This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dWKu8guasZvMU5f0UgE5B7ZiMaA.roa File: dWKu8guasZvMU5f0UgE5B7ZiMaA.roa (raw, json) Hash identifier: 4gJPbsK8OIIoe967nvF1df1xR7AM5elHskkT7c/ngWs= Subject key identifier: 75:62:AE:F2:0B:9A:B1:9B:CC:53:97:F4:52:01:39:07:B6:62:31:A0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019ADE828088507E27D9FCA23369244FFF90 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dWKu8guasZvMU5f0UgE5B7ZiMaA.roa Signing time: Tue 02 Dec 2025 10:01:25 +0000 ROA not before: Tue 02 Dec 2025 10:01:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56755 IP address blocks: 45.148.118.0/23 maxlen: 24 45.148.119.0/24 maxlen: 24 139.28.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:82:80:88:50:7e:27:d9:fc:a2:33:69:24:4f:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 2 10:01:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7562aef20b9ab19bcc5397f452013907b66231a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:25:c6:51:79:7f:54:af:f6:1f:70:c5:a8: e1:1d:e4:6b:b5:e5:28:01:dc:b8:39:e7:fd:e9:0c: 03:99:d8:69:3c:42:7e:d3:10:69:1e:1e:dc:df:65: 7e:18:dd:41:d1:b1:00:44:a9:2b:42:ec:af:56:4a: 93:31:d7:b6:0d:87:d6:cf:9d:2c:54:1c:22:f2:2b: 68:60:03:97:a8:00:bc:f7:00:d2:0d:c9:6a:fb:6f: 02:4b:80:ae:77:39:d9:99:b5:8c:a9:8b:36:a2:dc: 78:5b:d4:c0:76:45:62:c3:4f:e2:d9:97:7d:b9:0e: 87:d2:e8:1d:3e:6a:5f:0e:0b:e4:55:ab:9d:6a:b7: 3b:79:b0:a1:c9:04:fd:c6:87:5f:b3:ea:51:0a:1f: c5:7b:4d:8f:53:40:82:14:72:dc:f3:dd:ba:2f:fc: 73:93:68:fb:1f:ec:83:f6:9f:7a:96:4a:e1:06:87: 86:aa:63:5d:ae:a7:ce:7b:8a:be:b5:f6:5d:1d:38: 3f:78:62:4a:af:48:4b:58:22:e1:08:d5:12:5a:67: c5:37:49:88:69:b9:d2:24:03:25:29:d4:cf:b5:a4: 2b:9d:d8:05:72:ef:c1:82:e9:7e:c6:ea:f6:cb:8f: 3f:28:0c:61:b9:7b:aa:5c:9c:5e:f4:05:ee:f7:f6: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:62:AE:F2:0B:9A:B1:9B:CC:53:97:F4:52:01:39:07:B6:62:31:A0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dWKu8guasZvMU5f0UgE5B7ZiMaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.118.0/23 139.28.99.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:c5:4d:4b:b4:e0:ff:bc:e0:f7:7f:e4:d1:e5:d7:fe:d0:5b: 6d:e7:ac:92:b7:28:e5:03:d7:b1:d9:ca:63:af:e6:b0:c1:78: 03:cd:c7:08:5d:d3:46:e8:fa:ad:a7:ab:c1:d1:81:35:97:2b: 7d:e7:25:02:61:bd:65:54:88:0a:06:08:f0:91:e8:c5:b0:ec: 5c:06:6a:a1:49:92:84:c1:24:6e:c8:22:ef:68:6b:43:3d:36: 61:fb:36:f5:e5:04:96:2f:4b:60:2e:51:67:7f:79:f1:7e:31: 45:3c:1d:ec:f5:d7:5f:ad:0a:13:30:23:0d:ab:c9:60:ca:ea: d6:e8:a5:3e:99:3c:41:37:f8:ee:61:a1:96:f4:ab:a7:dc:2c: bf:ff:bf:30:8f:79:66:37:c2:fe:b9:58:0b:eb:62:aa:f0:95: a8:20:40:75:ee:70:b2:ed:d5:c6:e5:ac:dc:6a:31:ec:91:09: 06:28:2a:c8:f7:1e:f3:9a:78:2b:60:8e:8e:83:9c:cd:92:bd: aa:67:be:a6:e8:f7:bc:da:4b:13:27:25:cf:57:43:cf:ae:7a: b9:f4:5c:01:ce:6c:92:f3:1d:c2:be:78:bc:dd:0c:6d:24:91: f8:e4:ae:fb:4e:4d:52:f2:b8:d4:30:71:b7:a5:b3:3d:e5:bb: 71:96:a4:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZregoCIUH4n2fyiM2kkT/+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjAyMTAwMTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTYyYWVmMjBiOWFiMTliY2M1Mzk3ZjQ1MjAxMzkwN2I2NjIzMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSolxlF5f1Sv9h9wxajhHeRrteUo Ady4Oef96QwDmdhpPEJ+0xBpHh7c32V+GN1B0bEARKkrQuyvVkqTMde2DYfWz50s VBwi8itoYAOXqAC89wDSDclq+28CS4CudznZmbWMqYs2otx4W9TAdkViw0/i2Zd9 uQ6H0ugdPmpfDgvkVaudarc7ebChyQT9xodfs+pRCh/Fe02PU0CCFHLc8926L/xz k2j7H+yD9p96lkrhBoeGqmNdrqfOe4q+tfZdHTg/eGJKr0hLWCLhCNUSWmfFN0mI abnSJAMlKdTPtaQrndgFcu/Bgul+xur2y48/KAxhuXuqXJxe9AXu9/ZnPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHVirvILmrGbzFOX9FIBOQe2YjGgMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZFdLdThndWFzWnZNVTVmMFVnRTVCN1ppTWFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZR2AwQA ixxjMA0GCSqGSIb3DQEBCwUAA4IBAQAbxU1LtOD/vOD3f+TR5df+0Ftt56yStyjl A9ex2cpjr+awwXgDzccIXdNG6Pqtp6vB0YE1lyt95yUCYb1lVIgKBgjwkejFsOxc BmqhSZKEwSRuyCLvaGtDPTZh+zb15QSWL0tgLlFnf3nxfjFFPB3s9ddfrQoTMCMN q8lgyurW6KU+mTxBN/juYaGW9Kun3Cy//78wj3lmN8L+uVgL62Kq8JWoIEB17nCy 7dXG5azcajHskQkGKCrI9x7zmngrYI6Og5zNkr2qZ76m6Pe82ksTJyXPV0PPrnq5 9FwBzmyS8x3Cvni83QxtJJH45K77Tk1S8rjUMHG3pbM95btxlqRY -----END CERTIFICATE-----Generated at Sat Dec 6 23:29:23 2025 by rpki-client