This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/3hz5ahXW_cZwqkugxIaH-nqOVCg.roa File: 3hz5ahXW_cZwqkugxIaH-nqOVCg.roa (raw, json) Hash identifier: nyivPGE2o7vY4ANffkjrKsm1M5UAi4P4q6Wm8KRHgq8= Subject key identifier: DE:1C:F9:6A:15:D6:FD:C6:70:AA:4B:A0:C4:86:87:FA:7A:8E:54:28 Certificate issuer: /CN=c2006acc05f9dc451ea0d44e8727db470b928794 Certificate serial: 019AB8A77C3FA5EB1F957A5B0E5E83DF8D1B Authority key identifier: C2:00:6A:CC:05:F9:DC:45:1E:A0:D4:4E:87:27:DB:47:0B:92:87:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/3hz5ahXW_cZwqkugxIaH-nqOVCg.roa Signing time: Tue 25 Nov 2025 01:36:15 +0000 ROA not before: Tue 25 Nov 2025 01:36:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198763 IP address blocks: 45.133.48.0/22 maxlen: 24 95.129.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b8:a7:7c:3f:a5:eb:1f:95:7a:5b:0e:5e:83:df:8d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2006acc05f9dc451ea0d44e8727db470b928794 Validity Not Before: Nov 25 01:36:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de1cf96a15d6fdc670aa4ba0c48687fa7a8e5428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:9f:a9:47:11:93:54:fc:55:61:5a:6d:a8: c1:a2:be:93:22:f5:0e:37:be:6b:69:5f:56:3d:7c: 08:6e:6e:4d:5b:75:b3:19:1c:f7:63:13:28:2e:c1: 76:86:53:03:51:34:87:db:16:5c:51:c9:ce:68:b8: 46:b9:5d:56:3a:b5:50:d2:4a:c8:4e:0e:d2:16:30: 8d:6e:bf:0b:1b:d6:80:9b:39:07:25:10:a8:e6:bf: 40:c0:92:97:bb:92:b3:3c:9b:f3:05:07:13:1a:a6: a0:5f:6a:b0:df:31:a2:22:44:fb:c9:f8:17:ec:dc: 48:73:37:e4:c0:ac:ad:69:89:6f:77:6b:69:5a:ee: a4:2b:68:58:c5:b2:aa:d1:53:3e:d4:dc:34:1c:99: 0e:86:b8:31:f3:9b:c9:ed:da:20:4a:ee:12:4e:ef: 82:6b:8e:0c:1d:69:fe:aa:a8:50:50:86:8b:8f:3d: 3b:a8:21:94:80:1b:a3:f2:2c:71:7e:7f:af:66:83: f1:b3:5a:25:4b:2e:bf:2b:ce:d6:7d:21:c6:dc:e4: 65:28:43:df:bd:42:43:b1:0a:41:fe:75:cd:09:14: b2:a1:04:9d:63:0c:a9:a7:40:b9:84:75:e9:24:76: 5b:47:db:09:9c:fd:71:ba:e1:89:30:a2:2b:8c:61: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1C:F9:6A:15:D6:FD:C6:70:AA:4B:A0:C4:86:87:FA:7A:8E:54:28 X509v3 Authority Key Identifier: keyid:C2:00:6A:CC:05:F9:DC:45:1E:A0:D4:4E:87:27:DB:47:0B:92:87:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/3hz5ahXW_cZwqkugxIaH-nqOVCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.48.0/22 95.129.120.0/21 Signature Algorithm: sha256WithRSAEncryption 43:d4:1d:9e:31:ba:f3:ef:5c:3a:6a:d9:2a:ac:d7:aa:39:1f: