This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RdiNzm32L39tBVG9hV8QAEw68IQ.roa File: RdiNzm32L39tBVG9hV8QAEw68IQ.roa (raw, json) Hash identifier: wF2wdht4Q17qBQPNm1BCwX5x8Yrh9Tn2dEF2UAGAJUU= Subject key identifier: 45:D8:8D:CE:6D:F6:2F:7F:6D:05:51:BD:85:5F:10:00:4C:3A:F0:84 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AA272FB68CACF8AA07B8CD9B053D06570 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RdiNzm32L39tBVG9hV8QAEw68IQ.roa Signing time: Thu 20 Nov 2025 18:07:15 +0000 ROA not before: Thu 20 Nov 2025 18:07:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203919 IP address blocks: 45.135.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:72:fb:68:ca:cf:8a:a0:7b:8c:d9:b0:53:d0:65:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 20 18:07:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45d88dce6df62f7f6d0551bd855f10004c3af084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:2f:a8:68:b2:8f:cc:b7:be:81:32:c3:b9: b0:a2:f1:b5:2f:30:c0:32:77:89:8d:4d:76:75:50: 56:64:54:cd:04:d2:b2:36:4e:18:65:0d:32:a0:d0: 59:2b:e1:8d:1d:4b:ab:0a:7f:7e:80:3b:2e:67:23: 51:c3:a0:8e:40:b5:5b:d9:c0:dd:33:e2:fd:59:e1: ef:23:00:b9:a3:e3:34:92:4a:2f:00:19:a9:40:02: 8c:65:b1:cc:c8:ce:f6:e6:99:a7:94:e8:fe:37:e0: 5d:b5:10:f5:e7:67:67:72:d5:a9:33:f8:67:2d:62: b7:e9:df:56:9c:4f:63:4c:26:fe:5e:d4:19:87:07: 4a:d7:cd:e7:12:c8:07:6f:e7:d9:c4:14:20:06:84: 5e:a7:05:31:ca:eb:bf:6e:bf:c9:3c:ae:c5:3d:67: 05:03:29:8a:a0:56:99:4a:39:b0:f7:af:5c:b2:20: fd:8f:74:56:53:e9:07:4a:1b:f2:ca:d4:da:65:8a: 4a:18:30:a7:7c:3d:33:f1:bb:ce:ea:78:d9:47:61: 71:9f:d5:8c:72:a4:37:06:71:99:e7:29:22:65:ac: 8d:28:83:47:6c:29:f0:e1:cf:4f:23:b2:d7:ba:1c: 0a:d0:0d:0c:82:67:4c:4e:0c:5f:86:c4:af:94:a2: 13:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D8:8D:CE:6D:F6:2F:7F:6D:05:51:BD:85:5F:10:00:4C:3A:F0:84 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RdiNzm32L39tBVG9hV8QAEw68IQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.36.0/24 Signature Algorithm: sha256WithRSAEncryption b0:34:cd:b9:50:9b:a7:91:56:6f:ca:ef:7e:30:6f:f4:7b:df: 3c:77:04:5c:2b:a3:85:86:ca:cd:72:4d:ae:b7:52:21:b2:76: af:73:0d:8f:b6:da:27:65:aa:ad:f2:63:a7:36:ce:0b:26:0d: d0:af:60:4c:e8:00:5c:94:eb:c5:2d:63:bb:78:6d:ee:0f:21: 84:3c:6f:14:03:96:af:12:7f:03:06:70:30:e3:e1:ab:29:f3: d6:da:fc:64:21:d1:64:94:48:d4:cb:c5:d5:43:a2:c5:04:e9: 43:34:13:c2:79:80:4c:e6:34:de:5c:16:c5:60:0b:66:4f:1f: a4:75:a9:28:cf:fa:7f:d4:59:ee:6a:4f:69:62:33:14:29:be: 95:12:7f:ff:c8:a6:42:7f:5c:ea:ca:32:3d:9c:df:bf:25:91: 43:ff:95:a9:e4:7f:dc:5e:21:45:4f:9d:cf:6e:b0:be:24:6a: f9:c6:eb:3c:ac:8d:c1:3d:4c:30:dd:1f:c3:bc:07:a3:93:0c: a1:c5:b3:38:77:b3:7a:66:09:29:e6:b8:f7:8c:1d:ff:3b:1f: ed:52:1e:cf:56:1c:a0:d2:a4:36:23:44:9b:db:5c:09:73:7a: 3c:46:7c:ac:76:d9:82:b5:32:43:60:a1:ed:ec:e7:09:32:a6: 5c:7d:fb:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqicvtoys+KoHuM2bBT0GVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTIwMTgwNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWQ4OGRjZTZkZjYyZjdmNmQwNTUxYmQ4NTVmMTAwMDRjM2FmMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FovqGiyj8y3voEyw7mwovG1LzDA MneJjU12dVBWZFTNBNKyNk4YZQ0yoNBZK+GNHUurCn9+gDsuZyNRw6COQLVb2cDd M+L9WeHvIwC5o+M0kkovABmpQAKMZbHMyM725pmnlOj+N+BdtRD152dnctWpM/hn LWK36d9WnE9jTCb+XtQZhwdK183nEsgHb+fZxBQgBoRepwUxyuu/br/JPK7FPWcF AymKoFaZSjmw969csiD9j3RWU+kHShvyytTaZYpKGDCnfD0z8bvO6njZR2Fxn9WM cqQ3BnGZ5ykiZayNKINHbCnw4c9PI7LXuhwK0A0MgmdMTgxfhsSvlKITwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXYjc5t9i9/bQVRvYVfEABMOvCEMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvUmRpTnptMzJMMzl0QlZHOWhWOFFBRXc2OElRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYckMA0G CSqGSIb3DQEBCwUAA4IBAQCwNM25UJunkVZvyu9+MG/0e988dwRcK6OFhsrNck2u t1Ihsnavcw2PttonZaqt8mOnNs4LJg3Qr2BM6ABclOvFLWO7eG3uDyGEPG8UA5av En8DBnAw4+GrKfPW2vxkIdFklEjUy8XVQ6LFBOlDNBPCeYBM5jTeXBbFYAtmTx+k dakoz/p/1Fnuak9pYjMUKb6VEn//yKZCf1zqyjI9nN+/JZFD/5Wp5H/cXiFFT53P brC+JGr5xus8rI3BPUww3R/DvAejkwyhxbM4d7N6Zgkp5rj3jB3/Ox/tUh7PVhyg 0qQ2I0Sb21wJc3o8RnysdtmCtTJDYKHt7OcJMqZcffuu -----END CERTIFICATE-----Generated at Sat Dec 6 03:13:02 2025 by rpki-client