This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/51SUNS4NzE-NFlYbOxa6dVSJlJg.roa File: 51SUNS4NzE-NFlYbOxa6dVSJlJg.roa (raw, json) Hash identifier: pz2zCbZpIM5OE18+MtuDbYpRKziF5XB+qaDVBI26k5U= Subject key identifier: E7:54:94:35:2E:0D:CC:4F:8D:16:56:1B:3B:16:BA:75:54:89:94:98 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019A5804D55FA8C2550C994AA67CF56AE066 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/51SUNS4NzE-NFlYbOxa6dVSJlJg.roa Signing time: Thu 06 Nov 2025 07:15:03 +0000 ROA not before: Thu 06 Nov 2025 07:15:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 37.49.151.0/24 maxlen: 24 109.203.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:04:d5:5f:a8:c2:55:0c:99:4a:a6:7c:f5:6a:e0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Nov 6 07:15:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e75494352e0dcc4f8d16561b3b16ba7554899498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0f:0b:2b:a3:ee:44:00:6f:50:d8:1a:fb:8d: ae:0e:5c:ca:97:05:57:dd:80:6c:b9:d5:e4:5f:dd: e2:e1:27:37:ab:40:18:2e:0b:cf:55:ed:09:33:2e: 50:ae:3e:37:e9:cb:a8:75:cc:31:44:55:9d:ae:3c: d5:ac:5f:5d:6e:9d:c5:dc:f9:19:d5:04:99:32:5c: ad:d8:60:d4:a9:b0:e0:96:2a:d4:55:8c:00:75:f3: ad:06:86:db:a4:c9:09:1f:ea:d5:00:42:7e:5a:55: ff:98:e2:bd:f4:e8:a5:47:4b:7d:01:80:68:7d:52: 9b:73:43:d7:aa:1d:73:65:e8:fd:a6:a8:24:bb:95: 37:76:38:1f:f0:a3:6b:0a:de:92:9e:5d:b2:7d:f2: e5:b9:26:20:ad:45:43:a1:6d:27:7b:fb:ec:89:dc: 05:4f:97:1b:14:ed:43:20:35:a3:c7:29:ad:f1:0c: 9a:ad:90:d0:84:77:79:0c:76:d2:45:f2:33:00:27: f6:a4:55:74:3a:c1:af:e9:1b:a0:4b:ca:91:c6:80: 9d:18:5f:89:9e:a3:c0:d0:af:b4:66:b2:ff:8e:23: 1f:3f:6e:ec:ab:cb:e4:af:d8:30:76:44:0e:af:e3: 79:6a:34:91:85:32:44:0d:16:73:34:cf:b7:c9:c1: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:54:94:35:2E:0D:CC:4F:8D:16:56:1B:3B:16:BA:75:54:89:94:98 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/51SUNS4NzE-NFlYbOxa6dVSJlJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.49.151.0/24 109.203.160.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:da:91:46:8f:cb:ca:40:ee:d0:46:fb:ce:ca:0f:5c:20:3c: ab:aa:12:b5:a1:57:76:71:23:c1:98:75:7c:4b:66:ca:65:b1: 39:61:9c:92:47:a7:6a:d9:69:28:1f:13:c0:59:d5:ba:de:e6: d9:d3:95:13:c0:88:82:e0:f5:ee:2a:35:b9:c4:b6:42:06:16: af:5d:4f:b2:b2:3a:af:a1:b6:3a:46:0c:2b:5a:3c:75:e2:90: 2a:89:63:0e:e9:ee:15:7d:09:a2:4d:fd:51:82:b4:30:ab:4f: 05:ff:e0:46:a8:65:4d:10:0d:6c:26:f9:f6:39:a8:d7:22:71: 39:d1:24:4a:da:14:4a:20:5c:a4:70:09:bf:87:9c:ba:31:48: 87:d2:12:52:f7:73:bd:bd:35:71:96:11:db:34:fe:34:00:79: 76:ca:4d:65:3e:bd:1f:63:1e:cb:73:91:c9:c2:c0:33:7e:4a: 43:dc:85:a7:cf:a6:71:62:2b:c4:14:c5:94:d9:b1:b0:98:9b: 71:40:5d:00:5d:ce:f0:48:e4:30:8c:9e:ec:89:4a:f3:d7:a7: 8a:68:71:2b:af:e9:04:9b:ea:df:ee:bb:d1:62:a4:36:dc:48: d8:36:7e:ee:e4:87:e1:a8:4c:65:ef:6e:20:1b:6f:96:26:c5: 91:8e:a2:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpYBNVfqMJVDJlKpnz1auBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUxMTA2MDcxNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzU0OTQzNTJlMGRjYzRmOGQxNjU2MWIzYjE2YmE3NTU0ODk5NDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw8LK6PuRABvUNga+42uDlzKlwVX 3YBsudXkX93i4Sc3q0AYLgvPVe0JMy5Qrj436cuodcwxRFWdrjzVrF9dbp3F3PkZ 1QSZMlyt2GDUqbDglirUVYwAdfOtBobbpMkJH+rVAEJ+WlX/mOK99OilR0t9AYBo fVKbc0PXqh1zZej9pqgku5U3djgf8KNrCt6Snl2yffLluSYgrUVDoW0ne/vsidwF T5cbFO1DIDWjxymt8QyarZDQhHd5DHbSRfIzACf2pFV0OsGv6RugS8qRxoCdGF+J nqPA0K+0ZrL/jiMfP27sq8vkr9gwdkQOr+N5ajSRhTJEDRZzNM+3ycGVNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOdUlDUuDcxPjRZWGzsWunVUiZSYMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvNTFTVU5TNE56RS1ORmxZYk94YTZkVlNKbEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJTGXAwQA bcugMA0GCSqGSIb3DQEBCwUAA4IBAQBq2pFGj8vKQO7QRvvOyg9cIDyrqhK1oVd2 cSPBmHV8S2bKZbE5YZySR6dq2WkoHxPAWdW63ubZ05UTwIiC4PXuKjW5xLZCBhav XU+ysjqvobY6RgwrWjx14pAqiWMO6e4VfQmiTf1RgrQwq08F/+BGqGVNEA1sJvn2 OajXInE50SRK2hRKIFykcAm/h5y6MUiH0hJS93O9vTVxlhHbNP40AHl2yk1lPr0f Yx7Lc5HJwsAzfkpD3IWnz6ZxYivEFMWU2bGwmJtxQF0AXc7wSOQwjJ7siUrz16eK aHErr+kEm+rf7rvRYqQ23EjYNn7u5IfhqExl724gG2+WJsWRjqLc -----END CERTIFICATE-----Generated at Wed Dec 3 11:46:05 2025 by rpki-client