This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/RcBxveXi_aoz_FeIeMxnhBQusXA.roa File: RcBxveXi_aoz_FeIeMxnhBQusXA.roa (raw, json) Hash identifier: JDMtMYQL2yTP3JmageJpAIJjq7tYWuu1s/9pPUz+mME= Subject key identifier: 45:C0:71:BD:E5:E2:FD:AA:33:FC:57:88:78:CC:67:84:14:2E:B1:70 Certificate issuer: /CN=2b195371b4cf70b88e773e1b807cb2391632385b Certificate serial: 019A7787283FDA6A3147A58CE7E3752D3D3D Authority key identifier: 2B:19:53:71:B4:CF:70:B8:8E:77:3E:1B:80:7C:B2:39:16:32:38:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/RcBxveXi_aoz_FeIeMxnhBQusXA.roa Signing time: Wed 12 Nov 2025 10:05:37 +0000 ROA not before: Wed 12 Nov 2025 10:05:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 680 IP address blocks: 130.149.0.0/16 maxlen: 16 141.23.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.mft rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:87:28:3f:da:6a:31:47:a5:8c:e7:e3:75:2d:3d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b195371b4cf70b88e773e1b807cb2391632385b Validity Not Before: Nov 12 10:05:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45c071bde5e2fdaa33fc578878cc6784142eb170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:9b:9b:0c:0c:ea:d7:aa:a6:41:f2:91:af: 97:a9:56:55:b2:b8:d8:8b:4a:42:07:11:13:91:4d: 60:6c:27:64:6e:ed:98:96:8a:4c:6f:41:0a:34:e4: d7:a1:e1:7c:3f:a3:54:5e:f3:04:e0:30:4e:04:b7: 5c:09:21:1f:d7:85:ed:25:03:7c:9e:ae:cd:d7:a9: 5f:db:39:6d:e3:8e:1f:c6:69:b5:44:02:bf:b7:b2: 7f:1b:96:f9:fd:69:c5:c3:b3:fa:61:ac:ec:34:50: d5:17:2b:ec:e8:ea:a1:b5:1e:03:8e:f0:ad:a6:27: bf:fc:9c:9c:04:1c:de:d2:4f:5b:fe:6c:d6:fc:08: 2b:25:84:33:3b:45:2e:91:b2:84:76:69:46:40:cc: 4d:b5:d1:a3:27:27:bc:9e:a7:9f:fe:3a:0b:f1:77: fb:05:76:bb:99:79:3c:19:69:d6:df:33:13:04:9d: 4a:4d:b0:67:e1:9e:2c:c6:69:39:0b:2d:2a:d0:06: a8:d0:39:0e:80:29:89:5c:8f:38:cd:4d:95:b0:c8: 80:31:2f:e2:db:f8:f8:e0:72:2d:ed:da:2c:f5:51: 23:9d:25:9e:f4:5a:46:e3:fa:24:38:c3:d9:9c:59: fc:b7:73:2a:f1:e3:9a:8b:7d:39:57:2d:42:00:fa: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C0:71:BD:E5:E2:FD:AA:33:FC:57:88:78:CC:67:84:14:2E:B1:70 X509v3 Authority Key Identifier: keyid:2B:19:53:71:B4:CF:70:B8:8E:77:3E:1B:80:7C:B2:39:16:32:38:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/RcBxveXi_aoz_FeIeMxnhBQusXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.149.0.0/16 141.23.0.0/16 Signature Algorithm: sha256WithRSAEncryption 19:51:ef:ca:8e:da:2b:29:22:3a:1f:5c:0c:e8:6a:39:cb:88: 