This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-RaVWhm4ucmlR0gicKOMbFicM3o.roa File: 1-RaVWhm4ucmlR0gicKOMbFicM3o.roa (raw, json) Hash identifier: /qKJHU7nXX75mZYztfdpKis2coqeEEK4LaABUZMxtZw= Subject key identifier: F9:16:95:5A:19:B8:B9:C9:A5:47:48:22:70:A3:8C:6C:58:9C:33:7A Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B123397C5FBF71B4DA53A56694EC000BA Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-RaVWhm4ucmlR0gicKOMbFicM3o.roa Signing time: Fri 12 Dec 2025 10:55:29 +0000 ROA not before: Fri 12 Dec 2025 10:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.11.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:33:97:c5:fb:f7:1b:4d:a5:3a:56:69:4e:c0:00:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Dec 12 10:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f916955a19b8b9c9a547482270a38c6c589c337a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:81:e4:03:20:fe:ef:82:85:22:17:71:83: f4:76:6d:1f:d2:f3:13:d9:13:a6:7a:1f:8c:1c:ce: 2d:22:fd:47:ee:e2:76:e9:66:54:d0:fa:de:4b:8f: 7f:fd:f0:f8:3c:5c:9f:63:80:fa:bf:7b:d9:68:37: 4d:26:2b:0c:a2:5d:9c:2b:9c:8a:1e:90:f7:71:7d: 59:5f:a3:32:3c:d4:c7:87:4f:33:be:6d:3c:52:1b: 05:7c:24:70:af:cf:81:17:cf:73:f7:6b:bb:3b:60: c1:0a:e0:3a:c0:ee:74:02:f3:e6:e3:1b:1d:49:e5: 6e:7e:90:32:4d:96:82:de:18:6b:09:fb:aa:72:21: 6a:5c:4f:83:63:5b:2a:4f:14:97:2b:40:5e:a6:cb: 69:1c:c6:46:9d:60:5b:12:23:fb:30:28:89:6d:6c: 6c:64:ce:4f:b5:51:6f:f9:2d:b4:c4:fc:60:8b:d9: 92:dd:cb:90:fe:9b:d4:8a:55:39:ce:2e:7b:e1:0a: c1:ac:79:e2:a7:38:51:ea:7d:92:ef:95:ab:d9:02: af:44:44:78:22:6a:2e:f7:3e:d0:1c:60:d6:d6:97: 19:4b:84:fa:05:41:75:23:e4:e5:2e:db:0a:a0:90: 82:2b:37:e3:be:14:5e:21:b8:32:5c:bd:e9:d9:25: 3d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:16:95:5A:19:B8:B9:C9:A5:47:48:22:70:A3:8C:6C:58:9C:33:7A X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-RaVWhm4ucmlR0gicKOMbFicM3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.191.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:cf:09:73:91:a0:58:e3:e1:a0:84:97:74:bd:d3:e7:38:83: 53:2f:91:c6:de:67:6c:b0:7c:cb:1a:01:62:0d:b1:60:6a:a9: b0:ac:f8:d0:9f:8a:1c:ff:2c:fd:7c:c7:5c:7e:4e:ba:d4:f2: 01:c5:9f:9e:55:3c:44:7d:43:07:13:ba:33:b8:d6:a4:6d:31: da:8c:8a:7b:55:1f:bb:c2:95:ba:d0:d1:ea:e3:78:ff:ac:7c: 2f:2e:35:52:c9:a5:27:b2:25:e0:b7:e7:17:fa:94:ef:c4:45: a7:76:15:97:3f:f5:1b:cd:21:45:29:40:ce:39:fb:c9:6c:77: b5:db:17:96:50:2f:0e:3a:4c:c0:44:6e:17:a1:fa:4a:db:31: a3:c5:71:07:6e:5f:e8:6a:28:7d:d2:0f:af:3f:d5:3c:23:44: aa:87:30:d4:10:a0:19:5e:e8:25:04:bf:7f:1a:3f:8e:a9:78: 1e:c8:8f:26:83:55:b3:00:d0:e8:c6:e5:f8:23:52:22:77:4f: ff:df:e4:cb:18:21:93:d4:dc:6f:49:63:48:77:0b:bc:da:80: d2:1e:51:8c:87:f2:bf:52:94:83:db:72:0c:4d:f1:6b:37:81: ed:e7:5a:e6:c0:94:39:06:b3:3a:df:65:54:c3:5f:6e:40:27: 1a:aa:25:f6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsSM5fF+/cbTaU6VmlOwAC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjUxMjEyMTA1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTE2OTU1YTE5YjhiOWM5YTU0NzQ4MjI3MGEzOGM2YzU4OWMzMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8yB5AMg/u+ChSIXcYP0dm0f0vMT 2ROmeh+MHM4tIv1H7uJ26WZU0PreS49//fD4PFyfY4D6v3vZaDdNJisMol2cK5yK HpD3cX1ZX6MyPNTHh08zvm08UhsFfCRwr8+BF89z92u7O2DBCuA6wO50AvPm4xsd SeVufpAyTZaC3hhrCfuqciFqXE+DY1sqTxSXK0BepstpHMZGnWBbEiP7MCiJbWxs ZM5PtVFv+S20xPxgi9mS3cuQ/pvUilU5zi574QrBrHnipzhR6n2S75Wr2QKvRER4 Imou9z7QHGDW1pcZS4T6BUF1I+TlLtsKoJCCKzfjvhReIbgyXL3p2SU9lQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPkWlVoZuLnJpUdIInCjjGxYnDN6MB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvMS1SYVZXaG00dWNtbFIwZ2ljS09NYkZpY00zby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTAvMzk1MzI4LWY0NjEtNDRiNy1iMDMxLTNmOGI1NWRhMWFj NC8xL0JSOHBSaTU2ZmFmclgwWGFlSFB4VGtBXzQ2cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0LvzAN BgkqhkiG9w0BAQsFAAOCAQEAKs8Jc5GgWOPhoISXdL3T5ziDUy+Rxt5nbLB8yxoB Yg2xYGqpsKz40J+KHP8s/XzHXH5OutTyAcWfnlU8RH1DBxO6M7jWpG0x2oyKe1Uf u8KVutDR6uN4/6x8Ly41UsmlJ7Il4LfnF/qU78RFp3YVlz/1G80hRSlAzjn7yWx3 tdsXllAvDjpMwERuF6H6Stsxo8VxB25f6GoofdIPrz/VPCNEqocw1BCgGV7oJQS/ fxo/jql4HsiPJoNVswDQ6Mbl+CNSIndP/9/kyxghk9Tcb0ljSHcLvNqA0h5RjIfy v1KUg9tyDE3xazeB7eda5sCUOQazOt9lVMNfbkAnGqol9g== -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:01 2025 by rpki-client