This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fHjwEViaJl0T5rA36AaZOFCpzMc.roa File: fHjwEViaJl0T5rA36AaZOFCpzMc.roa (raw, json) Hash identifier: 1uiQXsZS/rMlAqEZL4PV9XxkWBGDyWH2wEj89gFavbE= Subject key identifier: 7C:78:F0:11:58:9A:26:5D:13:E6:B0:37:E8:06:99:38:50:A9:CC:C7 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019AB57A861483210617C3D1ABD8E0FCEA22 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fHjwEViaJl0T5rA36AaZOFCpzMc.roa Signing time: Mon 24 Nov 2025 10:48:17 +0000 ROA not before: Mon 24 Nov 2025 10:48:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 45.12.255.0/24 maxlen: 24 79.110.50.0/24 maxlen: 24 87.121.58.0/24 maxlen: 24 94.103.127.0/24 maxlen: 24 94.156.79.0/24 maxlen: 24 141.98.4.0/24 maxlen: 24 147.78.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 08:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:7a:86:14:83:21:06:17:c3:d1:ab:d8:e0:fc:ea:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 24 10:48:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7c78f011589a265d13e6b037e806993850a9ccc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:3f:81:d8:3c:b9:dc:4f:5d:ea:eb:e6:22: d3:05:e6:9c:6c:03:fa:6e:0f:4d:eb:d1:54:f9:e9: e8:f2:1c:90:b8:57:7e:40:4d:0c:96:ec:25:11:2c: a9:04:05:a7:3d:ab:6c:a9:84:9c:b9:23:f4:1e:9e: a9:1b:1c:7d:73:80:4b:89:c3:65:da:43:ce:36:e9: ae:84:dd:50:13:e4:32:79:2a:a5:f4:81:34:46:ac: 9d:3e:83:ee:52:ca:22:a5:28:87:e9:42:b9:43:b0: 4d:be:f7:82:62:ba:76:a4:ec:cf:cf:1d:58:88:ee: 6f:15:91:bd:05:ad:df:63:c4:86:c5:13:93:93:b6: 21:f8:da:28:eb:2c:67:7c:d1:95:ee:1f:12:14:be: 01:16:64:fa:fb:20:f6:4a:11:b8:7b:b4:09:2b:7a: 0b:d1:27:99:b4:97:53:cb:1d:13:32:90:34:c4:4e: 52:81:2d:96:77:81:3b:a7:52:0b:c2:e2:38:54:b5: be:5d:2e:a0:9e:a9:2e:41:76:47:ae:32:0f:56:4f: e0:be:4b:e7:28:01:92:fd:cb:b7:2e:17:d6:db:7c: 63:a0:2a:e4:32:ea:d0:67:91:57:3c:33:18:fc:46: cc:10:8c:21:69:d1:ef:ee:3c:56:e5:56:33:ae:5f: 41:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:78:F0:11:58:9A:26:5D:13:E6:B0:37:E8:06:99:38:50:A9:CC:C7 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fHjwEViaJl0T5rA36AaZOFCpzMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.255.0/24 79.110.50.0/24 87.121.58.0/24 94.103.127.0/24 94.156.79.0/24 141.98.4.0/24 147.78.100.0/24 Signature Algorithm: sha256WithRSAEncryption 10:35:f3:e4:55:8e:d7:77:68:07:28:36:93:52:d0:b9:10:4a: 20:9b:01:42:6f:c0:4a:f1:c9:67:20:ea:91:06:18:93:b1:11: 05:c1:eb:b9:df:22:a7:2e:1c:44:d8:78:a4:5e:21:50:91:1b: b2:1a:15:2d:f1:28:bd:d4:0f:ff:ef:9d:c2:c6:b2:98:6d:65: 93:88:a1:52:c2:5d:f5:12:82:6c:51:91:88:88:a5:a3:46:f1: db:81:2b:82:77:68:7e:12:a2:19:9b:24:98:4a:dd:ef:ae:2c: d1:f2:6d:5b:55:05:f4:35:21:97:85:45:27:6b:2b:1a:d7:b0: 90:d4:7c:46:63:bf:de:ba:6e:dd:0e:66:80:b4:e0:dd:be:da: ba:2b:53:a8:0c:a8:04:c7:30:9d:c1:a2:2e:eb:6d:78:53:fd: d6:30:8b:38:1d:25:ee:3a:42:17:64:f0:da:d1:68:d7:07:d6: 08:d9:35:e7:9d:b5:d6:3d:01:d0:d2:2e:64:ee:9e:1b:c4:3e: e4:8e:e5:fc:62:dd:00:c4:f8:35:59:73:c0:f8:53:97:f8:56: 6a:20:2c:1b:68:a7:23:7f:bc:46:bf:46:e1:71:bf:58:34:51: 0b:03:b1:e1:30:c0:69:7d:d2:9f:c9:39:40:4d:5b:98:83:82: aa:13:c3:84 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZq1eoYUgyEGF8PRq9jg/OoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTI0MTA0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yzc4ZjAxMTU4OWEyNjVkMTNlNmIwMzdlODA2OTkzODUwYTljY2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcE/gdg8udxPXerr5iLTBeacbAP6 bg9N69FU+eno8hyQuFd+QE0MluwlESypBAWnPatsqYScuSP0Hp6pGxx9c4BLicNl 2kPONumuhN1QE+QyeSql9IE0RqydPoPuUsoipSiH6UK5Q7BNvveCYrp2pOzPzx1Y iO5vFZG9Ba3fY8SGxROTk7Yh+Noo6yxnfNGV7h8SFL4BFmT6+yD2ShG4e7QJK3oL 0SeZtJdTyx0TMpA0xE5SgS2Wd4E7p1ILwuI4VLW+XS6gnqkuQXZHrjIPVk/gvkvn KAGS/cu3LhfW23xjoCrkMurQZ5FXPDMY/EbMEIwhadHv7jxW5VYzrl9BtQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFHx48BFYmiZdE+awN+gGmThQqczHMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvZkhqd0VWaWFKbDBUNXJBMzZBYVpPRkNwek1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQz/AwQA T24yAwQAV3k6AwQAXmd/AwQAXpxPAwQAjWIEAwQAk05kMA0GCSqGSIb3DQEBCwUA A4IBAQAQNfPkVY7Xd2gHKDaTUtC5EEogmwFCb8BK8clnIOqRBhiTsREFweu53yKn LhxE2HikXiFQkRuyGhUt8Si91A//753CxrKYbWWTiKFSwl31EoJsUZGIiKWjRvHb gSuCd2h+EqIZmySYSt3vrizR8m1bVQX0NSGXhUUnaysa17CQ1HxGY7/eum7dDmaA tODdvtq6K1OoDKgExzCdwaIu6214U/3WMIs4HSXuOkIXZPDa0WjXB9YI2TXnnbXW PQHQ0i5k7p4bxD7kjuX8Yt0AxPg1WXPA+FOX+FZqICwbaKcjf7xGv0bhcb9YNFEL A7HhMMBpfdKfyTlATVuYg4KqE8OE -----END CERTIFICATE-----Generated at Wed Nov 26 17:36:03 2025 by rpki-client