This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jXpj70oAM0QWhs6pbvtEbXpGoKM.roa File: jXpj70oAM0QWhs6pbvtEbXpGoKM.roa (raw, json) Hash identifier: 7kWzFK5jYkY+xxyYSh1QhADQiB7QcWJon5EmG7p0yj4= Subject key identifier: 8D:7A:63:EF:4A:00:33:44:16:86:CE:A9:6E:FB:44:6D:7A:46:A0:A3 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B19BB44D91983260A38DCE0967B403C2D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jXpj70oAM0QWhs6pbvtEbXpGoKM.roa Signing time: Sat 13 Dec 2025 22:01:01 +0000 ROA not before: Sat 13 Dec 2025 22:01:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202831 IP address blocks: 45.131.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:44:d9:19:83:26:0a:38:dc:e0:96:7b:40:3c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 13 22:01:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d7a63ef4a0033441686cea96efb446d7a46a0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:1f:fb:cd:08:06:66:0d:2e:5d:9b:a5:d9: 7e:9e:5b:ae:4d:14:fe:b0:00:86:16:5a:1e:1c:7c: a2:46:2c:f8:78:e3:e0:10:8b:8d:b2:4d:c5:57:3f: 1d:a8:5d:4f:01:2c:4d:40:8b:22:e0:d2:85:22:0c: 54:54:fd:03:5c:36:e0:6b:52:1a:22:12:18:e8:3e: db:a0:48:01:48:04:b0:b8:89:71:56:54:7d:c9:09: d7:b3:4c:6c:38:ca:91:f8:89:65:b9:ea:c8:23:19: 43:36:11:8b:23:97:00:70:64:d6:5c:47:3d:1f:39: 89:3b:0b:c2:54:d5:18:c3:22:7b:ff:f2:fd:37:be: 87:86:44:9d:f4:df:d2:7c:7a:88:08:b0:6d:bf:22: 18:57:e2:b6:90:7f:e8:0c:a9:ff:53:5d:c1:06:4e: 80:df:81:99:5f:bd:83:d8:98:7b:41:ec:5e:42:25: 60:af:87:4f:36:02:e9:79:31:be:8d:6c:24:86:66: 10:71:c7:c0:e7:00:81:54:65:81:df:d0:10:0d:94: 3e:d8:08:e1:a9:12:af:6a:e8:d0:92:d2:b8:cd:4a: fe:0a:09:e0:67:fd:cc:6f:e6:64:5b:c6:35:e0:ab: cc:16:dc:60:a4:bd:94:66:be:d9:8a:f8:04:e1:03: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7A:63:EF:4A:00:33:44:16:86:CE:A9:6E:FB:44:6D:7A:46:A0:A3 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jXpj70oAM0QWhs6pbvtEbXpGoKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.184.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:8a:59:9c:08:33:e3:0c:6f:5c:a0:fb:02:ce:4f:79:38:26: 20:ec:95:a9:b1:4e:91:a4:e6:5e:f2:65:1e:eb:98:86:3f:89: f3:00:f0:45:e6:61:4e:6c:ea:e3:ba:72:dd:5e:03:6e:60:a0: 7a:04:6b:b4:ff:03:03:68:99:4e:f2:ad:9b:71:fa:fa:b7:be: 10:ca:36:c0:4c:d5:89:91:57:6d:60:ae:7f:2d:7c:fb:a4:52: 9e:99:5c:16:7f:e6:d5:c6:5e:14:ff:89:9d:a9:aa:53:be:e1: 09:40:db:25:fd:87:da:18:9e:8a:74:79:4c:9c:8c:b0:4b:67: 58:3f:d1:96:88:76:1e:76:ed:84:22:eb:6d:1f:6d:42:40:a2: 14:f3:53:9f:c9:97:6e:94:54:04:73:d8:d6:62:3f:98:1f:59: 2b:1e:bf:6b:60:8c:3f:a6:70:fd:c6:25:70:c0:bc:69:29:d2: 81:b2:16:c7:cf:df:68:cd:46:2f:4f:d9:88:c0:41:28:30:30: 9c:40:26:cc:33:25:42:d8:2a:f5:88:11:5a:98:1a:a7:aa:ce: bb:b1:96:81:f6:cf:9b:ea:8e:d8:a3:5c:1b:85:3e:68:cb:7b: d8:5c:4d:e2:1b:93:eb:ad:ad:f7:8f:9b:91:a2:0b:cb:9f:2e: 68:7a:6e:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsZu0TZGYMmCjjc4JZ7QDwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjEzMjIwMTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDdhNjNlZjRhMDAzMzQ0MTY4NmNlYTk2ZWZiNDQ2ZDdhNDZhMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmIf+80IBmYNLl2bpdl+nluuTRT+ sACGFloeHHyiRiz4eOPgEIuNsk3FVz8dqF1PASxNQIsi4NKFIgxUVP0DXDbga1Ia IhIY6D7boEgBSASwuIlxVlR9yQnXs0xsOMqR+IlluerIIxlDNhGLI5cAcGTWXEc9 HzmJOwvCVNUYwyJ7//L9N76HhkSd9N/SfHqICLBtvyIYV+K2kH/oDKn/U13BBk6A 34GZX72D2Jh7QexeQiVgr4dPNgLpeTG+jWwkhmYQccfA5wCBVGWB39AQDZQ+2Ajh qRKvaujQktK4zUr+CgngZ/3Mb+ZkW8Y14KvMFtxgpL2UZr7ZivgE4QNDLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI16Y+9KADNEFobOqW77RG16RqCjMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvalhwajcwb0FNMFFXaHM2cGJ2dEViWHBHb0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYO4MA0G CSqGSIb3DQEBCwUAA4IBAQBvilmcCDPjDG9coPsCzk95OCYg7JWpsU6RpOZe8mUe 65iGP4nzAPBF5mFObOrjunLdXgNuYKB6BGu0/wMDaJlO8q2bcfr6t74QyjbATNWJ kVdtYK5/LXz7pFKemVwWf+bVxl4U/4mdqapTvuEJQNsl/YfaGJ6KdHlMnIywS2dY P9GWiHYedu2EIuttH21CQKIU81OfyZdulFQEc9jWYj+YH1krHr9rYIw/pnD9xiVw wLxpKdKBshbHz99ozUYvT9mIwEEoMDCcQCbMMyVC2Cr1iBFamBqnqs67sZaB9s+b 6o7Yo1wbhT5oy3vYXE3iG5Prra33j5uRogvLny5oem6o -----END CERTIFICATE-----Generated at Sun Dec 14 05:56:14 2025 by rpki-client