This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/eA4QjuWKMSh6ei6fi8y_tRxWTV0.roa File: eA4QjuWKMSh6ei6fi8y_tRxWTV0.roa (raw, json) Hash identifier: X8GpAlXU7VX3s462pd1W5G89N0CrvPwZio0bpODZddo= Subject key identifier: 78:0E:10:8E:E5:8A:31:28:7A:7A:2E:9F:8B:CC:BF:B5:1C:56:4D:5D Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b Certificate serial: 019B451DF4569803CEF9D72887CB6AD7C5FB Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/eA4QjuWKMSh6ei6fi8y_tRxWTV0.roa Signing time: Mon 22 Dec 2025 08:12:29 +0000 ROA not before: Mon 22 Dec 2025 08:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61120 IP address blocks: 45.8.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:1d:f4:56:98:03:ce:f9:d7:28:87:cb:6a:d7:c5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b Validity Not Before: Dec 22 08:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=780e108ee58a31287a7a2e9f8bccbfb51c564d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:71:91:23:71:ca:85:50:17:14:ad:3d:63: 25:51:fc:b8:cd:37:a9:3f:5c:15:8d:2a:93:9f:79: a1:4c:fc:64:42:4a:a0:a1:5c:20:31:fa:ec:63:de: cb:e2:7f:14:4d:bd:43:06:1b:c9:33:f9:a2:bb:43: 8f:93:1f:58:da:a2:5f:60:f7:fc:a3:8e:01:14:f0: f6:66:bd:6b:97:f7:1e:d2:4c:50:7b:fb:d4:dc:ce: f5:36:1d:89:6b:c8:f3:3d:21:f2:18:51:b9:cf:2e: 72:d9:85:3c:48:44:34:3f:ef:4b:6e:2b:ae:3a:cf: 4e:c2:b4:b9:82:c5:dc:e5:0c:75:3f:76:7b:c7:0b: 03:b8:61:35:0e:37:23:0e:f9:26:42:3f:0d:49:39: bf:1b:1c:b1:b4:1f:50:38:ee:42:3d:64:97:4e:f1: 2a:36:e3:9a:51:c6:d2:85:40:4a:bc:17:f7:22:78: 02:a6:2d:77:49:e6:46:41:b7:7b:18:4f:a3:ea:b3: 42:e9:c1:f6:1a:66:ab:ac:23:eb:3b:3a:0c:43:20: e6:b2:7f:51:f9:9c:af:78:4f:26:59:b5:a2:3a:fd: 36:23:66:78:48:05:63:57:e1:c5:60:c6:c4:df:62: d2:b8:b6:7f:99:97:87:d5:e7:cd:f7:ee:58:52:cc: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0E:10:8E:E5:8A:31:28:7A:7A:2E:9F:8B:CC:BF:B5:1C:56:4D:5D X509v3 Authority Key Identifier: keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/eA4QjuWKMSh6ei6fi8y_tRxWTV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.44.0/24 Signature Algorithm: sha256WithRSAEncryption 89:25:69:37:68:5d:b3:84:7d:ea:dc:98:4d:b1:b8:09:94:ac: d2:eb:b2:bf:52:26:7c:13:ef:01:31:04:e0:06:f8:c9:76:4b: 98:24:c5:cf:7e:f6:7e:25:e9:e2:af:62:c0:77:b3:a7:35:52: eb:2e:eb:29:f8:a2:12:de:e7:c1:88:01:57:c1:2c:5f:d4:a1: f4:4a:2a:f7:2b:8c:10:fb:e2:47:04:e0:77:8d:9a:85:4b:02: 95:5a:35:3e:0d:3f:70:a8:68:89:e5:41:34:e7:09:e3:a7:84: a0:03:0b:07:5e:d6:56:a8:ec:ee:09:94:21:68:33:23:9d:e4: 8a:59:3b:9a:81:82:18:60:a7:63:4f:34:0c:cc:31:14:f1:35: 1c:58:2b:bc:80:dc:13:35:50:cc:86:68:af:ff:00:0a:a6:57: 5b:19:39:a9:d6:4d:95:3e:dc:d9:97:76:1e:03:5e:41:48:f9: e8:5b:28:ec:c9:cd:ee:b2:19:9c:55:68:c2:ac:5d:11:9a:8a: f1:58:2f:31:88:16:f6:1f:69:a3:53:0b:67:93:f8:1f:bd:39: f8:e6:cd:d7:7a:3a:55:81:87:90:29:08:7e:1a:3c:aa:e9:a9: 66:e7:fa:d5:05:09:8f:b7:96:41:d8:dc:d3:f5:6c:5c:dd:cc: 75:5e:c8:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtFHfRWmAPO+dcoh8tq18X7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZjFhNzYzNzQ1YzI1ZGFkMjhmNGE4MTE2Njg4ZTgyY2Ux MjAyOGIwHhcNMjUxMjIyMDgxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODBlMTA4ZWU1OGEzMTI4N2E3YTJlOWY4YmNjYmZiNTFjNTY0ZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwNxkSNxyoVQFxStPWMlUfy4zTep P1wVjSqTn3mhTPxkQkqgoVwgMfrsY97L4n8UTb1DBhvJM/miu0OPkx9Y2qJfYPf8 o44BFPD2Zr1rl/ce0kxQe/vU3M71Nh2Ja8jzPSHyGFG5zy5y2YU8SEQ0P+9Lbiuu Os9OwrS5gsXc5Qx1P3Z7xwsDuGE1DjcjDvkmQj8NSTm/GxyxtB9QOO5CPWSXTvEq NuOaUcbShUBKvBf3IngCpi13SeZGQbd7GE+j6rNC6cH2GmarrCPrOzoMQyDmsn9R +ZyveE8mWbWiOv02I2Z4SAVjV+HFYMbE32LSuLZ/mZeH1efN9+5YUswYjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHgOEI7lijEoenoun4vMv7UcVk1dMB8GA1UdIwQY MBaAFHXxp2N0XCXa0o9KgRZojoLOEgKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQt Yzg0OWJjMGYzNTliLzEvZUE0UWp1V0tNU2g2ZWk2Zmk4eV90UnhXVFYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQtYzg0OWJjMGYzNTli LzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgsMA0G CSqGSIb3DQEBCwUAA4IBAQCJJWk3aF2zhH3q3JhNsbgJlKzS67K/UiZ8E+8BMQTg BvjJdkuYJMXPfvZ+Jenir2LAd7OnNVLrLusp+KIS3ufBiAFXwSxf1KH0Sir3K4wQ ++JHBOB3jZqFSwKVWjU+DT9wqGiJ5UE05wnjp4SgAwsHXtZWqOzuCZQhaDMjneSK WTuagYIYYKdjTzQMzDEU8TUcWCu8gNwTNVDMhmiv/wAKpldbGTmp1k2VPtzZl3Ye A15BSPnoWyjsyc3ushmcVWjCrF0RmorxWC8xiBb2H2mjUwtnk/gfvTn45s3XejpV gYeQKQh+Gjyq6alm5/rVBQmPt5ZB2NzT9Wxc3cx1Xshv -----END CERTIFICATE-----Generated at Fri Dec 26 10:43:48 2025 by rpki-client