This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/51MEzjLmcjuadpUA8onXgtFSxHY.roa File: 51MEzjLmcjuadpUA8onXgtFSxHY.roa (raw, json) Hash identifier: R/vR7QrSKnNleuSntvdowviheTnNk+hRKl+tUOSsj0k= Subject key identifier: E7:53:04:CE:32:E6:72:3B:9A:76:95:00:F2:89:D7:82:D1:52:C4:76 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019AA0A761FD7286DAB7213A42EC8343574A Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/51MEzjLmcjuadpUA8onXgtFSxHY.roa Signing time: Thu 20 Nov 2025 09:45:15 +0000 ROA not before: Thu 20 Nov 2025 09:45:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 146.19.21.0/24 maxlen: 24 212.46.37.0/24 maxlen: 24 2a05:9a40::/29 maxlen: 29 2a06:5fc0::/29 maxlen: 29 2a0b:ac00::/29 maxlen: 29 2a0f:9b40::/29 maxlen: 29 2a10:3c80::/29 maxlen: 29 2a10:3f80::/29 maxlen: 29 2a10:77c0::/29 maxlen: 29 2a13:b4c1::/32 maxlen: 32 2a13:b9c0::/29 maxlen: 29 2a13:bb40::/29 maxlen: 29 2a13:c240::/29 maxlen: 29 2a13:c340::/29 maxlen: 29 2a14:1100::/32 maxlen: 32 2a14:1101::/32 maxlen: 32 2a14:1102::/32 maxlen: 32 2a14:1103::/32 maxlen: 32 2a14:1104::/32 maxlen: 32 2a14:1105::/32 maxlen: 32 2a14:1106::/32 maxlen: 32 2a14:1107::/32 maxlen: 32 2a14:42c0::/29 maxlen: 29 2a14:62c0::/29 maxlen: 29 2a14:6a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 19:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:a7:61:fd:72:86:da:b7:21:3a:42:ec:83:43:57:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Nov 20 09:45:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e75304ce32e6723b9a769500f289d782d152c476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:85:16:c7:01:70:28:a7:94:1a:f5:28:ed: 3e:c9:39:60:4f:81:36:9f:42:c3:72:1f:5e:15:85: 46:c5:ad:ad:58:f1:38:75:bf:74:48:6e:9e:84:a2: 1c:b0:7f:89:fb:73:dc:4d:d7:fe:b5:eb:9d:1e:84: e6:e6:2f:78:67:50:56:ac:3e:43:3d:1c:36:a3:11: 6f:9f:61:9b:d0:aa:62:7f:46:87:d7:71:58:48:f7: 8a:bc:b8:a7:7e:16:5b:78:99:90:c4:f8:c3:b9:bb: fb:15:ac:55:18:bd:57:d2:53:5c:15:6f:85:a7:5c: 15:9c:4c:04:1a:79:f2:0e:bb:aa:e7:22:04:65:8c: f7:46:c7:a1:4c:65:de:c5:bf:29:b2:eb:e4:c2:0b: 41:bf:f8:ca:fe:46:ce:d7:b4:f0:86:51:0e:d7:20: b4:9c:54:16:d8:3e:08:fb:e5:87:c0:3a:9c:30:d1: 4f:be:25:b3:e6:21:56:c6:8e:dc:1b:79:e6:3b:6e: 5e:a3:5c:01:37:ca:02:59:ba:81:ac:20:bf:31:32: 0d:8c:a7:c4:87:e1:92:12:78:07:ec:43:62:91:80: 35:9a:d5:ef:9f:6a:66:69:27:23:ef:5c:3c:a6:84: f5:1d:16:12:16:99:97:e0:60:de:7a:66:4b:6f:ae: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:53:04:CE:32:E6:72:3B:9A:76:95:00:F2:89:D7:82:D1:52:C4:76 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/51MEzjLmcjuadpUA8onXgtFSxHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.21.0/24 