This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_hObJdb7STRCVj5MWL-xXb_G-sE.roa File: _hObJdb7STRCVj5MWL-xXb_G-sE.roa (raw, json) Hash identifier: 4oiAoQzB6CGPkKt/VDSOYjkCrHSLHFurCrjwTeMJ5gw= Subject key identifier: FE:13:9B:25:D6:FB:49:34:42:56:3E:4C:58:BF:B1:5D:BF:C6:FA:C1 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AFEC3B5122F82E10CFB08B400C0DF97BA Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_hObJdb7STRCVj5MWL-xXb_G-sE.roa Signing time: Mon 08 Dec 2025 16:20:29 +0000 ROA not before: Mon 08 Dec 2025 16:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 45.12.61.0/24 maxlen: 24 45.128.79.0/24 maxlen: 24 45.141.178.0/24 maxlen: 24 93.190.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:c3:b5:12:2f:82:e1:0c:fb:08:b4:00:c0:df:97:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 8 16:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fe139b25d6fb493442563e4c58bfb15dbfc6fac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c8:6e:32:4f:79:42:4d:f4:2d:f3:34:d6:78: 03:b5:1f:5b:f6:be:ce:96:06:46:3a:bc:3d:76:4a: 9f:b0:bf:a0:ac:3c:fa:6c:0e:fb:92:95:2f:97:3a: ae:d8:9b:b9:a2:46:e4:87:a7:22:fe:b1:0c:c8:3f: 4d:77:25:0a:93:31:7e:49:b4:c5:97:0b:82:74:11: da:74:d0:58:ef:df:c2:16:73:0d:b8:0d:65:39:94: d3:27:3d:5e:0d:1c:5f:cc:7d:cd:e6:87:55:1f:c1: d2:39:9a:b7:9e:37:e3:6a:a3:f2:ae:d8:3e:d9:4f: 12:dd:5d:60:67:6b:5b:55:17:21:e5:a9:6f:1f:e0: 61:68:6b:2e:cb:fc:b6:6d:f6:d1:96:54:a6:ca:4c: 5b:2c:98:ed:60:1c:f2:4e:6f:c6:21:eb:35:b5:36: ae:5e:e8:68:11:6d:cd:16:85:e2:19:79:b1:f0:95: f1:6c:97:3d:bb:4f:ce:93:d7:7d:03:a6:75:89:be: 42:1c:ed:05:b5:7e:cf:da:a7:b5:ea:85:79:4e:7c: 28:03:0c:0e:a1:d6:55:6b:92:d7:d7:0c:5c:11:05: 4e:e1:1f:03:f8:90:fb:ad:7a:7b:97:b2:92:e9:5f: b2:76:f3:83:c3:4c:69:28:1c:18:70:42:a5:3e:67: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:13:9B:25:D6:FB:49:34:42:56:3E:4C:58:BF:B1:5D:BF:C6:FA:C1 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_hObJdb7STRCVj5MWL-xXb_G-sE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.61.0/24 45.128.79.0/24 45.141.178.0/24 93.190.246.0/24 Signature Algorithm: sha256WithRSAEncryption 68:22:ca:38:af:2e:ae:e1:ef:65:a0:ae:7d:7c:87:43:da:33: 92:0a:61:e1:2c:9f:06:eb:8e:33:8e:de:62:18:f9:f0:00:3d: a4:7a:22:40:d7:3d:a3:96:2c:11:83:d1:8a:22:76:ed:f5:fc: b7:2e:18:2f:2f:8f:2d:2e:eb:96:f6:cf:3e:c5:ec:d4:76:38: 0d:fa:22:d4:db:a1:15:9d:ac:43:a6:37:9d:db:3a:42:81:fc: 3e:83:ce:31:c7:fc:8f:88:e3:2d:4c:f0:ee:d7:8a:a6:0e:66: 45:32:f6:95:5e:db:f8:37:17:de:c7:a9:98:31:f4:dc:6d:70: 7e:36:47:55:c2:28:78:2e:d2:85:e7:36:5d:7c:a9:d7:b5:c4: 0a:60:4b:e5:6f:30:7b:44:bf:aa:a4:fe:7a:fb:67:eb:82:70: 32:61:9b:66:e2:bd:54:57:c3:2a:51:1b:76:4d:be:6d:02:de: c5:0d:2c:b6:a5:00:22:e4:d9:16:68:c8:56:da:09:8e:6a:3a: 58:3e:9d:9e:e1:a5:e2:1d:98:e0:8c:50:05:45:e2:83:7f:35: 0b:e8:94:6b:5b:da:0c:a9:19:c6:92:12:b1:8d:4b:56:79:7c: ef:8d:0d:bf:bc:e9:7e:fe:d8:93:94:55:2a:37:57:ed:11:56: b5:b1:c5:60 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZr+w7USL4LhDPsItADA35e6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjA4MTYyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTEzOWIyNWQ2ZmI0OTM0NDI1NjNlNGM1OGJmYjE1ZGJmYzZmYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8huMk95Qk30LfM01ngDtR9b9r7O lgZGOrw9dkqfsL+grDz6bA77kpUvlzqu2Ju5okbkh6ci/rEMyD9NdyUKkzF+SbTF lwuCdBHadNBY79/CFnMNuA1lOZTTJz1eDRxfzH3N5odVH8HSOZq3njfjaqPyrtg+ 2U8S3V1gZ2tbVRch5alvH+BhaGsuy/y2bfbRllSmykxbLJjtYBzyTm/GIes1tTau XuhoEW3NFoXiGXmx8JXxbJc9u0/Ok9d9A6Z1ib5CHO0FtX7P2qe16oV5TnwoAwwO odZVa5LX1wxcEQVO4R8D+JD7rXp7l7KS6V+ydvODw0xpKBwYcEKlPmeRKQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFP4TmyXW+0k0QlY+TFi/sV2/xvrBMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvX2hPYkpkYjdTVFJDVmo1TVdMLXhYYl9HLXNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQw9AwQA LYBPAwQALY2yAwQAXb72MA0GCSqGSIb3DQEBCwUAA4IBAQBoIso4ry6u4e9loK59 fIdD2jOSCmHhLJ8G644zjt5iGPnwAD2keiJA1z2jliwRg9GKInbt9fy3LhgvL48t LuuW9s8+xezUdjgN+iLU26EVnaxDpjed2zpCgfw+g84xx/yPiOMtTPDu14qmDmZF MvaVXtv4Nxfex6mYMfTcbXB+NkdVwih4LtKF5zZdfKnXtcQKYEvlbzB7RL+qpP56 +2frgnAyYZtm4r1UV8MqURt2Tb5tAt7FDSy2pQAi5NkWaMhW2gmOajpYPp2e4aXi HZjgjFAFReKDfzUL6JRrW9oMqRnGkhKxjUtWeXzvjQ2/vOl+/tiTlFUqN1ftEVa1 scVg -----END CERTIFICATE-----Generated at Sat Dec 20 21:44:07 2025 by rpki-client