This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/scMo_errKCjChZtlX5havHc6fow.roa
File: scMo_errKCjChZtlX5havHc6fow.roa (raw, json)
Hash identifier: PX9UUUfQ3xDs0JawriOmM9gI3AxT6oGn5ZBzqItoIPc=
Subject key identifier: B1:C3:28:FD:EA:EB:28:28:C2:85:9B:65:5F:98:5A:BC:77:3A:7E:8C
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019AD6CC0F06C099801F1756C39D6D878C57
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/scMo_errKCjChZtlX5havHc6fow.roa
Signing time: Sun 30 Nov 2025 22:04:48 +0000
ROA not before: Sun 30 Nov 2025 22:04:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:d6:cc:0f:06:c0:99:80:1f:17:56:c3:9d:6d:87:8c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 30 22:04:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1c328fdeaeb2828c2859b655f985abc773a7e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:93:ae:76:6f:03:1a:82:ea:0e:57:ff:39:
df:63:c9:70:d6:27:55:f5:d6:8c:aa:88:69:44:8f:
a2:da:56:ef:ed:6f:5d:37:6f:8d:f6:03:a2:77:cd:
bc:c1:49:f5:3a:0e:fc:37:1e:8c:ca:28:90:05:ee:
18:e4:db:25:92:26:09:c9:20:ef:22:bd:47:d3:ff:
fc:82:dc:8c:7d:e8:3d:ff:da:36:f0:18:07:9c:f8:
51:38:9e:52:5d:6a:22:65:01:5b:fa:74:0a:1d:45:
6e:f0:87:d8:3d:cb:0d:4e:0a:a9:67:a0:03:f0:cc:
84:21:01:ad:d7:e5:09:e9:a0:26:58:61:61:f7:a1:
18:cb:2d:33:cd:3b:a4:de:6e:60:6a:b6:11:f3:72:
5a:f3:13:65:b9:06:c2:f0:a1:89:2c:9e:5e:75:9d:
ac:49:78:f6:3d:1c:26:7f:17:a6:8b:07:48:84:f2:
69:80:e2:48:27:28:7f:9e:a6:6b:2f:1c:bd:c6:ad:
07:73:86:7d:b1:e3:20:38:0d:a0:e0:1c:4c:ee:65:
0d:0a:35:30:fd:c4:e7:9d:c2:8d:a6:b0:13:09:a1:
fe:a2:78:0c:35:da:8e:00:0a:e0:f6:7d:11:ce:76:
a9:89:92:c1:f5:5e:21:b0:4e:e1:86:54:26:80:6d:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C3:28:FD:EA:EB:28:28:C2:85:9B:65:5F:98:5A:BC:77:3A:7E:8C
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/scMo_errKCjChZtlX5havHc6fow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.148.0/22
45.43.158.0/24
104.222.189.0/24
104.233.59.0/24
104.238.12.0/23
104.239.55.0-104.239.56.255
104.249.9.0/24
104.249.17.0/24
104.249.23.0/24
104.249.46.0-104.249.54.255
216.173.91.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5c:f9:83:5f:08:09:7e:40:23:52:50:be:08:83:ca:28:b4:
3e:33:84:31:36:d4:3f:77:77:8a:aa:09:d2:f0:64:76:45:08:
78:ee:fb:18:3d:37:dc:86:6a:05:55:df:94:a6:16:fc:a7:72:
d0:6f:44:31:8a:17:93:e4:a5:82:34:28:86:7c:32:4e:27:44:
c1:be:fc:3e:5c:67:19:1e:8e:0a:4d:2f:73:c4:f8:85:44:2e:
08:18:96:37:8c:95:5f:2d:32:80:20:d0:da:b4:bb:47:61:db:
47:58:83:85:c4:4c:96:64:42:bf:f7:1f:71:5e:58:2c:29:88:
f0:e1:3b:df:44:f1:e0:ae:33:99:d0:31:76:66:42:e1:f1:88:
96:51:13:85:ab:36:43:ee:7f:8c:cb:33:a5:cf:a5:3f:4a:18:
3b:bd:e0:d1:81:31:90:c7:79:e3:21:a3:c2:ed:b0:58:5e:77:
1e:6c:73:e9:28:fc:14:79:35:5c:99:9a:71:f4:0b:2b:6e:84:
c9:5e:b2:92:30:fc:2f:80:c8:d3:de:1f:43:6a:49:c3:00:fe:
ab:a4:0d:5b:14:ad:13:1a:93:47:6c:70:eb:4a:ab:c4:5a:62:
b4:82:d3:83:1b:f0:b6:aa:2c:53:25:aa:1f:2c:92:8e:94:8c:
26:88:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:27:28 2025 by rpki-client