This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/fshZLcahKZoDlhZLFewTACr6QHY.roa File: fshZLcahKZoDlhZLFewTACr6QHY.roa (raw, json) Hash identifier: GnRff111Z3HVNTXXJ8+DvO7OPMP+FcY3HErzS/sVwDw= Subject key identifier: 7E:C8:59:2D:C6:A1:29:9A:03:96:16:4B:15:EC:13:00:2A:FA:40:76 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019ADEAECAAAEF80EDFE03224BFCFBFCE708 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/fshZLcahKZoDlhZLFewTACr6QHY.roa Signing time: Tue 02 Dec 2025 10:49:48 +0000 ROA not before: Tue 02 Dec 2025 10:49:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213686 IP address blocks: 109.167.1.0/24 maxlen: 24 109.167.82.0/24 maxlen: 24 151.237.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:ae:ca:aa:ef:80:ed:fe:03:22:4b:fc:fb:fc:e7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Dec 2 10:49:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7ec8592dc6a1299a0396164b15ec13002afa4076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:ea:7e:9a:14:b7:4b:01:3e:85:4f:ae:a0: aa:0f:29:53:c5:70:4f:b1:58:c1:00:ea:ff:23:f0: 42:d9:08:8e:93:95:86:3b:e9:c7:53:45:2d:13:50: 74:bf:d7:f3:6d:23:dd:b2:c2:ed:5b:51:33:a2:fb: 45:2b:c8:71:21:78:46:6d:9b:45:3f:a8:bb:d1:89: b4:e8:0c:6c:1e:e5:b8:80:bf:da:d4:2f:e9:42:84: 18:19:53:c0:ce:8b:6e:34:8a:29:df:c1:6c:3d:fb: 6b:7b:6b:49:2e:59:55:99:ef:23:7e:c6:b3:45:a3: b3:c9:d6:9a:d8:4a:bd:ad:ce:4b:a3:32:b8:ee:af: e4:6e:b5:01:14:d7:45:ac:23:1e:73:be:67:14:a4: e1:59:e6:a7:f0:66:a4:97:d2:9b:3b:b7:63:39:b1: e8:aa:d8:94:a2:5f:3d:85:9c:b5:c7:c0:41:0c:79: 59:5b:72:d7:e6:2d:ad:37:57:9c:af:27:da:50:9c: ca:9d:52:04:be:25:31:15:ef:dd:69:a0:51:89:89: e6:a1:e9:b1:87:81:21:3d:61:ee:96:d8:70:ce:1a: 3a:84:a1:17:38:01:dc:e7:0e:c4:c3:cb:49:7d:54: df:02:5b:6f:58:21:de:c7:69:27:e6:fb:73:01:b8: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C8:59:2D:C6:A1:29:9A:03:96:16:4B:15:EC:13:00:2A:FA:40:76 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/fshZLcahKZoDlhZLFewTACr6QHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.167.1.0/24 109.167.82.0/24 151.237.211.0/24 Signature Algorithm: sha256WithRSAEncryption 70:3b:94:75:2e:e9:d9:62:91:0a:dc:aa:ab:ec:9c:ed:c1:bf: 49:ed:b6:1f:fc:fd:35:7b:4e:c4:0f:76:90:2f:2c:a5:62:fe: 44:15:b6:32:06:69:a7:a0:fa:e2:32:58:4e:14:95:e4:60:ac: 5a:67:d2:1b:83:ee:32:5e:35:bb:0c:7e:e3:f4:46:1c:0d:6a: c9:a9:d0:62:85:65:46:3d:d0:a0:36:c0:f1:7d:96:4f:92:46: 3d:2d:d8:b0:e2:16:86:ab:91:26:25:01:54:5e:21:7e:fd:8d: aa:40:fd:24:3b:a7:9c:82:31:50:4e:f6:1c:c7:ba:53:4f:1d: 12:da:6c:4b:de:1b:27:ec:84:0e:17:f7:35:6d:ea:de:b3:4b: b4:51:4d:1d:f0:7b:c4:23:f9:96:6e:7d:d9:92:85:44:f2:80: 25:1b:ff:7c:b7:7c:e6:c7:bc:cb:fa:38:43:a1:f8:18:1e:89: 94:33:92:cc:f9:cf:bc:84:5e:e1:7a:78:81:be:bf:d1:f6:eb: 30:53:1d:d8:38:47:8a:d9:a5:e3:c5:c6:64:6d:26:7a:b2:b7: 15:18:bb:e7:b4:80:5a:ce:7c:5a:a5:a2:3b:48:93:e1:c7:5e: 03:c5:ca:2c:3e:e4:52:36:7f:ec:a2:b2:04:0e:3e:9e:ff:92: e1:59:8b:71 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrersqq74Dt/gMiS/z7/OcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMjAyMTA0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWM4NTkyZGM2YTEyOTlhMDM5NjE2NGIxNWVjMTMwMDJhZmE0MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobrqfpoUt0sBPoVPrqCqDylTxXBP sVjBAOr/I/BC2QiOk5WGO+nHU0UtE1B0v9fzbSPdssLtW1EzovtFK8hxIXhGbZtF P6i70Ym06AxsHuW4gL/a1C/pQoQYGVPAzotuNIop38FsPftre2tJLllVme8jfsaz RaOzydaa2Eq9rc5LozK47q/kbrUBFNdFrCMec75nFKThWean8Gakl9KbO7djObHo qtiUol89hZy1x8BBDHlZW3LX5i2tN1ecryfaUJzKnVIEviUxFe/daaBRiYnmoemx h4EhPWHulthwzho6hKEXOAHc5w7Ew8tJfVTfAltvWCHex2kn5vtzAbiJ2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH7IWS3GoSmaA5YWSxXsEwAq+kB2MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvZnNoWkxjYWhLWm9EbGhaTEZld1RBQ3I2UUhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbacBAwQA badSAwQAl+3TMA0GCSqGSIb3DQEBCwUAA4IBAQBwO5R1LunZYpEK3Kqr7Jztwb9J 7bYf/P01e07ED3aQLyylYv5EFbYyBmmnoPriMlhOFJXkYKxaZ9Ibg+4yXjW7DH7j 9EYcDWrJqdBihWVGPdCgNsDxfZZPkkY9Ldiw4haGq5EmJQFUXiF+/Y2qQP0kO6ec gjFQTvYcx7pTTx0S2mxL3hsn7IQOF/c1beres0u0UU0d8HvEI/mWbn3ZkoVE8oAl G/98t3zmx7zL+jhDofgYHomUM5LM+c+8hF7heniBvr/R9uswUx3YOEeK2aXjxcZk bSZ6srcVGLvntIBaznxapaI7SJPhx14DxcosPuRSNn/sorIEDj6e/5LhWYtx -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:08 2025 by rpki-client