This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/pW5tYkF6q2JtEa5-0wWR2y1MLiE.roa File: pW5tYkF6q2JtEa5-0wWR2y1MLiE.roa (raw, json) Hash identifier: DrEWgUVj7gCBwHBTYVQ96Bg2DTFMTX1DlgA0NmJXb+E= Subject key identifier: A5:6E:6D:62:41:7A:AB:62:6D:11:AE:7E:D3:05:91:DB:2D:4C:2E:21 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019AEF535FA46AAC7B794DAB6821EF226EDE Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/pW5tYkF6q2JtEa5-0wWR2y1MLiE.roa Signing time: Fri 05 Dec 2025 16:23:29 +0000 ROA not before: Fri 05 Dec 2025 16:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44854 IP address blocks: 45.113.237.0/24 maxlen: 24 93.114.180.0/23 maxlen: 24 2a10:e300:20::/44 maxlen: 44 2a10:e300:26::/48 maxlen: 48 2a10:e300:27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:53:5f:a4:6a:ac:7b:79:4d:ab:68:21:ef:22:6e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Dec 5 16:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a56e6d62417aab626d11ae7ed30591db2d4c2e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:7e:c1:e8:ee:d2:a4:56:81:1f:94:44:1e: 65:e7:a2:1a:cb:65:be:67:3e:73:a4:7c:c6:45:85: 57:3e:e9:f6:66:26:90:bb:d3:8a:13:a0:4a:99:94: 64:68:e6:ef:49:80:60:49:b1:92:64:60:52:9f:44: 58:a5:4d:d9:a7:e2:02:6f:a3:e5:84:d1:01:c9:5a: bd:6a:e3:fc:38:db:6c:57:ad:4b:7b:ab:0b:3b:78: 95:66:9a:2b:b0:f9:27:4e:f1:91:9a:7f:f2:7d:0b: 7c:a6:91:8d:f3:ab:08:4f:aa:c1:09:06:db:eb:eb: 5b:86:30:be:49:52:d9:60:af:99:4b:a9:a3:2b:1c: 11:0b:0a:f5:88:e3:c6:84:b3:ba:77:d8:83:f4:12: 0a:cf:89:dc:8e:e6:e6:36:b0:a8:7f:dd:e4:8e:b0: b2:e0:f3:8e:b9:32:00:37:a9:2b:9a:a0:4e:fe:73: 15:c8:a0:5c:24:53:ac:74:0b:2f:c8:d1:62:de:00: 80:e8:03:48:73:4b:4b:3f:3a:42:bc:35:f2:ce:ac: d9:3c:aa:bd:14:76:d1:41:f0:85:2f:40:4a:23:a7: 9d:60:95:5e:94:f0:a6:d9:88:8b:89:8b:4a:ad:bd: 68:36:a8:e8:19:33:b2:7f:dd:95:7d:50:23:ad:03: 42:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6E:6D:62:41:7A:AB:62:6D:11:AE:7E:D3:05:91:DB:2D:4C:2E:21 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/pW5tYkF6q2JtEa5-0wWR2y1MLiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.237.0/24 93.114.180.0/23 IPv6: 2a10:e300:20::/44 Signature Algorithm: sha256WithRSAEncryption 85:c1:4b:ff:7a:1a:87:f2:8f:4c:c8:b5:1c:18:eb:e5:db:51: d0:ff:0b:7c:39:65:3b:af:8a:73:d8:b8:f1:df:d4:07:3e:a3: d4:31:26:52:b8:5b:19:af:1c:16:3e:6c:03:00:79:1b:11:9b: 3a:1c:62:9f:b2:6e:c9:2b:6f:db:61:c1:68:5b:58:db:ae:bf: 84:14:4b:da:db:28:83:f6:ae:16:f7:f8:a1:fa:44:78:0e:8b: 5f:e9:60:ae:10:a4:7d:4e:3d:97:7d:7a:07:b1:af:fa:b2:cc: 03:b8:b5:46:ec:62:1c:c6:86:a4:b1:7d:f2:d7:21:a6:14:60: a4:4f:9d:4a:fe:82:4f:93:08:3d:0d:f9:24:8c:92:87:7b:9d: 23:3f:7d:e3:1b:d0:af:b3:b6:ae:96:70:f7:08:1e:7b:8b:bd: 0b:7e:08:c6:73:33:d1:e4:2c:34:80:46:a0:c1:35:fb:69:f3: 44:b5:de:58:a0:f7:ca:90:2f:cb:18:8d:32:94:7b:7d:e5:ee: b2:ce:03:c9:19:1a:9c:67:a3:e5:5c:fb:a2:ea:7d:61:d7:88: a7:67:0e:7b:70:1a:95:27:ff:b3:74:2d:5e:80:a1:c7:04:56: fa:12:d4:c2:66:77:2a:a8:b6:27:58:06:ce:fc:89:d2:0e:58: ed:5a:c7:ab -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZrvU1+kaqx7eU2raCHvIm7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjUxMjA1MTYyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTZlNmQ2MjQxN2FhYjYyNmQxMWFlN2VkMzA1OTFkYjJkNGMyZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6R+weju0qRWgR+URB5l56Iay2W+ Zz5zpHzGRYVXPun2ZiaQu9OKE6BKmZRkaObvSYBgSbGSZGBSn0RYpU3Zp+ICb6Pl hNEByVq9auP8ONtsV61Le6sLO3iVZporsPknTvGRmn/yfQt8ppGN86sIT6rBCQbb 6+tbhjC+SVLZYK+ZS6mjKxwRCwr1iOPGhLO6d9iD9BIKz4ncjubmNrCof93kjrCy 4POOuTIAN6krmqBO/nMVyKBcJFOsdAsvyNFi3gCA6ANIc0tLPzpCvDXyzqzZPKq9 FHbRQfCFL0BKI6edYJVelPCm2YiLiYtKrb1oNqjoGTOyf92VfVAjrQNCawIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKVubWJBeqtibRGuftMFkdstTC4hMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvcFc1dFlrRjZxMkp0RWE1LTB3V1IyeTFNTGlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALXHtAwQB XXK0MA8EAgACMAkDBwQqEOMAACAwDQYJKoZIhvcNAQELBQADggEBAIXBS/96Gofy j0zItRwY6+XbUdD/C3w5ZTuvinPYuPHf1Ac+o9QxJlK4WxmvHBY+bAMAeRsRmzoc Yp+ybskrb9thwWhbWNuuv4QUS9rbKIP2rhb3+KH6RHgOi1/pYK4QpH1OPZd9egex r/qyzAO4tUbsYhzGhqSxffLXIaYUYKRPnUr+gk+TCD0N+SSMkod7nSM/feMb0K+z tq6WcPcIHnuLvQt+CMZzM9HkLDSARqDBNftp80S13lig98qQL8sYjTKUe33l7rLO A8kZGpxno+Vc+6LqfWHXiKdnDntwGpUn/7N0LV6AoccEVvoS1MJmdyqotidYBs78 idIOWO1ax6s= -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:37 2025 by rpki-client