This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/7U5QACnIOaStbs622wsLddtqk54.roa File: 7U5QACnIOaStbs622wsLddtqk54.roa (raw, json) Hash identifier: MDxD55R7Tx2xc7RKGAiVm7EdWOaqbi6TPzSWLg28j/E= Subject key identifier: ED:4E:50:00:29:C8:39:A4:AD:6E:CE:B6:DB:0B:0B:75:DB:6A:93:9E Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc Certificate serial: 019AE43CEAC418E507C40513FBED25946CB7 Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/7U5QACnIOaStbs622wsLddtqk54.roa Signing time: Wed 03 Dec 2025 12:43:08 +0000 ROA not before: Wed 03 Dec 2025 12:43:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42151 IP address blocks: 45.147.148.0/24 maxlen: 24 45.147.149.0/24 maxlen: 24 45.147.150.0/24 maxlen: 24 45.147.151.0/24 maxlen: 24 195.242.142.0/24 maxlen: 24 195.242.143.0/24 maxlen: 24 2a11:1680:1::/48 maxlen: 48 2a11:1680:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:3c:ea:c4:18:e5:07:c4:05:13:fb:ed:25:94:6c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc Validity Not Before: Dec 3 12:43:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed4e500029c839a4ad6eceb6db0b0b75db6a939e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3b:27:7c:cb:d8:6a:d2:ce:be:29:45:ed:61: 3d:28:0c:53:41:ea:1d:13:f1:3d:72:25:45:41:44: d7:fd:14:ef:56:ec:ac:1d:46:0c:9b:67:92:77:aa: ec:fe:f0:7e:03:f3:33:95:c4:0a:79:2d:06:fa:57: dd:2c:e5:18:28:e0:82:5a:a2:f9:51:0d:ba:2c:a4: 27:17:6f:77:09:c9:6c:86:0a:08:7b:39:ed:af:f4: fd:9a:c9:ac:2a:a7:93:45:4c:6e:61:67:df:35:98: 1e:bb:fc:a9:0d:36:bf:06:7f:c4:a7:56:8f:ea:d6: 2e:4d:a6:e9:a7:60:24:b8:03:5a:f6:53:dd:00:26: 2b:fd:33:f5:57:ac:a5:2e:0f:e4:4a:46:ec:65:6e: 37:54:c8:e7:dc:f8:e0:fa:cd:43:a3:65:3c:ab:bd: 6a:c5:72:ef:12:ed:c4:9e:72:6d:29:d8:24:84:7a: 2c:47:34:6b:bd:d9:28:e2:47:9a:d5:8a:b7:2d:21: cd:22:82:9e:30:ef:f1:cb:41:f9:ec:75:4c:88:33: 1b:18:14:39:91:c5:da:c5:a3:0e:dc:6f:fa:1c:cc: 98:19:7f:5a:91:d9:6b:eb:ca:99:0e:47:95:b4:d2: 75:8a:7b:aa:a8:f9:29:95:8f:39:35:5a:52:4a:39: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4E:50:00:29:C8:39:A4:AD:6E:CE:B6:DB:0B:0B:75:DB:6A:93:9E X509v3 Authority Key Identifier: keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/7U5QACnIOaStbs622wsLddtqk54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.148.0/22 195.242.142.0/23 IPv6: 2a11:1680:1::-2a11:1680:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7c:80:07:bb:07:b3:68:02:c5:ef:66:aa:7f:b2:b5:a5:2d:c1: 7e:f1:83:49:e1:a7:5c:41:2a:06:7b:62:3f:6d:e4:75:39:48: 66:f5:7d:f5:1f:f5:74:e3:61:6b:ea:6b:c1:ec:24:95:74:b1: b9:f3:7f:09:33:61:e1:cd:8d:d9:0f:03:7d:3c:1f:73:d4:62: c9:6c:f9:68:4b:29:6b:33:15:0b:97:3b:1f:9d:04:ea:c6:69: de:2a:a7:3d:c3:d1:76:5d:19:6a:ae:39:70:58:cc:52:7a:49: 77:c5:e7:d7:14:7a:b9:92:42:8a:47:ed:3e:25:d1:4f:43:4b: 95:2d:00:24:ef:ac:df:b4:57:1c:35:53:a9:44:57:21:6f:67: ce:40:13:c7:11:5d:b5:75:59:b9:cc:b0:0e:9b:a7:28:84:41: 92:23:e2:4d:d4:a2:b9:29:fc:ab:04:56:20:72:1a:99:72:06: 68:2c:b2:5b:03:51:66:00:3d:df:5c:da:9d:c1:aa:16:94:9d: 3c:e2:a3:f2:31:71:31:50:a5:26:5e:06:a4:fc:93:d6:ac:7c: 54:01:b5:09:29:db:6e:4a:1b:3b:6d:2c:67:1e:0c:5f:9b:9a: dc:62:c9:45:56:1a:61:fa:3f:12:3a:29:63:cb:0f:f1:e7:dc: 0f:78:67:d3 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZrkPOrEGOUHxAUT++0llGy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjUwMWQyZDA1MjE4NWQ0ZjY1NjkyMThjMjhiZjM1ODU5 MDAwZmMwHhcNMjUxMjAzMTI0MzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDRlNTAwMDI5YzgzOWE0YWQ2ZWNlYjZkYjBiMGI3NWRiNmE5MzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zsnfMvYatLOvilF7WE9KAxTQeod E/E9ciVFQUTX/RTvVuysHUYMm2eSd6rs/vB+A/MzlcQKeS0G+lfdLOUYKOCCWqL5 UQ26LKQnF293CclshgoIezntr/T9msmsKqeTRUxuYWffNZgeu/ypDTa/Bn/Ep1aP 6tYuTabpp2AkuANa9lPdACYr/TP1V6ylLg/kSkbsZW43VMjn3Pjg+s1Do2U8q71q xXLvEu3EnnJtKdgkhHosRzRrvdko4kea1Yq3LSHNIoKeMO/xy0H57HVMiDMbGBQ5 kcXaxaMO3G/6HMyYGX9akdlr68qZDkeVtNJ1inuqqPkplY85NVpSSjmSDwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFO1OUAApyDmkrW7OttsLC3XbapOeMB8GA1UdIwQY MBaAFM71AdLQUhhdT2VpIYwovzWFkAD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgt Zjk1MDMyN2Y4OGQzLzEvN1U1UUFDbklPYVN0YnM2MjJ3c0xkZHRxazU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgtZjk1MDMyN2Y4OGQz LzEvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQCLZOUAwQB w/KOMBoEAgACMBQwEgMHACoRFoAAAQMHACoRFoAAAjANBgkqhkiG9w0BAQsFAAOC AQEAfIAHuwezaALF72aqf7K1pS3BfvGDSeGnXEEqBntiP23kdTlIZvV99R/1dONh a+prwewklXSxufN/CTNh4c2N2Q8DfTwfc9RiyWz5aEspazMVC5c7H50E6sZp3iqn PcPRdl0Zaq45cFjMUnpJd8Xn1xR6uZJCikftPiXRT0NLlS0AJO+s37RXHDVTqURX IW9nzkATxxFdtXVZucywDpunKIRBkiPiTdSiuSn8qwRWIHIamXIGaCyyWwNRZgA9 31zancGqFpSdPOKj8jFxMVClJl4GpPyT1qx8VAG1CSnbbkobO20sZx4MX5ua3GLJ RVYaYfo/EjopY8sP8efcD3hn0w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:14:50 2025 by rpki-client