b6:c6:19:c1:35:c6:4b:97:98:9d:d5:91:00:79:1f:1f:fc:74: 39:ee:71:69:6e:91:a0:03:ed:4d:45:59:25:05:bb:02:18:f6: cb:15:e4:55:cd:f1:32:83:bb:5f:6d:13:bb:68:49:85:df:01: d3:20:3f:60:bb:00:2c:ed:f8:75:a4:ec:6b:b2:d7:ad:3b:b1: 4b:44:8a:2c:e4:7d:1b:de:40:ac:8e:00:36:58:2a:c1:e7:71: 74:93:94:57:7a:8a:93:d4:a9:4e:c9:3e:94:cb:2c:f8:96:f3: 80:71:16:fe:63:bc:f6:ea:75:be:64:ae:ef:ab:c8:e1:be:d1: c5:5a:a0:d0:4c:0d:2d:a0:ac:73:14:9a:f1:be:37:1c:e7:75: cc:c0:4e:73:41:7b:5a:85:56:5a:88:4b:70:a1:a8:04:59:d6: bc:c2:7a:50:d0:5b:e2:f3:8e:8e:e0:2b:2a:0d:50:0e:0a:d3: ef:54:e0:e4:d7:04:f1:ca:5c:f5:49:e2:ef:7d:70:7d:62:48: fc:79:ff:2e:c8:99:26:f6:b0:d9:29:90:74:15:3b:8a:8d:28: b9:ee:6f:77:c0:a2:57:02:2b:db:b5:b9:a3:05:e3:a4:3d:ae: f9:bd:9c:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq4p3w/pesflXpbDl6D340bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMDA2YWNjMDVmOWRjNDUxZWEwZDQ0ZTg3MjdkYjQ3MGI5 Mjg3OTQwHhcNMjUxMTI1MDEzNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTFjZjk2YTE1ZDZmZGM2NzBhYTRiYTBjNDg2ODdmYTdhOGU1NDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNCfqUcRk1T8VWFabajBor6TIvUO N75raV9WPXwIbm5NW3WzGRz3YxMoLsF2hlMDUTSH2xZcUcnOaLhGuV1WOrVQ0krI Tg7SFjCNbr8LG9aAmzkHJRCo5r9AwJKXu5KzPJvzBQcTGqagX2qw3zGiIkT7yfgX 7NxIczfkwKytaYlvd2tpWu6kK2hYxbKq0VM+1Nw0HJkOhrgx85vJ7dogSu4STu+C a44MHWn+qqhQUIaLjz07qCGUgBuj8ixxfn+vZoPxs1olSy6/K87WfSHG3ORlKEPf vUJDsQpB/nXNCRSyoQSdYwypp0C5hHXpJHZbR9sJnP1xuuGJMKIrjGFhUwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN4c+WoV1v3GcKpLoMSGh/p6jlQoMB8GA1UdIwQY MBaAFMIAaswF+dxFHqDUTocn20cLkoeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2dCcXpBWDUzRVVlb05ST2h5ZmJSd3VTaDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yM2I3MmYtOWRlNC00NzA2LThlMzIt Zjk5MWY5MDA5MGM2LzEvM2h6NWFoWFdfY1p3cWt1Z3hJYUgtbnFPVkNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yM2I3MmYtOWRlNC00NzA2LThlMzItZjk5MWY5MDA5MGM2 LzEvd2dCcXpBWDUzRVVlb05ST2h5ZmJSd3VTaDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYUwAwQD X4F4MA0GCSqGSIb3DQEBCwUAA4IBAQBD1B2eMbrz71w6atkqrNeqOR+2xhnBNcZL l5id1ZEAeR8f/HQ57nFpbpGgA+1NRVklBbsCGPbLFeRVzfEyg7tfbRO7aEmF3wHT ID9guwAs7fh1pOxrstetO7FLRIos5H0b3kCsjgA2WCrB53F0k5RXeoqT1KlOyT6U yyz4lvOAcRb+Y7z26nW+ZK7vq8jhvtHFWqDQTA0toKxzFJrxvjcc53XMwE5zQXta hVZaiEtwoagEWda8wnpQ0Fvi846O4CsqDVAOCtPvVODk1wTxylz1SeLvfXB9Ykj8 ef8uyJkm9rDZKZB0FTuKjSi57m93wKJXAivbtbmjBeOkPa75vZyc -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:21 2025 by rpki-client