This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j0Ffbgf_ChMUKSbt1-VlGQmWXWs.roa File: j0Ffbgf_ChMUKSbt1-VlGQmWXWs.roa (raw, json) Hash identifier: g23jEt8ymAt+SUJcpG5OyzEYJ/+royYzJvvfwT5lOmI= Subject key identifier: 8F:41:5F:6E:07:FF:0A:13:14:29:26:ED:D7:E5:65:19:09:96:5D:6B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B206386208BE3809C13AF52C6F0D2DEAD Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j0Ffbgf_ChMUKSbt1-VlGQmWXWs.roa Signing time: Mon 15 Dec 2025 05:02:31 +0000 ROA not before: Mon 15 Dec 2025 05:02:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56755 IP address blocks: 45.148.118.0/23 maxlen: 24 94.177.122.0/24 maxlen: 24 139.28.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:63:86:20:8b:e3:80:9c:13:af:52:c6:f0:d2:de:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 15 05:02:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f415f6e07ff0a13142926edd7e5651909965d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:2c:f8:68:bd:6a:db:6c:a7:9f:97:2f:2e: 61:37:af:27:d4:51:c0:14:64:1b:9c:52:d4:f4:3a: c1:5f:37:d2:77:4a:7c:10:80:43:de:de:c7:75:e0: 96:28:12:5e:44:50:da:8a:9d:cb:2a:6d:cc:bf:23: 1b:90:eb:43:39:45:12:0f:55:e1:61:4c:4c:e3:f9: a6:d6:f1:dc:e0:38:00:5a:5c:1c:68:70:8b:eb:7e: 23:a2:e4:d0:ee:89:32:83:c7:34:bd:ed:93:a7:19: 09:30:8f:bd:dd:b3:4b:59:bb:ae:ba:6a:c0:33:5b: ae:ca:31:ba:8f:b7:2d:0c:84:49:69:96:8a:1a:9a: 0d:a1:9b:c6:f6:a9:39:f3:65:89:ff:7e:f2:fb:2a: 33:b3:b4:8f:2f:aa:c3:b0:4d:c6:ed:b9:f9:7e:df: cb:a3:c9:ab:cc:a5:26:32:a2:59:c8:39:72:13:3c: 0d:49:e5:1b:5a:69:38:f6:fb:c9:2c:3d:ae:f4:68: eb:d4:f2:05:4b:3f:41:cd:86:03:f6:7a:f2:47:b3: d6:02:b0:05:a0:a1:1f:85:e6:75:cd:25:5c:66:b0: 9c:d5:33:64:23:ea:d4:16:79:19:f6:9a:21:20:2b: d2:87:61:a0:cf:94:ac:81:b4:94:95:1e:07:f2:d4: 9f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:41:5F:6E:07:FF:0A:13:14:29:26:ED:D7:E5:65:19:09:96:5D:6B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j0Ffbgf_ChMUKSbt1-VlGQmWXWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.118.0/23 94.177.122.0/24 139.28.99.0/24 Signature Algorithm: sha256WithRSAEncryption cc:cd:78:2d:c1:99:c9:a5:95:34:01:59:d5:17:14:ba:e6:53: a1:16:df:25:5f:79:22:60:1e:c3:69:f9:27:95:db:56:f5:5e: 2e:7e:7d:50:05:89:29:15:7d:11:e2:ee:9a:b5:c9:2c:0e:83: 00:15:62:92:44:ed:1c:65:fb:da:dd:0c:32:92:70:b2:4f:c3: 34:16:e6:43:4f:dc:16:36:13:1f:d8:83:2a:4b:9b:21:dc:7f: ac:2f:77:7c:d6:3a:ae:65:80:1a:ff:40:6a:cb:f2:b0:fd:9d: ca:b8:41:a2:56:8c:08:c0:d1:f3:fb:1a:94:a2:67:72:22:71: fe:3a:b6:53:87:3a:3f:82:d0:b7:79:db:0e:4c:20:44:e0:33: 35:ce:71:fb:63:ba:2b:e8:df:b7:12:c6:4f:ac:fa:12:3d:14: 90:f0:5a:ac:f9:40:ca:fb:1c:81:ae:14:ff:04:f8:7e:c7:f5: fb:68:c1:0f:91:92:79:7c:06:9c:fc:49:cd:d9:59:04:b9:3e: 73:a3:a7:19:37:09:d4:05:b5:23:26:9e:f6:7f:eb:b9:34:fc: 85:8e:4a:ed:49:49:f2:5b:54:05:38:3b:88:22:5a:63:c1:62: 24:c0:b2:47:18:01:49:23:26:9d:a3:72:bc:92:c2:23:f0:c6: 1a:ad:0f:31 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsgY4Ygi+OAnBOvUsbw0t6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjE1MDUwMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjQxNWY2ZTA3ZmYwYTEzMTQyOTI2ZWRkN2U1NjUxOTA5OTY1ZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXws+Gi9attsp5+XLy5hN68n1FHA FGQbnFLU9DrBXzfSd0p8EIBD3t7HdeCWKBJeRFDaip3LKm3MvyMbkOtDOUUSD1Xh YUxM4/mm1vHc4DgAWlwcaHCL634jouTQ7okyg8c0ve2TpxkJMI+93bNLWbuuumrA M1uuyjG6j7ctDIRJaZaKGpoNoZvG9qk582WJ/37y+yozs7SPL6rDsE3G7bn5ft/L o8mrzKUmMqJZyDlyEzwNSeUbWmk49vvJLD2u9Gjr1PIFSz9BzYYD9nryR7PWArAF oKEfheZ1zSVcZrCc1TNkI+rUFnkZ9pohICvSh2Ggz5SsgbSUlR4H8tSfywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI9BX24H/woTFCkm7dflZRkJll1rMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvajBGZmJnZl9DaE1VS1NidDEtVmxHUW1XWFdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLZR2AwQA XrF6AwQAixxjMA0GCSqGSIb3DQEBCwUAA4IBAQDMzXgtwZnJpZU0AVnVFxS65lOh Ft8lX3kiYB7DafknldtW9V4ufn1QBYkpFX0R4u6atcksDoMAFWKSRO0cZfva3Qwy knCyT8M0FuZDT9wWNhMf2IMqS5sh3H+sL3d81jquZYAa/0Bqy/Kw/Z3KuEGiVowI wNHz+xqUomdyInH+OrZThzo/gtC3edsOTCBE4DM1znH7Y7or6N+3EsZPrPoSPRSQ 8Fqs+UDK+xyBrhT/BPh+x/X7aMEPkZJ5fAac/EnN2VkEuT5zo6cZNwnUBbUjJp72 f+u5NPyFjkrtSUnyW1QFODuIIlpjwWIkwLJHGAFJIyado3K8ksIj8MYarQ8x -----END CERTIFICATE-----Generated at Tue Dec 16 19:59:34 2025 by rpki-client