This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_lDLnmofZ-OuO8XCzJTEsdnq5ds.roa File: _lDLnmofZ-OuO8XCzJTEsdnq5ds.roa (raw, json) Hash identifier: +bu/jiP5fgXjldRZ6TMu/jMRQnWgPs3SKwel0aT4fkQ= Subject key identifier: FE:50:CB:9E:6A:1F:67:E3:AE:3B:C5:C2:CC:94:C4:B1:D9:EA:E5:DB Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A44BA7C6779AA57EC3C172C01A5917A40 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_lDLnmofZ-OuO8XCzJTEsdnq5ds.roa Signing time: Sun 02 Nov 2025 13:21:03 +0000 ROA not before: Sun 02 Nov 2025 13:21:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 45.155.68.0/24 maxlen: 24 2a0a:2d07:cc::/48 maxlen: 48 2a0e:1a84::/32 maxlen: 32 2a0f:7d00:1::/48 maxlen: 48 2a0f:bc00:a1c4::/48 maxlen: 48 2a12:ecc0:22::/48 maxlen: 48 2a13:2b40::/29 maxlen: 32 2a13:c900:66::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:44:ba:7c:67:79:aa:57:ec:3c:17:2c:01:a5:91:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 2 13:21:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fe50cb9e6a1f67e3ae3bc5c2cc94c4b1d9eae5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:fa:59:09:18:68:16:4e:f7:6a:f3:fa:f6: b8:e4:d8:e1:e9:56:bc:5c:fc:dc:d9:f0:88:99:18: c3:32:47:36:d7:46:d5:68:4f:98:b0:99:8a:0b:50: 4a:48:c5:8e:84:20:8c:92:3d:c2:5e:0d:51:22:5c: 16:a1:15:2a:c0:38:26:27:71:8c:6a:28:7e:94:da: ba:cd:09:44:02:b0:bc:1a:51:a3:58:39:69:ef:52: 0a:d3:cb:3f:98:9f:63:d8:9c:bf:e7:12:cb:6a:1b: 75:9a:4d:95:76:11:07:33:3b:3c:15:9e:00:ed:f8: 77:33:61:36:e9:0d:56:71:22:23:35:01:52:fe:20: 3b:93:22:bd:5d:be:10:3f:0a:72:f0:a1:67:93:03: 31:bb:8d:8d:4a:6a:55:0e:53:fa:a3:ea:f6:4a:e8: 58:4a:a7:2f:98:4f:11:41:15:97:08:a7:17:a0:e6: 6f:99:93:03:ba:28:c1:d0:5e:e3:b0:41:58:03:4c: d1:b0:99:fc:4b:18:55:5f:7c:0e:61:33:12:ac:32: 0c:4f:54:c6:49:1e:7a:48:e1:b9:4c:f3:cb:49:2e: 36:70:aa:56:58:f3:47:e1:cf:cf:b4:48:c7:31:99: 1a:3e:3f:77:79:1b:16:7a:35:8a:2a:20:ad:1a:04: c8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:50:CB:9E:6A:1F:67:E3:AE:3B:C5:C2:CC:94:C4:B1:D9:EA:E5:DB X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_lDLnmofZ-OuO8XCzJTEsdnq5ds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.68.0/24 IPv6: 2a0a:2d07:cc::/48 2a0e:1a84::/32 2a0f:7d00:1::/48 2a0f:bc00:a1c4::/48 2a12:ecc0:22::/48 2a13:2b40::/29 2a13:c900:66::/48 Signature Algorithm: sha256WithRSAEncryption a1:d4:7f:d8:10:cd:14:e8:86:6a:73:fb:29:39:be:4c:32:f2: ba:79:66:86:d8:16:31:46:45:5e:fb:d9:ce:52:76:67:c2:7a: a8:ee:43:f1:f5:30:24:1c:26:8a:2c:86:3f:9a:99:3c:5d:8d: 4e:b6:95:27:b7:70:a8:45:fc:25:4f:b2:a6:0c:c4:8b:19:71: 3b:60:46:7f:98:a2:15:53:78:a5:ff:e7:78:1b:68:42:b0:aa: 09:28:9e:57:63:fe:49:86:0a:0b:1e:2b:b6:ec:a9:52:f5:c7: 82:ee:f5:7d:e1:4c:36:e9:5c:35:36:89:95:31:f0:d9:8e:12: dc:41:fc:f5:f4:a7:b4:e8:d5:b9:e4:c4:64:3d:8e:d8:e2:10: 8d:70:04:93:b2:22:b4:4a:ba:b4:c2:af:2b:90:1f:e4:1f:9d: be:de:18:08:58:4f:db:19:4f:1d:a1:01:80:5b:20:9c:8b:7d: f5:c5:e4:8b:79:05:f1:3c:08:b2:fc:06:72:dc:f5:8c:cd:d5: b5:ec:6a:b3:5f:79:fa:bb:de:53:88:48:3b:86:65:9a:0c:3e: 0c:41:dc:3f:c6:eb:56:8a:0d:05:77:1a:60:f8:ce:30:5f:c9: 81:51:96:01:f7:bb:a8:8e:33:d7:6b:50:28:8f:a6:e0:0e:8d: f5:70:c6:b4 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZpEunxneapX7DwXLAGlkXpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTAyMTMyMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTUwY2I5ZTZhMWY2N2UzYWUzYmM1YzJjYzk0YzRiMWQ5ZWFlNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+b6WQkYaBZO92rz+va45Njh6Va8 XPzc2fCImRjDMkc210bVaE+YsJmKC1BKSMWOhCCMkj3CXg1RIlwWoRUqwDgmJ3GM aih+lNq6zQlEArC8GlGjWDlp71IK08s/mJ9j2Jy/5xLLaht1mk2VdhEHMzs8FZ4A 7fh3M2E26Q1WcSIjNQFS/iA7kyK9Xb4QPwpy8KFnkwMxu42NSmpVDlP6o+r2SuhY SqcvmE8RQRWXCKcXoOZvmZMDuijB0F7jsEFYA0zRsJn8SxhVX3wOYTMSrDIMT1TG SR56SOG5TPPLSS42cKpWWPNH4c/PtEjHMZkaPj93eRsWejWKKiCtGgTIAQIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFP5Qy55qH2fjrjvFwsyUxLHZ6uXbMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvX2xETG5tb2ZaLU91TzhYQ3pKVEVzZG5xNWRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAMBAIAATAGAwQALZtEMEEE AgACMDsDBwAqCi0HAMwDBQAqDhqEAwcAKg99AAABAwcAKg+8AKHEAwcAKhLswAAi AwUDKhMrQAMHACoTyQAAZjANBgkqhkiG9w0BAQsFAAOCAQEAodR/2BDNFOiGanP7 KTm+TDLyunlmhtgWMUZFXvvZzlJ2Z8J6qO5D8fUwJBwmiiyGP5qZPF2NTraVJ7dw qEX8JU+ypgzEixlxO2BGf5iiFVN4pf/neBtoQrCqCSieV2P+SYYKCx4rtuypUvXH gu71feFMNulcNTaJlTHw2Y4S3EH89fSntOjVueTEZD2O2OIQjXAEk7IitEq6tMKv K5Af5B+dvt4YCFhP2xlPHaEBgFsgnIt99cXki3kF8TwIsvwGctz1jM3Vtexqs195 +rveU4hIO4Zlmgw+DEHcP8brVooNBXcaYPjOMF/JgVGWAfe7qI4z12tQKI+m4A6N 9XDGtA== -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:25 2025 by rpki-client