This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9JwzTiQ6kivuP8hXy95hDJgRqoY.roa File: 9JwzTiQ6kivuP8hXy95hDJgRqoY.roa (raw, json) Hash identifier: TrQamgmgS1U6T4YKlTnnXCh3kMdDzHN/FElYvzdBOBc= Subject key identifier: F4:9C:33:4E:24:3A:92:2B:EE:3F:C8:57:CB:DE:61:0C:98:11:AA:86 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B3733A6BCBF308A1750D81E8D8717D763 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9JwzTiQ6kivuP8hXy95hDJgRqoY.roa Signing time: Fri 19 Dec 2025 15:21:30 +0000 ROA not before: Fri 19 Dec 2025 15:21:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214305 IP address blocks: 45.132.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:33:a6:bc:bf:30:8a:17:50:d8:1e:8d:87:17:d7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Dec 19 15:21:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f49c334e243a922bee3fc857cbde610c9811aa86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:74:6f:7c:03:4b:d3:c8:74:f3:79:31:b1:61: ec:46:66:c8:18:ea:41:90:5c:d2:74:f7:1f:89:f1: 70:9e:b3:de:92:7a:52:7f:85:67:fc:a9:dd:b7:90: 57:3d:ef:87:79:a5:44:91:11:94:e4:b2:22:b2:80: 94:f2:54:be:fd:aa:18:e9:92:ca:9e:d9:b4:cd:cc: 27:98:32:bd:3a:39:83:56:e2:5c:89:44:5e:e7:d2: 61:27:62:eb:92:b8:7e:6f:5f:a7:4d:f1:75:09:ef: d1:1e:e2:78:50:6b:8c:a2:96:00:7d:d6:ea:7f:2b: 30:14:97:04:2c:59:96:a1:65:12:c0:55:0b:70:5d: 4c:70:aa:32:34:e9:eb:fa:5c:5a:d8:95:2b:ec:b9: 18:5c:27:ca:3e:37:7f:73:55:6e:1a:7a:14:3c:ae: 7d:f0:f8:20:70:87:f4:99:b7:d9:45:52:7c:d8:b0: 14:5d:52:e8:de:cc:8f:16:60:6a:b0:7f:7d:fd:c5: 65:4e:4e:e3:2d:44:2a:6a:86:af:21:1b:73:a2:04: 4e:96:df:2d:0e:53:84:09:08:76:23:7b:36:d9:9b: a0:1c:04:cf:7a:13:19:bb:e2:9d:be:fc:1c:1a:90: 0c:f6:0e:47:01:c8:f5:c8:ca:c2:6c:82:1c:7b:d8: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9C:33:4E:24:3A:92:2B:EE:3F:C8:57:CB:DE:61:0C:98:11:AA:86 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9JwzTiQ6kivuP8hXy95hDJgRqoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.183.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:6a:28:8c:5d:17:7f:ad:a1:29:6f:02:c2:6a:21:63:6a:85: 1d:ef:bb:df:e8:e3:a4:c7:7f:35:52:36:ab:92:b5:38:86:19: b9:bb:14:7f:45:1c:72:59:86:74:ca:66:19:95:e7:a7:9c:24: c9:24:af:11:14:b1:fd:a6:a7:1b:e5:23:37:14:d5:a3:98:46: 71:5a:7b:50:3b:e2:30:85:f5:40:4e:e2:1a:c0:aa:92:ab:5a: 4a:46:35:ca:89:77:24:25:04:ee:1c:ab:af:95:03:ce:15:84: 2a:3e:18:86:48:d9:8a:56:69:18:25:a1:08:8e:f6:c3:ef:f5: 73:07:3f:aa:95:72:6f:54:cb:f0:13:d7:f3:45:27:01:78:6f: da:e8:58:bf:4b:88:37:6c:29:fc:6a:a2:50:ee:c0:ff:70:16: 38:c9:3e:36:9f:11:28:98:8e:22:21:0a:e1:5f:5d:a4:d3:bb: 21:b3:3b:6f:65:ad:e8:4c:61:67:95:a5:d7:65:82:d9:92:75: b4:4a:5a:72:b5:a8:47:c9:84:22:ff:ef:58:cd:d7:a1:ce:b5: dd:9e:4b:25:23:b7:be:7d:38:8c:db:88:5c:c8:54:27:c2:e4: 61:b8:2f:1a:2c:0b:3d:74:04:f7:92:4f:42:49:a5:0d:7f:11: a3:9b:98:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs3M6a8vzCKF1DYHo2HF9djMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMjE5MTUyMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDljMzM0ZTI0M2E5MjJiZWUzZmM4NTdjYmRlNjEwYzk4MTFhYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/XRvfANL08h083kxsWHsRmbIGOpB kFzSdPcfifFwnrPeknpSf4Vn/Kndt5BXPe+HeaVEkRGU5LIisoCU8lS+/aoY6ZLK ntm0zcwnmDK9OjmDVuJciURe59JhJ2Lrkrh+b1+nTfF1Ce/RHuJ4UGuMopYAfdbq fyswFJcELFmWoWUSwFULcF1McKoyNOnr+lxa2JUr7LkYXCfKPjd/c1VuGnoUPK59 8PggcIf0mbfZRVJ82LAUXVLo3syPFmBqsH99/cVlTk7jLUQqaoavIRtzogROlt8t DlOECQh2I3s22ZugHATPehMZu+KdvvwcGpAM9g5HAcj1yMrCbIIce9j8CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPScM04kOpIr7j/IV8veYQyYEaqGMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvOUp3elRpUTZraXZ1UDhoWHk5NWhESmdScW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYS3MA0G CSqGSIb3DQEBCwUAA4IBAQB+aiiMXRd/raEpbwLCaiFjaoUd77vf6OOkx381Ujar krU4hhm5uxR/RRxyWYZ0ymYZleennCTJJK8RFLH9pqcb5SM3FNWjmEZxWntQO+Iw hfVATuIawKqSq1pKRjXKiXckJQTuHKuvlQPOFYQqPhiGSNmKVmkYJaEIjvbD7/Vz Bz+qlXJvVMvwE9fzRScBeG/a6Fi/S4g3bCn8aqJQ7sD/cBY4yT42nxEomI4iIQrh X12k07shsztvZa3oTGFnlaXXZYLZknW0SlpytahHyYQi/+9YzdehzrXdnkslI7e+ fTiM24hcyFQnwuRhuC8aLAs9dAT3kk9CSaUNfxGjm5g0 -----END CERTIFICATE-----Generated at Sat Dec 20 16:14:09 2025 by rpki-client