This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/eO3zR0KWJ1q4slWPsVVDzeU-pUk.roa File: eO3zR0KWJ1q4slWPsVVDzeU-pUk.roa (raw, json) Hash identifier: a3FY21E+vx07KCq1wzX0fpbG9ePqDn95lO47g+2QwDc= Subject key identifier: 78:ED:F3:47:42:96:27:5A:B8:B2:55:8F:B1:55:43:CD:E5:3E:A5:49 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019A91CE746348B7D3FF84BF4BE7075AC1BE Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/eO3zR0KWJ1q4slWPsVVDzeU-pUk.roa Signing time: Mon 17 Nov 2025 12:33:37 +0000 ROA not before: Mon 17 Nov 2025 12:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152179 IP address blocks: 80.174.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:ce:74:63:48:b7:d3:ff:84:bf:4b:e7:07:5a:c1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Nov 17 12:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=78edf3474296275ab8b2558fb15543cde53ea549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:1b:db:3b:92:e1:1d:cd:87:e2:53:ae:85: 8e:78:0b:f5:6d:e8:22:01:14:89:5f:b4:e0:8a:49: 77:af:95:91:cb:6f:fc:83:68:82:d7:fe:23:68:11: 38:42:cb:12:db:e6:b4:83:a6:15:34:2d:71:76:0e: fc:33:83:9a:6e:0d:62:0a:70:c4:7d:40:14:5f:2d: 79:d3:30:21:8d:c6:cd:3f:88:b9:24:d6:f6:e2:c0: 70:e9:e3:2b:86:39:77:6e:67:d0:ef:4a:f8:20:38: bf:24:e8:c7:91:dc:50:00:83:e1:b9:e4:36:d1:b4: c2:ba:3d:61:b7:4c:b6:8d:d0:b0:a1:bf:83:b4:f8: 61:f6:d1:91:c5:bd:d5:8c:f1:07:b8:f5:e6:4a:73: f4:ec:3f:ae:4e:fa:7e:76:54:45:76:f0:5f:76:75: 42:f7:ff:e7:86:45:ef:33:3a:2c:bc:62:8f:ac:18: bc:ad:5a:44:9e:c9:bf:94:72:fe:21:17:eb:e2:12: bc:d6:e2:c9:27:34:bf:fa:6c:8c:1a:06:35:39:db: e6:6e:04:85:c7:e2:d4:b4:db:8c:76:ac:a8:b0:3b: fd:e6:1b:c9:a0:8e:78:6d:4e:ae:66:0e:fe:5b:08: 48:d5:40:23:4f:95:b8:de:65:fe:6b:57:07:53:3e: 97:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:ED:F3:47:42:96:27:5A:B8:B2:55:8F:B1:55:43:CD:E5:3E:A5:49 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/eO3zR0KWJ1q4slWPsVVDzeU-pUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.110.0/23 Signature Algorithm: sha256WithRSAEncryption b7:00:48:85:1e:5b:99:98:ae:7d:62:82:f5:24:2a:7c:bd:32: 97:41:e4:c3:a2:5e:56:2a:7d:e3:37:86:1c:e2:aa:22:0c:d8: 36:f5:e7:17:25:5b:fe:6c:c2:8c:a8:31:13:43:64:28:63:ae: dc:12:08:63:0f:67:ea:17:31:bc:d6:d7:09:32:be:33:ae:58: f3:f9:57:64:ae:d6:79:90:54:a4:69:70:7d:4e:a9:94:34:69: b6:83:d9:21:ed:ba:c6:c0:04:6b:93:cb:a5:7b:db:4a:47:8e: f4:3a:e0:59:1c:da:f8:ef:e2:44:18:d8:57:7e:06:83:b8:e5: 5b:18:bf:62:a3:1f:9e:97:ed:80:18:b2:bc:8e:0f:86:f7:64: 89:27:91:a7:bb:1a:bf:25:40:e1:e7:45:1f:c2:42:64:8c:ff: e8:be:2e:c5:dc:65:5f:26:21:a7:ae:ef:2e:22:d6:df:59:74: af:6d:4c:46:03:e3:51:a9:77:6b:d7:f9:61:20:d4:45:57:c9: 9c:85:1d:2d:74:70:bb:bd:d2:41:cc:21:f1:b2:9e:37:3b:40: d1:37:98:28:3d:ad:aa:63:6f:ba:77:51:62:ff:58:2e:8a:1f: 1e:15:ae:cd:59:10:cd:c3:78:e8:5c:2f:ac:16:6e:68:69:f3: 13:6a:10:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqRznRjSLfT/4S/S+cHWsG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMTE3MTIzMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGVkZjM0NzQyOTYyNzVhYjhiMjU1OGZiMTU1NDNjZGU1M2VhNTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmAb2zuS4R3Nh+JTroWOeAv1begi ARSJX7Tgikl3r5WRy2/8g2iC1/4jaBE4QssS2+a0g6YVNC1xdg78M4Oabg1iCnDE fUAUXy150zAhjcbNP4i5JNb24sBw6eMrhjl3bmfQ70r4IDi/JOjHkdxQAIPhueQ2 0bTCuj1ht0y2jdCwob+DtPhh9tGRxb3VjPEHuPXmSnP07D+uTvp+dlRFdvBfdnVC 9//nhkXvMzosvGKPrBi8rVpEnsm/lHL+IRfr4hK81uLJJzS/+myMGgY1OdvmbgSF x+LUtNuMdqyosDv95hvJoI54bU6uZg7+WwhI1UAjT5W43mX+a1cHUz6X3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHjt80dClidauLJVj7FVQ83lPqVJMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvZU8zelIwS1dKMXE0c2xXUHNWVkR6ZVUtcFVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUK5uMA0G CSqGSIb3DQEBCwUAA4IBAQC3AEiFHluZmK59YoL1JCp8vTKXQeTDol5WKn3jN4Yc 4qoiDNg29ecXJVv+bMKMqDETQ2QoY67cEghjD2fqFzG81tcJMr4zrljz+VdkrtZ5 kFSkaXB9TqmUNGm2g9kh7brGwARrk8ule9tKR470OuBZHNr47+JEGNhXfgaDuOVb GL9iox+el+2AGLK8jg+G92SJJ5Gnuxq/JUDh50UfwkJkjP/ovi7F3GVfJiGnru8u ItbfWXSvbUxGA+NRqXdr1/lhINRFV8mchR0tdHC7vdJBzCHxsp43O0DRN5goPa2q Y2+6d1Fi/1guih8eFa7NWRDNw3joXC+sFm5oafMTahDk -----END CERTIFICATE-----Generated at Fri Dec 5 04:36:39 2025 by rpki-client