212.46.37.0/24 IPv6: 2a05:9a40::/29 2a06:5fc0::/29 2a0b:ac00::/29 2a0f:9b40::/29 2a10:3c80::/29 2a10:3f80::/29 2a10:77c0::/29 2a13:b4c1::/32 2a13:b9c0::/29 2a13:bb40::/29 2a13:c240::/29 2a13:c340::/29 2a14:1100::/29 2a14:42c0::/29 2a14:62c0::/29 2a14:6a40::/32 Signature Algorithm: sha256WithRSAEncryption 77:b0:53:50:e5:6c:bc:fc:4a:43:0c:a2:df:1b:6f:34:a9:25: 81:e0:8b:0e:90:53:df:53:e9:12:be:f4:62:d3:9d:a0:8e:5c: dc:0e:38:95:79:6a:70:1b:39:d1:6d:03:8c:f0:c6:a6:d9:39: 8e:c3:7c:f6:79:af:a1:b0:5b:3c:19:8a:9b:22:01:95:0e:00: 70:f5:09:36:94:eb:cc:35:8c:8b:4b:4c:66:5c:f2:84:0b:e5: 8f:ab:b7:c7:8b:8e:50:54:b0:bf:f5:45:b3:a6:1e:cb:e5:c6: 92:84:76:7e:d8:a6:ee:d1:38:99:6d:25:79:23:78:a2:d6:34: 84:13:43:c2:90:39:e6:e7:e3:dc:6d:7f:3b:3e:7d:f9:c4:f7: f2:58:d2:df:2e:1e:44:87:43:23:3f:6a:47:ec:38:cb:62:1e: dc:e9:78:ab:92:e6:c1:6e:18:0d:78:db:bf:70:c6:5a:3f:f7: b4:52:ab:47:33:c8:0e:ca:47:97:5b:95:55:99:48:d0:84:a0: 17:a0:0c:62:ee:da:7b:27:a4:d6:33:dc:a2:55:e8:5e:cd:34: e5:05:20:b7:ea:f6:04:46:9e:2b:6d:a5:42:64:a4:99:2e:7c: 13:cc:88:d8:0d:b1:ff:1a:e2:40:9a:ec:7a:86:43:a0:ab:3c: ae:17:06:20 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZqgp2H9cobatyE6QuyDQ1dKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMTIwMDk0NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzUzMDRjZTMyZTY3MjNiOWE3Njk1MDBmMjg5ZDc4MmQxNTJjNDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOiFFscBcCinlBr1KO0+yTlgT4E2 n0LDch9eFYVGxa2tWPE4db90SG6ehKIcsH+J+3PcTdf+teudHoTm5i94Z1BWrD5D PRw2oxFvn2Gb0Kpif0aH13FYSPeKvLinfhZbeJmQxPjDubv7FaxVGL1X0lNcFW+F p1wVnEwEGnnyDruq5yIEZYz3RsehTGXexb8psuvkwgtBv/jK/kbO17TwhlEO1yC0 nFQW2D4I++WHwDqcMNFPviWz5iFWxo7cG3nmO25eo1wBN8oCWbqBrCC/MTINjKfE h+GSEngH7ENikYA1mtXvn2pmaScj71w8poT1HRYSFpmX4GDeemZLb67jywIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFOdTBM4y5nI7mnaVAPKJ14LRUsR2MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvNTFNRXpqTG1janVhZHBVQThvblhndEZTeEhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDASBAIAATAMAwQAkhMV AwQA1C4lMHYEAgACMHADBQMqBZpAAwUDKgZfwAMFAyoLrAADBQMqD5tAAwUDKhA8 gAMFAyoQP4ADBQMqEHfAAwUAKhO0wQMFAyoTucADBQMqE7tAAwUDKhPCQAMFAyoT w0ADBQMqFBEAAwUDKhRCwAMFAyoUYsADBQAqFGpAMA0GCSqGSIb3DQEBCwUAA4IB AQB3sFNQ5Wy8/EpDDKLfG280qSWB4IsOkFPfU+kSvvRi052gjlzcDjiVeWpwGznR bQOM8Mam2TmOw3z2ea+hsFs8GYqbIgGVDgBw9Qk2lOvMNYyLS0xmXPKEC+WPq7fH i45QVLC/9UWzph7L5caShHZ+2Kbu0TiZbSV5I3ii1jSEE0PCkDnm5+PcbX87Pn35 xPfyWNLfLh5Eh0MjP2pH7DjLYh7c6XirkubBbhgNeNu/cMZaP/e0UqtHM8gOykeX W5VVmUjQhKAXoAxi7tp7J6TWM9yiVehezTTlBSC36vYERp4rbaVCZKSZLnwTzIjY DbH/GuJAmux6hkOgqzyuFwYg -----END CERTIFICATE-----Generated at Fri Nov 21 04:43:25 2025 by rpki-client