This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/AIDwhYtyDr1czK0xp6zgJHM-y84.roa File: AIDwhYtyDr1czK0xp6zgJHM-y84.roa (raw, json) Hash identifier: sgZfjjv0bVGaN6bohtogbdcEvOly414BvXtxWyPZ3v4= Subject key identifier: 00:80:F0:85:8B:72:0E:BD:5C:CC:AD:31:A7:AC:E0:24:73:3E:CB:CE Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Certificate serial: 019ABAA485484B94A9819B1348F4A41F4FCA Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/AIDwhYtyDr1czK0xp6zgJHM-y84.roa Signing time: Tue 25 Nov 2025 10:52:15 +0000 ROA not before: Tue 25 Nov 2025 10:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199967 IP address blocks: 45.146.120.0/24 maxlen: 24 45.146.121.0/24 maxlen: 24 92.118.44.0/24 maxlen: 24 92.118.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:a4:85:48:4b:94:a9:81:9b:13:48:f4:a4:1f:4f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Validity Not Before: Nov 25 10:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0080f0858b720ebd5cccad31a7ace024733ecbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d5:cd:68:aa:2d:e1:53:76:b8:16:3b:53:76: 9f:ee:8e:37:16:65:01:ee:ed:c2:ea:48:ee:30:33: 42:c9:cc:53:c3:bd:f8:dc:f7:9c:66:12:3e:b0:02: 66:35:31:82:fa:1a:b3:a3:7e:15:85:4b:e2:35:82: d9:3f:19:02:69:2d:4f:e3:48:7e:e1:38:0e:11:63: b2:0a:4c:5b:24:fc:b8:40:12:17:a4:db:10:df:1d: 98:4e:6d:6d:eb:29:11:c0:2a:dc:25:c5:c6:88:dc: 6e:3e:09:32:02:ce:7f:f0:df:2b:64:98:7c:56:24: 7e:e2:d3:18:34:45:c7:4a:ec:af:5d:a2:3d:c0:aa: 26:47:fe:b4:19:6b:fd:44:8b:d9:e3:5c:6b:4e:41: 4d:9e:1a:a2:28:e1:58:2a:fa:16:cd:21:a1:b2:31: 5c:e5:21:07:13:61:27:07:12:e2:86:10:f5:18:b1: c5:5d:48:f7:bd:e5:09:3e:46:6d:05:c8:cd:88:37: a2:ef:fc:3b:60:ae:96:37:4b:26:9d:e6:53:50:34: ff:4d:3f:a2:dc:48:99:d9:5e:04:9b:7c:82:00:e2: b1:f4:63:3e:4a:0b:2e:97:be:b6:e3:2a:67:ae:0c: f3:c4:f1:85:a4:a0:ae:06:66:35:42:b6:5c:83:8e: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:80:F0:85:8B:72:0E:BD:5C:CC:AD:31:A7:AC:E0:24:73:3E:CB:CE X509v3 Authority Key Identifier: keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/AIDwhYtyDr1czK0xp6zgJHM-y84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.120.0/23 92.118.44.0/23 Signature Algorithm: sha256WithRSAEncryption 68:4c:54:ce:49:77:cc:2b:68:9e:38:77:ed:0e:22:e0:12:05: 96:de:27:06:46:7d:03:f8:5b:b2:ec:70:6f:5c:ee:83:e5:bf: 0a:ef:7d:ea:13:f0:05:a9:ae:20:44:5f:e4:e9:04:0e:30:33: c5:c2:e8:b2:7c:17:e6:d2:c8:6c:52:ff:93:24:f1:d8:47:f8: b1:fe:e3:60:06:15:dc:30:21:01:1d:f4:5b:ed:1d:4c:26:8f: ac:c8:97:0e:d0:ee:9a:a1:6f:f2:5f:dd:16:46:46:39:73:3c: d4:5b:f2:f8:4d:9e:af:97:24:6d:eb:2c:43:e6:fb:6a:b4:10: 64:df:50:17:32:de:a2:15:0b:83:f5:65:4a:71:fb:aa:d3:6b: ed:96:c4:bb:33:ef:c1:a1:a7:61:70:0a:ad:e5:76:22:4c:ea: 72:f9:ec:01:5c:01:52:20:e9:92:3f:96:3b:53:3f:5b:50:3f: 4a:d7:d9:46:a8:0b:b2:b7:88:2b:13:63:31:79:ad:13:27:4d: a7:84:63:9f:5c:de:0a:5d:b2:6e:27:55:6f:f5:e6:b1:a1:ef: 28:d1:0b:e0:51:17:fb:af:39:fe:8e:5d:0f:f9:65:4d:05:b5: a3:b0:a5:f6:55:3e:93:34:95:97:5a:ed:ed:bc:bd:a9:f7:82: ad:c4:78:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq6pIVIS5SpgZsTSPSkH0/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2 MThkZDIwHhcNMjUxMTI1MTA1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDgwZjA4NThiNzIwZWJkNWNjY2FkMzFhN2FjZTAyNDczM2VjYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tXNaKot4VN2uBY7U3af7o43FmUB 7u3C6kjuMDNCycxTw7343PecZhI+sAJmNTGC+hqzo34VhUviNYLZPxkCaS1P40h+ 4TgOEWOyCkxbJPy4QBIXpNsQ3x2YTm1t6ykRwCrcJcXGiNxuPgkyAs5/8N8rZJh8 ViR+4tMYNEXHSuyvXaI9wKomR/60GWv9RIvZ41xrTkFNnhqiKOFYKvoWzSGhsjFc 5SEHE2EnBxLihhD1GLHFXUj3veUJPkZtBcjNiDei7/w7YK6WN0smneZTUDT/TT+i 3EiZ2V4Em3yCAOKx9GM+Sgsul7624ypnrgzzxPGFpKCuBmY1QrZcg45dgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFACA8IWLcg69XMytMaes4CRzPsvOMB8GA1UdIwQY MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt ZGQxZWM1N2Q3ZTc0LzEvQUlEd2hZdHlEcjFjeksweHA2emdKSE0teTg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0 LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZJ4AwQB XHYsMA0GCSqGSIb3DQEBCwUAA4IBAQBoTFTOSXfMK2ieOHftDiLgEgWW3icGRn0D +Fuy7HBvXO6D5b8K733qE/AFqa4gRF/k6QQOMDPFwuiyfBfm0shsUv+TJPHYR/ix /uNgBhXcMCEBHfRb7R1MJo+syJcO0O6aoW/yX90WRkY5czzUW/L4TZ6vlyRt6yxD 5vtqtBBk31AXMt6iFQuD9WVKcfuq02vtlsS7M+/BoadhcAqt5XYiTOpy+ewBXAFS IOmSP5Y7Uz9bUD9K19lGqAuyt4grE2Mxea0TJ02nhGOfXN4KXbJuJ1Vv9eaxoe8o 0QvgURf7rzn+jl0P+WVNBbWjsKX2VT6TNJWXWu3tvL2p94KtxHjt -----END CERTIFICATE-----Generated at Fri Dec 5 17:52:18 2025 by rpki-client