This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Ad-S1Ngl3fPcvtK5iA-h46LCpGQ.roa File: Ad-S1Ngl3fPcvtK5iA-h46LCpGQ.roa (raw, json) Hash identifier: 3gPtY4k7qdupyNOfnaxWEN6tHASq2wNK+0Cq9Xgk6AE= Subject key identifier: 01:DF:92:D4:D8:25:DD:F3:DC:BE:D2:B9:88:0F:A1:E3:A2:C2:A4:64 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019B2C3F60F97ACC430BC62FC50C818FF93A Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Ad-S1Ngl3fPcvtK5iA-h46LCpGQ.roa Signing time: Wed 17 Dec 2025 12:18:29 +0000 ROA not before: Wed 17 Dec 2025 12:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.146.200.0/23 maxlen: 23 45.146.200.0/24 maxlen: 24 45.146.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:3f:60:f9:7a:cc:43:0b:c6:2f:c5:0c:81:8f:f9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Dec 17 12:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=01df92d4d825ddf3dcbed2b9880fa1e3a2c2a464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:f0:16:f4:54:7f:af:cd:f3:47:94:cf:41: e2:7a:4a:57:c5:a5:58:d6:9e:3a:c1:1a:42:59:26: 3a:b6:07:94:89:d4:32:ab:cb:3c:26:47:0a:af:80: 34:3a:a7:18:ec:67:68:f9:3b:7b:9d:e2:6f:df:c7: 8e:04:5b:a6:2a:bd:46:f5:e4:1e:42:ae:20:5f:24: 5e:49:ae:9c:23:f0:9e:75:42:0a:be:f2:5f:3e:b6: 18:7f:94:15:05:79:57:f5:cc:fb:dc:9f:45:f1:20: 7a:4e:34:0d:1a:09:6d:49:31:30:d0:af:fe:4c:44: 80:f1:7c:4c:0c:ac:ed:e0:8e:b4:89:71:34:8a:0c: bf:92:0c:8f:59:84:56:1f:ae:bf:ec:c7:01:ff:33: f9:f4:40:8b:54:a5:09:5b:63:c0:d1:27:d6:17:f1: 25:78:f5:93:40:bf:bf:4a:7d:b4:bb:36:2a:d1:08: 0d:a1:09:5a:6f:3d:e0:bd:35:81:cf:f3:82:28:e9: 92:00:4f:13:bd:15:44:88:00:1f:b4:b8:8b:b7:fd: 7e:63:85:e8:50:87:2b:28:9a:a7:22:c0:48:46:29: 42:35:db:4e:b8:8c:56:87:a1:b7:89:1a:3a:68:9b: 10:f5:ed:9f:fb:56:da:5b:64:44:38:79:34:72:a3: 99:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DF:92:D4:D8:25:DD:F3:DC:BE:D2:B9:88:0F:A1:E3:A2:C2:A4:64 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Ad-S1Ngl3fPcvtK5iA-h46LCpGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.200.0/22 Signature Algorithm: sha256WithRSAEncryption 90:57:12:23:fb:0a:41:05:67:5b:f4:4a:af:43:38:a2:87:0b: 94:a7:1a:6b:ca:1a:0e:ed:69:7b:18:87:55:a4:6e:8a:6a:4a: 65:9c:9b:bf:0d:47:90:5d:79:1f:b2:9c:a2:3b:84:53:1d:0d: 3b:c9:49:d6:92:21:46:23:4b:cb:11:a4:13:9b:02:25:cd:e0: 41:62:53:63:73:54:f3:e0:f3:f1:a4:49:22:cf:08:41:bb:7e: 78:01:a7:91:ff:45:d8:a4:8e:ec:93:21:e3:77:dc:8d:1e:66: be:1b:a3:f0:44:df:77:89:b9:70:ff:ab:a3:53:ed:e9:66:5c: 9e:73:f7:fe:cf:04:2c:25:00:5d:fe:54:28:1c:18:1d:98:f9: b4:9c:bc:11:65:56:bc:04:54:02:fb:85:e4:5c:00:09:44:a0: de:ce:80:0b:1a:87:db:18:44:f3:5f:11:c5:60:39:2f:12:2c: 58:f9:ee:09:ab:2f:27:6c:e9:86:6a:83:fd:d0:a1:68:8a:34: 13:34:8d:16:91:52:f1:19:d7:2f:7a:5d:06:20:e1:90:af:ec: 7c:83:35:c0:58:fa:ae:63:80:be:94:3a:5a:2b:f0:c4:b2:71: c9:e4:e5:c8:20:b3:64:f8:4f:dc:63:da:4b:5a:aa:9d:47:f7: 11:a5:53:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZssP2D5esxDC8YvxQyBj/k6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUxMjE3MTIxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWRmOTJkNGQ4MjVkZGYzZGNiZWQyYjk4ODBmYTFlM2EyYzJhNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWrwFvRUf6/N80eUz0HiekpXxaVY 1p46wRpCWSY6tgeUidQyq8s8JkcKr4A0OqcY7Gdo+Tt7neJv38eOBFumKr1G9eQe Qq4gXyReSa6cI/CedUIKvvJfPrYYf5QVBXlX9cz73J9F8SB6TjQNGgltSTEw0K/+ TESA8XxMDKzt4I60iXE0igy/kgyPWYRWH66/7McB/zP59ECLVKUJW2PA0SfWF/El ePWTQL+/Sn20uzYq0QgNoQlabz3gvTWBz/OCKOmSAE8TvRVEiAAftLiLt/1+Y4Xo UIcrKJqnIsBIRilCNdtOuIxWh6G3iRo6aJsQ9e2f+1baW2REOHk0cqOZcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAHfktTYJd3z3L7SuYgPoeOiwqRkMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvQWQtUzFOZ2wzZlBjdnRLNWlBLWg0NkxDcEdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZLIMA0G CSqGSIb3DQEBCwUAA4IBAQCQVxIj+wpBBWdb9EqvQziihwuUpxpryhoO7Wl7GIdV pG6KakplnJu/DUeQXXkfspyiO4RTHQ07yUnWkiFGI0vLEaQTmwIlzeBBYlNjc1Tz 4PPxpEkizwhBu354AaeR/0XYpI7skyHjd9yNHma+G6PwRN93iblw/6ujU+3pZlye c/f+zwQsJQBd/lQoHBgdmPm0nLwRZVa8BFQC+4XkXAAJRKDezoALGofbGETzXxHF YDkvEixY+e4Jqy8nbOmGaoP90KFoijQTNI0WkVLxGdcvel0GIOGQr+x8gzXAWPqu Y4C+lDpaK/DEsnHJ5OXIILNk+E/cY9pLWqqdR/cRpVMq -----END CERTIFICATE-----Generated at Sat Dec 20 00:12:35 2025 by rpki-client