This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cx8h4F85gqmkpMz0Q8DPebHmKpY.roa File: cx8h4F85gqmkpMz0Q8DPebHmKpY.roa (raw, json) Hash identifier: 6BMMjSicvaDqc0JLqt/jpO3p0CxWMA/Y5ijdSEsV8hI= Subject key identifier: 73:1F:21:E0:5F:39:82:A9:A4:A4:CC:F4:43:C0:CF:79:B1:E6:2A:96 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B6EC1434A218491CD4D3BC54579FABB17 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cx8h4F85gqmkpMz0Q8DPebHmKpY.roa Signing time: Tue 30 Dec 2025 10:15:17 +0000 ROA not before: Tue 30 Dec 2025 10:15:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215540 IP address blocks: 45.148.101.0/24 maxlen: 24 45.148.102.0/24 maxlen: 24 45.148.103.0/24 maxlen: 24 45.149.144.0/24 maxlen: 24 45.155.68.0/24 maxlen: 24 80.253.251.0/24 maxlen: 24 113.30.152.0/24 maxlen: 24 185.99.96.0/24 maxlen: 24 185.214.74.0/24 maxlen: 24 185.242.247.0/24 maxlen: 24 193.39.208.0/24 maxlen: 24 195.66.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:c1:43:4a:21:84:91:cd:4d:3b:c5:45:79:fa:bb:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 30 10:15:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=731f21e05f3982a9a4a4ccf443c0cf79b1e62a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:ef:34:32:2f:74:3a:e3:35:45:69:fa:6b: 54:fa:38:b5:ca:25:73:f1:79:11:d9:8f:2a:34:e8: e7:b2:e6:e3:26:62:2f:88:98:69:77:e7:12:5b:77: 23:30:cf:b9:03:0b:b2:90:33:22:6c:41:87:65:75: 50:1e:16:db:95:44:b9:b3:4e:b6:a3:10:0b:8f:28: 3f:c7:f7:5b:8c:14:99:56:40:18:ce:6f:a7:3f:66: 59:7c:2e:7c:5a:06:86:2c:d1:f8:58:55:ba:58:04: 72:cc:ab:d8:f5:e8:f3:e6:26:01:c0:e0:1a:13:4b: a2:8e:ec:e6:64:2a:80:62:b9:fa:08:f0:bd:6e:0c: b7:12:ec:f2:e5:a3:75:e4:49:08:da:f2:a7:a7:1d: ef:0a:e8:65:17:d8:1b:93:82:80:86:02:eb:8e:25: a4:33:8d:cc:55:a5:39:c3:9e:b8:fb:16:66:48:b3: 7e:9b:21:8c:14:a3:39:2a:31:e1:15:49:18:73:03: 9b:39:a1:de:0a:16:09:8c:61:dc:7e:d4:f5:2f:6e: 54:ca:24:3a:18:14:86:c3:c3:dc:ba:4a:b5:83:e0: 65:1e:37:39:4c:87:68:53:86:08:9d:18:fa:5c:4c: 96:48:b7:83:81:6e:96:9f:22:3a:dc:38:df:af:60: a9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1F:21:E0:5F:39:82:A9:A4:A4:CC:F4:43:C0:CF:79:B1:E6:2A:96 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cx8h4F85gqmkpMz0Q8DPebHmKpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.101.0-45.148.103.255 45.149.144.0/24 45.155.68.0/24 80.253.251.0/24 113.30.152.0/24 185.99.96.0/24 185.214.74.0/24 185.242.247.0/24 193.39.208.0/24 195.66.25.0/24 Signature Algorithm: sha256WithRSAEncryption bd:2d:c6:40:83:73:10:d8:dd:9a:0a:12:49:8b:90:3c:41:f0: 73:b1:42:e0:cb:f0:1c:a0:e8:e7:68:46:35:9a:2e:be:b1:2c: f0:32:42:e8:1f:c5:1e:e8:d6:90:0a:e9:15:49:b4:9f:42:b9: ab:cb:41:89:24:e9:39:d4:f7:c0:61:7b:79:02:d0:15:31:24: bd:0a:36:35:df:28:17:c3:c2:16:cb:1b:0d:92:22:bb:cf:05: 88:16:e5:d9:57:0f:f3:82:6e:26:22:f1:5e:43:da:f2:25:ad: 95:7f:52:29:96:33:f7:ee:0f:84:12:7d:35:e2:b4:d0:c2:7b: 6c:d7:9a:68:76:ba:47:73:78:4b:cb:42:8e:0c:0f:fc:89:16: 9a:9e:56:9a:dd:c7:2e:f0:66:76:3c:48:6e:76:ec:66:5f:62: 5c:92:5c:e5:0a:1c:96:7e:ca:48:fb:b7:73:4e:86:c2:1c:ca: 91:5e:22:7d:5b:a2:78:d8:53:20:a6:c2:b6:c0:03:92:0c:d6: fe:05:8c:2c:17:72:68:b9:66:0e:82:d4:b6:b3:e1:ad:91:b0: e5:4d:1f:81:10:20:d0:e3:08:6e:3b:1a:b4:5b:c9:ce:39:f4: 32:2b:82:39:07:33:85:32:f7:6f:07:e4:5a:e9:ce:29:c1:f5: 37:6d:a4:75 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZtuwUNKIYSRzU07xUV5+rsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjMwMTAxNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzFmMjFlMDVmMzk4MmE5YTRhNGNjZjQ0M2MwY2Y3OWIxZTYyYTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd7vNDIvdDrjNUVp+mtU+ji1yiVz 8XkR2Y8qNOjnsubjJmIviJhpd+cSW3cjMM+5AwuykDMibEGHZXVQHhbblUS5s062 oxALjyg/x/dbjBSZVkAYzm+nP2ZZfC58WgaGLNH4WFW6WARyzKvY9ejz5iYBwOAa E0uijuzmZCqAYrn6CPC9bgy3Euzy5aN15EkI2vKnpx3vCuhlF9gbk4KAhgLrjiWk M43MVaU5w564+xZmSLN+myGMFKM5KjHhFUkYcwObOaHeChYJjGHcftT1L25UyiQ6 GBSGw8Pcukq1g+BlHjc5TIdoU4YInRj6XEyWSLeDgW6WnyI63Djfr2CpiwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFHMfIeBfOYKppKTM9EPAz3mx5iqWMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvY3g4aDRGODVncW1rcE16MFE4RFBlYkhtS3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEMAwDBAAtlGUD BAMtlGADBAAtlZADBAAtm0QDBABQ/fsDBABxHpgDBAC5Y2ADBAC51koDBAC58vcD BADBJ9ADBADDQhkwDQYJKoZIhvcNAQELBQADggEBAL0txkCDcxDY3ZoKEkmLkDxB 8HOxQuDL8Byg6OdoRjWaLr6xLPAyQugfxR7o1pAK6RVJtJ9CuavLQYkk6TnU98Bh e3kC0BUxJL0KNjXfKBfDwhbLGw2SIrvPBYgW5dlXD/OCbiYi8V5D2vIlrZV/UimW M/fuD4QSfTXitNDCe2zXmmh2ukdzeEvLQo4MD/yJFpqeVprdxy7wZnY8SG527GZf YlySXOUKHJZ+ykj7t3NOhsIcypFeIn1bonjYUyCmwrbAA5IM1v4FjCwXcmi5Zg6C 1Laz4a2RsOVNH4EQINDjCG47GrRbyc459DIrgjkHM4Uy928H5FrpzinB9TdtpHU= -----END CERTIFICATE-----Generated at Wed Dec 31 18:04:29 2025 by rpki-client