This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/Saw4YI-N1hXUw3k4MBu_PDw68cQ.roa File: Saw4YI-N1hXUw3k4MBu_PDw68cQ.roa (raw, json) Hash identifier: A9ruPFPWY4kZ2E24/0zrIMK5qpBuF+PtTYNLIob0+wQ= Subject key identifier: 49:AC:38:60:8F:8D:D6:15:D4:C3:79:38:30:1B:BF:3C:3C:3A:F1:C4 Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983 Certificate serial: 019B2BE5A96BA92805D0CF3EA04D8143F073 Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/Saw4YI-N1hXUw3k4MBu_PDw68cQ.roa Signing time: Wed 17 Dec 2025 10:40:29 +0000 ROA not before: Wed 17 Dec 2025 10:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200590 IP address blocks: 45.130.7.0/24 maxlen: 24 91.147.98.0/24 maxlen: 24 91.147.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:e5:a9:6b:a9:28:05:d0:cf:3e:a0:4d:81:43:f0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983 Validity Not Before: Dec 17 10:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=49ac38608f8dd615d4c37938301bbf3c3c3af1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9a:8f:f2:b8:b5:2e:a3:26:90:19:fe:52:be: 98:62:ff:77:18:b5:b6:32:6b:62:8b:52:d6:e6:ad: a7:32:09:26:fe:ed:9c:0e:f4:ec:d4:8d:8d:f2:27: e1:7b:dd:6f:8f:82:cd:f7:84:19:b3:52:70:17:c8: 76:37:6e:96:c4:28:f7:c5:1e:db:b0:03:65:25:cc: ab:8d:84:9d:df:91:1a:a9:52:39:c3:5f:4a:bb:01: 61:b2:7e:09:32:b0:63:e6:cb:69:09:16:29:ee:61: 45:88:ef:ca:24:43:4f:bf:2e:05:be:58:87:cd:09: 6c:1c:f2:94:40:45:b7:2d:a7:dc:f7:77:75:c9:ce: d5:ef:f4:32:e2:2b:a8:90:2c:42:6d:a7:6a:24:0d: 5d:16:62:43:fa:a9:53:21:5e:8c:a0:40:0a:69:e0: 24:98:46:fd:42:d1:27:60:ca:ba:b2:af:d2:41:2e: 2e:bc:9a:26:7e:32:27:ce:5a:5c:24:25:73:4f:24: d5:47:96:8b:49:e5:1b:64:c8:d6:ff:39:39:c1:df: c1:f4:43:05:bf:8d:8a:60:fa:1b:f7:54:e5:46:03: 0f:f1:13:3a:26:b3:c3:3c:62:30:d0:c4:37:69:82: 36:e1:2a:f6:26:d5:ba:1a:c1:d8:5c:ee:02:c8:83: ad:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AC:38:60:8F:8D:D6:15:D4:C3:79:38:30:1B:BF:3C:3C:3A:F1:C4 X509v3 Authority Key Identifier: keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/Saw4YI-N1hXUw3k4MBu_PDw68cQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.7.0/24 91.147.98.0/23 Signature Algorithm: sha256WithRSAEncryption 11:37:ad:48:5d:ad:3a:1a:65:46:3a:f4:eb:d8:5d:10:59:e2: f4:33:ab:12:10:a8:e1:4c:99:8a:a9:64:b0:d5:ef:f8:32:94: 80:c1:ad:22:23:49:34:c7:b7:70:aa:87:b1:cf:10:cc:6c:51: 84:b7:8b:01:4b:fc:44:b6:ed:56:14:0f:b8:9b:f9:d7:37:37: 5e:24:20:9d:67:a0:71:fd:d3:9b:8b:cf:ae:50:73:16:25:23: e7:20:e6:86:bb:2e:c9:8b:30:43:e7:27:95:07:14:57:94:b7: 6f:3d:21:69:d3:56:7d:ec:88:d9:38:e5:db:f6:cd:cb:78:0f: fc:a3:72:7d:0b:80:89:a6:8e:ee:02:bb:5e:9b:05:48:e6:9e: 31:fd:4b:6f:3c:e3:f0:1a:52:8f:b9:d4:aa:34:46:fd:9f:73: b5:52:ee:8d:e5:b4:0a:22:65:63:10:8c:13:30:a6:20:69:18: 9e:ef:06:9d:6c:92:d7:ee:14:99:71:c8:5d:57:97:34:ae:c8: f7:a5:c9:0d:49:5f:e2:1a:a9:8b:db:9f:ce:6c:b1:a6:60:04: 2e:61:e0:dc:15:b9:9b:30:c8:89:32:c4:8a:4d:7a:c2:36:9e: 06:d0:d4:27:ae:d1:4f:a8:c0:eb:e8:1c:51:5e:1b:b8:a5:1e: 3b:5d:26:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsr5alrqSgF0M8+oE2BQ/BzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh MTk5ODMwHhcNMjUxMjE3MTA0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWFjMzg2MDhmOGRkNjE1ZDRjMzc5MzgzMDFiYmYzYzNjM2FmMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JqP8ri1LqMmkBn+Ur6YYv93GLW2 Mmtii1LW5q2nMgkm/u2cDvTs1I2N8ifhe91vj4LN94QZs1JwF8h2N26WxCj3xR7b sANlJcyrjYSd35EaqVI5w19KuwFhsn4JMrBj5stpCRYp7mFFiO/KJENPvy4FvliH zQlsHPKUQEW3Lafc93d1yc7V7/Qy4iuokCxCbadqJA1dFmJD+qlTIV6MoEAKaeAk mEb9QtEnYMq6sq/SQS4uvJomfjInzlpcJCVzTyTVR5aLSeUbZMjW/zk5wd/B9EMF v42KYPob91TlRgMP8RM6JrPDPGIw0MQ3aYI24Sr2JtW6GsHYXO4CyIOtYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEmsOGCPjdYV1MN5ODAbvzw8OvHEMB8GA1UdIwQY MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt YjlhZTU3Mzk0MTg5LzEvU2F3NFlJLU4xaFhVdzNrNE1CdV9QRHc2OGNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5 LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYIHAwQB W5NiMA0GCSqGSIb3DQEBCwUAA4IBAQARN61IXa06GmVGOvTr2F0QWeL0M6sSEKjh TJmKqWSw1e/4MpSAwa0iI0k0x7dwqoexzxDMbFGEt4sBS/xEtu1WFA+4m/nXNzde JCCdZ6Bx/dObi8+uUHMWJSPnIOaGuy7JizBD5yeVBxRXlLdvPSFp01Z97IjZOOXb 9s3LeA/8o3J9C4CJpo7uArtemwVI5p4x/UtvPOPwGlKPudSqNEb9n3O1Uu6N5bQK ImVjEIwTMKYgaRie7wadbJLX7hSZcchdV5c0rsj3pckNSV/iGqmL25/ObLGmYAQu YeDcFbmbMMiJMsSKTXrCNp4G0NQnrtFPqMDr6BxRXhu4pR47XSY6 -----END CERTIFICATE-----Generated at Wed Dec 17 19:51:16 2025 by rpki-client