This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/M97K8l_S4kgf2GjVEHFM5S4eyIw.roa File: M97K8l_S4kgf2GjVEHFM5S4eyIw.roa (raw, json) Hash identifier: kcnyR0HYpZty2uhP+gfBAoyu5lobkvGxpr+BmjGMeCs= Subject key identifier: 33:DE:CA:F2:5F:D2:E2:48:1F:D8:68:D5:10:71:4C:E5:2E:1E:C8:8C Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019A7D2749C814F8D0EBE77B02D02D9B67B4 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/M97K8l_S4kgf2GjVEHFM5S4eyIw.roa Signing time: Thu 13 Nov 2025 12:18:38 +0000 ROA not before: Thu 13 Nov 2025 12:18:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215939 IP address blocks: 46.151.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:27:49:c8:14:f8:d0:eb:e7:7b:02:d0:2d:9b:67:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Nov 13 12:18:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=33decaf25fd2e2481fd868d510714ce52e1ec88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:da:64:7e:40:66:79:14:7b:bc:88:28:41: c7:7d:be:49:d9:79:22:fa:89:b5:72:0a:f4:99:ba: 1b:12:11:19:d0:5d:1f:50:91:56:77:ad:de:b0:4f: f1:57:13:aa:b0:47:22:e0:0c:47:7a:86:71:a9:ef: 99:e1:15:1a:e9:25:16:3b:9e:c3:2a:d0:c1:f9:e6: 56:89:f2:76:a1:e5:ea:b2:3e:4a:32:40:e0:8c:63: 77:16:50:95:91:b8:92:d7:e9:8d:ac:8f:6b:db:b3: 82:2f:cb:43:c3:f3:4c:7b:ae:ed:03:ec:83:6d:99: e3:94:20:93:9d:63:e8:5a:2f:36:e3:ca:eb:a7:33: 4a:e1:5c:f0:11:a7:54:e3:79:89:e1:f4:09:04:2a: 43:99:f8:25:2e:1c:3b:d1:af:16:92:3d:66:03:81: bc:3f:a0:9d:1d:09:68:4e:01:cb:7a:f9:e8:40:97: c9:8b:31:56:cc:dc:94:98:f6:00:7e:cb:63:6c:25: 9f:e5:be:9d:83:50:fc:4e:73:55:36:5e:9b:97:6f: 3b:d0:63:24:2c:f9:d4:49:4b:c9:5f:8d:e0:35:9c: f2:77:b2:d7:4d:cd:27:7f:5f:54:19:b1:41:5e:e8: 13:d5:87:cd:8e:00:a4:3d:4a:f4:dd:36:9c:8f:df: 4b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DE:CA:F2:5F:D2:E2:48:1F:D8:68:D5:10:71:4C:E5:2E:1E:C8:8C X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/M97K8l_S4kgf2GjVEHFM5S4eyIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.181.0/24 Signature Algorithm: sha256WithRSAEncryption 83:f3:40:2c:41:45:12:9e:48:19:a2:ed:55:62:2d:d8:49:86: 38:88:a2:9c:4c:cf:f3:c1:10:bd:6c:9a:6d:a1:69:71:da:f2: 44:2a:70:45:a8:0c:cf:e5:4a:f1:a7:35:25:1f:e5:48:30:5c: f6:aa:ac:e3:96:0e:4f:f7:f9:48:86:12:2d:c6:2f:57:4b:f9: 67:42:25:d6:c1:d0:60:36:09:c2:e9:3d:15:1a:b9:46:b7:42: 8f:71:52:e8:28:41:c1:88:0e:a4:66:55:7e:3d:e6:d8:86:de: 6d:f3:f4:26:3d:04:34:4f:60:12:fc:ad:56:81:be:2e:4f:7c: 96:68:b2:21:58:f0:e9:0a:9d:63:b7:23:67:06:e8:3b:67:4d: de:ad:74:ef:4a:40:71:d2:52:0d:94:f6:89:6b:85:0b:6f:3a: 8e:6a:22:02:ca:53:1a:8c:55:ca:5a:67:ed:37:cd:69:4d:4f: 13:44:e5:5a:67:a5:8c:5c:a4:2a:0c:73:85:50:47:20:16:02: cb:f4:ea:f2:3e:e7:27:62:09:c0:46:dc:fa:9b:19:5b:1b:aa: d0:1d:1f:0e:7d:e5:7e:2f:e3:8b:92:2e:22:9d:70:32:5e:55: e3:c1:e8:4f:d4:6e:23:93:87:63:f7:fa:75:5e:f4:a9:cf:a0: e0:59:c6:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp9J0nIFPjQ6+d7AtAtm2e0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjUxMTEzMTIxODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2RlY2FmMjVmZDJlMjQ4MWZkODY4ZDUxMDcxNGNlNTJlMWVjODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vXaZH5AZnkUe7yIKEHHfb5J2Xki +om1cgr0mbobEhEZ0F0fUJFWd63esE/xVxOqsEci4AxHeoZxqe+Z4RUa6SUWO57D KtDB+eZWifJ2oeXqsj5KMkDgjGN3FlCVkbiS1+mNrI9r27OCL8tDw/NMe67tA+yD bZnjlCCTnWPoWi8248rrpzNK4VzwEadU43mJ4fQJBCpDmfglLhw70a8Wkj1mA4G8 P6CdHQloTgHLevnoQJfJizFWzNyUmPYAfstjbCWf5b6dg1D8TnNVNl6bl2870GMk LPnUSUvJX43gNZzyd7LXTc0nf19UGbFBXugT1YfNjgCkPUr03Tacj99L/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPeyvJf0uJIH9ho1RBxTOUuHsiMMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvTTk3SzhsX1M0a2dmMkdqVkVIRk01UzRleUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpe1MA0G CSqGSIb3DQEBCwUAA4IBAQCD80AsQUUSnkgZou1VYi3YSYY4iKKcTM/zwRC9bJpt oWlx2vJEKnBFqAzP5UrxpzUlH+VIMFz2qqzjlg5P9/lIhhItxi9XS/lnQiXWwdBg NgnC6T0VGrlGt0KPcVLoKEHBiA6kZlV+PebYht5t8/QmPQQ0T2AS/K1Wgb4uT3yW aLIhWPDpCp1jtyNnBug7Z03erXTvSkBx0lINlPaJa4ULbzqOaiICylMajFXKWmft N81pTU8TROVaZ6WMXKQqDHOFUEcgFgLL9OryPucnYgnARtz6mxlbG6rQHR8OfeV+ L+OLki4inXAyXlXjwehP1G4jk4dj9/p1XvSpz6DgWcb6 -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:10 2025 by rpki-client