This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/1-US7yaRiFFKnKqL_Az-oiKaBwo8.roa File: 1-US7yaRiFFKnKqL_Az-oiKaBwo8.roa (raw, json) Hash identifier: FthpX5qfWVZK7tmP9o2nAg/lcWbaiX6ztEINECGa57Q= Subject key identifier: F9:44:BB:C9:A4:62:14:52:A7:2A:A2:FF:03:3F:A8:88:A6:81:C2:8F Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Certificate serial: 019A81BED1D292E4A72FA000363CE5A667C7 Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/1-US7yaRiFFKnKqL_Az-oiKaBwo8.roa Signing time: Fri 14 Nov 2025 09:42:37 +0000 ROA not before: Fri 14 Nov 2025 09:42:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209242 IP address blocks: 45.14.174.0/24 maxlen: 24 45.80.109.0/24 maxlen: 24 45.80.111.0/24 maxlen: 24 188.244.122.0/24 maxlen: 24 193.9.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:be:d1:d2:92:e4:a7:2f:a0:00:36:3c:e5:a6:67:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Validity Not Before: Nov 14 09:42:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f944bbc9a4621452a72aa2ff033fa888a681c28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:7c:87:1c:32:44:91:6a:b6:42:74:c7:d8: ea:bc:f9:3a:96:f2:94:55:c2:eb:84:46:13:15:4b: d5:f5:59:27:0c:a6:28:c3:e6:cd:a3:15:af:33:17: c4:32:f0:01:4f:5a:a9:6d:8a:be:35:51:b2:3e:0e: 8a:08:f0:04:17:39:11:2f:e6:ac:28:30:79:e8:79: 3a:a0:57:bf:9e:aa:14:49:ff:d5:54:c2:6a:56:9b: 68:e5:f9:31:0f:06:ba:3b:2f:a1:95:fd:f2:1f:95: 2c:cb:ff:6a:31:ef:1f:18:e5:09:7c:d2:fd:fc:f5: 52:5e:12:bb:51:c4:60:82:2e:5c:47:87:76:7f:92: d2:bb:ac:d9:85:0f:26:15:5c:37:33:b3:fb:91:e7: 81:46:46:c8:4f:b1:af:87:5a:a2:bc:eb:48:da:ac: 27:1e:52:95:34:3c:2b:c7:b2:c0:91:76:2b:ae:a9: 2f:87:46:c2:16:ef:87:7f:59:cc:ac:d9:5c:fa:f2: 5c:94:27:3c:df:a9:b8:12:d8:78:39:e7:d0:b8:c1: d1:ee:99:1b:9c:b6:bc:cf:07:52:4d:af:01:30:72: 3b:74:c3:04:96:c1:0d:24:5c:e4:38:64:dd:98:54: 8f:b0:29:0a:24:28:32:57:65:0a:cf:92:87:52:16: c8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:44:BB:C9:A4:62:14:52:A7:2A:A2:FF:03:3F:A8:88:A6:81:C2:8F X509v3 Authority Key Identifier: keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/1-US7yaRiFFKnKqL_Az-oiKaBwo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.174.0/24 45.80.109.0/24 45.80.111.0/24 188.244.122.0/24 193.9.49.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:2e:06:c2:18:06:cf:4b:99:71:1e:02:e3:f2:8d:54:e3:4a: b5:f6:16:b9:34:b7:f1:b9:5b:b1:26:b4:b9:1f:d1:0e:ae:5b: 1c:b1:df:e9:4d:ba:17:83:dd:b1:4f:24:88:31:bb:0f:ec:a6: 03:ce:3c:42:e9:6b:b7:76:15:4a:7a:2d:ba:ae:14:95:d0:dd: bd:c7:7e:32:43:ad:2c:e9:75:7c:6f:3f:e8:47:81:0e:cf:f2: 28:b6:df:35:d0:8f:5b:5d:07:36:4d:30:ec:e9:5a:ae:1a:a2: fa:0b:d7:70:06:c3:ab:09:3e:8c:98:d1:35:d3:e0:10:48:42: 83:67:c8:26:2d:6f:97:0e:11:0c:7f:d9:cb:4c:4b:7d:ea:fb: 5b:cb:9b:cc:9d:37:d4:a9:5f:ea:7c:ed:bc:05:a4:95:e0:81: a9:b5:76:9e:d5:84:5f:23:08:0b:2b:ed:ab:3d:2f:34:d8:2a: e4:30:87:bb:f8:9b:f8:cd:4a:39:6c:02:31:55:47:01:33:42: c0:9a:a8:09:80:b2:03:77:df:59:8e:4c:c8:96:2f:6b:32:90: 12:3b:72:b6:9a:75:2a:e5:92:0c:6c:b0:d5:08:9a:67:b3:7e: 91:c5:0d:61:81:1e:52:1b:a4:cb:dc:c2:6b:6b:1a:82:d6:d5: 75:98:7e:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqBvtHSkuSnL6AANjzlpmfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm ZjBlNWIwHhcNMjUxMTE0MDk0MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTQ0YmJjOWE0NjIxNDUyYTcyYWEyZmYwMzNmYTg4OGE2ODFjMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24x8hxwyRJFqtkJ0x9jqvPk6lvKU VcLrhEYTFUvV9VknDKYow+bNoxWvMxfEMvABT1qpbYq+NVGyPg6KCPAEFzkRL+as KDB56Hk6oFe/nqoUSf/VVMJqVpto5fkxDwa6Oy+hlf3yH5Usy/9qMe8fGOUJfNL9 /PVSXhK7UcRggi5cR4d2f5LSu6zZhQ8mFVw3M7P7keeBRkbIT7Gvh1qivOtI2qwn HlKVNDwrx7LAkXYrrqkvh0bCFu+Hf1nMrNlc+vJclCc836m4Eth4OefQuMHR7pkb nLa8zwdSTa8BMHI7dMMElsENJFzkOGTdmFSPsCkKJCgyV2UKz5KHUhbI8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlEu8mkYhRSpyqi/wM/qIimgcKPMB8GA1UdIwQY MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt NmFhYjJiMWI5MjJjLzEvMS1VUzd5YVJpRkZLbktxTF9Bei1vaUthQndvOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWUvYWZlMzczLWU1YmMtNDAxMC04YWQ2LTZhYWIyYjFiOTIy Yy8xL2I2aHRIQloycFpwR3JQTnpOaGt1bUZ6X0Rscy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAC0OrgME AC1QbQMEAC1QbwMEALz0egMEAMEJMTANBgkqhkiG9w0BAQsFAAOCAQEAjy4GwhgG z0uZcR4C4/KNVONKtfYWuTS38blbsSa0uR/RDq5bHLHf6U26F4PdsU8kiDG7D+ym A848Qulrt3YVSnotuq4UldDdvcd+MkOtLOl1fG8/6EeBDs/yKLbfNdCPW10HNk0w 7Olarhqi+gvXcAbDqwk+jJjRNdPgEEhCg2fIJi1vlw4RDH/Zy0xLfer7W8ubzJ03 1Klf6nztvAWkleCBqbV2ntWEXyMICyvtqz0vNNgq5DCHu/ib+M1KOWwCMVVHATNC wJqoCYCyA3ffWY5MyJYvazKQEjtytpp1KuWSDGyw1QiaZ7N+kcUNYYEeUhuky9zC a2sagtbVdZh+DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:25 2025 by rpki-client