This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7Db5uoJZUL8xyZ7dj4qYM1Y01xo.roa File: 7Db5uoJZUL8xyZ7dj4qYM1Y01xo.roa (raw, json) Hash identifier: sRYQhIMpQPhtpWGhzlg86p0sf9mnWR6ULxewL2tlUsk= Subject key identifier: EC:36:F9:BA:82:59:50:BF:31:C9:9E:DD:8F:8A:98:33:56:34:D7:1A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AD9F38D6E88F6AD003D75E6E752557410 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7Db5uoJZUL8xyZ7dj4qYM1Y01xo.roa Signing time: Mon 01 Dec 2025 12:46:48 +0000 ROA not before: Mon 01 Dec 2025 12:46:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199458 IP address blocks: 45.142.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:f3:8d:6e:88:f6:ad:00:3d:75:e6:e7:52:55:74:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 1 12:46:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec36f9ba825950bf31c99edd8f8a98335634d71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:44:f4:2f:c1:e3:7a:f2:00:87:24:27:b3: 3f:b7:8d:dd:b2:44:f6:e0:e5:d5:85:1f:6d:b5:65: 7a:06:5e:49:2b:e4:a6:05:b5:4e:b6:5f:77:45:81: 7a:b7:a6:74:6c:3a:d5:02:3f:df:0a:e2:3e:33:b7: 0f:4a:ca:c7:35:54:fd:2e:27:1d:85:d2:4c:90:cb: d9:f4:a8:0c:9c:fe:fe:25:43:b3:a8:d9:3d:1c:2c: 4b:ae:d5:85:f3:c8:aa:ee:91:c3:d3:14:5a:ee:a7: b7:07:88:9b:7c:2d:61:40:0e:21:45:5d:95:32:c0: 98:cf:10:47:de:ce:ed:3e:50:3c:a0:b2:c8:d0:44: 4c:14:da:08:e3:39:b9:b5:78:0e:fa:05:3d:65:ce: 46:75:29:f6:9b:03:2b:21:26:40:0a:b8:1d:c6:8e: f6:05:26:e0:ae:ae:e3:d9:27:35:87:17:c0:8d:a9: f8:27:85:c2:71:4a:2e:b2:ba:49:ea:b6:8b:c3:a3: 32:f4:5e:00:ff:72:22:07:3f:cb:c8:4e:39:54:65: 39:1c:11:58:6a:e0:90:3c:e7:32:84:6b:b2:49:72: 42:a5:93:c6:bf:f9:19:69:e3:2c:4d:05:9a:90:0a: fe:31:d8:1a:f2:be:b2:7b:a3:e0:aa:69:4c:9f:8b: 38:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:36:F9:BA:82:59:50:BF:31:C9:9E:DD:8F:8A:98:33:56:34:D7:1A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7Db5uoJZUL8xyZ7dj4qYM1Y01xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.31.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:b7:9f:18:f7:76:d3:e6:5c:c8:5d:57:fe:40:ed:18:c1:0e: f1:aa:9b:7c:23:3f:b2:c0:47:82:34:38:0d:02:ef:7e:2c:91: ea:37:50:7c:20:15:fd:ce:e6:0e:5e:b7:5b:2d:79:e1:4c:59: 47:17:ca:40:9a:5c:bc:93:b5:8e:dd:db:63:01:35:21:02:76: 1c:6d:23:3c:59:54:d0:e5:a0:ca:38:2e:28:f2:49:87:b6:33: ec:6c:65:fd:e4:0a:8c:8d:39:0e:fe:0e:dd:e8:0f:e1:15:c5: 5f:6c:e9:48:07:aa:5f:cc:38:ab:76:28:53:b8:e6:98:ee:bc: 95:34:50:a6:c0:c7:1a:14:74:b2:02:e4:55:fb:55:cd:ee:63: ac:c3:1b:94:d2:be:77:e2:a8:a3:b7:a2:0e:08:82:ba:c0:3a: 8f:81:f1:7a:6d:37:17:43:83:b8:89:c6:88:9b:66:82:1c:c2: ea:ab:9c:19:5e:c7:e8:a7:17:58:d0:97:f3:24:ea:ec:09:09: 9c:12:b7:91:63:f1:c1:0c:9f:90:74:45:3d:f4:e8:fc:6a:cb: e1:04:f0:cb:05:b1:6d:af:fa:84:55:62:2f:8a:90:19:78:c8: 0a:fe:7b:24:19:2e:45:5e:31:dc:19:d9:8a:13:e9:95:a8:c2: ef:b4:88:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZ841uiPatAD115udSVXQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjAxMTI0NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzM2ZjliYTgyNTk1MGJmMzFjOTllZGQ4ZjhhOTgzMzU2MzRkNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzlE9C/B43ryAIckJ7M/t43dskT2 4OXVhR9ttWV6Bl5JK+SmBbVOtl93RYF6t6Z0bDrVAj/fCuI+M7cPSsrHNVT9Licd hdJMkMvZ9KgMnP7+JUOzqNk9HCxLrtWF88iq7pHD0xRa7qe3B4ibfC1hQA4hRV2V MsCYzxBH3s7tPlA8oLLI0ERMFNoI4zm5tXgO+gU9Zc5GdSn2mwMrISZACrgdxo72 BSbgrq7j2Sc1hxfAjan4J4XCcUousrpJ6raLw6My9F4A/3IiBz/LyE45VGU5HBFY auCQPOcyhGuySXJCpZPGv/kZaeMsTQWakAr+Mdga8r6ye6PgqmlMn4s4ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOw2+bqCWVC/Mcme3Y+KmDNWNNcaMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvN0RiNXVvSlpVTDh4eVo3ZGo0cVlNMVkwMXhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY4fMA0G CSqGSIb3DQEBCwUAA4IBAQCPt58Y93bT5lzIXVf+QO0YwQ7xqpt8Iz+ywEeCNDgN Au9+LJHqN1B8IBX9zuYOXrdbLXnhTFlHF8pAmly8k7WO3dtjATUhAnYcbSM8WVTQ 5aDKOC4o8kmHtjPsbGX95AqMjTkO/g7d6A/hFcVfbOlIB6pfzDirdihTuOaY7ryV NFCmwMcaFHSyAuRV+1XN7mOswxuU0r534qijt6IOCIK6wDqPgfF6bTcXQ4O4icaI m2aCHMLqq5wZXsfopxdY0JfzJOrsCQmcEreRY/HBDJ+QdEU99Oj8asvhBPDLBbFt r/qEVWIvipAZeMgK/nskGS5FXjHcGdmKE+mVqMLvtIhe -----END CERTIFICATE-----Generated at Sat Dec 6 03:13:29 2025 by rpki-client