This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E5uAFCVhY4gXqic2pIByYM0jnJo.roa File: E5uAFCVhY4gXqic2pIByYM0jnJo.roa (raw, json) Hash identifier: WPbdaUZkmFIY01+tzO1nGWvyDEnnqt5FscAnm3/esSo= Subject key identifier: 13:9B:80:14:25:61:63:88:17:AA:27:36:A4:80:72:60:CD:23:9C:9A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AE0B8A5A00CA12A8A34616712E06CD984 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E5uAFCVhY4gXqic2pIByYM0jnJo.roa Signing time: Tue 02 Dec 2025 20:19:48 +0000 ROA not before: Tue 02 Dec 2025 20:19:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 45.128.78.0/24 maxlen: 24 84.21.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b8:a5:a0:0c:a1:2a:8a:34:61:67:12:e0:6c:d9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 2 20:19:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=139b80142561638817aa2736a4807260cd239c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:75:71:f0:09:f8:f4:bf:2f:0f:30:7c:a5:64: 0b:4d:1b:80:52:0c:fb:71:61:9e:26:83:47:95:cc: 33:68:4a:82:6b:aa:a3:68:b8:b7:a1:21:28:40:b2: 21:48:62:35:5a:5e:51:04:84:42:09:3b:b6:b3:c1: d1:b2:9b:1a:29:d5:11:26:ce:4f:8d:a7:ac:33:2c: 1e:7a:75:20:f6:b1:07:4d:d6:9c:f7:7f:5a:50:84: c4:ec:bf:64:16:fd:05:13:f9:2f:92:0d:ee:50:cc: 2f:5f:21:b2:0a:e2:30:45:a1:59:93:6d:e0:6b:dc: 67:93:40:a1:db:4b:3e:b6:c9:b7:15:b1:cd:55:dc: f4:65:2b:b3:9f:c1:9b:96:c9:0d:7b:48:97:21:2a: bf:99:1e:be:6f:13:af:e2:54:7a:42:d0:5f:2b:87: 9b:b2:0b:86:a4:14:83:d3:24:07:b4:3c:bd:67:a9: 5c:d5:d4:ff:eb:29:1d:ec:81:96:95:b1:98:3e:35: aa:7d:38:20:13:96:cd:09:e6:69:80:17:82:a3:df: 98:99:26:a0:d4:a8:b4:b2:24:f7:a3:b5:cf:23:ae: 19:a3:71:94:b4:dc:1b:56:9b:51:59:0b:da:d4:a9: 62:79:01:ba:be:0b:98:51:09:09:2a:bb:4e:de:af: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9B:80:14:25:61:63:88:17:AA:27:36:A4:80:72:60:CD:23:9C:9A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E5uAFCVhY4gXqic2pIByYM0jnJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.78.0/24 84.21.188.0/24 Signature Algorithm: sha256WithRSAEncryption 26:16:d1:e0:5d:63:29:ef:f4:45:ef:17:e5:01:45:2e:2a:20: 6b:f1:c9:23:74:77:f9:16:5b:e0:60:0c:26:35:fb:e9:99:20: 8c:db:fd:ce:82:22:66:54:f2:0b:6a:79:58:88:e4:6f:eb:2f: 80:f5:7b:d5:53:c7:2c:71:3b:7e:b5:db:48:56:ec:e1:b5:c2: ee:53:73:fb:93:c7:9a:68:86:56:c2:a3:c8:65:18:e1:99:4f: 5e:70:d9:76:6f:5c:6d:4f:3f:c5:f5:52:11:2b:2b:62:39:34: f0:44:8f:41:d2:1e:6f:77:b3:7d:ec:f3:c4:3b:45:27:06:94: 81:db:fa:c0:7d:a5:00:89:0e:ca:54:12:ae:b0:0f:64:4e:b5: bb:4b:f2:31:46:3f:dd:e4:49:b0:3e:67:24:fc:56:47:61:99: c2:ff:76:b0:6a:3f:35:89:2e:8c:09:b0:e5:b9:5d:46:a2:72: 25:86:27:e8:f2:36:6d:f5:a6:5d:3c:f1:58:d1:c1:9a:54:48: 5d:4f:18:7e:de:62:4e:1e:8f:25:8e:02:a0:8e:a2:8a:1c:b1: 49:b1:11:1a:ff:6e:8b:42:bd:90:fe:24:a0:91:e8:7d:c0:a0: d8:d0:b7:71:49:82:98:8d:f7:dd:c4:7c:0f:1e:cb:56:8e:90: 68:1c:f4:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrguKWgDKEqijRhZxLgbNmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjAyMjAxOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzliODAxNDI1NjE2Mzg4MTdhYTI3MzZhNDgwNzI2MGNkMjM5YzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03Vx8An49L8vDzB8pWQLTRuAUgz7 cWGeJoNHlcwzaEqCa6qjaLi3oSEoQLIhSGI1Wl5RBIRCCTu2s8HRspsaKdURJs5P jaesMyweenUg9rEHTdac939aUITE7L9kFv0FE/kvkg3uUMwvXyGyCuIwRaFZk23g a9xnk0Ch20s+tsm3FbHNVdz0ZSuzn8GblskNe0iXISq/mR6+bxOv4lR6QtBfK4eb sguGpBSD0yQHtDy9Z6lc1dT/6ykd7IGWlbGYPjWqfTggE5bNCeZpgBeCo9+YmSag 1Ki0siT3o7XPI64Zo3GUtNwbVptRWQva1KlieQG6vguYUQkJKrtO3q/v2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBObgBQlYWOIF6onNqSAcmDNI5yaMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvRTV1QUZDVmhZNGdYcWljMnBJQnlZTTBqbkpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYBOAwQA VBW8MA0GCSqGSIb3DQEBCwUAA4IBAQAmFtHgXWMp7/RF7xflAUUuKiBr8ckjdHf5 FlvgYAwmNfvpmSCM2/3OgiJmVPILanlYiORv6y+A9XvVU8cscTt+tdtIVuzhtcLu U3P7k8eaaIZWwqPIZRjhmU9ecNl2b1xtTz/F9VIRKytiOTTwRI9B0h5vd7N97PPE O0UnBpSB2/rAfaUAiQ7KVBKusA9kTrW7S/IxRj/d5EmwPmck/FZHYZnC/3awaj81 iS6MCbDluV1GonIlhifo8jZt9aZdPPFY0cGaVEhdTxh+3mJOHo8ljgKgjqKKHLFJ sREa/26LQr2Q/iSgkeh9wKDY0LdxSYKYjffdxHwPHstWjpBoHPRw -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:44 2025 by rpki-client