This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/VsYWJvV29iqYwBRne5YKEb7eIlA.roa File: VsYWJvV29iqYwBRne5YKEb7eIlA.roa (raw, json) Hash identifier: bC7uDhhNEikOG1uya0DM29sggq/yJxcTAuRZ0CEZezI= Subject key identifier: 56:C6:16:26:F5:76:F6:2A:98:C0:14:67:7B:96:0A:11:BE:DE:22:50 Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629 Certificate serial: 019AB5B42EBA7D4D56E229EF8A381751AAD7 Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/VsYWJvV29iqYwBRne5YKEb7eIlA.roa Signing time: Mon 24 Nov 2025 11:51:15 +0000 ROA not before: Mon 24 Nov 2025 11:51:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208247 IP address blocks: 45.151.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:b4:2e:ba:7d:4d:56:e2:29:ef:8a:38:17:51:aa:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629 Validity Not Before: Nov 24 11:51:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=56c61626f576f62a98c014677b960a11bede2250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:93:89:b7:c0:ad:52:fd:b8:d2:c2:3c:62: ea:37:56:28:54:c1:bb:06:a1:14:65:55:7e:e4:16: bd:aa:e2:05:3b:18:98:e8:eb:1b:3c:5b:a1:99:7d: 4a:aa:0f:ea:9e:43:e9:3a:15:9c:dc:34:27:e3:f2: 1b:51:ca:96:ed:d7:2d:ad:8a:58:3c:80:5e:8d:b9: 44:2a:57:9a:c6:7a:7c:c8:97:55:74:86:db:d6:5a: 90:cc:aa:88:7a:d9:72:f5:83:3c:06:5e:8b:9e:6e: 67:21:07:44:7c:e4:e5:e5:62:e4:06:fd:77:3b:ce: fb:6e:d9:12:d6:18:c5:20:65:01:6d:80:09:5c:e8: 9d:ad:44:56:8e:a0:45:f2:ef:09:06:f2:aa:24:f6: 9e:ff:07:f4:18:45:7b:96:ba:db:52:8e:0f:6f:f6: fd:f7:8a:82:be:7c:10:a6:ad:08:16:e6:eb:b6:c3: fc:2f:76:ae:52:b3:67:86:fd:50:b8:fd:32:fe:c5: 16:87:3f:95:47:ff:97:63:09:1d:d3:a5:63:25:c7: 1a:c7:8e:db:e8:df:13:bc:ec:b9:8e:e3:06:e7:78: f8:9c:00:b4:3e:28:af:0e:37:a6:2c:81:4a:14:e4: b4:e8:60:66:83:c5:1c:f5:65:6e:23:12:21:79:25: a9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C6:16:26:F5:76:F6:2A:98:C0:14:67:7B:96:0A:11:BE:DE:22:50 X509v3 Authority Key Identifier: keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/VsYWJvV29iqYwBRne5YKEb7eIlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.86.0/23 Signature Algorithm: sha256WithRSAEncryption 69:36:9e:01:ae:0a:6b:51:59:bc:5d:ce:10:81:c1:03:02:2f: 53:e3:d0:17:68:77:74:fb:b1:c5:b5:89:34:08:83:5b:d1:68: 32:ce:94:ea:f1:51:c4:f8:b0:79:be:5e:38:30:bb:5b:2c:b7: 95:87:54:2b:46:18:00:c4:e5:c2:ed:61:c3:cd:b4:ee:18:fe: ff:bf:a2:9e:c8:bf:7d:ea:e0:e9:ae:61:a2:55:c8:26:e0:1a: 1a:b1:fc:5c:12:7a:24:99:a8:e6:d4:2e:13:16:55:68:d3:1a: 17:73:8a:01:0a:cf:0c:1d:2f:e7:6a:15:63:d5:d9:13:b8:5f: 5e:40:5e:57:40:1a:7c:cf:e2:97:ea:6a:a3:7b:d8:98:64:e8: 4a:f2:c1:d6:be:97:7b:50:1b:49:0d:8a:bd:5d:de:78:a0:93: 2b:1b:df:ec:6a:bc:71:e7:4c:73:4e:fa:dc:af:e4:4e:cd:ce: c5:d9:4b:0e:65:a2:f3:3b:5b:4e:47:2b:48:ee:b0:4d:b7:ce: 83:ae:63:30:86:dd:f5:55:35:10:a5:ed:75:67:18:df:a7:be: 41:82:40:81:a4:87:c6:b2:12:8d:94:74:1a:00:3a:7a:c2:da: d7:01:9d:2b:b1:a7:04:25:fd:dd:91:b6:49:10:95:ee:5b:d7: 88:77:7e:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq1tC66fU1W4invijgXUarXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl N2Y2MjkwHhcNMjUxMTI0MTE1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmM2MTYyNmY1NzZmNjJhOThjMDE0Njc3Yjk2MGExMWJlZGUyMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur2TibfArVL9uNLCPGLqN1YoVMG7 BqEUZVV+5Ba9quIFOxiY6OsbPFuhmX1Kqg/qnkPpOhWc3DQn4/IbUcqW7dctrYpY PIBejblEKleaxnp8yJdVdIbb1lqQzKqIetly9YM8Bl6Lnm5nIQdEfOTl5WLkBv13 O877btkS1hjFIGUBbYAJXOidrURWjqBF8u8JBvKqJPae/wf0GEV7lrrbUo4Pb/b9 94qCvnwQpq0IFubrtsP8L3auUrNnhv1QuP0y/sUWhz+VR/+XYwkd06VjJccax47b 6N8TvOy5juMG53j4nAC0PiivDjemLIFKFOS06GBmg8Uc9WVuIxIheSWpAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFbGFib1dvYqmMAUZ3uWChG+3iJQMB8GA1UdIwQY MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt MWJmZDEwYTg4NDVhLzEvVnNZV0p2VjI5aXFZd0JSbmU1WUtFYjdlSWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZdWMA0G CSqGSIb3DQEBCwUAA4IBAQBpNp4BrgprUVm8Xc4QgcEDAi9T49AXaHd0+7HFtYk0 CINb0WgyzpTq8VHE+LB5vl44MLtbLLeVh1QrRhgAxOXC7WHDzbTuGP7/v6KeyL99 6uDprmGiVcgm4BoasfxcEnokmajm1C4TFlVo0xoXc4oBCs8MHS/nahVj1dkTuF9e QF5XQBp8z+KX6mqje9iYZOhK8sHWvpd7UBtJDYq9Xd54oJMrG9/sarxx50xzTvrc r+ROzc7F2UsOZaLzO1tORytI7rBNt86DrmMwht31VTUQpe11Zxjfp75BgkCBpIfG shKNlHQaADp6wtrXAZ0rsacEJf3dkbZJEJXuW9eId36O -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:04 2025 by rpki-client