This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dQhELvDi6q13Xc5UVnqyqHCTV_k.roa File: dQhELvDi6q13Xc5UVnqyqHCTV_k.roa (raw, json) Hash identifier: ZEjFzQOr0AUJmsx5t7YLpNYM/D+kh4GvC2fLo4Nvft8= Subject key identifier: 75:08:44:2E:F0:E2:EA:AD:77:5D:CE:54:56:7A:B2:A8:70:93:57:F9 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019AE5BE5C4CF9F46837F97E7973817862C5 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dQhELvDi6q13Xc5UVnqyqHCTV_k.roa Signing time: Wed 03 Dec 2025 19:44:09 +0000 ROA not before: Wed 03 Dec 2025 19:44:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153914 IP address blocks: 45.66.165.0/24 maxlen: 24 45.88.183.0/24 maxlen: 24 45.89.105.0/24 maxlen: 24 45.149.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:be:5c:4c:f9:f4:68:37:f9:7e:79:73:81:78:62:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Dec 3 19:44:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7508442ef0e2eaad775dce54567ab2a8709357f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e5:12:ae:a6:bf:f5:8c:b2:20:3f:d0:08:39: 1d:fb:63:60:3f:5e:b3:40:8c:b5:4c:f9:65:21:1f: 75:91:fc:7a:cc:63:32:88:2f:79:e6:f7:12:ac:68: 25:c4:1d:53:82:67:e5:39:97:43:ab:20:f8:f5:a4: 82:ad:cc:f6:4c:6a:6a:05:de:e3:35:00:39:ba:e1: 9a:a8:80:09:2e:10:3f:2c:3f:c6:34:a1:73:59:6e: c0:62:2c:c9:a9:0e:f4:b6:b2:c7:92:9c:bb:bc:6a: 8e:d9:fa:7d:d9:7b:c7:92:5c:7c:a2:ff:d1:e5:f8: 94:6c:1c:6c:65:4c:55:0e:d9:f2:f2:4a:25:1a:ce: 2d:91:ba:67:84:b4:ce:5d:fa:cc:86:3f:96:b3:d4: 72:71:33:50:b1:94:a1:8f:c7:d6:2f:e2:ed:39:ad: 23:34:0b:df:93:d9:32:1d:e4:d1:1a:51:64:69:e4: 61:d7:2e:4a:8a:52:80:ef:1f:5f:a2:e2:53:80:bb: 76:fa:45:82:c4:c4:df:9c:dd:87:29:6c:8a:c5:9c: d8:e2:bb:6c:c3:6f:b7:6b:59:43:3c:e1:fa:a4:ac: f2:da:a5:11:17:d5:d7:a2:13:e2:81:c6:6f:38:5c: a4:bb:46:05:69:d3:7c:4a:e4:c3:b4:82:2f:f5:02: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:08:44:2E:F0:E2:EA:AD:77:5D:CE:54:56:7A:B2:A8:70:93:57:F9 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dQhELvDi6q13Xc5UVnqyqHCTV_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.165.0/24 45.88.183.0/24 45.89.105.0/24 45.149.114.0/24 Signature Algorithm: sha256WithRSAEncryption b5:68:72:56:3f:4a:62:5a:39:06:42:e5:d3:fd:77:4a:46:88: 3d:d5:d6:e0:f5:84:34:3e:ad:54:4c:3d:f4:73:e3:63:bd:ea: 59:4e:9b:62:b4:d6:61:2e:ef:06:24:d7:b4:ce:53:1b:dc:f2: ef:fe:f0:b0:2f:08:3c:05:26:0f:04:af:b6:8f:fb:ad:6e:51: b5:62:14:61:ff:28:de:99:24:03:4f:dd:53:98:a7:dd:b3:b1: 81:76:5c:e4:3f:53:9f:59:4d:bc:73:81:ae:8c:41:7c:57:b2: 39:6b:e5:20:5d:5a:fe:a7:ef:fd:4c:5c:1c:f6:de:2b:77:f9: d5:26:39:f1:3d:41:40:e6:8f:b7:69:e5:c7:8d:c5:aa:91:f9: 23:40:ac:bf:ea:d9:86:01:4f:6c:96:b5:3c:31:f4:c7:0f:14: 2f:8a:69:bf:c2:24:18:00:a1:a4:95:a1:93:6d:e6:0c:c4:30: 11:f7:d0:09:50:30:0c:77:15:e9:4c:d3:52:d2:13:95:97:48: bf:a3:bb:5d:5d:ff:4e:05:dc:aa:09:95:59:95:fc:dd:07:77: 36:96:ed:c6:49:b0:93:c1:08:f2:b7:7b:c3:d4:a9:63:ea:b8: ad:32:b7:2d:4a:26:2f:ec:b8:17:6b:98:18:62:ac:7b:5e:dd: c5:db:c1:59 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrlvlxM+fRoN/l+eXOBeGLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMjAzMTk0NDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTA4NDQyZWYwZTJlYWFkNzc1ZGNlNTQ1NjdhYjJhODcwOTM1N2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+USrqa/9YyyID/QCDkd+2NgP16z QIy1TPllIR91kfx6zGMyiC955vcSrGglxB1TgmflOZdDqyD49aSCrcz2TGpqBd7j NQA5uuGaqIAJLhA/LD/GNKFzWW7AYizJqQ70trLHkpy7vGqO2fp92XvHklx8ov/R 5fiUbBxsZUxVDtny8kolGs4tkbpnhLTOXfrMhj+Ws9RycTNQsZShj8fWL+LtOa0j NAvfk9kyHeTRGlFkaeRh1y5KilKA7x9fouJTgLt2+kWCxMTfnN2HKWyKxZzY4rts w2+3a1lDPOH6pKzy2qURF9XXohPigcZvOFyku0YFadN8SuTDtIIv9QK7WwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHUIRC7w4uqtd13OVFZ6sqhwk1f5MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvZFFoRUx2RGk2cTEzWGM1VVZucXlxSENUVl9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALUKlAwQA LVi3AwQALVlpAwQALZVyMA0GCSqGSIb3DQEBCwUAA4IBAQC1aHJWP0piWjkGQuXT /XdKRog91dbg9YQ0Pq1UTD30c+NjvepZTptitNZhLu8GJNe0zlMb3PLv/vCwLwg8 BSYPBK+2j/utblG1YhRh/yjemSQDT91TmKfds7GBdlzkP1OfWU28c4GujEF8V7I5 a+UgXVr+p+/9TFwc9t4rd/nVJjnxPUFA5o+3aeXHjcWqkfkjQKy/6tmGAU9slrU8 MfTHDxQvimm/wiQYAKGklaGTbeYMxDAR99AJUDAMdxXpTNNS0hOVl0i/o7tdXf9O BdyqCZVZlfzdB3c2lu3GSbCTwQjyt3vD1Klj6ritMrctSiYv7LgXa5gYYqx7Xt3F 28FZ -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:11 2025 by rpki-client