This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/t8nL2p5eyrN1BSO6Ty_pc1LxztY.roa File: t8nL2p5eyrN1BSO6Ty_pc1LxztY.roa (raw, json) Hash identifier: IjKxVADlJhzM7Jt+Vb+y8QkwSaw5jKcu2tljUtzAMZs= Subject key identifier: B7:C9:CB:DA:9E:5E:CA:B3:75:05:23:BA:4F:2F:E9:73:52:F1:CE:D6 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6D540C71C335C8DF0D66194F49CB1 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/t8nL2p5eyrN1BSO6Ty_pc1LxztY.roa Signing time: Tue 02 Dec 2025 20:17:49 +0000 ROA not before: Tue 02 Dec 2025 20:17:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210429 IP address blocks: 45.133.117.0/24 maxlen: 24 45.133.118.0/24 maxlen: 24 45.142.164.0/24 maxlen: 24 45.148.60.0/24 maxlen: 24 45.148.61.0/24 maxlen: 24 45.148.62.0/24 maxlen: 24 45.148.63.0/24 maxlen: 24 185.46.68.0/24 maxlen: 24 194.147.221.0/24 maxlen: 24 2a12:9080::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:d5:40:c7:1c:33:5c:8d:f0:d6:61:94:f4:9c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b7c9cbda9e5ecab3750523ba4f2fe97352f1ced6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:73:9d:7b:b0:bb:87:fb:62:61:16:6e:7b: d7:6d:a6:73:72:ff:df:1a:6e:5e:76:a4:a5:76:42: 3f:0c:69:d8:9c:d7:31:34:0f:35:ed:68:98:d6:27: 9b:1c:a3:6b:16:b5:ac:2f:32:3e:31:5c:32:99:a5: f5:c6:43:f9:f3:d1:a3:00:0c:c8:dd:25:4a:e5:65: 50:8f:22:3a:f8:15:93:b4:34:39:7d:d7:69:be:d0: 26:d1:18:b6:77:ff:ee:91:a8:5a:93:df:c7:47:6a: 67:57:51:bf:41:45:73:e1:a3:e9:fe:db:b5:66:25: 6d:ca:9a:f3:3d:df:72:19:61:12:ec:90:03:a9:b5: 2b:9a:77:c6:17:0f:5b:39:0c:c4:9a:d9:34:dd:9f: a2:b7:e7:30:ff:1f:29:58:a4:c3:6d:cd:38:df:cd: 4f:33:fc:8d:e6:32:5f:d7:c6:84:1e:d5:4c:14:30: 3c:c2:8b:ad:d8:db:d5:4e:66:26:9c:22:95:f5:58: f0:52:d6:af:0d:08:32:52:62:e5:f1:4a:c1:8c:8f: b8:b9:f0:9b:9e:0a:18:12:cb:28:65:f2:e3:3a:4a: 69:36:17:27:4d:e3:2f:58:9e:79:90:5d:66:36:b4: d2:15:09:20:98:75:a1:d1:d4:ce:e9:c4:2d:94:27: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C9:CB:DA:9E:5E:CA:B3:75:05:23:BA:4F:2F:E9:73:52:F1:CE:D6 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/t8nL2p5eyrN1BSO6Ty_pc1LxztY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.117.0-45.133.118.255 45.142.164.0/24 45.148.60.0/22 185.46.68.0/24 194.147.221.0/24 IPv6: 2a12:9080::/29 Signature Algorithm: sha256WithRSAEncryption 4f:83:4b:43:7a:f5:04:c6:2a:47:6f:69:a4:82:d3:0d:cf:16: 0a:58:a3:e6:d9:77:86:bb:02:f6:97:fe:1e:84:55:9c:d2:54: cb:43:1c:ea:d5:c6:40:ce:58:e6:b3:3f:03:76:c1:de:5b:64: a5:7a:40:a4:5c:c2:f9:ff:99:4b:a1:c2:d0:14:61:59:0e:e3: 76:f4:cc:07:f2:af:5d:ec:d2:89:ca:c6:a4:e9:19:cb:e8:e0: ad:0c:c9:77:54:62:d1:44:2a:23:6c:db:33:f8:30:43:90:b4: 38:3c:d9:61:d5:26:d5:be:58:6e:3c:65:2c:df:22:98:4a:9a: df:a5:90:1e:be:11:ee:43:4d:a6:81:c4:b4:ae:fb:10:8b:57: 89:57:d8:c9:52:f3:26:a3:50:05:4e:b7:d9:e2:e8:fa:ca:8c: f1:ff:10:11:52:ea:e5:d2:b6:2f:a6:be:42:fd:1a:4e:05:da: 82:e7:d2:b1:74:39:70:d2:6d:db:fb:09:86:01:68:16:5e:00: 69:37:56:fe:e0:fc:cd:39:de:ce:85:54:be:f1:8b:93:3d:db: a9:f6:8d:df:fb:8a:a2:6f:8e:cf:e8:95:a3:b9:af:42:95:88: e4:54:b1:4c:19:78:2c:f4:56:d7:51:b8:9c:96:be:76:db:78: 30:f2:58:0c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZrgttVAxxwzXI3w1mGU9JyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2M5Y2JkYTllNWVjYWIzNzUwNTIzYmE0ZjJmZTk3MzUyZjFjZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlihznXuwu4f7YmEWbnvXbaZzcv/f Gm5edqSldkI/DGnYnNcxNA817WiY1iebHKNrFrWsLzI+MVwymaX1xkP589GjAAzI 3SVK5WVQjyI6+BWTtDQ5fddpvtAm0Ri2d//ukahak9/HR2pnV1G/QUVz4aPp/tu1 ZiVtyprzPd9yGWES7JADqbUrmnfGFw9bOQzEmtk03Z+it+cw/x8pWKTDbc04381P M/yN5jJf18aEHtVMFDA8wout2NvVTmYmnCKV9VjwUtavDQgyUmLl8UrBjI+4ufCb ngoYEssoZfLjOkppNhcnTeMvWJ55kF1mNrTSFQkgmHWh0dTO6cQtlCc7HwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFLfJy9qeXsqzdQUjuk8v6XNS8c7WMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvdDhuTDJwNWV5ck4xQlNPNlR5X3BjMUx4enRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmMAwDBAAthXUD BAAthXYDBAAtjqQDBAItlDwDBAC5LkQDBADCk90wDQQCAAIwBwMFAyoSkIAwDQYJ KoZIhvcNAQELBQADggEBAE+DS0N69QTGKkdvaaSC0w3PFgpYo+bZd4a7AvaX/h6E VZzSVMtDHOrVxkDOWOazPwN2wd5bZKV6QKRcwvn/mUuhwtAUYVkO43b0zAfyr13s 0onKxqTpGcvo4K0MyXdUYtFEKiNs2zP4MEOQtDg82WHVJtW+WG48ZSzfIphKmt+l kB6+Ee5DTaaBxLSu+xCLV4lX2MlS8yajUAVOt9ni6PrKjPH/EBFS6uXSti+mvkL9 Gk4F2oLn0rF0OXDSbdv7CYYBaBZeAGk3Vv7g/M053s6FVL7xi5M926n2jd/7iqJv js/olaO5r0KViORUsUwZeCz0VtdRuJyWvnbbeDDyWAw= -----END CERTIFICATE-----Generated at Wed Dec 3 13:11:22 2025 by rpki-client