This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CnrVk44x8LEg2LJBBNmgTNF07N4.roa File: CnrVk44x8LEg2LJBBNmgTNF07N4.roa (raw, json) Hash identifier: zckqLTNfFO5ispQu4Kvw6x/6IysOO+RwRLoSfhJRWyw= Subject key identifier: 0A:7A:D5:93:8E:31:F0:B1:20:D8:B2:41:04:D9:A0:4C:D1:74:EC:DE Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019ACF3378BF48ACDD01001DD8BF8552D0E5 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CnrVk44x8LEg2LJBBNmgTNF07N4.roa Signing time: Sat 29 Nov 2025 10:40:48 +0000 ROA not before: Sat 29 Nov 2025 10:40:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50053 IP address blocks: 46.38.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:33:78:bf:48:ac:dd:01:00:1d:d8:bf:85:52:d0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Nov 29 10:40:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0a7ad5938e31f0b120d8b24104d9a04cd174ecde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:93:fa:0e:81:0c:24:7f:61:51:2c:38:d7:a6: 18:79:f4:a8:bc:40:56:0c:19:80:44:e1:e6:aa:9e: 84:18:d0:6a:c6:2d:77:a8:d2:35:cb:3d:21:fd:63: bd:5c:55:f9:e4:36:ec:c9:88:39:e1:b6:b9:9c:67: a5:6d:c3:a2:96:05:bc:2d:02:6f:83:e2:93:c1:e3: e5:2b:75:2c:c1:05:f8:d4:8c:51:b8:4e:67:af:36: 80:26:8e:66:4e:ff:f3:61:e3:a7:7e:b7:46:fb:07: 79:e2:88:67:e0:e3:cd:dc:75:76:8c:73:4c:0d:9c: 3a:4d:8e:32:93:67:97:00:40:c7:a8:4c:0a:9b:a3: 59:32:13:f0:88:94:2e:39:4f:ef:6c:0f:00:f5:8d: d4:52:6e:dd:41:4c:e9:99:e4:d9:45:2c:02:9b:28: 81:05:9d:b8:9f:03:07:d5:57:17:df:65:62:64:fb: 22:a5:12:b1:84:0f:d8:60:85:a1:2b:b7:ac:58:f8: da:0c:ba:26:52:f9:c7:a3:de:7e:f4:9d:79:cd:40: e6:ee:d5:2a:93:a3:2e:50:ad:44:e4:fb:3e:c0:ae: 48:3d:04:3b:a6:f2:29:c2:b5:d5:5b:65:bb:96:c4: d7:ae:9f:ed:fc:29:ba:ba:fb:a5:ef:34:6f:88:44: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7A:D5:93:8E:31:F0:B1:20:D8:B2:41:04:D9:A0:4C:D1:74:EC:DE X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CnrVk44x8LEg2LJBBNmgTNF07N4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.156.0/24 Signature Algorithm: sha256WithRSAEncryption 93:0d:2e:96:15:72:ac:5d:ab:1a:d3:53:cd:d5:67:86:bb:d6: 14:37:87:6d:56:3a:6f:04:bb:71:06:92:11:fa:de:d3:96:ba: 69:52:b9:58:68:a7:1f:80:ce:d2:b6:93:47:9d:c2:f7:7e:5e: 92:44:46:59:71:2f:3c:cd:73:40:7c:ed:42:bf:8a:51:7a:03: ba:e9:44:7d:50:a0:25:c9:67:75:02:c7:b7:6f:8b:ef:f4:aa: 29:95:f6:de:aa:2f:11:a9:48:4e:a5:0b:88:f4:fc:b0:20:43: 18:ac:a1:4d:b6:cb:c4:a2:5a:d4:8e:a5:ef:37:2e:bf:28:fb: 28:61:03:d3:94:80:cd:db:e7:39:c5:c8:e0:a2:0a:74:97:f0: b8:7a:60:68:9e:c7:ee:da:e5:cc:03:49:b8:23:94:bc:a5:5f: d4:59:b0:f9:16:31:b3:a9:58:f2:60:d1:ef:be:8f:20:46:d2: 83:78:c4:c1:f3:65:f8:9f:22:b2:24:7c:11:ca:1f:b5:43:e0: cc:50:4c:e6:11:b8:96:ef:9c:a8:dc:63:4a:fb:df:29:5f:16: 05:6f:53:ed:ed:89:f6:e5:9c:6c:82:d8:0e:93:c7:49:a6:ce: 3b:0f:95:49:01:3d:f5:4a:c3:18:1e:99:db:bc:f4:8d:a5:25: b7:3a:a7:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrPM3i/SKzdAQAd2L+FUtDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUxMTI5MTA0MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTdhZDU5MzhlMzFmMGIxMjBkOGIyNDEwNGQ5YTA0Y2QxNzRlY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pP6DoEMJH9hUSw416YYefSovEBW DBmAROHmqp6EGNBqxi13qNI1yz0h/WO9XFX55DbsyYg54ba5nGelbcOilgW8LQJv g+KTwePlK3UswQX41IxRuE5nrzaAJo5mTv/zYeOnfrdG+wd54ohn4OPN3HV2jHNM DZw6TY4yk2eXAEDHqEwKm6NZMhPwiJQuOU/vbA8A9Y3UUm7dQUzpmeTZRSwCmyiB BZ24nwMH1VcX32ViZPsipRKxhA/YYIWhK7esWPjaDLomUvnHo95+9J15zUDm7tUq k6MuUK1E5Ps+wK5IPQQ7pvIpwrXVW2W7lsTXrp/t/Cm6uvul7zRviEQnBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAp61ZOOMfCxINiyQQTZoEzRdOzeMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvQ25yVms0NHg4TEVnMkxKQkJObWdUTkYwN040LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiacMA0G CSqGSIb3DQEBCwUAA4IBAQCTDS6WFXKsXasa01PN1WeGu9YUN4dtVjpvBLtxBpIR +t7TlrppUrlYaKcfgM7StpNHncL3fl6SREZZcS88zXNAfO1Cv4pRegO66UR9UKAl yWd1Ase3b4vv9Koplfbeqi8RqUhOpQuI9PywIEMYrKFNtsvEolrUjqXvNy6/KPso YQPTlIDN2+c5xcjgogp0l/C4emBonsfu2uXMA0m4I5S8pV/UWbD5FjGzqVjyYNHv vo8gRtKDeMTB82X4nyKyJHwRyh+1Q+DMUEzmEbiW75yo3GNK+98pXxYFb1Pt7Yn2 5ZxsgtgOk8dJps47D5VJAT31SsMYHpnbvPSNpSW3Oqfg -----END CERTIFICATE-----Generated at Sat Dec 6 16:51:38 2025 by rpki-client