This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/spM7J9_GWb6qJnGYMvS5_aj2Y-E.roa File: spM7J9_GWb6qJnGYMvS5_aj2Y-E.roa (raw, json) Hash identifier: w/y9XKTQeaVzmjBGSDCUmgXxu1iO8v7XYANpA4rcCVc= Subject key identifier: B2:93:3B:27:DF:C6:59:BE:AA:26:71:98:32:F4:B9:FD:A8:F6:63:E1 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B19BB44302F4FD09DC768F72E1EFDB8D7 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/spM7J9_GWb6qJnGYMvS5_aj2Y-E.roa Signing time: Sat 13 Dec 2025 22:01:01 +0000 ROA not before: Sat 13 Dec 2025 22:01:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56755 IP address blocks: 45.148.118.0/23 maxlen: 24 45.148.119.0/24 maxlen: 24 94.177.122.0/24 maxlen: 24 139.28.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:44:30:2f:4f:d0:9d:c7:68:f7:2e:1e:fd:b8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 13 22:01:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b2933b27dfc659beaa26719832f4b9fda8f663e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cd:d2:2a:f7:14:bd:5d:99:c0:01:e1:25:0b: c2:33:45:78:36:58:85:1d:96:54:b1:50:16:de:2a: 93:db:28:65:ce:60:a7:06:a3:67:e3:0b:c8:ff:a1: 9c:70:2f:7d:bf:47:92:c8:5e:d8:4a:3c:3e:ab:e3: 11:46:ac:00:00:86:f1:9c:9b:8b:59:8b:70:3a:1a: 75:05:2b:f3:f0:79:8a:5a:f6:a8:2a:e8:56:e0:fc: a6:08:b1:65:9b:1a:b9:a1:f5:7b:d3:2d:6f:f7:c5: 8d:14:b8:d7:4b:b3:df:fc:e5:01:37:16:29:50:3f: 69:86:7f:1d:b2:4a:78:d5:67:9f:6d:e3:1e:1d:1e: ee:0f:35:a5:df:aa:3b:1c:e6:c7:e2:4c:ec:d3:99: 6e:74:10:15:0a:47:6f:59:44:66:9a:c3:6d:c5:cd: 9c:d2:54:48:20:ba:78:d8:28:9d:fb:ee:0a:ff:8f: 88:ff:c8:64:56:5a:ed:85:70:b1:3f:29:26:9e:53: 16:e6:37:80:1a:26:ac:10:18:58:95:b3:a5:dd:38: 3d:5c:94:5a:2f:7c:d3:4c:0c:fa:2a:dd:ef:6a:d8: e2:30:79:70:9f:60:b0:f6:ba:ce:fe:cf:d5:35:bb: 33:3f:89:2d:9b:00:83:42:d7:14:4d:66:3c:36:f2: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:93:3B:27:DF:C6:59:BE:AA:26:71:98:32:F4:B9:FD:A8:F6:63:E1 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/spM7J9_GWb6qJnGYMvS5_aj2Y-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.118.0/23 94.177.122.0/24 139.28.99.0/24 Signature Algorithm: sha256WithRSAEncryption 72:10:90:43:4a:a8:45:13:7f:4b:82:b1:7f:d9:2b:d3:a6:2d: 28:db:f6:92:61:3d:e4:ca:3e:7d:97:de:ce:13:42:05:28:67: 6f:af:51:0d:16:e3:7f:1c:7e:05:53:a9:82:b1:f5:83:17:29: eb:ac:50:38:4d:50:58:02:97:2f:b5:9e:e2:ac:90:8e:25:30: e8:de:40:3b:5d:64:5d:10:8a:25:8f:22:86:44:a7:39:bf:0c: 71:8e:e0:e4:fa:1e:cf:76:9a:4f:53:07:ee:d1:fa:6f:96:1d: 2d:05:5f:24:a5:26:fe:e6:50:76:05:ae:7d:96:4e:dc:0b:34: 83:61:6b:50:3b:b2:da:3d:8d:59:95:27:a4:ef:5b:88:28:2e: 4f:3d:17:2a:05:7b:bf:dc:e4:f9:91:9d:68:d4:33:6e:57:f9: c5:51:9b:25:c0:70:51:ae:70:88:0b:aa:7c:d5:12:34:d6:e1: c6:9e:60:10:4d:7d:73:bc:f8:7c:66:f0:fc:6a:14:d7:a0:52: 8e:02:11:ef:0d:28:da:4a:d9:65:5d:9b:31:71:13:24:15:9c: c3:80:4f:bd:1a:32:8a:7b:44:75:90:d8:78:8c:df:e6:0a:90: b3:18:d9:27:fd:a1:d1:14:5c:5f:40:d4:1b:5e:78:82:29:7c: 6b:4c:f7:5d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsZu0QwL0/Qncdo9y4e/bjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjEzMjIwMTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjkzM2IyN2RmYzY1OWJlYWEyNjcxOTgzMmY0YjlmZGE4ZjY2M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s3SKvcUvV2ZwAHhJQvCM0V4NliF HZZUsVAW3iqT2yhlzmCnBqNn4wvI/6GccC99v0eSyF7YSjw+q+MRRqwAAIbxnJuL WYtwOhp1BSvz8HmKWvaoKuhW4PymCLFlmxq5ofV70y1v98WNFLjXS7Pf/OUBNxYp UD9phn8dskp41WefbeMeHR7uDzWl36o7HObH4kzs05ludBAVCkdvWURmmsNtxc2c 0lRIILp42Cid++4K/4+I/8hkVlrthXCxPykmnlMW5jeAGiasEBhYlbOl3Tg9XJRa L3zTTAz6Kt3vatjiMHlwn2Cw9rrO/s/VNbszP4ktmwCDQtcUTWY8NvLj5wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLKTOyffxlm+qiZxmDL0uf2o9mPhMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvc3BNN0o5X0dXYjZxSm5HWU12UzVfYWoyWS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLZR2AwQA XrF6AwQAixxjMA0GCSqGSIb3DQEBCwUAA4IBAQByEJBDSqhFE39LgrF/2SvTpi0o 2/aSYT3kyj59l97OE0IFKGdvr1ENFuN/HH4FU6mCsfWDFynrrFA4TVBYApcvtZ7i rJCOJTDo3kA7XWRdEIoljyKGRKc5vwxxjuDk+h7PdppPUwfu0fpvlh0tBV8kpSb+ 5lB2Ba59lk7cCzSDYWtQO7LaPY1ZlSek71uIKC5PPRcqBXu/3OT5kZ1o1DNuV/nF UZslwHBRrnCIC6p81RI01uHGnmAQTX1zvPh8ZvD8ahTXoFKOAhHvDSjaStllXZsx cRMkFZzDgE+9GjKKe0R1kNh4jN/mCpCzGNkn/aHRFFxfQNQbXniCKXxrTPdd -----END CERTIFICATE-----Generated at Sun Dec 14 05:56:14 2025 by rpki-client