This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_h9AODovq2GhOGrjLkPm9SyWyx8.roa File: _h9AODovq2GhOGrjLkPm9SyWyx8.roa (raw, json) Hash identifier: dbOF0jcoU5VY3U2UHZU8nNHTXtw4IMS6DIod3uhn5e4= Subject key identifier: FE:1F:40:38:3A:2F:AB:61:A1:38:6A:E3:2E:43:E6:F5:2C:96:CB:1F Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019AE3648A0561EAABE9348F35303109067B Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_h9AODovq2GhOGrjLkPm9SyWyx8.roa Signing time: Wed 03 Dec 2025 08:46:48 +0000 ROA not before: Wed 03 Dec 2025 08:46:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210705 IP address blocks: 45.94.213.0/24 maxlen: 24 188.212.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:64:8a:05:61:ea:ab:e9:34:8f:35:30:31:09:06:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Dec 3 08:46:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fe1f40383a2fab61a1386ae32e43e6f52c96cb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:42:a1:7f:f5:fa:67:26:34:58:26:70:0e:17: c1:17:fd:5d:69:ae:af:f8:f5:22:53:3f:cd:72:bd: 7d:50:79:ec:07:fc:14:e4:64:cc:18:e5:c0:9c:88: 2b:d7:f5:ab:3a:ec:55:bc:a5:3f:9a:ca:d4:f3:95: 72:69:ae:57:39:7b:c4:6e:2b:39:e9:93:8c:e8:c1: d4:af:ee:81:32:d7:9e:a9:e2:42:dd:4e:6b:8c:77: 8c:b1:4f:cd:a9:fe:f3:a8:7e:d0:16:3d:ae:c0:0c: d6:c2:0d:fb:7d:ad:99:25:9d:9b:79:36:44:db:22: 89:70:cc:c0:6b:d8:fe:9c:7d:45:48:bd:13:72:0d: 2d:d8:ce:78:21:24:ee:f5:61:a1:8b:b6:82:28:5d: 82:e8:06:4f:fb:3f:1f:42:27:97:03:c0:51:1a:c7: 47:2f:ab:ea:19:0a:f2:39:ce:8a:fc:18:c8:b0:76: 72:e6:1d:0c:ff:ae:14:48:f2:4b:8c:a9:4c:66:05: 66:50:05:85:e7:3a:59:0f:59:d6:91:cd:ad:91:ed: 10:22:8c:f9:57:51:7e:71:1f:ed:53:ed:4c:d5:4b: a2:2c:ce:2a:e4:a2:2b:c7:23:b9:b3:2c:26:f5:96: 9b:0b:a3:99:52:30:f6:2b:44:5c:0c:8b:ef:66:03: a0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1F:40:38:3A:2F:AB:61:A1:38:6A:E3:2E:43:E6:F5:2C:96:CB:1F X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_h9AODovq2GhOGrjLkPm9SyWyx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.213.0/24 188.212.97.0/24 Signature Algorithm: sha256WithRSAEncryption 55:fa:91:34:5d:f7:08:97:69:e7:6d:4f:59:82:63:c6:f0:19: d2:fd:de:fc:b8:68:8b:94:c2:17:f6:85:c1:03:ab:fc:3e:22: 80:a4:cd:f2:b0:7d:1a:6b:60:1b:79:d9:a4:6f:68:f2:04:71: 86:03:72:84:2a:62:66:b3:34:15:09:b6:14:82:db:a8:7b:4c: af:71:33:a4:d9:8f:e3:d0:22:22:29:32:59:c7:12:c1:43:39: 73:10:05:bd:8b:f6:6d:e5:cc:3e:3a:3d:2c:28:03:f0:5b:e2: 1b:66:99:f7:ad:48:83:11:6c:fb:25:a6:c0:fe:88:46:8b:2c: ee:d8:a3:60:6b:a2:d2:3e:46:cd:36:30:b5:71:3a:44:46:f4: 23:8d:6f:1e:91:e2:5c:df:a5:c9:8e:a0:b6:06:55:83:44:17: cd:83:80:33:3d:8b:2e:18:bc:ad:a7:2d:2c:57:84:d0:de:58: 07:4b:ee:3a:d6:da:ce:45:a7:30:a4:00:81:da:f0:de:fe:ea: 2a:f9:da:5c:24:d2:86:f3:ae:53:15:74:e5:c4:5b:8a:18:bd: 98:60:de:eb:84:52:8f:cd:b7:d8:36:5a:75:73:e3:f8:d5:b8: df:92:76:f8:76:50:86:77:f8:5a:4b:3f:27:77:16:ed:32:2f: bc:5b:3c:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrjZIoFYeqr6TSPNTAxCQZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjUxMjAzMDg0NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTFmNDAzODNhMmZhYjYxYTEzODZhZTMyZTQzZTZmNTJjOTZjYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UKhf/X6ZyY0WCZwDhfBF/1daa6v +PUiUz/Ncr19UHnsB/wU5GTMGOXAnIgr1/WrOuxVvKU/msrU85Vyaa5XOXvEbis5 6ZOM6MHUr+6BMteeqeJC3U5rjHeMsU/Nqf7zqH7QFj2uwAzWwg37fa2ZJZ2beTZE 2yKJcMzAa9j+nH1FSL0Tcg0t2M54ISTu9WGhi7aCKF2C6AZP+z8fQieXA8BRGsdH L6vqGQryOc6K/BjIsHZy5h0M/64USPJLjKlMZgVmUAWF5zpZD1nWkc2tke0QIoz5 V1F+cR/tU+1M1UuiLM4q5KIrxyO5sywm9ZabC6OZUjD2K0RcDIvvZgOgEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP4fQDg6L6thoThq4y5D5vUslssfMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvX2g5QU9Eb3ZxMkdoT0dyakxrUG05U3lXeXg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV7VAwQA vNRhMA0GCSqGSIb3DQEBCwUAA4IBAQBV+pE0XfcIl2nnbU9ZgmPG8BnS/d78uGiL lMIX9oXBA6v8PiKApM3ysH0aa2Abedmkb2jyBHGGA3KEKmJmszQVCbYUgtuoe0yv cTOk2Y/j0CIiKTJZxxLBQzlzEAW9i/Zt5cw+Oj0sKAPwW+IbZpn3rUiDEWz7JabA /ohGiyzu2KNga6LSPkbNNjC1cTpERvQjjW8ekeJc36XJjqC2BlWDRBfNg4AzPYsu GLytpy0sV4TQ3lgHS+461trORacwpACB2vDe/uoq+dpcJNKG865TFXTlxFuKGL2Y YN7rhFKPzbfYNlp1c+P41bjfknb4dlCGd/haSz8ndxbtMi+8Wzxc -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:38 2025 by rpki-client