This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v1HgeDjGTSn7jI873gXZdimuA0o.roa File: v1HgeDjGTSn7jI873gXZdimuA0o.roa (raw, json) Hash identifier: L60PRsLLD1TwniUK/skdDULh3W04hNa8RJ1+E1ZbJdk= Subject key identifier: BF:51:E0:78:38:C6:4D:29:FB:8C:8F:3B:DE:05:D9:76:29:AE:03:4A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A980ECD24DC7D41BD49AAAA2C4342D7A8 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v1HgeDjGTSn7jI873gXZdimuA0o.roa Signing time: Tue 18 Nov 2025 17:41:38 +0000 ROA not before: Tue 18 Nov 2025 17:41:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 45.12.61.0/24 maxlen: 24 45.128.79.0/24 maxlen: 24 45.141.178.0/24 maxlen: 24 93.190.246.0/24 maxlen: 24 2a0f:e940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:0e:cd:24:dc:7d:41:bd:49:aa:aa:2c:43:42:d7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 18 17:41:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf51e07838c64d29fb8c8f3bde05d97629ae034a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:2f:71:96:26:36:e0:00:61:79:ee:fc:90: 57:94:2d:21:ea:99:67:11:69:e6:fa:bc:87:29:51: 8b:e2:d9:ee:0d:0f:e4:4b:4d:09:10:04:f4:8b:e4: c3:b3:e1:ee:d1:26:00:b7:8e:46:e0:80:36:51:b0: a2:75:01:ee:59:d8:c1:ea:08:31:25:a6:28:a9:11: e8:56:43:ff:dd:48:e7:18:4f:a3:ea:d3:9e:a5:af: dc:78:dc:2f:4f:c4:db:20:fb:14:28:8f:cf:ce:13: 6e:c3:5f:79:fa:43:8b:3e:9b:1c:03:14:4f:44:d5: 91:f1:cf:9f:b6:8e:54:3f:f6:a0:a7:b2:39:e2:52: de:2e:f6:ba:ba:dd:1c:9e:81:e0:cf:20:29:44:30: 5b:8b:eb:69:0e:82:98:58:bf:d0:8c:3b:16:35:8f: 7d:f3:a3:94:00:be:db:f2:da:11:34:e7:a1:10:99: d9:51:16:3f:ea:7a:61:52:bc:39:b4:36:0b:eb:a0: e6:3e:27:13:25:04:89:d8:43:b0:3b:6b:6d:93:46: 92:92:19:f1:fd:bc:03:00:e9:e2:45:99:d3:1c:0a: 4f:c2:42:98:fc:7f:09:18:51:a3:e4:c5:7d:01:cc: b8:83:28:59:23:7b:dc:29:9b:9d:0c:f8:f0:2c:eb: c0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:51:E0:78:38:C6:4D:29:FB:8C:8F:3B:DE:05:D9:76:29:AE:03:4A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v1HgeDjGTSn7jI873gXZdimuA0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.61.0/24 45.128.79.0/24 45.141.178.0/24 93.190.246.0/24 IPv6: 2a0f:e940::/29 Signature Algorithm: sha256WithRSAEncryption c1:34:ca:df:eb:9e:ed:c0:16:7f:ca:5c:0f:2c:bd:91:af:a6: 29:8d:38:b6:fd:15:10:1f:7f:85:96:d0:6d:8e:84:ba:61:b7: 16:81:e8:5f:80:27:df:40:9b:e6:50:ba:6b:80:d5:5d:e6:9a: 6e:04:95:0a:f5:7c:9f:f8:5a:e9:bc:43:36:d6:7e:9b:04:be: 6c:b9:c2:c9:4f:f6:a3:ad:2d:8e:4a:e4:5c:13:e3:07:20:70: 7a:f7:55:8e:28:f3:94:e7:79:f4:4c:54:00:6e:9a:3d:81:91: 22:ea:1e:05:d0:66:12:b5:60:c9:6b:fc:da:88:87:36:57:5b: 70:f5:30:48:55:25:fa:4d:d1:d9:1d:5a:61:9d:c5:51:be:a2: db:31:c5:da:e9:03:08:0b:53:51:6a:42:84:61:47:51:36:5c: 98:82:42:54:31:75:fc:23:38:ab:32:d2:cc:4d:68:f1:d3:5f: 11:99:00:ed:e0:e6:8c:76:b2:05:d3:d7:d3:05:33:78:bb:4b: 3d:cc:bd:4b:ad:a6:34:0b:fa:41:6a:cc:bf:b1:bd:c9:41:40: c0:8a:e7:9e:9b:15:15:92:ae:1f:31:b6:32:16:68:6f:9d:69: d2:b5:b2:b3:2b:78:bd:ee:f3:e9:b4:ef:bf:eb:2c:31:23:52: 7f:b4:95:b2 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZqYDs0k3H1BvUmqqixDQteoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTE4MTc0MTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjUxZTA3ODM4YzY0ZDI5ZmI4YzhmM2JkZTA1ZDk3NjI5YWUwMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCIvcZYmNuAAYXnu/JBXlC0h6pln EWnm+ryHKVGL4tnuDQ/kS00JEAT0i+TDs+Hu0SYAt45G4IA2UbCidQHuWdjB6ggx JaYoqRHoVkP/3UjnGE+j6tOepa/ceNwvT8TbIPsUKI/PzhNuw195+kOLPpscAxRP RNWR8c+fto5UP/agp7I54lLeLva6ut0cnoHgzyApRDBbi+tpDoKYWL/QjDsWNY99 86OUAL7b8toRNOehEJnZURY/6nphUrw5tDYL66DmPicTJQSJ2EOwO2ttk0aSkhnx /bwDAOniRZnTHApPwkKY/H8JGFGj5MV9Acy4gyhZI3vcKZudDPjwLOvAHwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFL9R4Hg4xk0p+4yPO94F2XYprgNKMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvdjFIZ2VEakdUU243akk4NzNnWFpkaW11QTBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQALQw9AwQA LYBPAwQALY2yAwQAXb72MA0EAgACMAcDBQMqD+lAMA0GCSqGSIb3DQEBCwUAA4IB AQDBNMrf657twBZ/ylwPLL2Rr6YpjTi2/RUQH3+FltBtjoS6YbcWgehfgCffQJvm ULprgNVd5ppuBJUK9Xyf+FrpvEM21n6bBL5sucLJT/ajrS2OSuRcE+MHIHB691WO KPOU53n0TFQAbpo9gZEi6h4F0GYStWDJa/zaiIc2V1tw9TBIVSX6TdHZHVphncVR vqLbMcXa6QMIC1NRakKEYUdRNlyYgkJUMXX8IzirMtLMTWjx018RmQDt4OaMdrIF 09fTBTN4u0s9zL1LraY0C/pBasy/sb3JQUDAiueemxUVkq4fMbYyFmhvnWnStbKz K3i97vPptO+/6ywxI1J/tJWy -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:54 2025 by rpki-client