This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mAliMArUmeDltoxHl02OqrxoCJY.roa File: mAliMArUmeDltoxHl02OqrxoCJY.roa (raw, json) Hash identifier: +m9SPyFh2km+SGU6TDB8gaIZJAfCsZcIjO6U8dM+w8Q= Subject key identifier: 98:09:62:30:0A:D4:99:E0:E5:B6:8C:47:97:4D:8E:AA:BC:68:08:96 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019ABCE28F8125E268663DC3A66F0C38D176 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mAliMArUmeDltoxHl02OqrxoCJY.roa Signing time: Tue 25 Nov 2025 21:19:15 +0000 ROA not before: Tue 25 Nov 2025 21:19:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213186 IP address blocks: 45.155.65.0/24 maxlen: 24 2a10:3c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 00:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:e2:8f:81:25:e2:68:66:3d:c3:a6:6f:0c:38:d1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Nov 25 21:19:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=980962300ad499e0e5b68c47974d8eaabc680896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:29:08:af:5e:ee:bf:e7:13:86:fd:ef:8f:6d: 28:b0:ad:04:8f:cb:aa:6f:f7:66:19:66:f5:6e:bb: 78:b6:2e:02:e0:62:70:1f:1d:07:37:43:66:9b:d6: 82:ee:b7:df:33:8c:78:a2:00:63:fa:c1:82:e5:ee: cd:64:9e:7f:8a:24:98:2b:d2:01:9f:f5:24:f2:c0: 7a:fb:71:5b:43:fd:b7:8f:96:1f:a7:87:9b:3d:14: 86:af:23:05:3f:17:1a:99:fa:08:c0:c9:11:aa:df: bb:a9:e8:d4:6d:be:65:f2:1f:86:30:d9:b3:a6:14: f1:34:24:f7:26:1e:f5:0e:75:50:e0:ff:cc:98:85: b7:90:86:aa:f0:ac:40:2d:dc:cd:09:bf:62:2b:87: 1a:09:3e:e4:ad:93:e9:20:f0:38:3a:e7:bf:f7:88: f8:f8:4d:16:2b:af:94:b8:36:df:93:0a:58:cf:ee: 60:bf:ae:2c:62:39:46:1a:a4:a0:b4:63:25:c6:1a: c2:42:77:34:2c:b3:02:cb:27:c0:dc:f1:bd:61:e1: 7b:a1:97:39:84:a8:68:cf:e1:a3:76:cf:1b:29:e5: 43:e6:5c:11:79:d0:60:4b:f7:62:b1:f0:ba:23:c1: 9f:a7:ad:44:53:57:d4:03:fc:8a:50:e6:6e:ed:2c: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:09:62:30:0A:D4:99:E0:E5:B6:8C:47:97:4D:8E:AA:BC:68:08:96 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mAliMArUmeDltoxHl02OqrxoCJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.65.0/24 IPv6: 2a10:3c80::/48 Signature Algorithm: sha256WithRSAEncryption 3f:89:0d:5a:b1:d5:cc:90:fc:73:eb:03:7f:c3:aa:9f:be:b9: 74:d9:51:9b:6a:b8:91:6d:ee:c2:e9:36:43:37:07:44:fc:17: 1c:87:ed:4b:d2:94:87:ff:26:90:99:8f:c3:0b:f7:8f:88:20: ef:09:56:72:ba:c3:d5:c1:2f:ef:6b:91:7e:5e:02:35:04:3b: e3:5b:54:04:28:1b:89:4b:b2:48:5f:39:3e:ec:ea:e2:5a:7c: 0c:f4:1f:9e:1f:d3:b4:07:6d:aa:f0:5d:0c:ae:e5:1f:46:5b: ce:8a:88:b5:a6:6e:64:e0:83:f5:65:6e:c2:0d:34:97:99:d0: 01:e3:78:7e:88:6c:3d:76:5e:96:3b:a7:42:e6:cd:ca:14:76: b8:68:91:f7:41:31:7e:0d:47:9f:0c:66:d5:83:df:79:dd:b6: 04:90:58:6a:22:37:f6:88:7d:61:57:f6:2f:e5:d1:5e:84:27: e2:d8:e9:e0:6d:1f:ff:40:d5:68:25:8f:10:c6:b4:72:b2:a3: 2d:34:75:b3:aa:68:34:f3:af:9b:0e:fe:86:23:d6:94:73:3d: 24:02:b0:1d:9c:aa:5b:00:4c:cb:a2:f1:fe:be:aa:dd:90:3a: e8:29:24:ef:1a:3c:e3:ed:09:12:bd:f0:ed:9e:f8:1d:97:cf: e2:d1:f3:e2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZq84o+BJeJoZj3Dpm8MONF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMTI1MjExOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODA5NjIzMDBhZDQ5OWUwZTViNjhjNDc5NzRkOGVhYWJjNjgwODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SkIr17uv+cThv3vj20osK0Ej8uq b/dmGWb1brt4ti4C4GJwHx0HN0Nmm9aC7rffM4x4ogBj+sGC5e7NZJ5/iiSYK9IB n/Uk8sB6+3FbQ/23j5Yfp4ebPRSGryMFPxcamfoIwMkRqt+7qejUbb5l8h+GMNmz phTxNCT3Jh71DnVQ4P/MmIW3kIaq8KxALdzNCb9iK4caCT7krZPpIPA4Oue/94j4 +E0WK6+UuDbfkwpYz+5gv64sYjlGGqSgtGMlxhrCQnc0LLMCyyfA3PG9YeF7oZc5 hKhoz+Gjds8bKeVD5lwRedBgS/disfC6I8Gfp61EU1fUA/yKUOZu7SxM6wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJgJYjAK1Jng5baMR5dNjqq8aAiWMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvbUFsaU1BclVtZURsdG94SGwwMk9xcnhvQ0pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZtBMA8E AgACMAkDBwAqEDyAAAAwDQYJKoZIhvcNAQELBQADggEBAD+JDVqx1cyQ/HPrA3/D qp++uXTZUZtquJFt7sLpNkM3B0T8FxyH7UvSlIf/JpCZj8ML94+IIO8JVnK6w9XB L+9rkX5eAjUEO+NbVAQoG4lLskhfOT7s6uJafAz0H54f07QHbarwXQyu5R9GW86K iLWmbmTgg/VlbsINNJeZ0AHjeH6IbD12XpY7p0LmzcoUdrhokfdBMX4NR58MZtWD 33ndtgSQWGoiN/aIfWFX9i/l0V6EJ+LY6eBtH/9A1WgljxDGtHKyoy00dbOqaDTz r5sO/oYj1pRzPSQCsB2cqlsATMui8f6+qt2QOugpJO8aPOPtCRK98O2e+B2Xz+LR 8+I= -----END CERTIFICATE-----Generated at Mon Dec 1 09:11:59 2025 by rpki-client