This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/TTdxccevD2zpMdfo6ZlWOXJ7tOc.roa File: TTdxccevD2zpMdfo6ZlWOXJ7tOc.roa (raw, json) Hash identifier: a1MiLBNq+VPamgF26TNflFyPN1Bc2B+3ogJ/a+uCX2g= Subject key identifier: 4D:37:71:71:C7:AF:0F:6C:E9:31:D7:E8:E9:99:56:39:72:7B:B4:E7 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019A905F54503FFB7A13AAFB8B709B706AD8 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/TTdxccevD2zpMdfo6ZlWOXJ7tOc.roa Signing time: Mon 17 Nov 2025 05:52:37 +0000 ROA not before: Mon 17 Nov 2025 05:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 45.146.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:5f:54:50:3f:fb:7a:13:aa:fb:8b:70:9b:70:6a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Nov 17 05:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d377171c7af0f6ce931d7e8e9995639727bb4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:a5:af:aa:aa:11:69:60:cc:31:dd:97:f4: 30:de:6a:55:08:44:b8:74:5d:8a:ba:ab:71:e4:ee: 48:b8:1c:af:c7:0e:5c:58:1e:d2:81:02:60:17:8f: 91:be:36:82:44:d3:66:b4:48:cf:a1:3f:5f:59:1c: 8b:33:ad:06:4f:a8:30:ea:61:a7:a2:fc:dd:a0:82: 6d:00:7d:43:da:e2:ab:d8:6c:6a:84:e0:32:87:c0: 0b:7a:cf:c6:2d:8b:43:db:3e:73:e4:65:fc:fc:63: 1c:53:8a:0c:2d:14:20:d8:ed:52:83:30:f0:a1:e2: f8:e0:b2:b5:5e:aa:37:5b:97:d3:6c:f6:f6:b0:83: ff:2c:75:2d:a5:8b:85:93:60:8e:35:e1:74:cd:24: 94:00:15:a4:b0:0a:a7:85:32:79:d6:62:31:a6:bd: aa:51:08:8f:36:fe:30:98:33:0f:49:f2:d7:c7:e5: a3:85:09:6b:84:16:9e:67:4c:0e:2e:6a:15:64:06: 3a:8e:da:70:59:2a:fe:fc:86:11:60:9c:81:57:3b: 83:14:ad:cb:9e:68:f3:98:d6:52:d3:05:90:bc:8e: 40:58:2a:2a:e0:73:f6:00:2c:a9:03:c4:79:48:0c: 38:48:bb:60:d4:9b:0f:8c:05:8f:4f:b6:77:f4:27: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:37:71:71:C7:AF:0F:6C:E9:31:D7:E8:E9:99:56:39:72:7B:B4:E7 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/TTdxccevD2zpMdfo6ZlWOXJ7tOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.200.0/24 Signature Algorithm: sha256WithRSAEncryption 65:27:e9:ba:c2:61:0f:1a:cf:67:1e:2a:cc:fa:d7:69:b2:42: 2e:c2:9e:a3:eb:e7:dd:e0:c1:79:b6:ff:a4:59:30:c5:fe:57: a8:3d:e6:34:c9:7a:13:eb:70:8a:7f:b1:ed:94:83:f7:3d:df: 33:a6:81:c1:8f:cb:24:8f:65:e9:eb:5e:03:e8:a4:aa:ad:c9: 45:f1:74:e0:f9:d2:18:8e:1a:c3:0c:33:a2:51:b0:82:ce:5a: c1:a3:ca:c1:92:b2:96:be:81:5d:84:02:2e:7b:34:96:e6:19: 88:e8:65:8d:24:55:ee:c2:82:1f:bb:7c:ae:93:b8:5a:90:50: 45:22:3d:30:be:54:61:1e:48:12:bd:d0:19:43:43:fa:ea:d3: f4:48:2c:74:9e:e9:12:73:2b:fa:c5:b5:a4:e5:0d:5d:bf:7a: da:b0:65:18:c6:ff:97:ef:60:f0:4a:67:28:b6:d7:36:b9:0c: e9:e7:a4:f7:c9:da:2c:4f:d6:09:60:15:41:aa:f2:d8:6e:0f: 25:86:7c:73:c9:49:82:1e:5e:a5:ff:ba:ab:98:89:67:4c:c6: f1:9f:04:73:08:d7:ea:19:d1:95:cf:29:1f:53:d3:01:89:b7: a7:8b:b9:2e:80:e0:bb:d1:ef:96:9e:84:0b:07:75:2c:10:e5: 40:21:8a:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqQX1RQP/t6E6r7i3CbcGrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUxMTE3MDU1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDM3NzE3MWM3YWYwZjZjZTkzMWQ3ZThlOTk5NTYzOTcyN2JiNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vulr6qqEWlgzDHdl/Qw3mpVCES4 dF2Kuqtx5O5IuByvxw5cWB7SgQJgF4+RvjaCRNNmtEjPoT9fWRyLM60GT6gw6mGn ovzdoIJtAH1D2uKr2GxqhOAyh8ALes/GLYtD2z5z5GX8/GMcU4oMLRQg2O1SgzDw oeL44LK1Xqo3W5fTbPb2sIP/LHUtpYuFk2CONeF0zSSUABWksAqnhTJ51mIxpr2q UQiPNv4wmDMPSfLXx+WjhQlrhBaeZ0wOLmoVZAY6jtpwWSr+/IYRYJyBVzuDFK3L nmjzmNZS0wWQvI5AWCoq4HP2ACypA8R5SAw4SLtg1JsPjAWPT7Z39CfbYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE03cXHHrw9s6THX6OmZVjlye7TnMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvVFRkeGNjZXZEMnpwTWRmbzZabFdPWEo3dE9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZLIMA0G CSqGSIb3DQEBCwUAA4IBAQBlJ+m6wmEPGs9nHirM+tdpskIuwp6j6+fd4MF5tv+k WTDF/leoPeY0yXoT63CKf7HtlIP3Pd8zpoHBj8skj2Xp614D6KSqrclF8XTg+dIY jhrDDDOiUbCCzlrBo8rBkrKWvoFdhAIuezSW5hmI6GWNJFXuwoIfu3yuk7hakFBF Ij0wvlRhHkgSvdAZQ0P66tP0SCx0nukScyv6xbWk5Q1dv3rasGUYxv+X72DwSmco ttc2uQzp56T3ydosT9YJYBVBqvLYbg8lhnxzyUmCHl6l/7qrmIlnTMbxnwRzCNfq GdGVzykfU9MBibeni7kugOC70e+WnoQLB3UsEOVAIYrg -----END CERTIFICATE-----Generated at Fri Dec 5 04:29:25 2025 by rpki-client