This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/lur7LLaprCF9vuUpmH2EDiL7-NI.roa File: lur7LLaprCF9vuUpmH2EDiL7-NI.roa (raw, json) Hash identifier: tuwH5AM3gmMcWOq6gRBrX3IhB6gIQd7IZ9AP/juvN3g= Subject key identifier: 96:EA:FB:2C:B6:A9:AC:21:7D:BE:E5:29:98:7D:84:0E:22:FB:F8:D2 Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a Certificate serial: 019AA5C84019016D128976AC0F4229551870 Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/lur7LLaprCF9vuUpmH2EDiL7-NI.roa Signing time: Fri 21 Nov 2025 09:39:15 +0000 ROA not before: Fri 21 Nov 2025 09:39:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207345 IP address blocks: 45.151.90.0/24 maxlen: 24 2a06:2c80:3000::/36 maxlen: 48 2a06:2c80:5000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:c8:40:19:01:6d:12:89:76:ac:0f:42:29:55:18:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a Validity Not Before: Nov 21 09:39:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=96eafb2cb6a9ac217dbee529987d840e22fbf8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:93:6f:0c:85:4b:d5:24:c1:19:ce:ba:30: dc:20:a8:b3:c8:9a:a8:c3:c3:2a:a1:a8:bb:a8:35: 61:98:b3:2c:8d:1c:53:52:12:bc:26:a4:35:3b:a0: db:2d:df:4f:41:8b:da:55:1c:7a:04:b4:71:7a:ee: c7:97:e7:3a:45:c4:ab:09:84:7f:b3:af:b4:24:7e: e4:53:7f:6c:58:af:8e:59:e4:d8:1e:9a:f0:25:c4: d3:d2:54:03:0e:df:9a:62:bf:3e:29:f1:73:a9:70: f7:6d:80:a9:c9:eb:5d:2b:85:65:94:56:c4:66:c3: c4:f6:50:9a:17:0e:87:f3:b6:55:cf:9c:4b:2f:51: ed:96:58:f9:a8:ad:33:2e:cb:3a:5e:c2:9f:ef:bd: 5e:d1:ae:34:0a:68:4f:ae:82:89:60:78:0e:29:01: bc:af:0f:f7:71:34:c9:d8:b0:37:1c:75:9a:70:f5: 31:71:be:84:86:32:24:5a:12:4d:3b:8e:46:72:8c: 14:67:91:30:df:1d:e9:2f:86:d4:f3:e6:44:a7:8d: f4:e0:7b:85:b7:d1:5b:04:ba:50:a0:f3:1d:5c:b3: ed:1b:34:60:34:c6:73:d3:c0:45:ca:5a:ab:dc:8d: 4c:14:e1:16:a5:39:29:1b:df:6f:81:2f:94:b7:8b: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EA:FB:2C:B6:A9:AC:21:7D:BE:E5:29:98:7D:84:0E:22:FB:F8:D2 X509v3 Authority Key Identifier: keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/lur7LLaprCF9vuUpmH2EDiL7-NI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.90.0/24 IPv6: 2a06:2c80:3000::/36 2a06:2c80:5000::/36 Signature Algorithm: sha256WithRSAEncryption 4a:52:a3:f3:e0:97:7d:7e:44:f6:43:48:52:e2:98:4f:5d:62: d0:2f:fe:32:ef:99:f4:ec:9d:e4:d3:a7:1a:ec:5a:eb:31:32: 96:25:5b:55:15:ba:df:a7:5b:96:67:04:96:e4:05:a3:e6:07: f6:33:79:bb:81:b9:20:7d:60:ca:75:50:cc:b4:61:0f:1a:63: 2d:ab:a1:5b:87:85:0c:9d:2f:c5:7f:74:0b:84:db:ed:43:ae: e0:32:f0:bf:e2:e8:90:8a:be:43:ec:89:b0:e7:bd:a4:11:26: 77:45:60:5f:6f:9a:c8:88:af:03:e9:9b:a5:ad:8f:59:0c:78: fc:b0:0b:18:26:9d:eb:8c:bf:8c:f1:74:41:5a:1e:bd:a6:d3: 20:f0:4f:07:6c:5b:52:d1:52:d0:c7:d0:32:3f:44:d0:6c:ba: ec:64:5d:76:65:26:0d:dd:fd:52:c2:3c:24:23:f8:c7:e8:52: 9a:e4:c4:36:0b:cb:1d:aa:d9:b9:da:a7:ae:b3:bb:99:ab:5b: 3b:7e:6a:70:23:63:76:33:fd:34:9c:97:3e:1e:be:36:2a:42: 8c:e0:48:3b:36:25:35:23:14:e3:04:ab:4f:91:6c:9e:f1:6f: 70:a3:3a:c1:20:a1:bb:a1:17:91:ae:72:f0:0c:f5:0d:81:1a: 43:fb:2b:ab -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqlyEAZAW0SiXasD0IpVRhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMzE1MGY4YzY3MDYzMTIxMDI3MzI4OTU0OTY4ZDA4ZDRj ZjMyOWEwHhcNMjUxMTIxMDkzOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmVhZmIyY2I2YTlhYzIxN2RiZWU1Mjk5ODdkODQwZTIyZmJmOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY+TbwyFS9UkwRnOujDcIKizyJqo w8Mqoai7qDVhmLMsjRxTUhK8JqQ1O6DbLd9PQYvaVRx6BLRxeu7Hl+c6RcSrCYR/ s6+0JH7kU39sWK+OWeTYHprwJcTT0lQDDt+aYr8+KfFzqXD3bYCpyetdK4VllFbE ZsPE9lCaFw6H87ZVz5xLL1Htllj5qK0zLss6XsKf771e0a40CmhProKJYHgOKQG8 rw/3cTTJ2LA3HHWacPUxcb6EhjIkWhJNO45GcowUZ5Ew3x3pL4bU8+ZEp4304HuF t9FbBLpQoPMdXLPtGzRgNMZz08BFylqr3I1MFOEWpTkpG99vgS+Ut4vC+QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJbq+yy2qawhfb7lKZh9hA4i+/jSMB8GA1UdIwQY MBaAFH4xUPjGcGMSECcyiVSWjQjUzzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAt OTM1ZTQxOGJkYmU3LzEvbHVyN0xMYXByQ0Y5dnVVcG1IMkVEaUw3LU5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAtOTM1ZTQxOGJkYmU3 LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQALZdaMBYE AgACMBADBgQqBiyAMAMGBCoGLIBQMA0GCSqGSIb3DQEBCwUAA4IBAQBKUqPz4Jd9 fkT2Q0hS4phPXWLQL/4y75n07J3k06ca7FrrMTKWJVtVFbrfp1uWZwSW5AWj5gf2 M3m7gbkgfWDKdVDMtGEPGmMtq6Fbh4UMnS/Ff3QLhNvtQ67gMvC/4uiQir5D7Imw 572kESZ3RWBfb5rIiK8D6ZulrY9ZDHj8sAsYJp3rjL+M8XRBWh69ptMg8E8HbFtS 0VLQx9AyP0TQbLrsZF12ZSYN3f1SwjwkI/jH6FKa5MQ2C8sdqtm52qeus7uZq1s7 fmpwI2N2M/00nJc+Hr42KkKM4Eg7NiU1IxTjBKtPkWye8W9wozrBIKG7oReRrnLw DPUNgRpD+yur -----END CERTIFICATE-----Generated at Sun Dec 7 00:16:03 2025 by rpki-client