This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/gZPpaGdB-IQFDiAnlSFV-CdGFAk.roa File: gZPpaGdB-IQFDiAnlSFV-CdGFAk.roa (raw, json) Hash identifier: 1uQ18FR87Qkggs6mA4a4E9yey6Lcw5DNg+4ly1If6Z0= Subject key identifier: 81:93:E9:68:67:41:F8:84:05:0E:20:27:95:21:55:F8:27:46:14:09 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019ADE3F191FCA51C1A6E9D00320C990790F Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/gZPpaGdB-IQFDiAnlSFV-CdGFAk.roa Signing time: Tue 02 Dec 2025 08:47:48 +0000 ROA not before: Tue 02 Dec 2025 08:47:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 45.11.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 02:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:3f:19:1f:ca:51:c1:a6:e9:d0:03:20:c9:90:79:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Dec 2 08:47:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8193e9686741f884050e2027952155f827461409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:c4:f0:4a:bb:c8:eb:f5:45:41:e8:9d:42: 6c:56:6f:cf:92:91:da:8f:73:54:24:2b:e8:57:24: 4c:3a:44:a2:61:ff:1c:01:c0:b0:2f:9c:22:c8:ae: 2a:11:aa:28:18:0e:49:5a:e7:d8:26:be:e6:2f:b4: a4:a6:96:2a:25:7b:14:a7:17:4b:73:52:90:eb:8d: 2a:bf:60:0b:8d:0b:68:e4:12:25:4c:d6:b5:ac:4a: 66:48:1e:0a:ab:47:14:af:d7:33:ee:6b:20:90:f0: b2:8f:3b:3c:d7:e9:3b:11:79:29:9b:55:56:c6:18: ab:6d:57:f5:2f:0e:10:9c:1e:53:34:90:81:88:a1: 7c:93:56:d0:ce:43:d4:08:72:91:16:3e:46:e7:cc: 37:ca:8a:b2:28:b1:ab:cd:51:77:72:35:fb:ae:75: 56:e2:61:c5:36:ed:56:55:25:c6:40:4b:5f:4e:0a: d3:79:aa:55:83:46:41:ce:aa:99:2b:9c:1a:12:2d: 58:a2:2d:a7:4d:91:43:b5:22:11:32:cb:d3:e1:54: a5:08:59:81:e9:df:23:59:e3:73:ac:ae:e5:3b:13: bc:f0:1a:02:90:99:f8:5e:74:10:9f:5d:da:fe:52: e8:3b:de:0d:98:65:7c:d6:73:f0:9d:d2:e2:84:3b: dc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:93:E9:68:67:41:F8:84:05:0E:20:27:95:21:55:F8:27:46:14:09 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/gZPpaGdB-IQFDiAnlSFV-CdGFAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.189.0/24 Signature Algorithm: sha256WithRSAEncryption 70:5d:26:50:7d:91:0c:ca:ce:18:c3:96:6b:45:cb:de:4a:57: 6d:22:3d:bd:36:32:67:9d:b0:56:2a:e6:45:38:13:9c:17:79: 9f:7c:7a:a4:92:76:d6:a5:56:91:ac:7c:e0:c4:2c:35:68:cb: c8:fc:57:32:89:f9:c2:72:7e:fb:b7:a6:fe:32:9e:d0:13:f9: 6f:df:5f:39:f1:3a:32:a7:2b:0f:c5:9a:6b:ec:a8:73:ce:21: 28:fd:3b:5a:e2:2e:ed:5f:4e:58:7b:ac:d6:11:3a:77:c2:3f: f6:28:3c:60:b4:67:3b:85:64:40:50:d0:e7:fd:53:01:d7:9c: b0:48:78:b7:8b:f1:6a:21:20:6a:b6:0f:8a:b3:cd:c0:e7:4a: 57:0c:73:70:75:c8:64:25:06:52:6e:91:fd:fa:26:9f:a4:87: 9a:da:09:03:9b:95:55:5c:10:d3:2a:4c:59:2a:82:58:5d:51: bd:d5:87:fd:1e:2f:6f:57:97:f6:23:64:ac:95:a3:11:75:7e: 9c:12:23:f4:13:2b:a0:7a:1b:b0:a4:92:88:d6:51:ad:a6:18: 19:4e:60:fe:d2:0f:8f:25:cc:1d:0d:ec:9e:8f:e1:2c:06:76: 80:f9:26:4e:43:b2:8e:36:ff:e6:2e:00:c4:6f:5a:d6:41:f4: b3:3f:f1:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrePxkfylHBpunQAyDJkHkPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjUxMjAyMDg0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTkzZTk2ODY3NDFmODg0MDUwZTIwMjc5NTIxNTVmODI3NDYxNDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncLE8Eq7yOv1RUHonUJsVm/PkpHa j3NUJCvoVyRMOkSiYf8cAcCwL5wiyK4qEaooGA5JWufYJr7mL7SkppYqJXsUpxdL c1KQ640qv2ALjQto5BIlTNa1rEpmSB4Kq0cUr9cz7msgkPCyjzs81+k7EXkpm1VW xhirbVf1Lw4QnB5TNJCBiKF8k1bQzkPUCHKRFj5G58w3yoqyKLGrzVF3cjX7rnVW 4mHFNu1WVSXGQEtfTgrTeapVg0ZBzqqZK5waEi1Yoi2nTZFDtSIRMsvT4VSlCFmB 6d8jWeNzrK7lOxO88BoCkJn4XnQQn13a/lLoO94NmGV81nPwndLihDvcZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIGT6WhnQfiEBQ4gJ5UhVfgnRhQJMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvZ1pQcGFHZEItSVFGRGlBbmxTRlYtQ2RHRkFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu9MA0G CSqGSIb3DQEBCwUAA4IBAQBwXSZQfZEMys4Yw5ZrRcveSldtIj29NjJnnbBWKuZF OBOcF3mffHqkknbWpVaRrHzgxCw1aMvI/FcyifnCcn77t6b+Mp7QE/lv31858Toy pysPxZpr7KhzziEo/Tta4i7tX05Ye6zWETp3wj/2KDxgtGc7hWRAUNDn/VMB15yw SHi3i/FqISBqtg+Ks83A50pXDHNwdchkJQZSbpH9+iafpIea2gkDm5VVXBDTKkxZ KoJYXVG91Yf9Hi9vV5f2I2SslaMRdX6cEiP0EyugehuwpJKI1lGtphgZTmD+0g+P JcwdDeyej+EsBnaA+SZOQ7KONv/mLgDEb1rWQfSzP/Gg -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:10 2025 by rpki-client