This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/P4n5HbuETfytwNfnSacxj1_moTs.roa File: P4n5HbuETfytwNfnSacxj1_moTs.roa (raw, json) Hash identifier: i2WnA3xh5DsgbZaHgrqcjBS/ewnbK2udA8XCkAF3vmI= Subject key identifier: 3F:89:F9:1D:BB:84:4D:FC:AD:C0:D7:E7:49:A7:31:8F:5F:E6:A1:3B Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B118DE228A1C509908DF4244345A025D8 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/P4n5HbuETfytwNfnSacxj1_moTs.roa Signing time: Fri 12 Dec 2025 07:54:29 +0000 ROA not before: Fri 12 Dec 2025 07:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212609 IP address blocks: 176.57.48.0/24 maxlen: 24 176.57.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:8d:e2:28:a1:c5:09:90:8d:f4:24:43:45:a0:25:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Dec 12 07:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3f89f91dbb844dfcadc0d7e749a7318f5fe6a13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:7a:9b:d6:2d:c5:a0:a6:92:df:8f:1d:4b: 49:23:4f:8b:66:7f:18:73:83:8c:d5:72:de:f3:18: 07:f8:5e:e5:ae:72:16:1f:a7:bf:2b:84:63:db:95: fd:0c:7d:25:e3:91:db:9e:61:67:6e:01:3a:1b:df: fb:53:92:f6:d5:0c:d4:08:7a:36:75:0e:c3:3a:64: f2:7d:79:0f:e2:f2:23:66:67:c7:5c:5a:73:68:39: c8:29:b8:25:c1:be:43:43:c7:ea:85:f0:f2:d6:28: 6f:27:37:81:d4:af:4a:cf:c0:c9:20:09:ac:64:d1: 47:1c:22:ad:55:ae:4c:71:89:68:b9:f3:d7:68:e4: 3e:36:4b:41:0f:07:42:6b:ce:40:fa:24:67:23:94: 3a:8b:03:34:2f:bf:b3:af:80:b1:f2:2d:b1:3c:a1: 47:e1:9e:b9:89:15:5e:51:d2:aa:f2:74:63:46:21: a4:74:51:40:02:8c:bc:7d:25:b6:47:91:b8:13:b9: ce:89:5d:7d:19:a7:23:37:66:68:fd:9f:68:b5:e5: 90:12:18:d9:15:cc:d7:93:87:58:f2:df:c5:d5:33: 01:23:07:bc:5f:d0:82:56:2a:3f:cf:27:9b:2b:94: 74:ac:ba:af:c4:0f:03:8e:57:31:1a:de:af:ae:32: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:89:F9:1D:BB:84:4D:FC:AD:C0:D7:E7:49:A7:31:8F:5F:E6:A1:3B X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/P4n5HbuETfytwNfnSacxj1_moTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.48.0/23 Signature Algorithm: sha256WithRSAEncryption a3:43:57:df:9b:f6:d2:63:8f:2e:c6:6c:7e:a5:4a:2d:3f:df: be:5e:27:72:63:f4:e7:48:11:0b:a6:48:ee:cf:ff:87:4f:62: 59:f4:1b:2d:74:8d:88:a4:ce:a9:65:a2:82:e5:ab:76:e6:49: 94:5b:62:90:93:88:ef:03:8b:4e:d8:c0:ef:26:7c:aa:c5:94: 8f:5c:b1:19:04:c8:07:f3:1f:78:8c:0d:1e:ef:fc:d4:cf:19: a8:aa:7f:cc:a9:ca:f9:4e:cb:07:21:18:14:94:1c:67:23:4a: fe:b0:5e:62:38:67:a1:a2:68:40:75:6b:20:1e:02:37:d9:90: 1b:00:07:50:ad:8e:6f:61:73:6e:81:b7:74:2d:ad:41:b1:5a: f0:82:ce:50:f7:11:42:d6:51:9b:3e:92:6e:e7:cc:0d:85:c0: 03:c0:2f:76:83:b1:2a:5d:65:87:82:d3:8c:d1:36:f2:bd:98: a6:a3:77:cc:69:ae:ed:0b:39:c3:59:32:50:e5:77:4a:4f:ed: 19:28:45:8b:ed:e4:4b:a9:f2:88:01:41:42:86:68:c3:83:e5: 1a:a5:cc:cf:5f:b2:b0:05:61:bc:bb:e7:4e:ff:39:1c:65:19: 8f:0f:56:43:3c:5e:d9:ad:77:f4:78:3e:8c:87:46:b3:3b:f4: c7:8f:0b:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsRjeIoocUJkI30JENFoCXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjUxMjEyMDc1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjg5ZjkxZGJiODQ0ZGZjYWRjMGQ3ZTc0OWE3MzE4ZjVmZTZhMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSZ6m9YtxaCmkt+PHUtJI0+LZn8Y c4OM1XLe8xgH+F7lrnIWH6e/K4Rj25X9DH0l45HbnmFnbgE6G9/7U5L21QzUCHo2 dQ7DOmTyfXkP4vIjZmfHXFpzaDnIKbglwb5DQ8fqhfDy1ihvJzeB1K9Kz8DJIAms ZNFHHCKtVa5McYloufPXaOQ+NktBDwdCa85A+iRnI5Q6iwM0L7+zr4Cx8i2xPKFH 4Z65iRVeUdKq8nRjRiGkdFFAAoy8fSW2R5G4E7nOiV19GacjN2Zo/Z9oteWQEhjZ FczXk4dY8t/F1TMBIwe8X9CCVio/zyebK5R0rLqvxA8DjlcxGt6vrjJ1FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD+J+R27hE38rcDX50mnMY9f5qE7MB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvUDRuNUhidUVUZnl0d05mblNhY3hqMV9tb1RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsDkwMA0G CSqGSIb3DQEBCwUAA4IBAQCjQ1ffm/bSY48uxmx+pUotP9++XidyY/TnSBELpkju z/+HT2JZ9BstdI2IpM6pZaKC5at25kmUW2KQk4jvA4tO2MDvJnyqxZSPXLEZBMgH 8x94jA0e7/zUzxmoqn/Mqcr5TssHIRgUlBxnI0r+sF5iOGehomhAdWsgHgI32ZAb AAdQrY5vYXNugbd0La1BsVrwgs5Q9xFC1lGbPpJu58wNhcADwC92g7EqXWWHgtOM 0TbyvZimo3fMaa7tCznDWTJQ5XdKT+0ZKEWL7eRLqfKIAUFChmjDg+UapczPX7Kw BWG8u+dO/zkcZRmPD1ZDPF7ZrXf0eD6Mh0azO/THjwtx -----END CERTIFICATE-----Generated at Mon Dec 15 14:54:36 2025 by rpki-client