUG1jOHHGw1VA1GAzfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYt Y2ZlZmRmZGZiZTZiLzEvRWhNUmZvWlRwLVUzMmxWNDI4V1JYVjA1VHY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYtY2ZlZmRmZGZiZTZi LzEvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEBS2gAwQC uStIMA0GCSqGSIb3DQEBCwUAA4IBAQCrqiHZZ34gv0S6W7USNOUdoNRg9rOiSr3H tgAnioXywKHcg/ZdcCQMr+Q817Du5NAksXqy7kn2Br4g1VfY/bvjFLWFGeyrRgNX dHFyTbZry0yR4wywwy7oNdtq4HrTC1F4Y8nLoGT83lPJBoopTCof/+vHyWA5oNVm F8kxOvOBNTIo3CrUMgPALoshU8YD0q/iBx6IvwmZzU3CD0gyA6RKP4Optnli8Zh2 mJSbmsVEiTsS3oIfuhmBuNfHVuMoCo73o/i5KzONnTAFm3+dqdKz7ZgW2I9oq1ip s8EYKAZlnyTB+JQ1HGP47yF/G9XMv4KFd3jHV55tSMsFeslmzlg5 -----END CERTIFICATE-----Generated at Sun Dec 7 03:34:23 2025 by rpki-client