This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/pdcrTc5vfOK9dISAPAKohDf9ExE.roa File: pdcrTc5vfOK9dISAPAKohDf9ExE.roa (raw, json) Hash identifier: K992G49gQ1q3VKbpbTklVsEarbRilWEGhPmKatYrnTU= Subject key identifier: A5:D7:2B:4D:CE:6F:7C:E2:BD:74:84:80:3C:02:A8:84:37:FD:13:11 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019AAD1B402CE6849AA77A37671649FC372D Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/pdcrTc5vfOK9dISAPAKohDf9ExE.roa Signing time: Sat 22 Nov 2025 19:47:15 +0000 ROA not before: Sat 22 Nov 2025 19:47:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49569 IP address blocks: 45.129.238.0/23 maxlen: 23 45.129.238.0/24 maxlen: 24 45.129.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:1b:40:2c:e6:84:9a:a7:7a:37:67:16:49:fc:37:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Nov 22 19:47:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a5d72b4dce6f7ce2bd7484803c02a88437fd1311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:f5:2f:1b:36:7e:4e:e3:26:d8:31:4e:39: 3a:6d:df:e9:98:65:86:fe:44:fd:10:ab:a3:b9:88: 75:18:e2:c5:f3:77:f7:9e:9f:69:aa:a6:a0:df:55: 04:6c:c6:04:e3:93:4c:fd:16:f3:72:3e:e5:9e:59: 21:3d:9b:f7:a3:1f:4e:0e:eb:f5:bf:26:5c:5b:24: 58:2c:49:43:0b:37:e5:4d:93:3d:83:00:b4:12:50: aa:2c:ff:4b:6e:a7:78:4c:e6:ba:e6:4f:59:4b:f2: 20:fa:e6:b9:e8:49:ad:b4:80:fa:e0:bf:b6:25:1d: ec:23:6e:87:26:1c:7c:4f:51:d6:0f:dd:57:a0:bb: 69:6f:06:2e:bb:e9:16:9f:52:84:6b:a9:08:8d:48: 79:b7:b8:d9:07:b4:76:d2:db:9c:f3:d1:54:a3:8d: bc:e0:f7:d1:aa:0d:b7:3c:94:18:48:75:55:66:1f: af:7f:fd:b3:fa:d8:86:f3:b4:f7:8a:b1:b6:97:10: df:bf:35:fe:00:65:70:6a:17:c3:93:ef:09:b0:71: 36:61:41:eb:cb:5e:92:98:7e:6e:45:43:ed:76:4a: 53:43:4d:cb:f1:1a:ac:45:5a:99:25:cb:1c:83:76: 2f:0b:60:c1:29:de:1c:42:28:c0:be:70:64:03:73: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:2B:4D:CE:6F:7C:E2:BD:74:84:80:3C:02:A8:84:37:FD:13:11 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/pdcrTc5vfOK9dISAPAKohDf9ExE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.238.0/23 Signature Algorithm: sha256WithRSAEncryption 29:f2:4c:59:78:fc:be:7c:6b:89:e4:b9:25:58:c0:02:15:40: f5:4f:fc:46:80:e0:96:e6:c7:d8:e7:a3:1d:73:51:8f:38:bf: 44:95:be:5e:42:cc:e4:68:7a:c7:66:ce:f9:a3:b0:4d:d6:8f: 0b:19:03:b4:82:ff:6d:71:04:1f:01:37:06:8f:00:bc:a7:e3: e6:78:d3:3d:98:c9:7c:92:a2:16:8d:cf:d3:9c:57:0d:1c:54: e5:d8:a4:c1:bd:eb:ff:6d:b9:b7:26:59:26:d7:b0:76:d4:b0: 1a:db:69:62:c7:6b:f9:6f:c8:fc:4d:e9:3e:eb:99:7f:e3:12: d9:10:fe:c4:17:3e:b5:0f:28:6d:04:0a:df:4a:4d:df:35:7a: 15:ef:0f:72:1b:f5:29:db:65:ed:c5:aa:5f:f4:3c:9a:ce:bc: 86:b0:65:15:ec:f0:ec:3d:ad:bd:b5:f3:59:00:fe:b8:8a:6c: 5d:40:10:b4:9d:1b:92:3f:90:91:c5:be:cc:16:cf:5e:82:8b: cc:e4:0f:44:7d:1b:74:07:42:6d:25:c1:b0:f1:9a:e6:14:fa: 91:e3:7f:b9:0a:a2:3f:6b:63:e3:e1:88:3a:93:2b:7d:e1:c2: e3:d9:18:af:68:81:4a:6b:35:7a:a6:f0:ff:64:36:e6:6a:f0: 64:69:20:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqtG0As5oSap3o3ZxZJ/DctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjUxMTIyMTk0NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWQ3MmI0ZGNlNmY3Y2UyYmQ3NDg0ODAzYzAyYTg4NDM3ZmQxMzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+z1Lxs2fk7jJtgxTjk6bd/pmGWG /kT9EKujuYh1GOLF83f3np9pqqag31UEbMYE45NM/Rbzcj7lnlkhPZv3ox9ODuv1 vyZcWyRYLElDCzflTZM9gwC0ElCqLP9Lbqd4TOa65k9ZS/Ig+ua56EmttID64L+2 JR3sI26HJhx8T1HWD91XoLtpbwYuu+kWn1KEa6kIjUh5t7jZB7R20tuc89FUo428 4PfRqg23PJQYSHVVZh+vf/2z+tiG87T3irG2lxDfvzX+AGVwahfDk+8JsHE2YUHr y16SmH5uRUPtdkpTQ03L8RqsRVqZJcscg3YvC2DBKd4cQijAvnBkA3NsYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKXXK03Ob3zivXSEgDwCqIQ3/RMRMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvcGRjclRjNXZmT0s5ZElTQVBBS29oRGY5RXhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYHuMA0G CSqGSIb3DQEBCwUAA4IBAQAp8kxZePy+fGuJ5LklWMACFUD1T/xGgOCW5sfY56Md c1GPOL9Elb5eQszkaHrHZs75o7BN1o8LGQO0gv9tcQQfATcGjwC8p+PmeNM9mMl8 kqIWjc/TnFcNHFTl2KTBvev/bbm3Jlkm17B21LAa22lix2v5b8j8Tek+65l/4xLZ EP7EFz61DyhtBArfSk3fNXoV7w9yG/Up22Xtxapf9DyazryGsGUV7PDsPa29tfNZ AP64imxdQBC0nRuSP5CRxb7MFs9egovM5A9EfRt0B0JtJcGw8ZrmFPqR43+5CqI/ a2Pj4Yg6kyt94cLj2RivaIFKazV6pvD/ZDbmavBkaSDS -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:12 2025 by rpki-client