This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/_EfjddeuFKG8MnRhJd7yEgTu2g0.roa File: _EfjddeuFKG8MnRhJd7yEgTu2g0.roa (raw, json) Hash identifier: EMo/ZhZbjpH69s5Ccnb39DuAvdS7gz2sAIWU10FyU8g= Subject key identifier: FC:47:E3:75:D7:AE:14:A1:BC:32:74:61:25:DE:F2:12:04:EE:DA:0D Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6D042EDE5E9813FA978DD434353EE Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/_EfjddeuFKG8MnRhJd7yEgTu2g0.roa Signing time: Tue 02 Dec 2025 20:17:48 +0000 ROA not before: Tue 02 Dec 2025 20:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9312 IP address blocks: 45.128.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:d0:42:ed:e5:e9:81:3f:a9:78:dd:43:43:53:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc47e375d7ae14a1bc32746125def21204eeda0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:af:8c:44:dc:3a:41:44:24:37:59:96:4c: 80:b6:76:99:6e:d6:bb:6c:6f:85:ba:f3:5e:ee:69: 2a:59:37:97:16:7f:7f:c0:4f:61:0b:f9:97:38:a4: ce:8d:c8:8f:55:a0:a1:ad:a9:f6:b7:52:40:0b:bc: cd:c0:c2:3c:19:60:bb:b9:e9:48:4a:16:18:9e:52: 7b:17:28:ee:a5:d1:18:88:45:4a:2e:70:94:07:28: b0:e4:d8:c1:a2:a2:6a:00:53:52:e8:ea:ff:ba:4a: 75:d1:ef:31:e1:ab:d1:00:0a:71:4f:54:2d:b6:48: d3:1b:bf:89:d5:df:6b:8e:d1:88:60:5c:09:01:6d: 37:b3:06:2c:06:1a:8e:92:f6:92:10:ac:d4:dd:78: 30:d2:02:0b:b8:ae:06:86:5a:92:5b:6c:a2:0b:39: 70:85:c6:dc:18:fb:48:9f:77:07:2f:22:d5:ec:01: f8:b5:13:df:00:32:e2:41:c5:8e:aa:ac:0e:0a:ec: 4b:6c:23:04:5d:e6:0a:ca:9b:b6:8a:30:44:f8:98: a7:70:b1:4d:31:22:7a:c3:3f:cb:55:e6:fa:f5:34: 5f:61:5d:1c:75:cc:b0:db:86:73:6d:27:c5:69:64: 48:18:05:0e:d6:6f:4e:1b:11:fb:c7:ce:a8:5d:31: d9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:47:E3:75:D7:AE:14:A1:BC:32:74:61:25:DE:F2:12:04:EE:DA:0D X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/_EfjddeuFKG8MnRhJd7yEgTu2g0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.220.0/24 Signature Algorithm: sha256WithRSAEncryption 37:99:1d:21:84:ad:4d:2f:14:6e:bd:da:91:55:63:5d:fa:f4: e7:52:d3:05:3e:7e:f2:d1:f2:84:0e:68:1d:ef:e9:f0:eb:2c: 00:5c:7d:f2:60:d7:8e:4f:38:6c:8b:c8:6e:ea:5a:b9:64:3d: b2:8a:cc:9b:88:bf:72:3f:de:9f:3f:a4:1d:88:4a:8e:2c:6f: 9d:9c:e6:be:df:1e:81:f7:14:cc:09:4e:cf:a5:92:f6:97:0e: a1:56:60:4b:a9:86:53:93:39:07:26:39:e6:cb:e1:07:cb:ed: 07:b2:da:5c:12:41:13:06:60:73:c6:30:59:03:de:16:76:0d: cd:86:cd:2c:32:4c:44:46:06:91:19:8f:71:27:99:f7:54:d2: dd:5b:10:d0:ad:70:08:a2:92:d3:f6:0d:81:d2:a6:58:74:22: 00:35:de:fd:96:f6:c8:90:d0:56:d6:03:4b:8d:f3:5c:32:b3: a2:f3:6e:6e:1b:9f:78:a9:8f:c2:1e:cf:67:c1:b6:70:77:3e: 04:a3:6e:ad:f0:51:7a:a8:b2:ff:e6:85:81:c7:78:82:41:4b: a9:aa:1f:92:8e:e9:50:5b:0c:3a:5d:86:32:f8:8d:5b:c5:b0: f3:8d:d5:5f:f6:b8:7c:05:b1:11:e9:92:96:55:63:a7:1c:94: cf:49:e8:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgttBC7eXpgT+peN1DQ1PuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzQ3ZTM3NWQ3YWUxNGExYmMzMjc0NjEyNWRlZjIxMjA0ZWVkYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK2vjETcOkFEJDdZlkyAtnaZbta7 bG+FuvNe7mkqWTeXFn9/wE9hC/mXOKTOjciPVaChran2t1JAC7zNwMI8GWC7uelI ShYYnlJ7FyjupdEYiEVKLnCUByiw5NjBoqJqAFNS6Or/ukp10e8x4avRAApxT1Qt tkjTG7+J1d9rjtGIYFwJAW03swYsBhqOkvaSEKzU3Xgw0gILuK4GhlqSW2yiCzlw hcbcGPtIn3cHLyLV7AH4tRPfADLiQcWOqqwOCuxLbCMEXeYKypu2ijBE+JincLFN MSJ6wz/LVeb69TRfYV0cdcyw24ZzbSfFaWRIGAUO1m9OGxH7x86oXTHZHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPxH43XXrhShvDJ0YSXe8hIE7toNMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvX0VmamRkZXVGS0c4TW5SaEpkN3lFZ1R1MmcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYDcMA0G CSqGSIb3DQEBCwUAA4IBAQA3mR0hhK1NLxRuvdqRVWNd+vTnUtMFPn7y0fKEDmgd 7+nw6ywAXH3yYNeOTzhsi8hu6lq5ZD2yisybiL9yP96fP6QdiEqOLG+dnOa+3x6B 9xTMCU7PpZL2lw6hVmBLqYZTkzkHJjnmy+EHy+0HstpcEkETBmBzxjBZA94Wdg3N hs0sMkxERgaRGY9xJ5n3VNLdWxDQrXAIopLT9g2B0qZYdCIANd79lvbIkNBW1gNL jfNcMrOi825uG594qY/CHs9nwbZwdz4Eo26t8FF6qLL/5oWBx3iCQUupqh+SjulQ Www6XYYy+I1bxbDzjdVf9rh8BbER6ZKWVWOnHJTPSegI -----END CERTIFICATE-----Generated at Wed Dec 3 13:10:03 2025 by rpki-client