This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eh1lMd-pxsCY238XVmemDHajuoY.roa File: eh1lMd-pxsCY238XVmemDHajuoY.roa (raw, json) Hash identifier: iqRbqVrBPabqcE8hm/O38yxpFyJc+vKU4nyi13CcpWw= Subject key identifier: 7A:1D:65:31:DF:A9:C6:C0:98:DB:7F:17:56:67:A6:0C:76:A3:BA:86 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019A651D1AB885EF1666715CA81BB2C5C12F Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eh1lMd-pxsCY238XVmemDHajuoY.roa Signing time: Sat 08 Nov 2025 20:16:37 +0000 ROA not before: Sat 08 Nov 2025 20:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197450 IP address blocks: 5.180.104.0/24 maxlen: 24 45.141.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:65:1d:1a:b8:85:ef:16:66:71:5c:a8:1b:b2:c5:c1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Nov 8 20:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a1d6531dfa9c6c098db7f175667a60c76a3ba86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:88:1a:c3:7a:10:b0:6d:a9:1c:76:e6:f7: 45:ab:d3:3c:fe:16:e1:7f:fb:10:ce:43:dd:45:52: f5:98:ed:d5:c7:a3:3c:07:8e:22:9b:64:f0:cd:fe: b8:9d:5b:ed:73:cf:f5:96:ea:2b:d7:97:cc:f2:20: 39:eb:4e:ba:d7:ee:7a:af:4b:bf:2c:5d:a1:a3:4d: 70:2a:64:df:de:2b:17:ee:26:da:56:57:ec:c8:af: c1:57:77:47:f0:6b:46:cc:88:1c:a4:fe:91:bd:78: 37:10:7a:a4:d5:4f:63:4f:fe:49:11:9f:de:80:cb: 37:2c:32:45:0b:7e:38:de:ee:cc:d8:e0:9a:f3:47: 42:07:ae:41:ab:69:1f:9e:b7:6f:16:c9:60:fc:a1: e5:fb:a7:d3:53:b2:5f:50:5e:67:ec:e4:d9:5d:49: df:b8:53:78:fa:2c:f1:28:fb:7d:04:b1:6a:6d:e4: 13:f9:42:b3:e6:5e:bc:8c:fd:88:23:9e:6c:b5:6f: 92:32:a1:10:5d:a6:35:ae:2d:bb:dd:b1:10:db:b9: 07:f9:b8:60:bc:e2:eb:22:f7:5a:a0:c3:c7:98:e1: c5:8d:dc:ad:c9:50:90:ad:b6:50:9d:e2:3c:17:d5: 30:1a:dc:d5:cd:dc:bf:5a:79:62:0b:22:ea:73:1f: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1D:65:31:DF:A9:C6:C0:98:DB:7F:17:56:67:A6:0C:76:A3:BA:86 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eh1lMd-pxsCY238XVmemDHajuoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.104.0/24 45.141.148.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:1e:e8:e0:cc:59:c7:87:a2:f9:06:f4:12:8b:13:7e:ed:58: 1a:cb:6d:52:db:fe:dd:5b:06:c4:eb:cd:cb:2b:76:13:69:b1: b6:ab:16:7c:75:bd:df:a8:8f:80:6d:0e:ac:9e:5b:34:d8:42: 18:b1:7b:77:0a:80:84:c4:eb:89:d9:ea:27:85:13:c7:d2:1a: 3d:92:61:34:4b:73:8b:53:b9:fc:89:02:eb:9a:80:ac:93:b3: 46:7f:13:3b:c2:f9:9f:c8:9f:83:49:e4:ae:af:7d:b8:91:ea: 14:64:3e:68:fc:28:d0:2f:d3:b8:82:57:c7:f7:cd:2e:0e:97: 2f:2a:71:3e:cf:04:b3:d0:fb:cb:05:27:21:3f:dd:8e:77:e2: c5:18:e9:9d:b4:3f:ef:a9:05:4d:d7:97:eb:6c:13:c3:54:6b: 48:b2:c4:c0:c0:61:f5:eb:6a:01:43:25:19:7d:33:65:d8:cc: fc:63:c8:cb:0c:22:11:aa:9e:34:2d:de:b5:50:62:9f:b1:fd: e2:2d:cb:17:f2:14:07:02:b5:17:e8:cc:9e:f2:3f:8d:34:4e: bc:7c:56:7c:a6:75:57:0e:a8:cd:dc:4f:3e:46:69:3e:42:c1: e8:f8:75:af:ae:68:cb:6b:59:90:5a:f3:3a:0e:3b:c7:0f:a3: fc:22:6c:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZplHRq4he8WZnFcqBuyxcEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMTA4MjAxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTFkNjUzMWRmYTljNmMwOThkYjdmMTc1NjY3YTYwYzc2YTNiYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+KIGsN6ELBtqRx25vdFq9M8/hbh f/sQzkPdRVL1mO3Vx6M8B44im2Twzf64nVvtc8/1luor15fM8iA560661+56r0u/ LF2ho01wKmTf3isX7ibaVlfsyK/BV3dH8GtGzIgcpP6RvXg3EHqk1U9jT/5JEZ/e gMs3LDJFC3443u7M2OCa80dCB65Bq2kfnrdvFslg/KHl+6fTU7JfUF5n7OTZXUnf uFN4+izxKPt9BLFqbeQT+UKz5l68jP2II55stW+SMqEQXaY1ri273bEQ27kH+bhg vOLrIvdaoMPHmOHFjdytyVCQrbZQneI8F9UwGtzVzdy/WnliCyLqcx/a7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHodZTHfqcbAmNt/F1Znpgx2o7qGMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvZWgxbE1kLXB4c0NZMjM4WFZtZW1ESGFqdW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbRoAwQA LY2UMA0GCSqGSIb3DQEBCwUAA4IBAQBrHujgzFnHh6L5BvQSixN+7Vgay21S2/7d WwbE683LK3YTabG2qxZ8db3fqI+AbQ6snls02EIYsXt3CoCExOuJ2eonhRPH0ho9 kmE0S3OLU7n8iQLrmoCsk7NGfxM7wvmfyJ+DSeSur324keoUZD5o/CjQL9O4glfH 980uDpcvKnE+zwSz0PvLBSchP92Od+LFGOmdtD/vqQVN15frbBPDVGtIssTAwGH1 62oBQyUZfTNl2Mz8Y8jLDCIRqp40Ld61UGKfsf3iLcsX8hQHArUX6Mye8j+NNE68 fFZ8pnVXDqjN3E8+Rmk+QsHo+HWvrmjLa1mQWvM6DjvHD6P8ImyL -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:05 2025 by rpki-client