This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/0UoizghhK2t_Hs9ANXwnp2V3H9g.roa File: 0UoizghhK2t_Hs9ANXwnp2V3H9g.roa (raw, json) Hash identifier: j4VZblrlmGvi/zncbh9YoYNVMyrFMgKvx6DiuKh68sw= Subject key identifier: D1:4A:22:CE:08:61:2B:6B:7F:1E:CF:40:35:7C:27:A7:65:77:1F:D8 Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019AFDA8CDC26A9553FDACD0CA67E6D9C730 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/0UoizghhK2t_Hs9ANXwnp2V3H9g.roa Signing time: Mon 08 Dec 2025 11:11:29 +0000 ROA not before: Mon 08 Dec 2025 11:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.141.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:a8:cd:c2:6a:95:53:fd:ac:d0:ca:67:e6:d9:c7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Dec 8 11:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d14a22ce08612b6b7f1ecf40357c27a765771fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:77:12:20:ed:a1:89:81:a9:e2:5e:fd:eb:29: 09:a8:eb:cb:de:a4:89:90:e8:a8:23:88:7b:af:4b: 36:92:96:6b:d2:96:bf:76:37:bc:b3:6d:aa:af:45: d9:dc:68:2a:3d:f2:d4:68:75:4c:88:74:9a:73:ec: b3:7f:cb:8f:ff:3f:50:70:af:ff:f7:ea:15:13:a6: cd:94:5e:23:1a:a9:fd:01:7e:a2:46:df:c0:a2:34: 04:79:64:5e:ea:3d:bc:76:cf:1d:0d:c3:08:a6:f0: 6e:de:93:42:d8:4a:98:55:33:6f:42:69:74:52:7a: 5b:1a:db:c6:c6:7d:5a:14:87:e3:16:9a:07:bb:c2: 3c:ab:cc:0d:40:4d:cc:5d:c2:00:98:28:34:7c:78: 1a:e6:3d:35:a2:25:47:d7:5e:4b:29:94:a3:ba:3a: bd:a0:ca:d5:71:e2:14:28:64:6a:ff:ad:56:bb:06: 13:71:96:fc:5b:c3:a6:57:e6:70:31:09:97:4f:73: 3c:5d:36:9f:83:d1:5d:76:12:50:da:d8:51:b6:e0: e2:32:13:61:97:9c:cb:07:d3:4d:0b:6d:5f:e8:ab: e7:82:40:b1:5f:54:78:66:2e:ce:c7:d1:00:b9:d4: 8a:09:32:e6:25:d6:22:38:e8:04:91:82:40:a3:73: aa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4A:22:CE:08:61:2B:6B:7F:1E:CF:40:35:7C:27:A7:65:77:1F:D8 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/0UoizghhK2t_Hs9ANXwnp2V3H9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.54.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:7a:b1:40:3d:ba:e2:9b:af:8b:bd:9b:8b:70:85:dc:5f:fb: 29:c1:43:dc:26:22:de:0a:12:67:2c:79:98:52:50:a5:47:f6: bc:07:bf:58:d2:bf:b9:61:43:db:67:db:11:c5:44:53:96:b8: 5e:8d:3a:48:20:9b:c7:56:52:69:f9:54:d6:c1:04:df:3b:be: bc:63:3b:64:39:09:f5:a2:53:f9:db:9c:f1:ad:59:a6:de:8b: a4:6b:cf:ce:41:4e:16:45:27:01:ab:1b:07:9e:51:4f:ee:b7: 77:53:1a:da:24:40:dd:c0:2b:e0:9a:55:e3:fa:85:54:69:e9: 39:25:d0:62:e3:7c:f3:77:d9:42:0c:a8:b3:3b:bf:6d:1a:3d: 7b:90:89:27:20:6d:62:4f:59:6f:16:9a:55:da:dd:3b:4a:4b: 8c:76:d6:76:cc:38:2c:74:8e:2a:eb:dc:b4:b2:d4:9c:3d:ae: 0b:49:bc:0d:78:26:6d:c2:5b:1f:c9:82:cc:bd:d7:ff:bc:4f: 89:ea:e5:7e:14:88:d3:07:14:f4:8f:8c:ce:16:49:92:fc:b7: e1:4d:3c:07:22:fc:d3:a7:f3:39:73:71:b6:9d:6a:04:cd:1f: 82:38:38:23:5e:1d:0a:5b:29:07:bd:21:97:ff:38:0f:d5:b9: 6f:ff:ef:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr9qM3CapVT/azQymfm2ccwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjUxMjA4MTExMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTRhMjJjZTA4NjEyYjZiN2YxZWNmNDAzNTdjMjdhNzY1NzcxZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXcSIO2hiYGp4l796ykJqOvL3qSJ kOioI4h7r0s2kpZr0pa/dje8s22qr0XZ3GgqPfLUaHVMiHSac+yzf8uP/z9QcK// 9+oVE6bNlF4jGqn9AX6iRt/AojQEeWRe6j28ds8dDcMIpvBu3pNC2EqYVTNvQml0 UnpbGtvGxn1aFIfjFpoHu8I8q8wNQE3MXcIAmCg0fHga5j01oiVH115LKZSjujq9 oMrVceIUKGRq/61WuwYTcZb8W8OmV+ZwMQmXT3M8XTafg9FddhJQ2thRtuDiMhNh l5zLB9NNC21f6KvngkCxX1R4Zi7Ox9EAudSKCTLmJdYiOOgEkYJAo3OqcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNFKIs4IYStrfx7PQDV8J6dldx/YMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvMFVvaXpnaGhLMnRfSHM5QU5Yd25wMlYzSDlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY02MA0G CSqGSIb3DQEBCwUAA4IBAQBserFAPbrim6+LvZuLcIXcX/spwUPcJiLeChJnLHmY UlClR/a8B79Y0r+5YUPbZ9sRxURTlrhejTpIIJvHVlJp+VTWwQTfO768YztkOQn1 olP525zxrVmm3ouka8/OQU4WRScBqxsHnlFP7rd3UxraJEDdwCvgmlXj+oVUaek5 JdBi43zzd9lCDKizO79tGj17kIknIG1iT1lvFppV2t07SkuMdtZ2zDgsdI4q69y0 stScPa4LSbwNeCZtwlsfyYLMvdf/vE+J6uV+FIjTBxT0j4zOFkmS/LfhTTwHIvzT p/M5c3G2nWoEzR+CODgjXh0KWykHvSGX/zgP1blv/+9h -----END CERTIFICATE-----Generated at Sat Dec 13 14:01:06 2025 by rpki-client