This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/wSDNzntcWhNUBixkb6aX20BeB6s.roa File: wSDNzntcWhNUBixkb6aX20BeB6s.roa (raw, json) Hash identifier: jjJjLDXdJiAxkXQhCjVcOuaYUcxyHYmIDSfSBzcXqDU= Subject key identifier: C1:20:CD:CE:7B:5C:5A:13:54:06:2C:64:6F:A6:97:DB:40:5E:07:AB Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1 Certificate serial: 019B7B35650DD180E2EF1D8623BC04B06E81 Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/wSDNzntcWhNUBixkb6aX20BeB6s.roa Signing time: Thu 01 Jan 2026 20:17:35 +0000 ROA not before: Thu 01 Jan 2026 20:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.143.132.0/24 maxlen: 24 45.143.133.0/24 maxlen: 24 45.143.134.0/24 maxlen: 24 45.143.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:65:0d:d1:80:e2:ef:1d:86:23:bc:04:b0:6e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1 Validity Not Before: Jan 1 20:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c120cdce7b5c5a1354062c646fa697db405e07ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:13:c2:a5:1d:e5:33:5c:4f:a7:28:89:b7: ec:ee:64:7f:ac:e0:3f:eb:98:a9:01:6e:6a:d7:66: 98:77:46:86:e8:13:e5:7e:0b:1d:49:3a:d0:a7:10: 91:c7:b1:ea:10:d0:12:9c:2f:92:65:6c:11:25:7e: 24:c5:dd:55:bb:58:13:f6:2f:40:62:06:fb:e7:97: 59:05:91:dc:61:d7:4d:84:07:10:42:d3:8a:c5:42: ce:13:cd:cb:30:36:0f:ca:3d:ea:7a:e1:13:17:bd: 06:e8:8e:09:a5:92:3a:0c:44:fb:24:55:b3:2a:40: 8a:65:e3:63:3d:10:13:cf:64:10:f1:bc:50:83:3a: e2:6f:d0:df:f4:82:8a:3d:99:0e:c6:fc:b7:cb:2c: d2:01:39:f9:52:a9:e1:4a:86:e0:5b:3b:92:79:2b: bf:2c:c6:61:c5:cd:2a:25:30:9f:3d:93:d1:9c:f0: f9:97:e4:54:1e:4d:9f:6c:92:29:77:e1:37:f4:7d: f2:d9:70:ae:f3:a4:02:12:0b:ce:2c:cd:f8:e7:d8: 55:6b:74:04:95:12:92:32:cb:fe:f0:ed:c7:59:48: 53:93:f6:ea:3a:27:22:9d:81:ca:d6:99:d4:2f:e4: 9b:34:42:94:44:4b:67:73:81:9f:30:a9:05:c5:cf: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:20:CD:CE:7B:5C:5A:13:54:06:2C:64:6F:A6:97:DB:40:5E:07:AB X509v3 Authority Key Identifier: keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/wSDNzntcWhNUBixkb6aX20BeB6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.132.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:d8:f5:ea:33:ea:a7:08:e7:63:45:61:53:17:3d:3e:30:2b: e3:e1:31:1d:c3:47:be:28:15:52:3f:45:b2:8a:18:2c:10:ba: b4:51:8d:3a:6a:72:33:9b:2f:64:63:92:5a:75:1d:66:a5:5c: ae:bf:5d:db:fb:bc:2e:f7:31:3c:08:f0:5a:98:81:1d:92:bd: dc:b4:fc:5e:83:67:f6:9a:a6:45:fb:b6:37:1c:b8:be:ba:3a: 7b:89:15:40:61:45:fd:05:c3:02:1b:de:13:96:d8:32:5e:d6: 11:fc:78:27:ea:37:16:79:90:d9:92:f9:b5:d4:5d:19:4c:5d: c0:6d:b0:ef:36:c1:bc:9b:1b:33:ea:58:a5:b0:c3:97:64:96: ac:63:1c:ca:1f:fa:55:08:10:d2:f4:50:56:b7:b9:48:3d:9d: 92:1c:0c:08:d0:64:12:fe:10:42:14:95:7b:af:63:e6:c6:a8: 51:6e:2d:f0:b8:f5:40:bc:29:8f:29:07:5d:84:e1:6a:8f:dd: c9:01:c1:22:b7:75:1c:94:50:f3:9e:b2:f8:79:b3:ff:0d:8e: 57:f9:15:2e:6f:7f:e6:0a:1b:98:3f:39:c3:96:c2:6f:92:f6: af:b1:02:17:7a:d0:45:1e:a4:56:cd:58:9a:cd:2d:b5:4b:58: a0:8f:ac:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NWUN0YDi7x2GI7wEsG6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MGU3ZGY0M2M4MmQxMjBhMTNkM2M4NjVmMWYwNmY0OTY0 NGIxZTEwHhcNMjYwMTAxMjAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTIwY2RjZTdiNWM1YTEzNTQwNjJjNjQ2ZmE2OTdkYjQwNWUwN2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOsTwqUd5TNcT6coibfs7mR/rOA/ 65ipAW5q12aYd0aG6BPlfgsdSTrQpxCRx7HqENASnC+SZWwRJX4kxd1Vu1gT9i9A Ygb755dZBZHcYddNhAcQQtOKxULOE83LMDYPyj3qeuETF70G6I4JpZI6DET7JFWz KkCKZeNjPRATz2QQ8bxQgzrib9Df9IKKPZkOxvy3yyzSATn5UqnhSobgWzuSeSu/ LMZhxc0qJTCfPZPRnPD5l+RUHk2fbJIpd+E39H3y2XCu86QCEgvOLM3459hVa3QE lRKSMsv+8O3HWUhTk/bqOicinYHK1pnUL+SbNEKUREtnc4GfMKkFxc/cDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMEgzc57XFoTVAYsZG+ml9tAXgerMB8GA1UdIwQY MBaAFCUOffQ8gtEgoT08hl8fBvSWRLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYt NGE5YmIyZmU3MzMxLzEvd1NETnpudGNXaE5VQml4a2I2YVgyMEJlQjZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYtNGE5YmIyZmU3MzMx LzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY+EMA0G CSqGSIb3DQEBCwUAA4IBAQAd2PXqM+qnCOdjRWFTFz0+MCvj4TEdw0e+KBVSP0Wy ihgsELq0UY06anIzmy9kY5JadR1mpVyuv13b+7wu9zE8CPBamIEdkr3ctPxeg2f2 mqZF+7Y3HLi+ujp7iRVAYUX9BcMCG94TltgyXtYR/Hgn6jcWeZDZkvm11F0ZTF3A bbDvNsG8mxsz6lilsMOXZJasYxzKH/pVCBDS9FBWt7lIPZ2SHAwI0GQS/hBCFJV7 r2PmxqhRbi3wuPVAvCmPKQddhOFqj93JAcEit3UclFDznrL4ebP/DY5X+RUub3/m ChuYPznDlsJvkvavsQIXetBFHqRWzViazS21S1igj6zr -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:11 2026 by rpki-client