This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/Ln11BgOmUJEm6_GJhlyEjZDBqa8.roa File: Ln11BgOmUJEm6_GJhlyEjZDBqa8.roa (raw, json) Hash identifier: YU8DYP0hybkH04u9NGwYXXxl9vKt0cKtdE/xhRnHK14= Subject key identifier: 2E:7D:75:06:03:A6:50:91:26:EB:F1:89:86:5C:84:8D:90:C1:A9:AF Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Certificate serial: 019B1FF68AE34DAFFDEEB9717408247D4ADD Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/Ln11BgOmUJEm6_GJhlyEjZDBqa8.roa Signing time: Mon 15 Dec 2025 03:03:29 +0000 ROA not before: Mon 15 Dec 2025 03:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.87.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f6:8a:e3:4d:af:fd:ee:b9:71:74:08:24:7d:4a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Validity Not Before: Dec 15 03:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e7d750603a6509126ebf189865c848d90c1a9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b2:d2:22:5a:ed:c5:b3:bc:b8:26:fa:57:b8: 7c:7a:cd:e4:0a:78:b8:64:d5:4d:d2:52:53:fd:ac: f0:cc:be:d9:8b:62:88:4a:27:80:99:d6:88:53:b6: 35:f8:79:e5:ee:2e:77:2e:b3:bd:b0:da:ba:c6:02: a1:f1:92:85:44:d5:76:75:cc:9d:7b:8c:b9:c9:1d: ef:57:a6:f8:d9:2c:dc:24:54:88:0d:2c:63:90:40: e4:83:03:f1:1d:a8:b2:a8:4c:ac:0f:35:4a:77:7d: fb:58:06:7e:93:f3:65:4b:0f:c0:21:8e:eb:de:1b: c0:65:3e:49:dd:27:a0:6f:d3:e4:b4:47:2e:53:ee: d2:97:7a:fc:8c:36:91:d2:0d:e7:53:f8:dc:d3:67: 0b:36:28:e6:d4:9e:a8:fc:88:56:3c:0c:0c:b6:d2: 68:03:5a:ad:e4:0d:f6:96:e4:46:0c:a0:a2:0b:6e: 6e:ee:f0:27:e5:da:51:f1:35:7e:c1:20:8e:4d:69: 61:c3:cc:d5:c0:78:11:b6:67:8a:6b:ee:fc:6e:df: 76:44:a0:da:7e:0a:e9:a2:0e:ae:e2:1f:97:23:b9: e8:9d:27:c8:18:8b:37:0c:29:8f:2b:6a:4d:9e:34: eb:4f:3a:fa:8a:64:82:a4:c8:71:ef:10:71:8b:4e: 8f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7D:75:06:03:A6:50:91:26:EB:F1:89:86:5C:84:8D:90:C1:A9:AF X509v3 Authority Key Identifier: keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/Ln11BgOmUJEm6_GJhlyEjZDBqa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.101.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:f0:44:fc:b9:24:10:2d:1f:c9:90:96:75:bb:0d:86:72:92: dc:f9:59:db:9c:ca:a1:74:60:18:f0:e8:42:b8:4b:d0:da:1b: 58:21:c5:75:7f:83:92:dd:2d:79:3c:29:ec:f6:03:81:98:c9: 7c:27:63:80:de:04:2f:6a:49:bb:bb:d2:bd:8f:d8:89:8a:13: 7d:3d:4e:5b:12:0b:36:08:ed:fe:56:53:3a:ba:92:32:bf:be: 7a:8c:53:4c:b7:9e:bb:a8:f6:db:ed:19:52:55:88:63:76:2c: e2:63:c0:b0:27:cb:83:fb:da:e4:e5:2e:5d:2e:eb:44:09:f4: 9f:ed:67:c2:a6:bd:c8:43:90:f2:fe:58:90:a0:10:b4:63:8b: 16:90:10:6e:8f:fc:86:17:2f:1b:2f:d4:f2:a5:ec:c1:8f:48: 83:27:88:2f:84:d9:98:14:f5:84:a6:85:ba:91:fe:dd:f4:4f: ca:82:ce:f1:11:7d:ba:e0:f2:bc:96:b7:64:db:18:1b:50:58: 21:e5:e1:7e:ab:4f:23:2e:30:ab:2a:1d:46:d7:a1:e3:74:50: 6c:ca:bf:70:8d:6e:21:98:38:cc:89:80:6e:36:42:31:a6:88: 7b:98:62:69:0d:6f:f3:03:8e:cc:ef:e2:b6:a1:95:66:d9:b4: 26:cc:9d:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsf9orjTa/97rlxdAgkfUrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk NjdhOTcwHhcNMjUxMjE1MDMwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTdkNzUwNjAzYTY1MDkxMjZlYmYxODk4NjVjODQ4ZDkwYzFhOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17LSIlrtxbO8uCb6V7h8es3kCni4 ZNVN0lJT/azwzL7Zi2KISieAmdaIU7Y1+Hnl7i53LrO9sNq6xgKh8ZKFRNV2dcyd e4y5yR3vV6b42SzcJFSIDSxjkEDkgwPxHaiyqEysDzVKd337WAZ+k/NlSw/AIY7r 3hvAZT5J3Segb9PktEcuU+7Sl3r8jDaR0g3nU/jc02cLNijm1J6o/IhWPAwMttJo A1qt5A32luRGDKCiC25u7vAn5dpR8TV+wSCOTWlhw8zVwHgRtmeKa+78bt92RKDa fgrpog6u4h+XI7nonSfIGIs3DCmPK2pNnjTrTzr6imSCpMhx7xBxi06PwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC59dQYDplCRJuvxiYZchI2QwamvMB8GA1UdIwQY MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt ZWVhZDUwOGJlNGVlLzEvTG4xMUJnT21VSkVtNl9HSmhseUVqWkRCcWE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVdlMA0G CSqGSIb3DQEBCwUAA4IBAQAq8ET8uSQQLR/JkJZ1uw2GcpLc+VnbnMqhdGAY8OhC uEvQ2htYIcV1f4OS3S15PCns9gOBmMl8J2OA3gQvakm7u9K9j9iJihN9PU5bEgs2 CO3+VlM6upIyv756jFNMt567qPbb7RlSVYhjdiziY8CwJ8uD+9rk5S5dLutECfSf 7WfCpr3IQ5Dy/liQoBC0Y4sWkBBuj/yGFy8bL9TypezBj0iDJ4gvhNmYFPWEpoW6 kf7d9E/Kgs7xEX264PK8lrdk2xgbUFgh5eF+q08jLjCrKh1G16HjdFBsyr9wjW4h mDjMiYBuNkIxpoh7mGJpDW/zA47M7+K2oZVm2bQmzJ3C -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:43 2025 by rpki-client