This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c2CKlTKY-EYM2vpSU9iyMY3Guuw.roa File: c2CKlTKY-EYM2vpSU9iyMY3Guuw.roa (raw, json) Hash identifier: OgWXwKp8d5Db6fnOC4sO5kJ7ZE4xysXIQx0QrUeLRJg= Subject key identifier: 73:60:8A:95:32:98:F8:46:0C:DA:FA:52:53:D8:B2:31:8D:C6:BA:EC Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B206386DE2C987681C555511F6DED6550 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c2CKlTKY-EYM2vpSU9iyMY3Guuw.roa Signing time: Mon 15 Dec 2025 05:02:32 +0000 ROA not before: Mon 15 Dec 2025 05:02:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207513 IP address blocks: 45.148.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:63:86:de:2c:98:76:81:c5:55:51:1f:6d:ed:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 15 05:02:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73608a953298f8460cdafa5253d8b2318dc6baec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:53:4c:81:ea:3e:be:8c:9b:e8:4b:dc:e4: 62:4c:7f:b2:82:99:65:81:09:b6:40:86:45:49:8c: eb:d1:6d:df:3d:08:40:be:58:c6:ae:53:e0:ec:dc: a3:e8:d1:be:83:38:3b:5c:8b:03:9d:96:d0:b3:1f: 64:c4:7b:cd:30:a1:76:14:b6:0b:db:e6:41:47:13: 31:98:04:ee:6c:8d:7d:23:c1:c9:c6:50:88:cb:ad: 01:be:dc:42:69:3f:ac:99:30:d5:ae:f0:b3:0f:b9: ef:65:5d:1c:cf:d6:7c:eb:78:81:80:ef:24:18:ab: 57:4b:20:54:ef:ce:8d:bb:a3:89:b1:cb:dc:51:fe: 62:26:78:20:8b:d9:03:c2:a8:8c:a4:4a:8e:7d:b2: f9:85:ab:6a:1c:0b:d0:1f:81:29:0f:20:bb:65:15: 52:fd:e1:ca:a7:f0:2f:d8:c1:13:58:60:f3:db:18: 87:bb:a9:6e:d3:d5:41:41:50:23:48:1d:f6:ad:2a: 68:7b:f2:e0:e0:3e:55:1d:c7:92:da:26:81:8e:af: 72:86:6c:eb:dd:73:50:3d:ee:52:fa:5f:22:2f:b4: 38:32:c0:ed:c0:fd:24:40:cd:21:05:66:d7:6d:5e: 8b:93:44:fe:19:05:53:4d:cd:92:4c:5c:3f:95:0a: 28:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:60:8A:95:32:98:F8:46:0C:DA:FA:52:53:D8:B2:31:8D:C6:BA:EC X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c2CKlTKY-EYM2vpSU9iyMY3Guuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.119.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:90:9f:2a:75:ab:b6:01:44:af:1c:c3:22:99:07:b1:55:36: 5c:40:58:5d:a9:b5:15:b5:d2:f1:11:4c:c7:16:12:19:38:cd: 00:b6:b6:2c:f8:da:ec:61:36:4e:eb:9a:66:65:63:03:16:d1: ab:cf:92:7c:22:60:7d:09:61:b0:f2:0f:3c:b1:09:74:e5:05: 6b:0b:ca:2c:c8:e5:9e:ff:6d:a3:b1:c8:e3:2e:cc:24:67:3a: d7:34:d2:08:10:1c:91:d2:07:89:b9:83:9c:ff:8a:80:4d:39: 5a:42:a0:7d:5c:e3:db:55:f7:b8:16:08:06:43:1d:93:a6:b0: 8a:43:42:47:5d:68:5d:a2:f0:39:36:2a:77:b3:44:31:a8:5a: ae:74:66:8f:8a:33:1e:43:d8:f2:87:25:8c:c0:ef:1b:03:16: 8a:89:fe:e3:c5:0c:44:a8:39:f3:a8:c3:39:1f:7d:f1:a5:9a: 0f:35:0a:b1:a9:51:b4:39:b1:33:04:e6:69:35:ae:6b:5e:86: 7a:75:4d:cd:d1:7d:58:f2:d2:29:0e:8e:05:32:e4:b8:04:b9: b1:09:8c:ce:70:d6:77:06:be:3f:b2:24:bf:0f:8d:87:7c:67: bf:cc:63:80:16:88:05:ec:52:ee:40:2a:e3:f6:7a:ea:af:f3: d7:2f:c2:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsgY4beLJh2gcVVUR9t7WVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjE1MDUwMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzYwOGE5NTMyOThmODQ2MGNkYWZhNTI1M2Q4YjIzMThkYzZiYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj5TTIHqPr6Mm+hL3ORiTH+ygpll gQm2QIZFSYzr0W3fPQhAvljGrlPg7Nyj6NG+gzg7XIsDnZbQsx9kxHvNMKF2FLYL 2+ZBRxMxmATubI19I8HJxlCIy60BvtxCaT+smTDVrvCzD7nvZV0cz9Z863iBgO8k GKtXSyBU786Nu6OJscvcUf5iJnggi9kDwqiMpEqOfbL5hatqHAvQH4EpDyC7ZRVS /eHKp/Av2METWGDz2xiHu6lu09VBQVAjSB32rSpoe/Lg4D5VHceS2iaBjq9yhmzr 3XNQPe5S+l8iL7Q4MsDtwP0kQM0hBWbXbV6Lk0T+GQVTTc2STFw/lQooUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHNgipUymPhGDNr6UlPYsjGNxrrsMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYzJDS2xUS1ktRVlNMnZwU1U5aXlNWTNHdXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZR3MA0G CSqGSIb3DQEBCwUAA4IBAQA8kJ8qdau2AUSvHMMimQexVTZcQFhdqbUVtdLxEUzH FhIZOM0AtrYs+NrsYTZO65pmZWMDFtGrz5J8ImB9CWGw8g88sQl05QVrC8osyOWe /22jscjjLswkZzrXNNIIEByR0geJuYOc/4qATTlaQqB9XOPbVfe4FggGQx2TprCK Q0JHXWhdovA5Nip3s0QxqFqudGaPijMeQ9jyhyWMwO8bAxaKif7jxQxEqDnzqMM5 H33xpZoPNQqxqVG0ObEzBOZpNa5rXoZ6dU3N0X1Y8tIpDo4FMuS4BLmxCYzOcNZ3 Br4/siS/D42HfGe/zGOAFogF7FLuQCrj9nrqr/PXL8J0 -----END CERTIFICATE-----Generated at Tue Dec 16 20:07:41 2025 by rpki-client