This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/4fOUGNAFWdnm9vrv4ZQhOu3Vid8.roa File: 4fOUGNAFWdnm9vrv4ZQhOu3Vid8.roa (raw, json) Hash identifier: 18whJjpGFnu6ScIrQqgXZw68MDv5UwqOnT+my9pfd4w= Subject key identifier: E1:F3:94:18:D0:05:59:D9:E6:F6:FA:EF:E1:94:21:3A:ED:D5:89:DF Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019A81AC82EFCD7B703FE689CDEB8C5ADE51 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/4fOUGNAFWdnm9vrv4ZQhOu3Vid8.roa Signing time: Fri 14 Nov 2025 09:22:37 +0000 ROA not before: Fri 14 Nov 2025 09:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199524 IP address blocks: 45.146.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:ac:82:ef:cd:7b:70:3f:e6:89:cd:eb:8c:5a:de:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Nov 14 09:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e1f39418d00559d9e6f6faefe194213aedd589df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:0a:12:7b:aa:30:5f:4d:be:5b:45:94:8f: 3a:b6:3e:a2:75:88:4d:92:0d:f6:70:f0:27:08:1b: 07:bc:fd:c5:2b:56:f5:18:43:a1:21:25:3c:5e:bb: 41:51:2f:61:c9:ce:3b:79:ae:04:ae:40:28:9e:3e: ae:52:8c:08:84:16:1e:7c:da:09:47:95:d5:56:96: f7:49:9f:50:19:01:fe:c8:b9:8f:be:65:b8:ae:8a: e3:4b:35:67:03:e6:c4:da:66:8c:47:3a:d3:11:3d: 3a:84:16:96:9e:4d:9c:8e:c8:7f:a0:6e:7d:4b:88: 9f:39:f3:77:12:ba:2f:ea:98:96:ac:a1:b4:6f:f2: 61:6f:39:b1:13:a2:20:89:d1:b6:95:a8:0d:7f:b5: 69:5f:3f:2d:74:b8:c4:35:8a:10:be:f7:47:07:f3: b8:8d:6a:5d:85:72:c4:62:1a:08:f7:5b:94:03:84: 15:09:1d:41:4f:f9:e2:95:eb:f7:75:61:20:d0:8e: 55:9b:f9:da:c7:b3:87:15:b9:1b:a5:d4:63:a3:11: 18:f2:1b:93:61:dc:ab:64:26:fe:80:bd:75:d6:ce: 1e:dd:2c:57:21:20:fe:77:5f:72:03:d9:34:a5:a4: 65:1d:6b:0d:a5:57:e0:d5:02:44:27:3f:22:9b:fb: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F3:94:18:D0:05:59:D9:E6:F6:FA:EF:E1:94:21:3A:ED:D5:89:DF X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/4fOUGNAFWdnm9vrv4ZQhOu3Vid8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.203.0/24 Signature Algorithm: sha256WithRSAEncryption ad:5e:1b:86:c6:c2:96:70:22:32:ef:bc:b2:1d:38:96:23:0a: 1f:28:7c:51:29:de:8e:b2:83:eb:4f:20:8b:cd:57:94:10:03: 6b:c6:58:36:59:a8:c3:a6:f7:6a:15:bd:b6:90:2e:9e:4a:60: 66:34:9b:19:4d:8c:c1:3d:49:86:5b:ae:ee:c9:d2:09:77:30: 73:6e:d8:d7:b5:a1:38:f0:9a:61:7e:b7:0e:72:b5:6f:b3:ff: 9c:f7:f8:88:45:84:3c:92:fa:83:81:74:02:ff:41:ee:fb:34: 3b:be:19:4b:3b:6e:a6:2a:01:64:4f:75:f8:88:92:d8:ea:5b: 18:a5:ea:d2:be:b9:b5:55:6f:82:02:c0:17:0d:9e:50:93:26: 10:38:b3:b7:69:34:6e:29:95:df:2f:ea:cb:c7:7e:b9:e2:79: 9a:f5:e1:cb:28:56:86:d3:9f:65:12:d4:66:f8:f5:17:3c:6c: 6d:e6:c9:b6:f9:b3:e2:68:e6:78:35:bf:5f:db:77:3d:19:00: 51:96:eb:ad:54:f3:5c:33:4c:8c:dc:06:6b:f3:f4:23:65:73: 04:68:dc:01:9b:1f:a7:f2:2d:3a:53:3e:0f:43:cd:a5:9c:bf: 2f:41:d2:49:d5:8e:43:82:c9:f7:60:67:91:00:2b:c9:c2:a7: ae:31:38:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqBrILvzXtwP+aJzeuMWt5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUxMTE0MDkyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWYzOTQxOGQwMDU1OWQ5ZTZmNmZhZWZlMTk0MjEzYWVkZDU4OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDcKEnuqMF9NvltFlI86tj6idYhN kg32cPAnCBsHvP3FK1b1GEOhISU8XrtBUS9hyc47ea4ErkAonj6uUowIhBYefNoJ R5XVVpb3SZ9QGQH+yLmPvmW4rorjSzVnA+bE2maMRzrTET06hBaWnk2cjsh/oG59 S4ifOfN3Erov6piWrKG0b/JhbzmxE6IgidG2lagNf7VpXz8tdLjENYoQvvdHB/O4 jWpdhXLEYhoI91uUA4QVCR1BT/nilev3dWEg0I5Vm/nax7OHFbkbpdRjoxEY8huT YdyrZCb+gL111s4e3SxXISD+d19yA9k0paRlHWsNpVfg1QJEJz8im/vmUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHzlBjQBVnZ5vb67+GUITrt1YnfMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvNGZPVUdOQUZXZG5tOXZydjRaUWhPdTNWaWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZLLMA0G CSqGSIb3DQEBCwUAA4IBAQCtXhuGxsKWcCIy77yyHTiWIwofKHxRKd6OsoPrTyCL zVeUEANrxlg2WajDpvdqFb22kC6eSmBmNJsZTYzBPUmGW67uydIJdzBzbtjXtaE4 8JphfrcOcrVvs/+c9/iIRYQ8kvqDgXQC/0Hu+zQ7vhlLO26mKgFkT3X4iJLY6lsY perSvrm1VW+CAsAXDZ5QkyYQOLO3aTRuKZXfL+rLx3654nma9eHLKFaG059lEtRm +PUXPGxt5sm2+bPiaOZ4Nb9f23c9GQBRluutVPNcM0yM3AZr8/QjZXMEaNwBmx+n 8i06Uz4PQ82lnL8vQdJJ1Y5Dgsn3YGeRACvJwqeuMTgM -----END CERTIFICATE-----Generated at Sat Dec 6 23:26:15 2025 by rpki-client