This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/EAvRjLcBbuHgk5oka9iSLzBviY4.roa File: EAvRjLcBbuHgk5oka9iSLzBviY4.roa (raw, json) Hash identifier: 0MME9vWVHcqvJK+J/nmZvkTf9NUlXx3rUtlPO7QbpKg= Subject key identifier: 10:0B:D1:8C:B7:01:6E:E1:E0:93:9A:24:6B:D8:92:2F:30:6F:89:8E Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6D2D63C78E272A540FA3AB2216432 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/EAvRjLcBbuHgk5oka9iSLzBviY4.roa Signing time: Tue 02 Dec 2025 20:17:49 +0000 ROA not before: Tue 02 Dec 2025 20:17:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55933 IP address blocks: 45.128.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:d2:d6:3c:78:e2:72:a5:40:fa:3a:b2:21:64:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=100bd18cb7016ee1e0939a246bd8922f306f898e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:24:96:ee:0b:0d:04:4f:a5:9f:50:59:31:e3: 86:41:0a:1e:81:ba:a4:da:c3:ca:28:33:f6:a6:8b: 69:05:a0:ad:2c:82:1d:cc:36:88:36:59:fe:c3:76: f7:00:0f:72:a9:7a:42:2f:15:34:a0:67:67:ce:9b: fe:ca:2a:c0:d0:f3:41:54:27:f8:05:a8:80:28:8b: 2f:50:7a:4f:b0:b3:4f:5f:0f:35:f0:cd:aa:e8:d3: 73:25:e6:d9:70:b5:f4:43:8e:2f:27:7b:55:1c:0a: 43:85:9f:c7:b5:7b:56:5e:ad:8c:87:ea:fc:16:76: de:a1:af:73:e3:85:5e:a5:a5:5c:cd:b3:9c:4c:0f: fa:b3:c9:e6:5e:36:15:5d:50:41:22:4f:b4:6d:4b: a9:b5:f4:a7:ed:11:df:fa:63:75:c1:63:69:74:be: b0:2f:e9:b3:7f:f8:14:45:b3:b2:ea:ac:d3:06:4c: 40:d5:b5:5a:58:99:4b:f1:55:2a:84:61:9a:40:80: 15:8f:bb:a5:02:c5:bd:4d:7e:16:b4:fa:4c:35:b6: 61:43:e7:8c:c9:76:c3:a4:0c:6d:d6:a3:1f:dd:3c: dc:28:16:c7:ae:8d:d9:a2:72:02:33:74:e5:b7:b4: 11:81:75:c9:cc:83:3b:e9:d9:69:55:1e:99:23:0d: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:D1:8C:B7:01:6E:E1:E0:93:9A:24:6B:D8:92:2F:30:6F:89:8E X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/EAvRjLcBbuHgk5oka9iSLzBviY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.221.0/24 Signature Algorithm: sha256WithRSAEncryption 40:e1:b9:56:3e:38:30:27:b3:c3:37:4c:e8:6e:db:63:06:3c: bb:90:2e:e2:b3:fe:5a:61:7f:7e:96:06:52:54:3d:a1:af:b7: ec:a3:1e:96:8d:78:57:9c:85:36:6e:4b:83:12:31:3e:8a:b1: 94:b4:99:71:3d:14:9f:8b:85:11:fe:02:51:fa:8d:3d:b2:9b: 01:fe:0c:de:89:34:2a:47:a0:f0:dc:c5:57:29:91:fc:9e:55: be:36:bd:81:0b:08:2b:4c:87:a8:22:57:38:eb:2a:c0:a7:1c: 2e:10:a5:cf:b9:9e:f0:bf:7c:40:aa:0b:8a:46:17:06:29:82: c7:79:b4:63:d9:63:35:19:63:3b:1c:f7:dd:76:23:92:c2:db: 35:85:83:20:a0:44:69:dd:31:d6:78:76:84:d4:ce:34:85:4e: 81:a1:8a:29:d6:b8:a2:6e:a9:07:b3:c0:28:5d:d8:9f:5f:82: fe:71:b3:ff:2c:21:89:b8:07:28:86:75:8d:b0:c3:8b:4d:13: 1c:93:6a:7d:28:2a:dd:22:6d:9b:f3:15:b0:b9:46:c6:26:60: 9d:03:86:ac:01:8d:03:ef:73:ac:5b:ea:28:ac:43:27:9d:69: 11:10:8a:04:54:10:0e:28:a5:3d:32:ca:6f:9e:79:2d:c5:dd: 73:8a:0d:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgttLWPHjicqVA+jqyIWQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDBiZDE4Y2I3MDE2ZWUxZTA5MzlhMjQ2YmQ4OTIyZjMwNmY4OThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SSW7gsNBE+ln1BZMeOGQQoegbqk 2sPKKDP2potpBaCtLIIdzDaINln+w3b3AA9yqXpCLxU0oGdnzpv+yirA0PNBVCf4 BaiAKIsvUHpPsLNPXw818M2q6NNzJebZcLX0Q44vJ3tVHApDhZ/HtXtWXq2Mh+r8 Fnbeoa9z44VepaVczbOcTA/6s8nmXjYVXVBBIk+0bUuptfSn7RHf+mN1wWNpdL6w L+mzf/gURbOy6qzTBkxA1bVaWJlL8VUqhGGaQIAVj7ulAsW9TX4WtPpMNbZhQ+eM yXbDpAxt1qMf3TzcKBbHro3ZonICM3Tlt7QRgXXJzIM76dlpVR6ZIw3i2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBAL0Yy3AW7h4JOaJGvYki8wb4mOMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRUF2UmpMY0JidUhnazVva2E5aVNMekJ2aVk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYDdMA0G CSqGSIb3DQEBCwUAA4IBAQBA4blWPjgwJ7PDN0zobttjBjy7kC7is/5aYX9+lgZS VD2hr7fsox6WjXhXnIU2bkuDEjE+irGUtJlxPRSfi4UR/gJR+o09spsB/gzeiTQq R6Dw3MVXKZH8nlW+Nr2BCwgrTIeoIlc46yrApxwuEKXPuZ7wv3xAqguKRhcGKYLH ebRj2WM1GWM7HPfddiOSwts1hYMgoERp3THWeHaE1M40hU6BoYop1riibqkHs8Ao XdifX4L+cbP/LCGJuAcohnWNsMOLTRMck2p9KCrdIm2b8xWwuUbGJmCdA4asAY0D 73OsW+oorEMnnWkREIoEVBAOKKU9Mspvnnktxd1zig3X -----END CERTIFICATE-----Generated at Wed Dec 3 13:10:37 2025 by rpki-client