This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/llN7jJXePxeXTl7APnYUp7xC37Q.roa File: llN7jJXePxeXTl7APnYUp7xC37Q.roa (raw, json) Hash identifier: IBZyJ8kvFwokvb7fKL9lzrLA5B2sf8H1vS1u/kDxkLo= Subject key identifier: 96:53:7B:8C:95:DE:3F:17:97:4E:5E:C0:3E:76:14:A7:BC:42:DF:B4 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019ADE4002F753F92A4D767A180FBA62CB72 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/llN7jJXePxeXTl7APnYUp7xC37Q.roa Signing time: Tue 02 Dec 2025 08:48:48 +0000 ROA not before: Tue 02 Dec 2025 08:48:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.11.190.0/24 maxlen: 24 45.11.191.0/24 maxlen: 24 188.209.137.0/24 maxlen: 24 188.209.139.0/24 maxlen: 24 194.15.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:40:02:f7:53:f9:2a:4d:76:7a:18:0f:ba:62:cb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Dec 2 08:48:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=96537b8c95de3f17974e5ec03e7614a7bc42dfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:7a:ec:ff:06:57:22:d5:6b:a9:64:2f:5b: 2e:e3:ba:5d:50:4c:84:cc:5a:f1:9d:bb:1b:e0:28: e8:1c:7b:83:95:10:c9:65:91:aa:3c:c0:c1:ed:c2: b7:7a:6a:40:6f:ef:66:20:d5:03:6c:86:a6:07:81: 5a:dc:ce:3b:cd:fa:31:65:64:c8:c9:38:14:2c:2e: 2c:70:16:18:b8:d1:ba:8d:32:a2:9b:2c:95:bc:0d: 8a:66:c3:53:5d:1b:85:a7:9d:11:93:e5:a3:1a:8e: f1:b9:8e:f1:5a:6a:a6:0f:0c:13:51:38:73:a3:04: 72:28:76:c4:3b:43:ba:5f:82:dc:ed:ac:95:6c:47: bc:8e:fd:18:cc:c4:ac:48:1a:db:ca:ac:06:09:6b: fd:41:d8:92:89:79:1c:46:57:c7:95:98:91:8c:18: 8f:b1:af:e0:08:ec:18:f1:b8:57:23:5c:1d:44:43: c7:24:43:40:3d:7a:af:19:d6:ea:57:52:be:e9:b7: 51:b8:54:9d:10:63:84:ad:04:05:80:3a:34:2e:e8: 0f:b6:78:a5:50:67:79:66:f8:19:95:cd:5a:61:c3: 10:7b:08:1c:ed:34:35:a4:15:61:99:53:73:0c:82: a1:cc:46:d7:f2:bd:6b:4e:61:de:32:a4:4d:cb:90: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:53:7B:8C:95:DE:3F:17:97:4E:5E:C0:3E:76:14:A7:BC:42:DF:B4 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/llN7jJXePxeXTl7APnYUp7xC37Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.190.0/23 188.209.137.0/24 188.209.139.0/24 194.15.96.0/24 Signature Algorithm: sha256WithRSAEncryption af:07:a7:c0:8a:27:bf:53:63:52:8c:54:20:47:22:95:5c:62: 33:9d:68:34:e3:34:e1:ef:e8:60:38:51:02:0c:88:d4:98:46: cb:51:bf:d7:a6:47:d9:64:f5:cb:ec:a9:d2:fa:87:5d:12:ed: 49:08:12:d1:72:94:9a:4e:f3:18:66:85:4f:5c:37:64:bc:6c: a2:92:b6:25:ad:8d:e6:61:7c:59:2c:22:b4:51:7c:6f:e2:5b: d9:c0:ab:f3:99:ad:1a:09:36:af:71:6e:e0:d6:97:ba:83:a5: d9:65:7b:cb:0f:c7:95:49:f9:f1:e8:68:b7:97:6b:96:d6:cc: d9:a9:4f:4f:80:d4:9f:e2:58:ff:82:ff:e9:e2:56:c8:26:d1: 48:b1:72:38:a9:94:44:e9:84:f7:4e:30:55:b7:db:eb:9e:b7: 97:7c:79:dc:6b:3d:a5:d2:1f:f7:51:13:a1:83:10:fa:27:a4: 3b:49:49:74:98:6e:1d:ca:3e:55:9f:58:ad:fe:09:55:d6:42: 1b:9e:70:2f:90:40:9e:bb:c2:24:5b:ae:64:39:5a:3e:ad:6f: ad:54:fa:e1:16:ec:c9:b7:c7:f0:7b:3d:24:64:94:98:e7:7e: e3:f3:a2:b4:a0:fd:3c:b0:73:65:2a:2b:04:f9:45:bd:02:27: e7:ed:f0:86 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZreQAL3U/kqTXZ6GA+6YstyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjUxMjAyMDg0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjUzN2I4Yzk1ZGUzZjE3OTc0ZTVlYzAzZTc2MTRhN2JjNDJkZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjB67P8GVyLVa6lkL1su47pdUEyE zFrxnbsb4CjoHHuDlRDJZZGqPMDB7cK3empAb+9mINUDbIamB4Fa3M47zfoxZWTI yTgULC4scBYYuNG6jTKimyyVvA2KZsNTXRuFp50Rk+WjGo7xuY7xWmqmDwwTUThz owRyKHbEO0O6X4Lc7ayVbEe8jv0YzMSsSBrbyqwGCWv9QdiSiXkcRlfHlZiRjBiP sa/gCOwY8bhXI1wdREPHJENAPXqvGdbqV1K+6bdRuFSdEGOErQQFgDo0LugPtnil UGd5ZvgZlc1aYcMQewgc7TQ1pBVhmVNzDIKhzEbX8r1rTmHeMqRNy5CF2QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJZTe4yV3j8Xl05ewD52FKe8Qt+0MB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvbGxON2pKWGVQeGVYVGw3QVBuWVVwN3hDMzdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLQu+AwQA vNGJAwQAvNGLAwQAwg9gMA0GCSqGSIb3DQEBCwUAA4IBAQCvB6fAiie/U2NSjFQg RyKVXGIznWg04zTh7+hgOFECDIjUmEbLUb/XpkfZZPXL7KnS+oddEu1JCBLRcpSa TvMYZoVPXDdkvGyikrYlrY3mYXxZLCK0UXxv4lvZwKvzma0aCTavcW7g1pe6g6XZ ZXvLD8eVSfnx6Gi3l2uW1szZqU9PgNSf4lj/gv/p4lbIJtFIsXI4qZRE6YT3TjBV t9vrnreXfHncaz2l0h/3UROhgxD6J6Q7SUl0mG4dyj5Vn1it/glV1kIbnnAvkECe u8IkW65kOVo+rW+tVPrhFuzJt8fwez0kZJSY537j86K0oP08sHNlKisE+UW9Aifn 7fCG -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:12 2025 by rpki-client