This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/_eLosOoEd8yDU_N8Qvcrlr44u1s.roa File: _eLosOoEd8yDU_N8Qvcrlr44u1s.roa (raw, json) Hash identifier: 7dNJprnXNblqOmi4KvjwoY4AaJL/D5R6qT8hf0u15fk= Subject key identifier: FD:E2:E8:B0:EA:04:77:CC:83:53:F3:7C:42:F7:2B:96:BE:38:BB:5B Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C72A9702D1C20EDCBC0DE37254CBDB Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/_eLosOoEd8yDU_N8Qvcrlr44u1s.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52000 IP address blocks: 45.150.65.0/24 maxlen: 24 138.124.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2a:97:02:d1:c2:0e:dc:bc:0d:e3:72:54:cb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fde2e8b0ea0477cc8353f37c42f72b96be38bb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d7:07:26:f8:1f:63:9d:d0:10:81:86:0d:f7: 1b:8e:c9:d8:08:6a:6f:70:b1:c8:9c:a6:1a:54:32: d3:4e:55:5f:46:93:76:fa:79:73:81:06:fd:bb:1b: 7c:81:e2:29:35:0b:ac:8b:25:8a:15:49:01:99:86: d3:d5:c4:8b:88:c5:2e:90:d7:db:cc:67:e5:4d:c7: b0:e1:c4:a8:a5:ac:61:78:6f:11:ba:a8:92:57:8e: 16:31:93:e5:b6:4b:13:6c:03:4a:89:b5:d6:93:3d: db:cf:79:a0:71:99:57:42:1e:35:3f:59:fd:3d:86: 3c:8d:4b:d2:9d:f3:0c:94:ff:22:5c:04:f7:8c:a2: 5d:5b:75:74:60:97:bc:a5:88:8f:44:b8:2b:cf:cb: 6e:03:23:66:54:f4:f8:3b:7d:6b:c1:5e:50:ad:11: 98:5b:db:1b:0d:13:5b:4f:1d:c1:09:39:e6:bc:b0: 1c:d8:06:82:27:e6:09:b7:fe:2a:02:af:8a:44:45: 57:ac:e4:4b:d0:16:b6:3d:f3:59:f3:07:69:2e:7b: 4a:30:8c:d0:69:71:65:91:dd:98:9f:3a:07:f4:4f: 0f:a0:0e:b4:aa:90:3f:0e:6a:59:f4:81:ad:8d:27: 7f:ae:4d:e3:e9:22:0c:28:12:5d:e2:62:10:2f:75: 69:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E2:E8:B0:EA:04:77:CC:83:53:F3:7C:42:F7:2B:96:BE:38:BB:5B X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/_eLosOoEd8yDU_N8Qvcrlr44u1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.65.0/24 138.124.187.0/24 Signature Algorithm: sha256WithRSAEncryption 67:e8:2e:44:f6:6f:73:58:f0:1e:8e:5c:8f:69:b6:90:16:f1: 3f:95:9d:ff:b4:3b:10:86:03:d4:1b:6f:7b:c5:75:08:45:a0: e6:a6:e0:6b:a9:9e:a0:68:96:84:52:8a:16:c7:e7:3d:92:4a: 3f:24:8f:04:cf:80:3a:7e:4f:c3:1f:38:3c:44:c7:f8:b1:71: d4:e7:8b:b1:2d:7e:eb:c6:9e:a6:35:33:c6:cf:75:b2:67:c9: 35:d1:ee:0f:96:fa:7a:e6:8b:61:24:24:9c:46:45:8f:e3:bf: e0:19:51:07:76:a8:d6:b4:6b:e1:98:d0:bd:99:80:a0:31:61: a5:b1:3b:10:bf:e6:15:93:b0:ab:fe:b6:bc:93:8f:ab:d5:d0: 18:1d:e3:a9:79:be:3e:74:1b:5f:2c:43:9c:5c:b2:0b:d6:2f: 40:33:5e:1b:86:09:75:1a:02:01:3a:2f:8e:31:f6:65:88:17: 65:8e:18:59:ad:7f:b8:2b:fc:0e:6f:77:25:66:d5:8f:61:12: 3b:07:66:c6:4a:e1:0d:fe:38:20:96:d4:08:d5:ad:8e:4d:d3: c3:18:60:51:5f:26:5c:69:85:e5:30:71:6c:8b:96:03:de:a0: 6f:bf:d5:32:0f:bf:d2:62:37:80:48:92:51:b4:13:94:14:d8: 8c:49:b2:a6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xyqXAtHCDty8DeNyVMvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGUyZThiMGVhMDQ3N2NjODM1M2YzN2M0MmY3MmI5NmJlMzhiYjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19cHJvgfY53QEIGGDfcbjsnYCGpv cLHInKYaVDLTTlVfRpN2+nlzgQb9uxt8geIpNQusiyWKFUkBmYbT1cSLiMUukNfb zGflTcew4cSopaxheG8RuqiSV44WMZPltksTbANKibXWkz3bz3mgcZlXQh41P1n9 PYY8jUvSnfMMlP8iXAT3jKJdW3V0YJe8pYiPRLgrz8tuAyNmVPT4O31rwV5QrRGY W9sbDRNbTx3BCTnmvLAc2AaCJ+YJt/4qAq+KREVXrORL0Ba2PfNZ8wdpLntKMIzQ aXFlkd2YnzoH9E8PoA60qpA/DmpZ9IGtjSd/rk3j6SIMKBJd4mIQL3VpewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP3i6LDqBHfMg1PzfEL3K5a+OLtbMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvX2VMb3NPb0VkOHlEVV9OOFF2Y3JscjQ0dTFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZZBAwQA iny7MA0GCSqGSIb3DQEBCwUAA4IBAQBn6C5E9m9zWPAejlyPabaQFvE/lZ3/tDsQ hgPUG297xXUIRaDmpuBrqZ6gaJaEUooWx+c9kko/JI8Ez4A6fk/DHzg8RMf4sXHU 54uxLX7rxp6mNTPGz3WyZ8k10e4Plvp65othJCScRkWP47/gGVEHdqjWtGvhmNC9 mYCgMWGlsTsQv+YVk7Cr/ra8k4+r1dAYHeOpeb4+dBtfLEOcXLIL1i9AM14bhgl1 GgIBOi+OMfZliBdljhhZrX+4K/wOb3clZtWPYRI7B2bGSuEN/jggltQI1a2OTdPD GGBRXyZcaYXlMHFsi5YD3qBvv9UyD7/SYjeASJJRtBOUFNiMSbKm -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:38 2026 by rpki-client