This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/iCZsI36d2-8-6a5AmuiDBban0Wk.roa File: iCZsI36d2-8-6a5AmuiDBban0Wk.roa (raw, json) Hash identifier: EmGj3fjcpHlOiNERRV6BrRl723+1lvAThpgK7PMRptQ= Subject key identifier: 88:26:6C:23:7E:9D:DB:EF:3E:E9:AE:40:9A:E8:83:05:B6:A7:D1:69 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019AE8C8F6979FF7F6ED1F2A2DBDC1E989D1 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/iCZsI36d2-8-6a5AmuiDBban0Wk.roa Signing time: Thu 04 Dec 2025 09:54:35 +0000 ROA not before: Thu 04 Dec 2025 09:54:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62005 IP address blocks: 45.66.248.0/24 maxlen: 24 45.66.249.0/24 maxlen: 24 45.150.108.0/24 maxlen: 24 45.150.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:c8:f6:97:9f:f7:f6:ed:1f:2a:2d:bd:c1:e9:89:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Dec 4 09:54:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=88266c237e9ddbef3ee9ae409ae88305b6a7d169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:23:6a:b9:3d:6f:26:4f:b6:a2:47:36:55: f6:bc:4a:3e:7b:7d:37:31:79:09:b3:4f:05:01:c3: 88:52:e9:c0:db:60:ea:1f:ca:d1:9c:b6:02:e5:1d: 2a:56:a9:c9:28:fe:60:ca:ae:cf:e2:e1:43:b5:12: 3a:ac:96:c4:d4:39:b1:ad:24:f2:9e:5d:3f:2b:bd: 69:92:b0:ce:3e:87:19:3b:bd:cf:3f:ac:14:82:e1: ae:94:3e:0d:2c:64:91:06:94:7d:17:e3:23:e3:9f: 3f:6e:53:dd:c3:6d:32:96:77:75:be:b6:fe:13:29: 77:fc:cb:92:3e:90:c6:ff:57:81:ae:52:e9:ab:f6: ca:2a:46:2b:a0:a7:54:43:35:6d:a3:f5:be:5a:15: 6e:d4:65:50:ea:15:0a:1f:20:87:e4:a3:da:ef:ed: f7:4e:a9:fd:f3:09:ce:b1:69:2a:8b:85:d9:1f:d5: 9f:a4:45:d2:84:e0:83:a9:e7:66:56:2a:09:aa:ff: c3:80:f2:8a:54:44:aa:9f:db:9f:7a:56:a5:a7:e2: 56:7d:20:02:33:1c:02:5d:29:d0:21:a9:d5:4d:50: 29:15:e8:93:3d:64:04:8d:9d:7e:fa:27:32:1b:a2: a5:fb:ed:97:2c:bc:55:3a:a5:25:1d:d2:78:21:a2: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:26:6C:23:7E:9D:DB:EF:3E:E9:AE:40:9A:E8:83:05:B6:A7:D1:69 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/iCZsI36d2-8-6a5AmuiDBban0Wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.248.0/23 45.150.108.0/23 Signature Algorithm: sha256WithRSAEncryption 77:c8:00:8e:1d:9b:76:ab:c0:51:7c:91:ca:ea:fd:db:e0:48: ed:80:92:fe:03:16:ac:f0:1b:3d:30:a0:ef:1c:a5:cc:24:12: 37:5f:c5:dc:b1:c5:34:2b:47:b0:8d:1d:d9:18:09:76:98:cd: 75:95:6f:9d:76:18:ba:a5:bf:27:36:5d:d9:8e:13:0c:fb:66: 52:66:50:d0:62:69:20:4d:a6:82:0b:1a:49:5e:85:fb:2e:49: 4d:1f:d4:58:6d:06:8c:c5:95:f3:97:fb:fd:f7:60:56:d4:69: ca:7e:c5:11:31:2d:16:e4:37:3d:91:4c:dd:b3:06:e9:52:d6: cb:08:c8:d0:a8:65:3e:9e:a5:0a:25:84:22:58:b7:d6:e0:ec: a9:03:43:3a:e3:0e:89:ed:d0:26:55:8b:2e:31:ca:99:8b:0c: 91:2f:26:8b:df:db:23:4c:b8:0b:3c:f1:26:40:1c:32:27:d1: b8:c1:bf:d9:ba:e1:43:31:a9:4b:b0:be:79:0a:6a:5e:81:5f: d0:70:aa:63:ac:06:41:7e:0c:b2:c0:d4:3d:fa:08:ca:b6:b2: 75:44:f6:96:7a:86:f9:ff:af:cf:a2:3c:4f:f1:d0:94:69:eb: 8d:89:1c:3e:b3:77:fd:d8:6c:0a:76:a2:80:0b:ae:f2:51:7f: 2e:f4:13:3e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZroyPaXn/f27R8qLb3B6YnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjUxMjA0MDk1NDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODI2NmMyMzdlOWRkYmVmM2VlOWFlNDA5YWU4ODMwNWI2YTdkMTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Ejark9byZPtqJHNlX2vEo+e303 MXkJs08FAcOIUunA22DqH8rRnLYC5R0qVqnJKP5gyq7P4uFDtRI6rJbE1DmxrSTy nl0/K71pkrDOPocZO73PP6wUguGulD4NLGSRBpR9F+Mj458/blPdw20ylnd1vrb+ Eyl3/MuSPpDG/1eBrlLpq/bKKkYroKdUQzVto/W+WhVu1GVQ6hUKHyCH5KPa7+33 Tqn98wnOsWkqi4XZH9WfpEXShOCDqedmVioJqv/DgPKKVESqn9ufelalp+JWfSAC MxwCXSnQIanVTVApFeiTPWQEjZ1++icyG6Kl++2XLLxVOqUlHdJ4IaKkeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIgmbCN+ndvvPumuQJrogwW2p9FpMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvaUNac0kzNmQyLTgtNmE1QW11aURCYmFuMFdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLUL4AwQB LZZsMA0GCSqGSIb3DQEBCwUAA4IBAQB3yACOHZt2q8BRfJHK6v3b4EjtgJL+Axas 8Bs9MKDvHKXMJBI3X8XcscU0K0ewjR3ZGAl2mM11lW+ddhi6pb8nNl3ZjhMM+2ZS ZlDQYmkgTaaCCxpJXoX7LklNH9RYbQaMxZXzl/v992BW1GnKfsURMS0W5Dc9kUzd swbpUtbLCMjQqGU+nqUKJYQiWLfW4OypA0M64w6J7dAmVYsuMcqZiwyRLyaL39sj TLgLPPEmQBwyJ9G4wb/ZuuFDMalLsL55CmpegV/QcKpjrAZBfgyywNQ9+gjKtrJ1 RPaWeob5/6/PojxP8dCUaeuNiRw+s3f92GwKdqKAC67yUX8u9BM+ -----END CERTIFICATE-----Generated at Sun Dec 7 04:07:33 2025 by rpki-client