This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/cauVP0qGPVnPB7MP3t-ZroS6zrE.roa File: cauVP0qGPVnPB7MP3t-ZroS6zrE.roa (raw, json) Hash identifier: WnaZ9/rzxCTX29Tua4ayJ4e4SO3kQaIXgKPs+WVTc7U= Subject key identifier: 71:AB:95:3F:4A:86:3D:59:CF:07:B3:0F:DE:DF:99:AE:84:BA:CE:B1 Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Certificate serial: 019ABAA484550042D49A972D3EF8B731F46A Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/cauVP0qGPVnPB7MP3t-ZroS6zrE.roa Signing time: Tue 25 Nov 2025 10:52:15 +0000 ROA not before: Tue 25 Nov 2025 10:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 45.146.123.0/24 maxlen: 24 92.118.46.0/24 maxlen: 24 92.118.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:a4:84:55:00:42:d4:9a:97:2d:3e:f8:b7:31:f4:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Validity Not Before: Nov 25 10:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=71ab953f4a863d59cf07b30fdedf99ae84baceb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:c8:e9:19:31:12:d9:4b:a2:9d:9c:b0:a3: eb:cb:94:2c:e4:49:70:4c:17:17:4c:6a:fe:f5:92: 56:dc:59:a3:2a:70:97:a7:03:17:ed:e4:b2:43:61: 7d:84:1a:fe:7f:18:04:f1:27:f8:54:ee:8f:30:cc: d3:5b:ab:d8:ec:e7:87:f8:73:ee:68:dc:a7:78:c9: 84:e7:14:ba:0e:06:1e:7a:79:a0:cf:11:4d:be:32: 24:1d:ee:2e:4a:8b:b2:84:f3:fa:61:0b:a9:5a:44: 86:6a:e2:f2:87:bb:26:d4:bd:a3:3e:43:d7:c3:f7: 44:35:3d:33:9e:fc:74:59:7a:20:63:de:10:c6:d1: 87:17:64:51:76:c0:bc:d3:41:5e:23:c2:24:4a:14: 9b:2d:46:35:f6:89:32:6a:98:82:51:c5:e0:99:f4: 51:ae:39:9d:03:ba:26:fc:98:d0:85:ae:d8:0f:85: 31:0d:4d:33:f0:52:38:c7:d9:89:17:48:87:34:1f: 15:5e:f2:81:ca:30:4c:1d:a3:8d:71:5a:54:39:6d: 87:80:ef:a2:0e:22:e9:f2:41:61:de:94:84:37:41: d7:77:b6:57:a9:31:91:47:76:66:55:d7:7e:6f:a6: a7:af:c9:62:ec:d1:1e:2e:6c:ad:44:a1:79:02:12: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AB:95:3F:4A:86:3D:59:CF:07:B3:0F:DE:DF:99:AE:84:BA:CE:B1 X509v3 Authority Key Identifier: keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/cauVP0qGPVnPB7MP3t-ZroS6zrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.123.0/24 92.118.46.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:d4:ea:8c:63:86:4d:da:6c:64:b9:10:5b:eb:34:c9:f1:6e: 65:37:e8:49:8a:57:b5:cd:0e:76:82:41:38:56:fe:84:3e:a1: 31:7a:d5:d9:51:ee:c0:47:b6:8d:e5:c0:9f:cc:c4:4c:4b:1d: a8:73:72:9e:0c:23:e8:b5:db:c6:1a:77:13:18:4e:79:c9:8d: e7:62:82:89:1b:2f:10:8a:07:88:6d:b0:f8:44:17:cf:0b:ce: 4c:32:9b:2d:29:32:c1:56:ff:a2:07:fe:f0:92:5d:a1:f0:ad: 6c:d8:10:09:df:3b:91:c7:d9:39:0a:f7:ab:bf:fe:63:04:95: 9d:58:fd:18:8f:18:89:ad:cf:ac:ac:c4:e7:b9:bc:03:db:65: 5c:80:5e:bf:3f:7d:95:25:e7:93:0c:58:a4:a4:17:66:f1:49: 28:f5:ad:27:4e:79:fe:14:50:d9:8a:6a:f0:28:ce:7f:94:ac: 53:c8:15:c5:52:ed:07:df:14:c8:f8:24:e1:9d:9c:eb:36:26: e4:c8:ad:43:8d:54:38:1f:d9:89:9b:f5:fa:a8:a6:bc:0f:94: 5c:ff:42:ef:2f:dc:3f:d9:f8:a0:fe:86:af:38:d1:b9:22:e3: ff:92:30:f3:05:22:eb:c2:fe:ce:bf:00:62:a2:97:ac:ec:d4: 46:fe:d8:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq6pIRVAELUmpctPvi3MfRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2 MThkZDIwHhcNMjUxMTI1MTA1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWFiOTUzZjRhODYzZDU5Y2YwN2IzMGZkZWRmOTlhZTg0YmFjZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssDI6RkxEtlLop2csKPry5Qs5Elw TBcXTGr+9ZJW3FmjKnCXpwMX7eSyQ2F9hBr+fxgE8Sf4VO6PMMzTW6vY7OeH+HPu aNyneMmE5xS6DgYeenmgzxFNvjIkHe4uSouyhPP6YQupWkSGauLyh7sm1L2jPkPX w/dENT0znvx0WXogY94QxtGHF2RRdsC800FeI8IkShSbLUY19okyapiCUcXgmfRR rjmdA7om/JjQha7YD4UxDU0z8FI4x9mJF0iHNB8VXvKByjBMHaONcVpUOW2HgO+i DiLp8kFh3pSEN0HXd7ZXqTGRR3ZmVdd+b6anr8li7NEeLmytRKF5AhL1ewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHGrlT9Khj1ZzwezD97fma6Eus6xMB8GA1UdIwQY MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt ZGQxZWM1N2Q3ZTc0LzEvY2F1VlAwcUdQVm5QQjdNUDN0LVpyb1M2enJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0 LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZJ7AwQB XHYuMA0GCSqGSIb3DQEBCwUAA4IBAQAL1OqMY4ZN2mxkuRBb6zTJ8W5lN+hJile1 zQ52gkE4Vv6EPqExetXZUe7AR7aN5cCfzMRMSx2oc3KeDCPotdvGGncTGE55yY3n YoKJGy8QigeIbbD4RBfPC85MMpstKTLBVv+iB/7wkl2h8K1s2BAJ3zuRx9k5Cver v/5jBJWdWP0YjxiJrc+srMTnubwD22VcgF6/P32VJeeTDFikpBdm8Uko9a0nTnn+ FFDZimrwKM5/lKxTyBXFUu0H3xTI+CThnZzrNibkyK1DjVQ4H9mJm/X6qKa8D5Rc /0LvL9w/2fig/oavONG5IuP/kjDzBSLrwv7OvwBiopes7NRG/tjR -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:24 2025 by rpki-client