This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/nwEjMYtXkAUhvtvSSqQ4N7C_vDQ.roa File: nwEjMYtXkAUhvtvSSqQ4N7C_vDQ.roa (raw, json) Hash identifier: fREAsBlzsX8lF6ifEC3ILwep6fdJbrzVu3ybNmSN6m8= Subject key identifier: 9F:01:23:31:8B:57:90:05:21:BE:DB:D2:4A:A4:38:37:B0:BF:BC:34 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019A7D57618B2F68351A6CB60A93A66B3C6F Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/nwEjMYtXkAUhvtvSSqQ4N7C_vDQ.roa Signing time: Thu 13 Nov 2025 13:11:09 +0000 ROA not before: Thu 13 Nov 2025 13:11:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214286 IP address blocks: 45.88.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:57:61:8b:2f:68:35:1a:6c:b6:0a:93:a6:6b:3c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Nov 13 13:11:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f0123318b57900521bedbd24aa43837b0bfbc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:31:d3:cf:8f:62:10:e6:da:ad:8e:b4:8e: 81:b1:44:3d:c4:25:b4:69:aa:11:40:23:b7:dc:34: aa:ae:4e:67:81:ce:2c:93:2d:b8:97:c4:b8:b6:de: 2e:49:96:f6:f4:85:cf:cb:ff:98:1a:6d:8f:95:46: 7f:8f:30:1f:dd:6f:eb:0c:1f:d9:40:86:51:9b:21: 50:a9:f5:e6:d7:54:14:83:0f:94:6a:91:3b:8e:42: db:a7:7c:9b:9c:1a:4b:02:f6:2a:74:89:eb:41:a2: 1e:3c:59:bf:28:8c:3a:63:d9:e5:08:2d:43:b2:e1: 18:81:78:25:2a:f8:82:e5:87:2b:8b:8f:ec:01:88: 02:94:e1:87:6a:2f:31:aa:a5:0a:f8:5e:f5:22:c9: a9:77:35:c2:f0:29:22:82:2b:93:22:89:8a:c9:23: 77:68:78:6d:dd:92:21:42:c1:6f:08:91:b4:bb:10: 49:6f:26:2c:49:fa:c4:a1:80:36:4b:cc:44:68:66: 67:3e:7a:ed:38:93:c3:d6:de:f6:48:e6:4d:4f:76: 26:a4:bd:7b:6a:91:b8:06:49:94:58:11:be:cc:78: 5c:e0:05:c7:bd:78:9d:83:1d:3a:ae:74:d4:bc:bc: 0d:2f:fc:ce:d0:1b:aa:34:09:c4:7f:5b:e1:4d:0a: f7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:01:23:31:8B:57:90:05:21:BE:DB:D2:4A:A4:38:37:B0:BF:BC:34 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/nwEjMYtXkAUhvtvSSqQ4N7C_vDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.244.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:68:91:4e:65:89:30:9e:0d:5f:80:56:e2:a3:b7:f6:c6:bd: 4e:d9:b2:47:99:db:cd:f3:cf:bb:36:e3:40:af:52:51:0c:29: dd:d3:26:2b:81:b8:13:88:5d:e1:a9:ee:c5:f6:53:d7:f3:ec: 24:37:72:53:be:d8:20:d6:c1:a2:b0:43:f9:ef:50:0e:3d:b5: cc:d8:7b:e1:74:ca:11:75:13:66:d3:c0:55:ff:e7:1f:9c:7a: 73:09:11:e2:fa:6e:c4:00:f2:7e:91:6d:b0:2f:7a:91:fb:a7: 95:ff:0d:33:3f:2b:63:6d:69:23:1c:ff:f8:df:c7:20:10:d4: d6:72:7a:77:06:39:ed:02:59:a9:b3:b1:07:cf:12:01:cd:8c: 0c:75:37:87:85:e6:d5:72:00:93:61:de:24:f7:a4:0b:5d:dd: 3b:4b:29:c2:29:76:23:e2:24:b1:6f:ff:13:a4:da:f3:2b:88: c6:30:4b:4a:fd:22:f2:0d:59:31:7a:03:f9:02:59:de:5d:46: 63:8f:41:0a:37:a7:be:0b:7e:ad:a6:bf:c9:cd:0c:1d:b7:09: 0f:c3:24:9f:c0:61:40:75:9b:e1:77:51:95:c0:e5:4c:cc:84: cf:f6:a0:84:12:78:6b:d7:bb:0c:77:04:7d:24:ac:53:38:2f: 48:73:8f:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp9V2GLL2g1Gmy2CpOmazxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjUxMTEzMTMxMTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjAxMjMzMThiNTc5MDA1MjFiZWRiZDI0YWE0MzgzN2IwYmZiYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuox08+PYhDm2q2OtI6BsUQ9xCW0 aaoRQCO33DSqrk5ngc4sky24l8S4tt4uSZb29IXPy/+YGm2PlUZ/jzAf3W/rDB/Z QIZRmyFQqfXm11QUgw+UapE7jkLbp3ybnBpLAvYqdInrQaIePFm/KIw6Y9nlCC1D suEYgXglKviC5Ycri4/sAYgClOGHai8xqqUK+F71IsmpdzXC8CkigiuTIomKySN3 aHht3ZIhQsFvCJG0uxBJbyYsSfrEoYA2S8xEaGZnPnrtOJPD1t72SOZNT3YmpL17 apG4BkmUWBG+zHhc4AXHvXidgx06rnTUvLwNL/zO0BuqNAnEf1vhTQr3YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8BIzGLV5AFIb7b0kqkODewv7w0MB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvbndFak1ZdFhrQVVodnR2U1NxUTRON0NfdkRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVj0MA0G CSqGSIb3DQEBCwUAA4IBAQB+aJFOZYkwng1fgFbio7f2xr1O2bJHmdvN88+7NuNA r1JRDCnd0yYrgbgTiF3hqe7F9lPX8+wkN3JTvtgg1sGisEP571AOPbXM2HvhdMoR dRNm08BV/+cfnHpzCRHi+m7EAPJ+kW2wL3qR+6eV/w0zPytjbWkjHP/438cgENTW cnp3BjntAlmps7EHzxIBzYwMdTeHhebVcgCTYd4k96QLXd07SynCKXYj4iSxb/8T pNrzK4jGMEtK/SLyDVkxegP5AlneXUZjj0EKN6e+C36tpr/JzQwdtwkPwySfwGFA dZvhd1GVwOVMzITP9qCEEnhr17sMdwR9JKxTOC9Ic49u -----END CERTIFICATE-----Generated at Fri Dec 5 16:48:23 2025 by rpki-client