This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5G02Pj13GdkhkFEgOjWAi8KxD4g.roa File: 5G02Pj13GdkhkFEgOjWAi8KxD4g.roa (raw, json) Hash identifier: LgHdnzk2suC8JNFkg6UxrmBxd3AawqV7SAgh31PrpEY= Subject key identifier: E4:6D:36:3E:3D:77:19:D9:21:90:51:20:3A:35:80:8B:C2:B1:0F:88 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B03FB75E4849E1000CC494D29F9930D71 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5G02Pj13GdkhkFEgOjWAi8KxD4g.roa Signing time: Tue 09 Dec 2025 16:39:29 +0000 ROA not before: Tue 09 Dec 2025 16:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.134.222.0/24 maxlen: 24 45.137.196.0/24 maxlen: 24 45.137.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:fb:75:e4:84:9e:10:00:cc:49:4d:29:f9:93:0d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Dec 9 16:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e46d363e3d7719d9219051203a35808bc2b10f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d3:2f:ba:ca:6c:82:1c:89:06:52:96:5e:d6: 7f:56:f6:3c:df:de:24:76:a7:cf:fc:a8:c9:f5:e9: 27:c2:82:09:84:b6:5c:3a:85:8a:f5:b6:82:c2:0c: dc:bf:b7:c6:32:f2:1a:d9:68:3d:ad:1c:28:44:ec: f2:a2:22:39:a2:4d:39:36:ee:e2:d0:bf:12:ef:5d: 62:3e:94:e5:53:6f:96:3a:77:0a:cb:b0:59:36:31: 4b:18:71:cc:c3:47:cc:8c:ab:50:db:e0:6b:bb:76: 8d:be:02:c0:ac:7c:c0:70:16:a6:c8:f2:9d:65:d4: 43:0a:1b:4d:a3:01:08:45:f9:6d:fe:c5:96:13:53: 5a:9c:0d:45:3c:30:46:9c:b6:3d:ac:de:04:d6:9d: 17:c0:6e:da:22:52:78:0e:7f:a4:e3:58:af:60:00: 1d:aa:05:f3:c2:58:e2:de:d8:8b:1b:80:59:9b:b5: 5f:3d:5f:0d:59:6c:90:c3:7b:e0:9b:ec:b9:4d:f5: d0:58:b8:f9:94:67:89:4b:a0:93:f2:60:e6:fa:2d: 66:3f:eb:9b:1b:3e:07:d3:f6:b6:01:12:51:25:11: 07:09:00:45:34:a0:e7:20:47:99:af:04:0c:42:a1: 11:ae:cb:56:5e:54:24:b9:7f:d3:b6:28:2f:d1:8a: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6D:36:3E:3D:77:19:D9:21:90:51:20:3A:35:80:8B:C2:B1:0F:88 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5G02Pj13GdkhkFEgOjWAi8KxD4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.222.0/24 45.137.196.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:10:30:8c:de:cb:8d:15:45:61:fc:3e:04:b7:43:1d:83:46: 98:13:b8:7c:40:e7:a1:c1:29:4f:07:66:9f:5d:ca:1c:fc:bb: 3b:f2:41:07:d2:0e:2f:ca:d1:dc:09:be:e2:9e:3b:d4:cd:c3: 0b:b2:f6:03:1f:2a:ea:70:19:38:3b:06:e9:c6:c3:7a:fa:ea: 41:40:05:15:21:cd:e5:ae:b4:b6:69:e2:be:0a:cb:36:5f:2f: 86:0b:7b:9b:c7:62:2c:a4:9a:47:e4:30:6f:c7:03:59:bd:87: 9a:8a:9c:a9:a8:c1:69:6a:fd:b0:fe:26:c4:34:b8:00:ea:e2: 68:1f:26:36:4e:47:05:bc:7a:8a:f0:25:3a:0c:01:e7:a2:ad: 22:27:26:12:d4:0b:96:9a:36:29:79:41:1e:c0:98:82:d6:d0: 62:62:74:50:29:b1:c2:8c:eb:4f:37:be:ee:c5:74:d5:ca:a0: ee:8a:0b:41:2a:b5:7f:a3:44:86:83:d5:20:9c:6a:a3:5a:38: f7:3a:9d:09:7c:9c:1e:cf:bb:4d:31:c5:f5:33:a8:43:b2:cd: 5e:a5:8e:8f:4e:1a:a0:92:2a:7a:6d:09:a0:dc:60:df:c8:1a: 9f:8f:44:16:91:89:66:42:f2:0f:f6:70:67:67:5f:b5:c2:25: bf:dd:92:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsD+3XkhJ4QAMxJTSn5kw1xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjUxMjA5MTYzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDZkMzYzZTNkNzcxOWQ5MjE5MDUxMjAzYTM1ODA4YmMyYjEwZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dMvuspsghyJBlKWXtZ/VvY8394k dqfP/KjJ9eknwoIJhLZcOoWK9baCwgzcv7fGMvIa2Wg9rRwoROzyoiI5ok05Nu7i 0L8S711iPpTlU2+WOncKy7BZNjFLGHHMw0fMjKtQ2+Bru3aNvgLArHzAcBamyPKd ZdRDChtNowEIRflt/sWWE1NanA1FPDBGnLY9rN4E1p0XwG7aIlJ4Dn+k41ivYAAd qgXzwlji3tiLG4BZm7VfPV8NWWyQw3vgm+y5TfXQWLj5lGeJS6CT8mDm+i1mP+ub Gz4H0/a2ARJRJREHCQBFNKDnIEeZrwQMQqERrstWXlQkuX/Ttigv0Yo5jQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFORtNj49dxnZIZBRIDo1gIvCsQ+IMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvNUcwMlBqMTNHZGtoa0ZFZ09qV0FpOEt4RDRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYbeAwQB LYnEMA0GCSqGSIb3DQEBCwUAA4IBAQCPEDCM3suNFUVh/D4Et0Mdg0aYE7h8QOeh wSlPB2afXcoc/Ls78kEH0g4vytHcCb7injvUzcMLsvYDHyrqcBk4OwbpxsN6+upB QAUVIc3lrrS2aeK+Css2Xy+GC3ubx2IspJpH5DBvxwNZvYeaipypqMFpav2w/ibE NLgA6uJoHyY2TkcFvHqK8CU6DAHnoq0iJyYS1AuWmjYpeUEewJiC1tBiYnRQKbHC jOtPN77uxXTVyqDuigtBKrV/o0SGg9UgnGqjWjj3Op0JfJwez7tNMcX1M6hDss1e pY6PThqgkip6bQmg3GDfyBqfj0QWkYlmQvIP9nBnZ1+1wiW/3ZJp -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:20 2025 by rpki-client