This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/I-O_GGe_luY05QSqicrZd2eVxmI.roa File: I-O_GGe_luY05QSqicrZd2eVxmI.roa (raw, json) Hash identifier: 1C0RLe1sJLZEUJoA4D6aMkOtpJJfXl0/T/KPIL3GXzE= Subject key identifier: 23:E3:BF:18:67:BF:96:E6:34:E5:04:AA:89:CA:D9:77:67:95:C6:62 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019AB748D735ABDC1A5D6CFEB55635D1A09D Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/I-O_GGe_luY05QSqicrZd2eVxmI.roa Signing time: Mon 24 Nov 2025 19:13:15 +0000 ROA not before: Mon 24 Nov 2025 19:13:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209854 IP address blocks: 45.95.242.0/24 maxlen: 24 45.139.252.0/24 maxlen: 24 45.139.253.0/24 maxlen: 24 45.149.3.0/24 maxlen: 24 93.185.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:48:d7:35:ab:dc:1a:5d:6c:fe:b5:56:35:d1:a0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Nov 24 19:13:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=23e3bf1867bf96e634e504aa89cad9776795c662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:98:ea:a4:c6:bc:07:49:ac:0e:13:ce:8a: be:cc:86:41:ba:cf:24:76:7f:67:99:f0:96:4e:67: 8e:93:82:01:b2:02:5d:59:1e:41:03:5a:d5:62:2e: e3:67:12:83:4e:1f:25:f5:5a:4f:c3:aa:a0:d9:e9: d9:96:72:22:7b:47:72:e7:fe:69:60:ba:cd:06:18: 07:44:8a:ec:d2:04:b6:1f:4e:b6:13:11:7b:95:32: 47:92:38:c7:4f:2b:3f:a2:a1:6e:fe:60:07:21:0f: 1c:1a:4d:ef:86:2a:31:9f:b5:63:85:29:16:3f:75: f0:91:f7:89:c0:c7:5e:7e:fe:28:bf:ce:65:9f:f2: 9c:c8:cd:16:a8:8b:52:89:a9:2b:c7:f4:bc:cc:56: 75:68:fe:2d:02:c2:8b:62:de:b6:b6:a3:0b:8f:7f: e8:19:5b:15:69:c8:dd:d8:01:7f:37:ce:4e:d8:41: 7a:9b:2f:2d:12:3b:14:6c:21:b7:b0:b5:c5:be:be: 23:a2:01:36:ca:61:a1:a6:fe:b1:03:3f:8b:26:1c: 20:60:20:3c:67:ae:ab:9d:3c:2c:6d:95:c9:b0:66: 36:78:9b:bf:9e:ef:47:c8:5e:69:72:b6:e3:ae:ef: 78:69:1f:40:e2:17:84:58:f6:1b:c1:ef:4b:27:92: eb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E3:BF:18:67:BF:96:E6:34:E5:04:AA:89:CA:D9:77:67:95:C6:62 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/I-O_GGe_luY05QSqicrZd2eVxmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.242.0/24 45.139.252.0/23 45.149.3.0/24 93.185.162.0/24 Signature Algorithm: sha256WithRSAEncryption bb:5a:b3:d5:cc:d2:f3:bc:6a:ca:ad:2b:35:93:10:59:8f:8f: 9c:bd:4f:fe:68:f6:30:e4:b4:54:14:c8:0d:ee:db:f6:e0:81: 1c:18:b2:14:4e:74:99:be:88:1f:87:ae:32:61:6b:f0:c7:63: 64:c2:67:fd:be:b6:66:f3:f8:65:c9:b6:70:05:c0:10:67:d9: 2a:7a:da:3c:f1:23:08:e7:9f:fa:e7:27:24:c6:b8:04:9e:7f: 1d:c5:b7:fc:fa:e9:77:54:54:0d:07:b3:c4:f7:49:b0:05:7d: 7a:0b:56:6d:d1:07:ad:62:12:2c:2c:44:55:a5:75:35:39:36: 23:a1:91:05:70:11:8c:8a:9f:d4:fe:30:f3:c0:1f:7e:d5:c6: ec:6f:72:0b:d1:3d:4e:e8:c7:37:69:c6:b4:f8:21:01:e4:de: 02:f3:0a:5f:d8:4c:26:20:be:9e:b8:be:56:4b:62:09:0b:8e: c1:1f:e5:60:cf:4f:3e:21:80:5c:f3:10:c4:40:7a:41:4d:ed: 42:f1:6e:8e:2b:2a:5b:6d:21:a9:11:97:01:71:10:92:3c:0c: cd:69:a3:64:1a:b3:60:77:0c:d4:07:0e:b0:87:ee:92:05:24: 18:1e:89:9e:0b:62:6e:b0:af:89:c1:60:e7:e4:90:a3:07:fe: e6:26:99:6c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZq3SNc1q9waXWz+tVY10aCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjUxMTI0MTkxMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2UzYmYxODY3YmY5NmU2MzRlNTA0YWE4OWNhZDk3NzY3OTVjNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubSY6qTGvAdJrA4Tzoq+zIZBus8k dn9nmfCWTmeOk4IBsgJdWR5BA1rVYi7jZxKDTh8l9VpPw6qg2enZlnIie0dy5/5p YLrNBhgHRIrs0gS2H062ExF7lTJHkjjHTys/oqFu/mAHIQ8cGk3vhioxn7VjhSkW P3XwkfeJwMdefv4ov85ln/KcyM0WqItSiakrx/S8zFZ1aP4tAsKLYt62tqMLj3/o GVsVacjd2AF/N85O2EF6my8tEjsUbCG3sLXFvr4jogE2ymGhpv6xAz+LJhwgYCA8 Z66rnTwsbZXJsGY2eJu/nu9HyF5pcrbjru94aR9A4heEWPYbwe9LJ5LrRQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCPjvxhnv5bmNOUEqonK2XdnlcZiMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvSS1PX0dHZV9sdVkwNVFTcWljclpkMmVWeG1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALV/yAwQB LYv8AwQALZUDAwQAXbmiMA0GCSqGSIb3DQEBCwUAA4IBAQC7WrPVzNLzvGrKrSs1 kxBZj4+cvU/+aPYw5LRUFMgN7tv24IEcGLIUTnSZvogfh64yYWvwx2Nkwmf9vrZm 8/hlybZwBcAQZ9kqeto88SMI55/65yckxrgEnn8dxbf8+ul3VFQNB7PE90mwBX16 C1Zt0QetYhIsLERVpXU1OTYjoZEFcBGMip/U/jDzwB9+1cbsb3IL0T1O6Mc3aca0 +CEB5N4C8wpf2EwmIL6euL5WS2IJC47BH+Vgz08+IYBc8xDEQHpBTe1C8W6OKypb bSGpEZcBcRCSPAzNaaNkGrNgdwzUBw6wh+6SBSQYHomeC2JusK+JwWDn5JCjB/7m Jpls -----END CERTIFICATE-----Generated at Fri Dec 5 15:04:54 2025 by rpki-client