This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9CdRRj25RbHBipMYUmlf2qoEgME.roa File: 9CdRRj25RbHBipMYUmlf2qoEgME.roa (raw, json) Hash identifier: DGgLKZkW/cqd4TyF3p9P2EqZZPZqolHW0Lt361eS/9k= Subject key identifier: F4:27:51:46:3D:B9:45:B1:C1:8A:93:18:52:69:5F:DA:AA:04:80:C1 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019A7E33879E51661ED013E8FFFA0564092F Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9CdRRj25RbHBipMYUmlf2qoEgME.roa Signing time: Thu 13 Nov 2025 17:11:37 +0000 ROA not before: Thu 13 Nov 2025 17:11:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.67.136.0/24 maxlen: 24 45.92.218.0/24 maxlen: 24 45.134.36.0/24 maxlen: 24 45.137.202.0/24 maxlen: 24 45.141.116.0/22 maxlen: 22 45.142.105.0/24 maxlen: 24 45.151.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:33:87:9e:51:66:1e:d0:13:e8:ff:fa:05:64:09:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Nov 13 17:11:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f42751463db945b1c18a931852695fdaaa0480c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:8e:d5:5d:d8:8e:df:9c:94:d8:07:44:c4: 16:24:1e:a9:95:16:bd:23:fd:88:69:c7:df:1f:02: c4:07:16:85:11:8b:98:66:1f:39:85:23:8c:d7:f3: 0c:5e:94:dd:13:ec:bf:3d:6f:ec:de:5e:54:b5:c9: 1d:6a:57:4e:2f:6e:52:00:eb:6c:95:5e:8f:0e:fe: 78:5c:c8:7d:0c:9a:d2:47:bb:eb:df:9e:2d:82:41: 86:d1:6c:8f:20:37:e5:61:ed:c4:e6:e0:f2:11:a1: 36:67:df:f5:f3:a9:ef:fd:40:f4:52:2f:a4:03:ab: 51:67:99:46:66:2a:a1:26:a2:ee:d5:66:a4:20:92: 08:30:cb:40:af:49:55:5f:72:52:db:66:90:a1:b6: f0:4b:84:ed:0b:64:c7:a7:4b:ab:0e:42:a4:48:aa: 85:75:18:6e:c8:38:f6:40:e5:c8:8a:d7:f3:81:0c: 50:86:20:2f:ba:af:d6:00:d9:ac:88:ac:1d:8d:0b: ca:61:0f:06:f7:6f:5b:9a:8a:ca:a3:4f:2a:04:c3: 36:e5:88:03:4d:8f:20:9b:4e:51:2a:92:b9:57:b4: a4:0c:5a:67:75:90:a5:c8:cf:6e:5a:ff:d2:7c:4a: 45:88:5a:b0:16:f9:15:26:f0:f2:04:3f:a4:a9:9d: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:27:51:46:3D:B9:45:B1:C1:8A:93:18:52:69:5F:DA:AA:04:80:C1 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9CdRRj25RbHBipMYUmlf2qoEgME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.136.0/24 45.92.218.0/24 45.134.36.0/24 45.137.202.0/24 45.141.116.0/22 45.142.105.0/24 45.151.56.0/24 Signature Algorithm: sha256WithRSAEncryption 04:d0:ab:e7:6f:d3:ca:bf:ad:f5:5b:6b:d8:5e:5e:ae:4b:04: cc:95:41:0a:7a:f5:29:86:84:b2:d5:1b:b1:f5:a2:15:3f:d8: bd:20:48:f2:ba:f1:8a:f9:78:21:89:ba:97:a7:21:19:c7:1f: 8f:4e:93:41:f8:20:0c:65:73:a2:20:d6:80:2f:5e:67:6b:10: 69:71:ad:a7:9b:a9:37:b1:ac:42:f6:54:0e:9a:ce:0f:30:24: 7a:a6:5d:34:ce:f5:11:27:11:04:21:7a:8f:d0:98:88:95:20: 54:3c:e7:bc:7a:56:d2:3e:b3:96:51:c2:09:ac:12:d2:88:5a: fd:e0:31:21:01:5d:f9:bc:6f:f1:ad:1c:81:e3:ca:7c:e1:81: ce:93:2f:4f:ea:35:80:9a:b8:dc:50:e4:0d:4c:b4:86:6b:32: 66:72:d7:4d:24:95:0e:f8:d4:c6:d6:6e:2d:25:d9:b9:01:7f: 13:41:c2:5b:6e:25:06:73:76:bf:2c:f8:a5:f1:c0:4d:95:2e: f4:6a:ce:7d:3d:06:d4:f3:11:d0:c7:81:5f:c2:59:4e:2b:ef: e7:4d:a8:b5:49:c4:61:d4:bb:d5:1e:cc:7d:0b:a6:7c:78:e1: 20:dd:b8:87:1e:a9:32:b0:e8:73:fc:1a:7d:78:3a:cc:28:0f: 9c:b3:fa:59 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZp+M4eeUWYe0BPo//oFZAkvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjUxMTEzMTcxMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDI3NTE0NjNkYjk0NWIxYzE4YTkzMTg1MjY5NWZkYWFhMDQ4MGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+OO1V3Yjt+clNgHRMQWJB6plRa9 I/2IacffHwLEBxaFEYuYZh85hSOM1/MMXpTdE+y/PW/s3l5UtckdaldOL25SAOts lV6PDv54XMh9DJrSR7vr354tgkGG0WyPIDflYe3E5uDyEaE2Z9/186nv/UD0Ui+k A6tRZ5lGZiqhJqLu1WakIJIIMMtAr0lVX3JS22aQobbwS4TtC2THp0urDkKkSKqF dRhuyDj2QOXIitfzgQxQhiAvuq/WANmsiKwdjQvKYQ8G929bmorKo08qBMM25YgD TY8gm05RKpK5V7SkDFpndZClyM9uWv/SfEpFiFqwFvkVJvDyBD+kqZ0iLwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFPQnUUY9uUWxwYqTGFJpX9qqBIDBMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvOUNkUlJqMjVSYkhCaXBNWVVtbGYycW9FZ01FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALUOIAwQA LVzaAwQALYYkAwQALYnKAwQCLY10AwQALY5pAwQALZc4MA0GCSqGSIb3DQEBCwUA A4IBAQAE0Kvnb9PKv631W2vYXl6uSwTMlUEKevUphoSy1Rux9aIVP9i9IEjyuvGK +XghibqXpyEZxx+PTpNB+CAMZXOiINaAL15naxBpca2nm6k3saxC9lQOms4PMCR6 pl00zvURJxEEIXqP0JiIlSBUPOe8elbSPrOWUcIJrBLSiFr94DEhAV35vG/xrRyB 48p84YHOky9P6jWAmrjcUOQNTLSGazJmctdNJJUO+NTG1m4tJdm5AX8TQcJbbiUG c3a/LPil8cBNlS70as59PQbU8xHQx4FfwllOK+/nTai1ScRh1LvVHsx9C6Z8eOEg 3biHHqkysOhz/Bp9eDrMKA+cs/pZ -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:45 2025 by rpki-client