03:cc:7a:94:07:80:c7:e6:c8:d3:d8:78:6d:8d:b4:07:3c:ac: 6d:e5:b1:7d:23:42:47:0f:bb:c4:f9:94:c0:62:9b:92:93:a1: 0b:e6:f9:10:4f:3d:31:3b:1b:c3:42:55:39:88:64:76:1b:98: 5d:a5:fe:89:49:36:e6:ae:7f:e1:d8:57:2f:23:cc:f8:28:49: 38:b6:20:32:69:b0:41:3d:79:c5:27:84:db:f7:20:5e:8f:47: 0a:1d:83:97:96:f0:ed:81:fc:00:a6:e2:a0:84:58:c6:9c:47: ea:50:8f:97:3c:94:ae:e4:06:b6:48:e0:6b:41:9b:9a:c7:2c: ba:2e:96:29:50:6d:68:52:f5:60:6d:3b:75:60:1a:a6:7a:0a: a3:60:23:16:6c:87:4f:84:f5:da:5c:d5:15:1c:95:cb:c4:c3: 0d:c5:1d:79:f8:ba:f7:34:71:ca:db:ee:a0:36:76:64:47:39: 31:af:84:f1:56:8f:75:1f:6a:d9:43:27:e2:cf:fb:09:53:9f: 5a:ce:d2:55:69:98:a1:be:98:9a:81:76:a3:59:01:b2:fc:20: 31:ad:0b:64:26:5a:fc:39:cc:90:1c:28:93:2a:81:97:ef:4e: c0:cb:37:43 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZp3hyg/2moxR6WM5+N1LT09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMTk1MzcxYjRjZjcwYjg4ZTc3M2UxYjgwN2NiMjM5MTYz MjM4NWIwHhcNMjUxMTEyMTAwNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWMwNzFiZGU1ZTJmZGFhMzNmYzU3ODg3OGNjNjc4NDE0MmViMTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/+bmwwM6teqpkHyka+XqVZVsrjY i0pCBxETkU1gbCdkbu2YlopMb0EKNOTXoeF8P6NUXvME4DBOBLdcCSEf14XtJQN8 nq7N16lf2zlt444fxmm1RAK/t7J/G5b5/WnFw7P6YazsNFDVFyvs6OqhtR4DjvCt pie//JycBBze0k9b/mzW/AgrJYQzO0UukbKEdmlGQMxNtdGjJye8nqef/joL8Xf7 BXa7mXk8GWnW3zMTBJ1KTbBn4Z4sxmk5Cy0q0Aao0DkOgCmJXI84zU2VsMiAMS/i 2/j44HIt7dos9VEjnSWe9FpG4/okOMPZnFn8t3Mq8eOai305Vy1CAPqEjwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFEXAcb3l4v2qM/xXiHjMZ4QULrFwMB8GA1UdIwQY MBaAFCsZU3G0z3C4jnc+G4B8sjkWMjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3hsVGNiVFBjTGlPZHo0YmdIeXlPUll5T0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NTQxYjQtNzQyNC00NzU4LWJkMzIt NWU0MDQxZDkzMDA4LzEvUmNCeHZlWGlfYW96X0ZlSWVNeG5oQlF1c1hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82NTQxYjQtNzQyNC00NzU4LWJkMzItNWU0MDQxZDkzMDA4 LzEvS3hsVGNiVFBjTGlPZHo0YmdIeXlPUll5T0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgpUDAwCN FzANBgkqhkiG9w0BAQsFAAOCAQEAGVHvyo7aKykiOh9cDOhqOcuIA8x6lAeAx+bI 09h4bY20BzysbeWxfSNCRw+7xPmUwGKbkpOhC+b5EE89MTsbw0JVOYhkdhuYXaX+ iUk25q5/4dhXLyPM+ChJOLYgMmmwQT15xSeE2/cgXo9HCh2Dl5bw7YH8AKbioIRY xpxH6lCPlzyUruQGtkjga0Gbmscsui6WKVBtaFL1YG07dWAapnoKo2AjFmyHT4T1 2lzVFRyVy8TDDcUdefi69zRxytvuoDZ2ZEc5Ma+E8VaPdR9q2UMn4s/7CVOfWs7S VWmYob6YmoF2o1kBsvwgMa0LZCZa/DnMkBwokyqBl+9OwMs3Qw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:57 2025 by rpki-client