This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/9cZF6t0pRfYwb-LBxfj6qIf6oIs.roa File: 9cZF6t0pRfYwb-LBxfj6qIf6oIs.roa (raw, json) Hash identifier: rmhC0UPonVIgMVCi3q+pS4LXi85gqp0ddqXa/K7E7qg= Subject key identifier: F5:C6:45:EA:DD:29:45:F6:30:6F:E2:C1:C5:F8:FA:A8:87:FA:A0:8B Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019AD6A105816439D91C1A1BC23FF87BE797 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/9cZF6t0pRfYwb-LBxfj6qIf6oIs.roa Signing time: Sun 30 Nov 2025 21:17:48 +0000 ROA not before: Sun 30 Nov 2025 21:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216199 IP address blocks: 45.89.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d6:a1:05:81:64:39:d9:1c:1a:1b:c2:3f:f8:7b:e7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Nov 30 21:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f5c645eadd2945f6306fe2c1c5f8faa887faa08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:15:61:2e:f5:49:14:4f:cb:7d:77:f9:bb: 92:0a:6a:56:9e:6a:8f:47:b5:01:a9:56:23:94:8b: 06:ff:eb:eb:8b:45:44:62:be:d4:cf:f5:d6:6b:a2: 99:dc:f6:75:2a:21:74:60:ae:a5:55:b7:e0:82:fa: ec:07:9d:4e:20:41:99:91:c6:b8:45:97:6e:a9:cb: 28:5b:5d:1b:3f:85:a4:b0:f4:22:fe:1d:04:fc:4d: 1d:8d:fb:86:24:2a:c9:81:7a:4e:87:15:25:6f:da: 8c:59:fc:60:42:ec:25:41:21:76:99:d5:be:ee:c6: 31:7f:c6:b8:5d:fc:a9:1b:7e:30:98:8a:ec:25:a6: b3:cf:2e:58:80:ad:df:0b:33:cc:f0:df:12:14:1f: d5:15:04:d9:54:c5:90:38:8d:b0:a3:89:f9:5c:09: a1:d8:ff:d1:61:36:3e:4b:21:7d:72:bb:22:b8:f6: 78:ff:e5:ae:dc:e6:49:f2:27:c5:ab:ba:23:46:92: 6b:bc:4e:6e:c9:a1:46:53:5c:50:ae:d0:d5:9d:65: 1b:e6:df:70:4b:20:66:12:f7:75:fd:7a:1e:28:43: 8a:44:0d:76:f2:07:1b:a0:2a:ce:fd:77:88:93:dd: 51:d3:aa:54:c0:c6:9e:03:5b:89:41:8e:42:74:06: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C6:45:EA:DD:29:45:F6:30:6F:E2:C1:C5:F8:FA:A8:87:FA:A0:8B X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/9cZF6t0pRfYwb-LBxfj6qIf6oIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.28.0/24 Signature Algorithm: sha256WithRSAEncryption 54:41:52:00:cb:44:6f:34:9e:72:f9:34:b3:ce:29:d2:b2:8e: 19:f8:8d:d2:51:77:aa:3e:1d:ad:65:18:81:83:40:b2:1c:03: 92:3d:9a:c7:49:21:39:09:dd:cd:18:90:c0:e6:78:f4:c1:c2: a6:35:72:41:8f:2c:42:1d:b5:70:38:9a:5e:9f:e6:38:fa:83: fe:a3:c1:f5:0f:f6:69:d1:b0:ce:6b:9d:a0:b0:9a:bc:b7:73: e6:f7:f4:ac:95:14:65:5b:d9:a0:5a:da:c7:e4:b8:02:40:c9: 93:d1:3c:2d:61:8f:b9:04:bb:e6:f2:5d:48:22:ec:28:53:b4: 98:e0:fe:09:3c:bf:19:68:1f:00:fb:6e:de:2c:f0:a0:4b:98: 06:23:46:63:bb:69:8d:53:f8:d7:f3:b7:45:7e:5b:75:b7:52: 38:69:77:0a:e4:5b:08:26:d0:21:a9:32:b9:ed:17:76:76:9b: f9:c7:0a:4c:f7:8a:83:85:27:ca:ee:5e:5d:03:c9:6e:6a:10: d6:bf:72:12:99:12:42:1c:06:a8:71:c3:cf:bb:aa:3f:bb:8d: 89:f0:33:fb:f3:86:62:9b:71:c4:31:ca:52:f8:0d:b9:6e:80: d9:92:17:9b:ee:c3:28:1a:4c:ce:c3:32:64:67:c6:9e:23:bc: 03:02:b8:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrWoQWBZDnZHBobwj/4e+eXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjUxMTMwMjExNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWM2NDVlYWRkMjk0NWY2MzA2ZmUyYzFjNWY4ZmFhODg3ZmFhMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mQVYS71SRRPy313+buSCmpWnmqP R7UBqVYjlIsG/+vri0VEYr7Uz/XWa6KZ3PZ1KiF0YK6lVbfggvrsB51OIEGZkca4 RZduqcsoW10bP4WksPQi/h0E/E0djfuGJCrJgXpOhxUlb9qMWfxgQuwlQSF2mdW+ 7sYxf8a4XfypG34wmIrsJaazzy5YgK3fCzPM8N8SFB/VFQTZVMWQOI2wo4n5XAmh 2P/RYTY+SyF9crsiuPZ4/+Wu3OZJ8ifFq7ojRpJrvE5uyaFGU1xQrtDVnWUb5t9w SyBmEvd1/XoeKEOKRA128gcboCrO/XeIk91R06pUwMaeA1uJQY5CdAZeHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPXGRerdKUX2MG/iwcX4+qiH+qCLMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvOWNaRjZ0MHBSZll3Yi1MQnhmajZxSWY2b0lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVkcMA0G CSqGSIb3DQEBCwUAA4IBAQBUQVIAy0RvNJ5y+TSzzinSso4Z+I3SUXeqPh2tZRiB g0CyHAOSPZrHSSE5Cd3NGJDA5nj0wcKmNXJBjyxCHbVwOJpen+Y4+oP+o8H1D/Zp 0bDOa52gsJq8t3Pm9/SslRRlW9mgWtrH5LgCQMmT0TwtYY+5BLvm8l1IIuwoU7SY 4P4JPL8ZaB8A+27eLPCgS5gGI0Zju2mNU/jX87dFflt1t1I4aXcK5FsIJtAhqTK5 7Rd2dpv5xwpM94qDhSfK7l5dA8luahDWv3ISmRJCHAaoccPPu6o/u42J8DP784Zi m3HEMcpS+A25boDZkheb7sMoGkzOwzJkZ8aeI7wDArjp -----END CERTIFICATE-----Generated at Fri Dec 5 14:44:24 2025 by rpki-client