This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-bUFwr2qNVyEjKYyfkRq1Jz6ey8.roa File: 1-bUFwr2qNVyEjKYyfkRq1Jz6ey8.roa (raw, json) Hash identifier: zCGYrhxu/vEtDd6HrxTHmkL7tH7F4fu2Ja5OEpsDXEQ= Subject key identifier: F9:B5:05:C2:BD:AA:35:5C:84:8C:A6:32:7E:44:6A:D4:9C:FA:7B:2F Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019AF28D2D6BB4BC850DFC0E69A56B758D3E Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-bUFwr2qNVyEjKYyfkRq1Jz6ey8.roa Signing time: Sat 06 Dec 2025 07:25:29 +0000 ROA not before: Sat 06 Dec 2025 07:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203144 IP address blocks: 45.94.28.0/24 maxlen: 24 45.132.192.0/24 maxlen: 24 45.148.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:8d:2d:6b:b4:bc:85:0d:fc:0e:69:a5:6b:75:8d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Dec 6 07:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f9b505c2bdaa355c848ca6327e446ad49cfa7b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:7c:9a:96:76:bd:ee:7e:a5:73:a5:24:ea: f3:1b:d3:e5:1f:af:50:e4:9a:6f:70:94:d2:fe:26: 53:ac:56:cc:70:e2:b3:1e:ba:42:a4:ab:0e:46:48: 74:ef:98:9c:24:b5:a5:92:18:50:11:77:1b:cd:7f: 4e:21:d2:bc:e3:84:47:a5:37:91:74:47:0c:36:08: 5e:02:d8:25:d3:67:c5:a6:8f:b7:ad:0d:0c:37:c1: de:c4:42:ca:65:c5:7f:8b:14:d9:66:f9:ee:0e:3f: 18:4f:9a:95:9b:de:bb:77:2b:6e:c0:c7:d7:a6:c6: d9:92:f4:66:8d:eb:f5:65:6b:3b:2a:11:56:02:4b: cc:86:b1:9e:a2:8e:c6:93:9d:16:9a:ae:9d:ce:62: bb:7a:7d:9c:6a:72:5a:9f:e2:79:dd:1e:50:d2:6d: cb:96:cb:31:48:70:5e:c0:c1:61:6d:8e:48:d3:e1: 54:08:b5:c5:43:a2:48:e5:3c:5f:cf:5f:04:96:cd: a4:80:09:ae:e6:4f:e6:7c:ac:f5:d5:30:db:ba:a6: 75:d4:5a:08:77:3c:df:68:1e:8a:9e:22:ba:9b:f5: 09:be:29:e1:09:1b:65:6d:3c:f0:d2:f1:46:e4:7a: a8:75:e8:84:13:b8:df:be:74:3d:a9:a1:6d:79:58: 78:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B5:05:C2:BD:AA:35:5C:84:8C:A6:32:7E:44:6A:D4:9C:FA:7B:2F X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-bUFwr2qNVyEjKYyfkRq1Jz6ey8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.28.0/24 45.132.192.0/24 45.148.26.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:3d:bd:3f:85:c3:46:65:90:8f:87:fa:f1:a1:f3:3d:16:f4: 02:5f:48:71:f1:c9:b5:b4:45:b7:f7:90:b2:82:78:74:de:cb: d1:04:d5:df:ad:fe:55:f3:50:a7:30:79:53:d6:6f:ad:88:19: bf:35:a8:02:52:8d:78:f2:18:85:86:e5:28:0f:36:67:a1:5a: 1e:b9:6b:ef:8c:c9:e4:b9:82:15:fe:82:af:c7:54:0d:8f:8a: 86:4c:ee:a0:25:9d:73:93:6c:a2:06:15:34:ce:4d:63:7a:78: 90:60:b8:34:bb:31:c3:94:53:f2:c7:25:cf:66:4e:f9:45:83: 30:e9:7e:54:86:e8:de:a2:aa:a1:f0:90:cd:a3:2b:6c:b1:11: 50:28:d5:b5:87:02:61:78:d3:4b:10:0e:4c:5c:3f:66:04:be: 30:79:0d:43:e8:0b:6e:f8:22:c1:0c:cc:d4:a5:08:48:95:56: 05:8a:d4:f2:5a:fe:19:7c:4b:a4:6f:bc:4c:c4:bd:26:10:07: 9d:ea:93:fc:8b:ac:3d:84:d5:07:fc:1b:f6:01:80:1a:25:c6: 56:fe:52:08:06:cc:ca:e4:df:cd:96:40:c5:b1:f2:31:31:da: c6:26:be:80:31:7a:b9:1a:73:87:9d:c9:bd:2e:13:5b:f9:c3: a4:c2:a4:97 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZryjS1rtLyFDfwOaaVrdY0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjUxMjA2MDcyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWI1MDVjMmJkYWEzNTVjODQ4Y2E2MzI3ZTQ0NmFkNDljZmE3YjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2V8mpZ2ve5+pXOlJOrzG9PlH69Q 5JpvcJTS/iZTrFbMcOKzHrpCpKsORkh075icJLWlkhhQEXcbzX9OIdK844RHpTeR dEcMNgheAtgl02fFpo+3rQ0MN8HexELKZcV/ixTZZvnuDj8YT5qVm967dytuwMfX psbZkvRmjev1ZWs7KhFWAkvMhrGeoo7Gk50Wmq6dzmK7en2canJan+J53R5Q0m3L lssxSHBewMFhbY5I0+FUCLXFQ6JI5Txfz18Els2kgAmu5k/mfKz11TDbuqZ11FoI dzzfaB6KniK6m/UJvinhCRtlbTzw0vFG5HqodeiEE7jfvnQ9qaFteVh4aQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPm1BcK9qjVchIymMn5EatSc+nsvMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvMS1iVUZ3cjJxTlZ5RWpLWXlma1JxMUp6NmV5OC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYz ZS8xL3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC1eHAME AC2EwAMEAC2UGjANBgkqhkiG9w0BAQsFAAOCAQEAbD29P4XDRmWQj4f68aHzPRb0 Al9IcfHJtbRFt/eQsoJ4dN7L0QTV363+VfNQpzB5U9ZvrYgZvzWoAlKNePIYhYbl KA82Z6FaHrlr74zJ5LmCFf6Cr8dUDY+KhkzuoCWdc5NsogYVNM5NY3p4kGC4NLsx w5RT8sclz2ZO+UWDMOl+VIbo3qKqofCQzaMrbLERUCjVtYcCYXjTSxAOTFw/ZgS+ MHkNQ+gLbvgiwQzM1KUISJVWBYrU8lr+GXxLpG+8TMS9JhAHneqT/IusPYTVB/wb 9gGAGiXGVv5SCAbMyuTfzZZAxbHyMTHaxia+gDF6uRpzh53JvS4TW/nDpMKklw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:08 2025 by rpki-client