This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-dfs0dYr0dU3R-ailz7EqYtLMFI.roa File: 1-dfs0dYr0dU3R-ailz7EqYtLMFI.roa (raw, json) Hash identifier: izXf7k/qCMPvsEmYX06JEAQARjaygc/Y3b0p2M6N+dE= Subject key identifier: F9:D7:EC:D1:D6:2B:D1:D5:37:47:E6:A2:97:3E:C4:A9:8B:4B:30:52 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019AD6CC0F75B37723EA10EF2CFF9317AC73 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-dfs0dYr0dU3R-ailz7EqYtLMFI.roa Signing time: Sun 30 Nov 2025 22:04:48 +0000 ROA not before: Sun 30 Nov 2025 22:04:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199959 IP address blocks: 45.43.147.0/24 maxlen: 24 45.43.152.0/24 maxlen: 24 64.137.54.0/24 maxlen: 24 104.239.74.0/24 maxlen: 24 104.239.79.0/24 maxlen: 24 104.239.89.0/24 maxlen: 24 104.239.102.0/24 maxlen: 24 104.239.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d6:cc:0f:75:b3:77:23:ea:10:ef:2c:ff:93:17:ac:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Nov 30 22:04:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f9d7ecd1d62bd1d53747e6a2973ec4a98b4b3052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:5b:48:6e:b1:56:05:26:83:63:69:ad:02: 33:c1:20:17:34:2c:07:72:ef:3b:35:3f:db:54:e5: bc:e4:02:3a:c8:e4:08:9d:93:90:17:ce:44:df:a0: 4b:c3:db:71:61:ab:62:a1:0b:2a:dd:dc:f5:3e:36: 65:d9:ec:47:44:b8:1a:56:02:b5:fa:ae:d3:d8:a7: b3:e0:65:91:42:6f:17:c5:54:a9:c8:b7:d0:b7:30: dc:18:0f:e8:aa:0c:8b:ae:43:b9:4b:03:5a:bd:57: c7:97:62:47:72:24:69:a6:00:5c:fe:e2:fb:64:ce: 2f:14:8a:fd:8d:c7:ea:ec:96:a6:e8:a0:48:7c:45: 49:00:40:22:18:b7:b8:3b:4d:bc:d4:9c:47:63:a6: be:e2:ec:67:94:9e:60:dd:dd:40:fa:06:d9:29:75: 98:8b:11:6a:9b:55:03:11:f2:91:53:55:13:2f:39: 9c:13:dd:f2:62:83:54:d8:9b:bd:63:71:da:0d:6b: 5d:7d:26:53:55:7b:8e:73:72:3e:0c:e9:d5:5a:4e: 98:cc:e1:c2:3b:d1:7d:2e:3a:23:e3:ef:38:b7:e4: 29:d4:68:66:00:80:ef:f7:ca:6d:a5:3e:b5:dd:62: 4f:9e:5b:53:3a:82:81:08:f6:8d:34:57:3f:b3:17: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D7:EC:D1:D6:2B:D1:D5:37:47:E6:A2:97:3E:C4:A9:8B:4B:30:52 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-dfs0dYr0dU3R-ailz7EqYtLMFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.147.0/24 45.43.152.0/24 64.137.54.0/24 104.239.74.0/24 104.239.79.0/24 104.239.89.0/24 104.239.102.0/24 104.239.109.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:28:a6:ee:f0:d2:03:59:0c:45:10:3d:f2:13:90:2c:78:83: 04:3c:fe:25:bc:b8:4d:6d:08:11:8c:4b:cf:17:35:06:c2:3b: e1:c3:65:79:f8:6b:11:9c:2b:3e:8d:ff:4a:33:3b:98:96:de: 09:8c:5d:af:ae:e1:39:31:ee:1e:71:d5:2d:92:3a:3c:a0:dd: 2a:c6:a5:b2:83:91:65:22:21:96:8b:8f:32:ea:02:3f:f4:b6: 85:df:72:3d:74:2f:2a:7a:7c:10:ec:cd:85:d2:8e:a5:53:69: 33:63:16:e8:b9:30:49:41:18:a8:19:3a:b2:a1:6f:49:02:49: ca:89:79:bf:e4:7d:27:05:fc:89:e1:85:99:d3:16:d2:98:b8: 14:bd:6b:fc:e3:89:6e:13:2b:9a:7a:a9:a5:02:70:4b:e4:66: 7c:38:58:25:31:07:b2:73:4d:0a:29:18:f3:6a:15:7a:d7:d4: bf:0e:71:a9:9f:ce:e5:e9:24:24:e7:2c:44:d5:88:65:2c:f9: 75:ef:0f:83:57:83:a5:e2:b4:04:a5:a1:a7:43:43:d6:92:03: 56:9d:77:23:19:32:16:c9:44:fb:b1:9d:dc:16:a3:74:01:74: a5:85:e9:d8:d1:d8:be:73:7b:08:06:88:3c:e8:7e:3a:00:cb: 1d:51:20:25 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZrWzA91s3cj6hDvLP+TF6xzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjUxMTMwMjIwNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWQ3ZWNkMWQ2MmJkMWQ1Mzc0N2U2YTI5NzNlYzRhOThiNGIzMDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5xbSG6xVgUmg2NprQIzwSAXNCwH cu87NT/bVOW85AI6yOQInZOQF85E36BLw9txYatioQsq3dz1PjZl2exHRLgaVgK1 +q7T2Kez4GWRQm8XxVSpyLfQtzDcGA/oqgyLrkO5SwNavVfHl2JHciRppgBc/uL7 ZM4vFIr9jcfq7Jam6KBIfEVJAEAiGLe4O0281JxHY6a+4uxnlJ5g3d1A+gbZKXWY ixFqm1UDEfKRU1UTLzmcE93yYoNU2Ju9Y3HaDWtdfSZTVXuOc3I+DOnVWk6YzOHC O9F9Ljoj4+84t+Qp1GhmAIDv98ptpT613WJPnltTOoKBCPaNNFc/sxeBQwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFPnX7NHWK9HVN0fmopc+xKmLSzBSMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvMS1kZnMwZFlyMGRVM1ItYWlsejdFcVl0TE1GSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWEvZmRkNjMzLWM2NTgtNDljNS05ZThmLWZiMDc5NTVmM2Fh YS8xL1lGZ2VaejJBOTBkSk5ySVROLXI4d2IzRGhlay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBJBggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAC0rkwME AC0rmAMEAECJNgMEAGjvSgMEAGjvTwMEAGjvWQMEAGjvZgMEAGjvbTANBgkqhkiG 9w0BAQsFAAOCAQEAHCim7vDSA1kMRRA98hOQLHiDBDz+Jby4TW0IEYxLzxc1BsI7 4cNlefhrEZwrPo3/SjM7mJbeCYxdr67hOTHuHnHVLZI6PKDdKsalsoORZSIhlouP MuoCP/S2hd9yPXQvKnp8EOzNhdKOpVNpM2MW6LkwSUEYqBk6sqFvSQJJyol5v+R9 JwX8ieGFmdMW0pi4FL1r/OOJbhMrmnqppQJwS+RmfDhYJTEHsnNNCikY82oVetfU vw5xqZ/O5ekkJOcsRNWIZSz5de8Pg1eDpeK0BKWhp0ND1pIDVp13IxkyFslE+7Gd 3BajdAF0pYXp2NHYvnN7CAaIPOh+OgDLHVEgJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:34 2025 by rpki-client