This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x-6kyb6QEjw9uhbh-FiXN1sZ-78.roa File: x-6kyb6QEjw9uhbh-FiXN1sZ-78.roa (raw, json) Hash identifier: 9CHWKIk5JWwU5kLMGNGZmJ1k/8S4DDWA0WuOZX9FpOs= Subject key identifier: C7:EE:A4:C9:BE:90:12:3C:3D:BA:16:E1:F8:58:97:37:5B:19:FB:BF Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019ADE828015F249445B1B388A10E5E63D0E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x-6kyb6QEjw9uhbh-FiXN1sZ-78.roa Signing time: Tue 02 Dec 2025 10:01:25 +0000 ROA not before: Tue 02 Dec 2025 10:01:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26383 IP address blocks: 45.131.185.0/24 maxlen: 24 45.148.118.0/24 maxlen: 24 139.28.96.0/24 maxlen: 24 185.238.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:82:80:15:f2:49:44:5b:1b:38:8a:10:e5:e6:3d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 2 10:01:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7eea4c9be90123c3dba16e1f85897375b19fbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:1a:7c:48:62:f3:78:cd:02:9c:50:c4:20: 0c:17:0b:44:21:7a:a5:c2:79:43:59:a1:5b:1f:4a: cb:a1:90:d3:81:e1:7d:12:e2:4b:0a:b2:9a:3a:08: 3d:3a:d9:8e:55:d7:64:fb:b3:76:87:ba:35:ef:b1: 9c:cc:cd:06:7a:4a:d3:5d:a9:93:47:74:d6:66:b7: 93:3c:45:dd:d2:3e:d4:51:7b:6c:09:82:35:5e:2d: 8e:74:22:55:30:01:2f:7c:c9:0d:86:c6:0c:7b:4d: 9f:0f:56:dc:09:88:91:b2:72:e6:f1:be:d2:74:63: a0:c9:67:40:8f:40:e8:5d:fd:78:14:be:26:8a:c2: f8:c2:1b:69:9f:bd:a7:d0:42:0a:5a:5c:11:46:92: 37:5c:97:c5:7c:a5:9b:06:9f:6a:14:cd:39:77:05: 8e:3c:80:9c:f2:8f:1c:c8:02:2e:a2:e0:06:19:f6: 87:69:96:04:8a:bf:6e:58:fa:43:7b:3e:d8:3a:2f: f1:46:2a:4d:fb:84:3f:9a:6f:40:06:72:38:61:f9: 16:6a:d0:0e:4f:da:c2:1b:ae:db:5c:3a:fb:2a:ec: 90:15:ed:a1:f8:72:5a:43:3f:6f:ff:6c:9a:fb:a5: a1:8d:de:db:64:b6:f3:b0:0c:56:21:2c:09:2e:27: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EE:A4:C9:BE:90:12:3C:3D:BA:16:E1:F8:58:97:37:5B:19:FB:BF X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x-6kyb6QEjw9uhbh-FiXN1sZ-78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.185.0/24 45.148.118.0/24 139.28.96.0/24 185.238.189.0/24 Signature Algorithm: sha256WithRSAEncryption bd:5e:8f:fc:f9:c7:d6:80:ae:ad:e3:cf:37:e4:16:fc:ad:d7: 32:0f:15:ca:5a:34:c6:d5:8e:00:56:2d:3a:9d:0e:b0:0d:0c: 03:d8:af:9d:7e:8b:2b:21:2c:65:a6:f4:34:37:8a:9b:ac:8a: 25:71:1d:45:e1:66:f7:b1:d3:ff:33:b4:11:24:70:7a:4a:ef: b1:c5:60:94:d3:35:b3:5f:9a:53:21:c1:6d:8c:cd:ee:b2:73: 01:b4:1c:50:97:25:bb:28:f8:a6:90:80:69:ff:e3:f7:db:56: 96:28:8e:a2:0f:73:2e:b2:b5:de:e6:a0:c5:74:4b:93:f2:5c: 19:11:66:20:12:04:fb:89:27:05:53:ee:4d:e2:c2:16:42:92: a4:d8:2d:c0:e9:a8:77:38:fb:cf:8d:4a:c9:1f:e2:92:a2:37: 2f:0f:91:bc:a7:ac:5d:c5:44:0b:4e:50:c7:12:5e:9c:00:0a: 4c:01:69:94:b0:1d:8f:34:c0:c7:cd:20:ff:df:d9:74:c9:5e: c0:c5:c7:9b:6f:37:16:ce:b8:c3:cc:f1:c5:84:6e:de:63:30: c0:98:1f:0f:50:01:7c:ef:70:29:68:a2:35:a0:6a:53:b3:28: 5b:4d:c2:28:a3:e1:5f:5f:c1:8b:70:5d:3a:d0:16:00:3e:d8: 6b:24:3a:7a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZregoAV8klEWxs4ihDl5j0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjAyMTAwMTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2VlYTRjOWJlOTAxMjNjM2RiYTE2ZTFmODU4OTczNzViMTlmYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhEafEhi83jNApxQxCAMFwtEIXql wnlDWaFbH0rLoZDTgeF9EuJLCrKaOgg9OtmOVddk+7N2h7o177GczM0GekrTXamT R3TWZreTPEXd0j7UUXtsCYI1Xi2OdCJVMAEvfMkNhsYMe02fD1bcCYiRsnLm8b7S dGOgyWdAj0DoXf14FL4misL4whtpn72n0EIKWlwRRpI3XJfFfKWbBp9qFM05dwWO PICc8o8cyAIuouAGGfaHaZYEir9uWPpDez7YOi/xRipN+4Q/mm9ABnI4YfkWatAO T9rCG67bXDr7KuyQFe2h+HJaQz9v/2ya+6Whjd7bZLbzsAxWISwJLic4NQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMfupMm+kBI8PboW4fhYlzdbGfu/MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEveC02a3liNlFFanc5dWhiaC1GaVhOMXNaLTc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYO5AwQA LZR2AwQAixxgAwQAue69MA0GCSqGSIb3DQEBCwUAA4IBAQC9Xo/8+cfWgK6t4883 5Bb8rdcyDxXKWjTG1Y4AVi06nQ6wDQwD2K+dfosrISxlpvQ0N4qbrIolcR1F4Wb3 sdP/M7QRJHB6Su+xxWCU0zWzX5pTIcFtjM3usnMBtBxQlyW7KPimkIBp/+P321aW KI6iD3MusrXe5qDFdEuT8lwZEWYgEgT7iScFU+5N4sIWQpKk2C3A6ah3OPvPjUrJ H+KSojcvD5G8p6xdxUQLTlDHEl6cAApMAWmUsB2PNMDHzSD/39l0yV7AxcebbzcW zrjDzPHFhG7eYzDAmB8PUAF873ApaKI1oGpTsyhbTcIoo+FfX8GLcF060BYAPthr JDp6 -----END CERTIFICATE-----Generated at Wed Dec 10 01:24:46 2025 by rpki-client