This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/DnzI1ao7aTnh9Jg64y172kFEW10.roa File: DnzI1ao7aTnh9Jg64y172kFEW10.roa (raw, json) Hash identifier: iBNgKqvR9Nock/QGQ3vmBAJvLcgbXi64UUTOdAAo0Us= Subject key identifier: 0E:7C:C8:D5:AA:3B:69:39:E1:F4:98:3A:E3:2D:7B:DA:41:44:5B:5D Certificate issuer: /CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Certificate serial: 019ADDF98399D5FAD6BA2C924DC91E597E03 Authority key identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/DnzI1ao7aTnh9Jg64y172kFEW10.roa Signing time: Tue 02 Dec 2025 07:31:48 +0000 ROA not before: Tue 02 Dec 2025 07:31:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31116 IP address blocks: 45.159.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:f9:83:99:d5:fa:d6:ba:2c:92:4d:c9:1e:59:7e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Validity Not Before: Dec 2 07:31:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0e7cc8d5aa3b6939e1f4983ae32d7bda41445b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:f5:b1:2a:82:dc:9e:b0:72:9e:b2:62:a1: c7:82:83:dd:70:2f:27:69:57:06:8e:ad:ba:6c:8b: 5b:22:4d:28:ee:4c:51:d7:d3:3f:74:ce:3f:2a:45: 70:89:0d:d9:a8:76:ad:e6:6e:60:10:ce:14:93:4d: e9:6b:a9:c2:a3:b7:8a:86:bb:0c:dd:18:e4:d8:17: eb:5a:c8:ac:75:d0:fc:14:e5:30:ae:d6:06:84:df: 9c:b5:98:ff:3d:43:f9:2e:62:d1:7b:74:41:8a:21: dd:06:2e:8b:67:7e:8b:44:a1:63:09:10:5a:16:1f: 32:ed:a4:43:13:79:1c:57:14:0a:42:6a:8a:c2:77: e3:00:f5:b5:60:70:de:68:f8:8c:2d:36:5e:27:41: 79:ce:6c:71:78:1d:17:66:bb:12:1b:8f:07:5a:90: 16:29:73:5f:d0:60:93:e9:73:61:e9:11:21:12:41: a3:11:2e:29:23:f5:42:3c:ea:31:25:33:e1:a4:ac: 4b:91:87:d7:42:d9:bd:22:9f:54:2b:63:06:cd:5d: 48:ae:17:de:5d:ea:eb:a9:ed:40:87:6c:2a:4d:ee: ca:89:0a:51:14:61:cb:64:09:de:35:22:5e:e7:69: 65:71:49:22:53:8e:1e:7a:25:86:70:a4:29:b2:11: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7C:C8:D5:AA:3B:69:39:E1:F4:98:3A:E3:2D:7B:DA:41:44:5B:5D X509v3 Authority Key Identifier: keyid:6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/DnzI1ao7aTnh9Jg64y172kFEW10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.80.0/24 Signature Algorithm: sha256WithRSAEncryption bd:63:07:98:5a:9c:d6:82:4d:f1:18:1c:b9:5f:df:57:cb:16: 51:46:dd:9e:61:3b:ab:20:3a:15:a6:dd:5e:2b:9b:6b:d0:45: a5:6d:2d:97:d8:12:88:25:29:86:77:44:6c:da:57:19:50:f2: 89:43:60:9b:b8:ef:97:89:8d:28:21:67:29:1d:7a:a3:c6:74: db:2d:7b:f6:57:1b:6d:f7:1d:82:91:1b:63:d1:e9:17:03:66: 69:72:16:71:76:04:39:b2:f2:cd:0e:b7:6e:4b:7a:d1:2c:f4: ed:c6:61:e1:a2:8a:3b:b3:03:e6:34:21:cc:d2:d1:fa:3c:ed: 77:80:d7:3d:0c:4d:0e:70:8c:53:32:2f:ae:96:c8:69:b4:06: ed:16:fb:97:27:16:8c:5c:69:c8:52:a1:e2:d4:57:c4:89:c4: 33:e4:95:b1:a0:5b:59:80:b2:f5:8a:0d:35:dc:1b:d7:51:0c: fb:54:ad:8e:0c:44:9b:6c:4b:44:82:62:45:e7:c3:f0:0c:29: 82:05:14:25:95:56:c9:dc:41:1e:92:35:e1:6d:40:bd:08:9a: 94:57:98:56:16:32:19:2c:a6:eb:f2:7a:63:59:b6:8e:db:67: 04:e2:34:d3:50:50:20:55:2b:b6:07:ff:f2:00:89:77:1f:3f: 6e:37:77:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrd+YOZ1frWuiySTckeWX4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWYyM2E2M2FkNjI1YTdlZDMwZGE2ZGEyY2RjOWU4YjVi YjgwM2UwHhcNMjUxMjAyMDczMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTdjYzhkNWFhM2I2OTM5ZTFmNDk4M2FlMzJkN2JkYTQxNDQ1YjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN/1sSqC3J6wcp6yYqHHgoPdcC8n aVcGjq26bItbIk0o7kxR19M/dM4/KkVwiQ3ZqHat5m5gEM4Uk03pa6nCo7eKhrsM 3Rjk2BfrWsisddD8FOUwrtYGhN+ctZj/PUP5LmLRe3RBiiHdBi6LZ36LRKFjCRBa Fh8y7aRDE3kcVxQKQmqKwnfjAPW1YHDeaPiMLTZeJ0F5zmxxeB0XZrsSG48HWpAW KXNf0GCT6XNh6REhEkGjES4pI/VCPOoxJTPhpKxLkYfXQtm9Ip9UK2MGzV1Irhfe Xerrqe1Ah2wqTe7KiQpRFGHLZAneNSJe52llcUkiU44eeiWGcKQpshFpkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA58yNWqO2k54fSYOuMte9pBRFtdMB8GA1UdIwQY MBaAFG+fI6Y61iWn7TDabaLNyei1u4A+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYt ZDQyYmQ2ODI2MzhkLzEvRG56STFhbzdhVG5oOUpnNjR5MTcya0ZFVzEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYtZDQyYmQ2ODI2Mzhk LzEvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ9QMA0G CSqGSIb3DQEBCwUAA4IBAQC9YweYWpzWgk3xGBy5X99XyxZRRt2eYTurIDoVpt1e K5tr0EWlbS2X2BKIJSmGd0Rs2lcZUPKJQ2CbuO+XiY0oIWcpHXqjxnTbLXv2Vxtt 9x2CkRtj0ekXA2ZpchZxdgQ5svLNDrduS3rRLPTtxmHhooo7swPmNCHM0tH6PO13 gNc9DE0OcIxTMi+ulshptAbtFvuXJxaMXGnIUqHi1FfEicQz5JWxoFtZgLL1ig01 3BvXUQz7VK2ODESbbEtEgmJF58PwDCmCBRQllVbJ3EEekjXhbUC9CJqUV5hWFjIZ LKbr8npjWbaO22cE4jTTUFAgVSu2B//yAIl3Hz9uN3eJ -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:30 2025 by rpki-client