This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Ref7JhLjzI48B1WSq7MyNA31Yw4.roa File: Ref7JhLjzI48B1WSq7MyNA31Yw4.roa (raw, json) Hash identifier: YdImwgd72YksA2fMhTdPfW38xSn7w/QnIu7MrYbR78A= Subject key identifier: 45:E7:FB:26:12:E3:CC:8E:3C:07:55:92:AB:B3:32:34:0D:F5:63:0E Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019A8454BF798310BDB745EEC60A66A1E903 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Ref7JhLjzI48B1WSq7MyNA31Yw4.roa Signing time: Fri 14 Nov 2025 21:45:37 +0000 ROA not before: Fri 14 Nov 2025 21:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202492 IP address blocks: 91.186.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:84:54:bf:79:83:10:bd:b7:45:ee:c6:0a:66:a1:e9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Nov 14 21:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45e7fb2612e3cc8e3c075592abb332340df5630e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:04:d3:b2:32:0f:12:e2:3e:3d:b1:b1:b0: ed:e4:a6:ba:17:9c:37:a6:51:00:31:02:b0:9e:f4: 84:14:f5:ae:f0:a5:a0:53:29:6d:bd:6b:47:31:62: e3:eb:2d:8c:84:f6:aa:05:82:d5:28:c1:88:d1:3f: 74:c1:a1:9a:1b:f7:e6:22:d5:91:f2:c8:c4:3b:1b: 95:79:f0:0e:aa:93:15:79:46:10:93:08:f1:0f:86: 4f:2e:6c:08:06:09:79:43:7b:d6:79:a6:00:d7:41: ab:54:4d:33:f9:26:3a:e4:e2:44:54:80:3b:39:fb: e1:f7:b2:dc:2e:b9:9b:ee:19:bf:9f:53:48:8f:ac: 01:cc:28:ab:67:c7:b2:09:c0:d2:1b:78:fd:20:fe: d5:67:d2:d6:a9:4f:14:e0:e6:db:a3:49:c1:cf:d1: e5:c7:0c:3e:19:87:14:dd:0c:f9:37:cf:aa:4b:c2: 3f:46:01:8e:02:c8:82:e9:d6:63:a3:74:25:ad:1c: bc:4e:06:14:45:7b:82:ab:8f:32:24:85:fa:37:c4: 28:9b:45:b4:04:67:0b:00:82:c8:7c:cd:02:29:25: 69:48:df:89:ed:8b:47:c1:b4:e2:db:5f:7e:ca:02: 16:e1:ad:96:7f:4a:8b:e6:fd:aa:78:01:cc:0b:a3: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E7:FB:26:12:E3:CC:8E:3C:07:55:92:AB:B3:32:34:0D:F5:63:0E X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Ref7JhLjzI48B1WSq7MyNA31Yw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.186.204.0/22 Signature Algorithm: sha256WithRSAEncryption b1:93:bf:2c:6e:23:68:ca:66:8d:ec:5f:b5:6d:19:ca:b6:45: 5b:ab:44:9f:19:e6:25:51:13:ea:15:c2:db:30:52:e1:f2:c5: 13:67:f6:e8:c2:cd:3f:15:f9:88:22:68:01:63:0f:3a:82:b0: 70:f3:6a:a3:08:d0:1c:4b:4b:f7:8e:dd:32:86:6c:74:52:53: 34:2c:53:e8:df:2a:eb:84:fa:a2:df:f9:aa:c8:9a:a2:ae:37: 92:32:16:1d:35:87:a9:d5:93:e2:6a:15:5f:5d:fc:64:00:42: 2a:cd:37:02:c5:ba:9f:08:22:2f:42:61:cc:0d:a2:1d:8f:a3: 2e:5d:59:3c:d6:ad:75:14:12:1f:be:68:21:6b:36:48:df:d6: f3:f6:3a:0c:02:d6:b9:d7:7c:e4:88:61:09:1d:6c:ac:20:79: 56:73:51:12:b9:19:b5:f1:3e:83:e6:11:f4:89:fa:0f:14:66: e0:d0:95:ed:31:d6:0d:33:ba:78:ba:06:35:77:4f:ff:48:a9: cd:4b:b1:5a:51:d3:28:1a:94:ff:77:16:ec:66:0f:77:75:a1: 2c:e1:b6:28:ad:31:72:1a:99:d3:a6:66:56:a4:a5:41:da:a6: 5f:92:1a:68:77:01:4f:fb:77:7b:9d:65:5a:15:f3:76:a2:fc: be:a0:22:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqEVL95gxC9t0XuxgpmoekDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUxMTE0MjE0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWU3ZmIyNjEyZTNjYzhlM2MwNzU1OTJhYmIzMzIzNDBkZjU2MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8IE07IyDxLiPj2xsbDt5Ka6F5w3 plEAMQKwnvSEFPWu8KWgUyltvWtHMWLj6y2MhPaqBYLVKMGI0T90waGaG/fmItWR 8sjEOxuVefAOqpMVeUYQkwjxD4ZPLmwIBgl5Q3vWeaYA10GrVE0z+SY65OJEVIA7 Ofvh97LcLrmb7hm/n1NIj6wBzCirZ8eyCcDSG3j9IP7VZ9LWqU8U4Obbo0nBz9Hl xww+GYcU3Qz5N8+qS8I/RgGOAsiC6dZjo3QlrRy8TgYURXuCq48yJIX6N8Qom0W0 BGcLAILIfM0CKSVpSN+J7YtHwbTi219+ygIW4a2Wf0qL5v2qeAHMC6PMnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXn+yYS48yOPAdVkquzMjQN9WMOMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvUmVmN0poTGp6STQ4QjFXU3E3TXlOQTMxWXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW7rMMA0G CSqGSIb3DQEBCwUAA4IBAQCxk78sbiNoymaN7F+1bRnKtkVbq0SfGeYlURPqFcLb MFLh8sUTZ/bows0/FfmIImgBYw86grBw82qjCNAcS0v3jt0yhmx0UlM0LFPo3yrr hPqi3/mqyJqirjeSMhYdNYep1ZPiahVfXfxkAEIqzTcCxbqfCCIvQmHMDaIdj6Mu XVk81q11FBIfvmghazZI39bz9joMAta513zkiGEJHWysIHlWc1ESuRm18T6D5hH0 ifoPFGbg0JXtMdYNM7p4ugY1d0//SKnNS7FaUdMoGpT/dxbsZg93daEs4bYorTFy GpnTpmZWpKVB2qZfkhpodwFP+3d7nWVaFfN2ovy+oCKi -----END CERTIFICATE-----Generated at Fri Dec 5 20:48:19 2025 by rpki-client