This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/v3awz8QkP58mxnUs9B2fDSnWLXM.roa File: v3awz8QkP58mxnUs9B2fDSnWLXM.roa (raw, json) Hash identifier: TAmNgPwah3we4uplBsSi3VCIYC8AT7YJO0o7AP89TEA= Subject key identifier: BF:76:B0:CF:C4:24:3F:9F:26:C6:75:2C:F4:1D:9F:0D:29:D6:2D:73 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019AD067166FD440CC9408D03C7848403E32 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/v3awz8QkP58mxnUs9B2fDSnWLXM.roa Signing time: Sat 29 Nov 2025 16:16:48 +0000 ROA not before: Sat 29 Nov 2025 16:16:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47585 IP address blocks: 45.136.7.0/24 maxlen: 24 194.146.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:67:16:6f:d4:40:cc:94:08:d0:3c:78:48:40:3e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Nov 29 16:16:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf76b0cfc4243f9f26c6752cf41d9f0d29d62d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:da:46:3e:ba:a8:89:d4:51:e3:1f:37:2c: b8:fa:63:b0:25:ab:7a:c7:30:4e:8f:1f:7e:8c:32: df:b9:0d:da:f7:7b:52:15:3b:36:cf:81:20:3c:0f: 86:85:11:4b:44:0e:67:3d:8f:45:75:69:49:b6:31: 9c:d8:bb:b8:30:57:af:7e:d8:c5:43:4d:24:36:f3: 16:b7:b6:16:43:96:3d:fd:41:8a:29:ee:a9:3a:83: 18:dd:c0:ac:c7:55:5c:3f:42:26:09:a4:65:27:e4: d1:5c:6a:69:41:d7:f5:a2:0e:e1:5b:f1:6c:d5:73: b7:18:db:20:66:f4:dd:79:da:14:69:4f:45:b2:0c: 8a:da:5c:fd:95:e1:2d:d0:c2:7e:4e:4b:1a:eb:14: 22:5f:bf:f5:f8:15:95:4b:c4:99:fe:eb:23:13:48: 4a:ff:79:e5:d2:79:cd:09:ba:5b:82:a8:4d:21:1a: 4b:c0:2f:7e:50:cb:56:4d:c9:b1:2a:16:1d:bb:c3: 9c:dd:d5:ac:48:c6:32:2e:3a:3c:75:0f:06:c4:76: 54:12:1a:89:ff:56:e3:52:6a:7a:6d:3f:09:2a:1b: 93:7c:d7:e0:14:b6:64:33:26:07:19:a3:bb:4d:60: c0:f6:35:94:a3:77:aa:0c:25:c0:05:4a:6b:cc:ce: fc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:76:B0:CF:C4:24:3F:9F:26:C6:75:2C:F4:1D:9F:0D:29:D6:2D:73 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/v3awz8QkP58mxnUs9B2fDSnWLXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.7.0/24 194.146.47.0/24 Signature Algorithm: sha256WithRSAEncryption 90:4c:73:e8:8f:94:fa:1c:6c:b2:64:18:5f:0d:f3:ac:3c:20: 78:28:0c:09:65:1d:45:1f:90:17:69:53:54:fc:6d:18:f0:1b: 90:b3:3d:37:bf:0f:0b:1e:a8:69:bd:34:0b:7d:38:07:c0:f0: 9f:33:31:ab:62:42:f0:20:d9:05:7b:dc:01:b5:78:1e:0e:6d: 36:d9:7f:38:72:a3:2f:d0:4e:80:f7:ae:b7:39:b5:a4:7e:71: d2:9d:8c:ea:d4:6a:66:7d:5f:0b:87:67:81:38:c5:da:0e:19: 00:02:38:4f:d7:66:77:54:7d:5f:1d:e9:20:3f:84:a0:64:cd: 3a:7d:be:ca:41:b8:8f:97:6c:fb:9c:d1:2d:b5:e2:42:c1:82: e9:62:fa:e0:ef:e7:7a:40:e4:17:2a:8f:b2:e4:f9:c4:7f:42: aa:f1:dd:e0:67:d2:b9:07:3f:fb:34:18:51:5e:c7:c8:02:88: 06:2f:03:ed:ad:fe:b9:1f:f8:1f:0c:ba:bc:0f:29:19:22:3d: 2e:17:a0:f7:2b:84:c1:0b:8e:f6:66:92:a2:b6:5a:ed:0b:5e: 20:5e:59:6d:e7:dd:cc:6d:ab:76:3d:18:a6:98:d6:5a:5d:a5: c7:0d:7a:7b:c6:da:2a:fc:9a:89:8e:48:e9:fc:5b:1b:eb:b8: de:9f:6e:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrQZxZv1EDMlAjQPHhIQD4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMTI5MTYxNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjc2YjBjZmM0MjQzZjlmMjZjNjc1MmNmNDFkOWYwZDI5ZDYyZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydbaRj66qInUUeMfNyy4+mOwJat6 xzBOjx9+jDLfuQ3a93tSFTs2z4EgPA+GhRFLRA5nPY9FdWlJtjGc2Lu4MFevftjF Q00kNvMWt7YWQ5Y9/UGKKe6pOoMY3cCsx1VcP0ImCaRlJ+TRXGppQdf1og7hW/Fs 1XO3GNsgZvTdedoUaU9FsgyK2lz9leEt0MJ+Tksa6xQiX7/1+BWVS8SZ/usjE0hK /3nl0nnNCbpbgqhNIRpLwC9+UMtWTcmxKhYdu8Oc3dWsSMYyLjo8dQ8GxHZUEhqJ /1bjUmp6bT8JKhuTfNfgFLZkMyYHGaO7TWDA9jWUo3eqDCXABUprzM78/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL92sM/EJD+fJsZ1LPQdnw0p1i1zMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvdjNhd3o4UWtQNThteG5VczlCMmZEU25XTFhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYgHAwQA wpIvMA0GCSqGSIb3DQEBCwUAA4IBAQCQTHPoj5T6HGyyZBhfDfOsPCB4KAwJZR1F H5AXaVNU/G0Y8BuQsz03vw8LHqhpvTQLfTgHwPCfMzGrYkLwINkFe9wBtXgeDm02 2X84cqMv0E6A9663ObWkfnHSnYzq1GpmfV8Lh2eBOMXaDhkAAjhP12Z3VH1fHekg P4SgZM06fb7KQbiPl2z7nNEtteJCwYLpYvrg7+d6QOQXKo+y5PnEf0Kq8d3gZ9K5 Bz/7NBhRXsfIAogGLwPtrf65H/gfDLq8DykZIj0uF6D3K4TBC472ZpKitlrtC14g Xllt593Mbat2PRimmNZaXaXHDXp7xtoq/JqJjkjp/Fsb67jen25g -----END CERTIFICATE-----Generated at Sat Dec 6 17:08:43 2025 by rpki-client