This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/5ze1ULUo6MKTm6UTJHKsimZIisc.roa File: 5ze1ULUo6MKTm6UTJHKsimZIisc.roa (raw, json) Hash identifier: m4eK9636nFzrqSVjZiSeU0LUQRr4vGSOV9cX5le6BzU= Subject key identifier: E7:37:B5:50:B5:28:E8:C2:93:9B:A5:13:24:72:AC:8A:66:48:8A:C7 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019A905F53A2C4317EB72CE1BF1A64329CFB Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/5ze1ULUo6MKTm6UTJHKsimZIisc.roa Signing time: Mon 17 Nov 2025 05:52:37 +0000 ROA not before: Mon 17 Nov 2025 05:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.146.200.0/23 maxlen: 23 45.146.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:5f:53:a2:c4:31:7e:b7:2c:e1:bf:1a:64:32:9c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Nov 17 05:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e737b550b528e8c2939ba5132472ac8a66488ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:92:b8:61:2a:94:b1:ef:b2:df:47:c4:9d: 85:5b:13:70:0b:cf:b7:cf:59:42:e5:19:48:d6:1c: 64:f1:bb:1a:ac:62:db:7a:11:b7:f8:98:86:14:fa: fc:46:d8:eb:1a:38:95:d7:8e:67:0e:de:2a:71:c3: 6e:ba:2b:68:6d:c1:5c:60:44:b9:86:d6:df:a0:eb: a6:4e:48:20:41:46:2e:94:8c:4e:c4:7a:11:23:0f: 72:25:5d:29:78:ec:84:89:47:a3:a3:c3:32:a3:ff: 00:cb:63:eb:4c:53:c1:ac:1e:bc:3e:9e:dc:7b:4d: d1:4f:c5:af:0d:48:aa:02:0c:71:10:0b:f7:f1:f3: 4b:8c:be:16:9f:11:ca:dc:7a:f2:4d:e8:13:e7:d9: aa:0a:8e:38:cd:f6:3d:06:37:4d:52:e4:b6:3b:15: 09:88:1a:22:fa:fc:72:6c:00:63:e8:2c:17:b8:fa: 91:da:65:31:c1:6b:7a:df:51:eb:d0:1f:dd:32:92: 24:f9:52:51:ba:1b:79:0c:17:ef:03:36:89:e5:dd: 0c:cb:be:41:82:a0:4e:b3:2c:0c:d6:56:fe:2d:75: c2:3e:78:ed:87:c1:50:ae:c5:e3:e8:87:33:bd:65: 51:db:03:69:68:14:ad:5d:9f:a2:4a:4c:f0:17:25: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:37:B5:50:B5:28:E8:C2:93:9B:A5:13:24:72:AC:8A:66:48:8A:C7 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/5ze1ULUo6MKTm6UTJHKsimZIisc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.200.0/22 Signature Algorithm: sha256WithRSAEncryption 71:4f:ef:74:7d:7d:8b:1a:d8:59:89:63:19:36:ba:99:89:5b: 35:e0:6b:46:26:8f:9b:b4:34:d5:be:9d:be:c1:de:50:81:a2: 8a:8b:27:5c:d9:ad:51:f0:41:11:fc:ce:71:35:c5:fb:16:99: 73:7c:fd:b2:8a:6d:07:14:70:ee:25:25:dc:1b:f2:1f:2d:33: 1d:b0:db:a3:a4:85:af:de:61:d6:dd:4d:10:d6:db:60:ab:cd: 54:89:f7:fe:b4:d5:99:a3:8e:5e:62:d5:ab:0a:8f:c9:49:08: 19:fc:49:72:80:6c:dc:90:c5:e8:90:85:a0:7e:8b:14:2d:47: 96:05:90:31:b6:ae:e7:31:30:ac:f4:93:cd:99:6c:d4:ab:f6: 65:41:98:17:d9:52:e2:a0:22:3c:3b:76:d9:80:50:24:40:76: bc:20:f2:a2:c2:6c:80:b7:14:c9:94:e5:6a:3f:b4:84:20:c3: cf:97:ad:56:70:3b:c9:b4:22:91:5b:e0:ee:85:e5:e7:f3:f3: dc:3b:47:2a:5c:8f:54:50:d7:11:73:16:1c:36:38:52:73:d8: ee:02:03:89:6e:c5:78:b4:44:6b:80:44:64:e8:0f:19:cf:7c: 34:86:bf:e8:8e:fc:be:2b:8b:93:0d:62:44:8b:41:a2:a5:87: d0:61:10:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqQX1OixDF+tyzhvxpkMpz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUxMTE3MDU1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzM3YjU1MGI1MjhlOGMyOTM5YmE1MTMyNDcyYWM4YTY2NDg4YWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX2SuGEqlLHvst9HxJ2FWxNwC8+3 z1lC5RlI1hxk8bsarGLbehG3+JiGFPr8RtjrGjiV145nDt4qccNuuitobcFcYES5 htbfoOumTkggQUYulIxOxHoRIw9yJV0peOyEiUejo8Myo/8Ay2PrTFPBrB68Pp7c e03RT8WvDUiqAgxxEAv38fNLjL4WnxHK3HryTegT59mqCo44zfY9BjdNUuS2OxUJ iBoi+vxybABj6CwXuPqR2mUxwWt631Hr0B/dMpIk+VJRuht5DBfvAzaJ5d0My75B gqBOsywM1lb+LXXCPnjth8FQrsXj6IczvWVR2wNpaBStXZ+iSkzwFyX5qwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOc3tVC1KOjCk5ulEyRyrIpmSIrHMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvNXplMVVMVW82TUtUbTZVVEpIS3NpbVpJaXNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZLIMA0G CSqGSIb3DQEBCwUAA4IBAQBxT+90fX2LGthZiWMZNrqZiVs14GtGJo+btDTVvp2+ wd5QgaKKiydc2a1R8EER/M5xNcX7FplzfP2yim0HFHDuJSXcG/IfLTMdsNujpIWv 3mHW3U0Q1ttgq81Uiff+tNWZo45eYtWrCo/JSQgZ/ElygGzckMXokIWgfosULUeW BZAxtq7nMTCs9JPNmWzUq/ZlQZgX2VLioCI8O3bZgFAkQHa8IPKiwmyAtxTJlOVq P7SEIMPPl61WcDvJtCKRW+DuheXn8/PcO0cqXI9UUNcRcxYcNjhSc9juAgOJbsV4 tERrgERk6A8Zz3w0hr/ojvy+K4uTDWJEi0GipYfQYRBd -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:28 2025 by rpki-client