This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/faLZabkttmhQjpEN-Bc_tWuDhTs.roa File: faLZabkttmhQjpEN-Bc_tWuDhTs.roa (raw, json) Hash identifier: lRV65CKZCnAoaPBLFYsrUHbZ+991MM07YdPM9YlxeOg= Subject key identifier: 7D:A2:D9:69:B9:2D:B6:68:50:8E:91:0D:F8:17:3F:B5:6B:83:85:3B Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B075E777C40BE8893E7F009D0C8FD80F0 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/faLZabkttmhQjpEN-Bc_tWuDhTs.roa Signing time: Wed 10 Dec 2025 08:26:30 +0000 ROA not before: Wed 10 Dec 2025 08:26:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203083 IP address blocks: 45.9.31.0/24 maxlen: 24 193.28.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:5e:77:7c:40:be:88:93:e7:f0:09:d0:c8:fd:80:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Dec 10 08:26:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7da2d969b92db668508e910df8173fb56b83853b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:1f:f4:be:5e:44:f0:e0:96:2f:99:39:e7: 4d:61:b2:47:07:84:35:40:58:4f:db:a5:0b:60:bc: ff:58:7d:50:56:df:d3:d6:5f:8d:8e:de:f7:64:4f: e9:4a:57:67:ad:c2:55:75:db:55:af:97:f7:f8:02: 4f:91:c6:5c:f1:83:ac:f9:b1:6f:e6:5f:7c:17:9b: ab:4b:aa:ef:5b:77:60:74:ea:ec:c8:39:a3:83:28: 76:c7:01:1a:e4:54:24:0e:cc:f0:1f:84:9d:8e:67: d4:a8:65:8b:ea:9c:49:fd:fe:fa:21:c6:ba:9e:ab: 15:46:99:69:6c:a0:3f:4a:82:25:f2:33:66:98:f9: 6f:d4:c3:de:14:8c:e7:72:ec:77:73:2b:87:be:54: 7a:6f:26:4f:a0:af:b6:c2:55:8f:ef:19:10:b6:4e: a9:25:30:a6:ec:06:9e:ee:a3:a8:59:42:78:a9:79: 0a:a2:74:14:c3:47:d2:de:8b:ee:4e:c7:ef:cf:af: ad:2b:73:3b:07:32:7f:b0:54:48:84:67:97:2b:f9: 0e:d6:0d:bc:2a:28:bf:14:21:bd:65:65:1f:22:af: fd:fd:7c:34:1f:03:61:af:2e:55:7f:00:38:62:e8: 59:7b:44:e1:74:a2:f8:b1:58:0e:79:6d:4e:43:4f: ab:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:D9:69:B9:2D:B6:68:50:8E:91:0D:F8:17:3F:B5:6B:83:85:3B X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/faLZabkttmhQjpEN-Bc_tWuDhTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.31.0/24 193.28.177.0/24 Signature Algorithm: sha256WithRSAEncryption 89:f1:f1:d0:ab:15:8f:c9:f1:10:f3:ba:21:27:38:ae:2c:92: 24:32:02:44:d6:44:3d:cb:d0:43:ae:2a:48:01:02:67:ef:12: 60:48:2c:75:26:2e:27:10:99:d1:97:58:f1:b4:42:c6:59:bf: 4b:5a:5e:ea:f9:f1:46:6d:70:79:02:92:09:86:f1:7a:d8:ea: 61:f8:53:6f:41:2b:7c:1a:cb:c8:47:be:bc:b1:5f:b6:ce:d4: 60:75:d0:f4:2d:8f:2a:60:b2:e1:5e:79:9a:d9:0d:aa:14:ae: c2:b6:de:66:6c:1e:1d:c5:9b:4a:5c:c7:62:84:31:9c:3b:a9: b3:5e:bd:0f:07:b3:b2:c8:cc:37:0e:9a:66:d3:c7:54:0a:78: 42:6e:17:88:16:85:8b:af:f1:40:2a:21:1f:b9:39:57:98:26: 9f:b8:4d:54:00:62:42:f5:1a:e1:2b:61:0e:02:bd:89:69:01: 1f:9a:9f:f7:42:88:c8:31:d3:fe:5b:1d:40:df:c2:11:1b:28: f3:bb:ef:d9:a5:72:13:e9:24:2b:0a:04:01:47:d9:d7:1f:8f: 84:4f:0f:a4:da:c8:6b:ae:d8:3a:a4:c1:bc:6a:5e:a9:52:65: 31:2d:97:cd:c7:d7:27:81:72:68:3a:90:a9:89:8f:0c:5f:79: 83:55:c8:ab -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsHXnd8QL6Ik+fwCdDI/YDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMjEwMDgyNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGEyZDk2OWI5MmRiNjY4NTA4ZTkxMGRmODE3M2ZiNTZiODM4NTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHwf9L5eRPDgli+ZOedNYbJHB4Q1 QFhP26ULYLz/WH1QVt/T1l+Njt73ZE/pSldnrcJVddtVr5f3+AJPkcZc8YOs+bFv 5l98F5urS6rvW3dgdOrsyDmjgyh2xwEa5FQkDszwH4SdjmfUqGWL6pxJ/f76Ica6 nqsVRplpbKA/SoIl8jNmmPlv1MPeFIzncux3cyuHvlR6byZPoK+2wlWP7xkQtk6p JTCm7Aae7qOoWUJ4qXkKonQUw0fS3ovuTsfvz6+tK3M7BzJ/sFRIhGeXK/kO1g28 Kii/FCG9ZWUfIq/9/Xw0HwNhry5VfwA4YuhZe0ThdKL4sVgOeW1OQ0+rWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH2i2Wm5LbZoUI6RDfgXP7Vrg4U7MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvZmFMWmFia3R0bWhRanBFTi1CY190V3VEaFRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQkfAwQA wRyxMA0GCSqGSIb3DQEBCwUAA4IBAQCJ8fHQqxWPyfEQ87ohJziuLJIkMgJE1kQ9 y9BDripIAQJn7xJgSCx1Ji4nEJnRl1jxtELGWb9LWl7q+fFGbXB5ApIJhvF62Oph +FNvQSt8GsvIR768sV+2ztRgddD0LY8qYLLhXnma2Q2qFK7Ctt5mbB4dxZtKXMdi hDGcO6mzXr0PB7OyyMw3Dppm08dUCnhCbheIFoWLr/FAKiEfuTlXmCafuE1UAGJC 9RrhK2EOAr2JaQEfmp/3QojIMdP+Wx1A38IRGyjzu+/ZpXIT6SQrCgQBR9nXH4+E Tw+k2shrrtg6pMG8al6pUmUxLZfNx9cngXJoOpCpiY8MX3mDVcir -----END CERTIFICATE-----Generated at Mon Dec 15 01:24:48 2025 by rpki-client