This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9HcnWARQjSSonGaamiNJGNhyVC4.roa File: 9HcnWARQjSSonGaamiNJGNhyVC4.roa (raw, json) Hash identifier: D9oNz9Yh8nwsaWTmgScYDOQEy6klcI9lva9L7TyjeYQ= Subject key identifier: F4:77:27:58:04:50:8D:24:A8:9C:66:9A:9A:23:49:18:D8:72:54:2E Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019AE342A9F8C1CB377EA5EDA17F2F21DD55 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9HcnWARQjSSonGaamiNJGNhyVC4.roa Signing time: Wed 03 Dec 2025 08:09:48 +0000 ROA not before: Wed 03 Dec 2025 08:09:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34918 IP address blocks: 45.11.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 08:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:42:a9:f8:c1:cb:37:7e:a5:ed:a1:7f:2f:21:dd:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 3 08:09:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f477275804508d24a89c669a9a234918d872542e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:f3:ad:e0:89:b8:e9:b5:3c:ff:9a:14:21: 70:4d:68:41:5f:0f:cc:78:12:b5:88:6d:53:c0:1c: 7e:a7:93:2d:a9:fc:99:c5:d1:7f:17:90:25:17:84: 37:d6:7f:cf:bc:d2:58:d7:5f:b1:54:c6:cf:98:3b: 47:02:40:9a:57:d3:e3:9f:c5:5d:43:9d:ff:60:bb: e7:b9:14:0b:ef:49:ff:7f:aa:ab:64:ad:31:d1:84: aa:b4:6f:6e:2a:f0:9a:af:b8:a4:bc:54:8f:72:0a: 1d:15:14:d0:19:99:3f:dc:74:ba:5c:e9:cb:a0:37: 52:e6:e4:c1:d3:94:dd:a4:df:1f:be:b9:2f:6c:06: b8:93:02:e6:ad:93:c6:76:1e:ac:b1:8b:96:c4:5e: b9:28:1b:e3:ef:a2:3b:2a:5d:6a:91:91:9c:e3:2a: ae:1c:a0:8d:df:54:eb:f7:37:51:04:fa:7f:f7:f5: ac:9d:57:6e:5b:96:2c:be:75:39:12:c8:53:6b:67: 72:07:93:32:49:d0:99:7f:b3:dd:94:96:52:be:49: dc:cf:14:4b:3d:56:ec:a5:27:83:df:af:4b:cc:54: b6:c7:11:8d:75:56:c6:e6:9f:8f:14:de:b1:39:f8: 6b:8e:ee:03:79:44:29:9e:8c:1d:84:44:f2:d1:63: ca:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:77:27:58:04:50:8D:24:A8:9C:66:9A:9A:23:49:18:D8:72:54:2E X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9HcnWARQjSSonGaamiNJGNhyVC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.187.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:e4:e8:db:0d:bd:c0:c1:60:b6:aa:35:57:0b:7d:2e:13:65: b8:f4:a2:99:c0:bd:c2:c5:66:8e:0e:50:31:b8:5b:43:cf:11: a9:16:27:79:9c:f6:73:2b:0c:9a:1f:cd:8a:37:8d:bd:54:2c: 48:69:7f:ad:5a:96:ba:94:ed:2e:a6:4a:00:da:6f:f6:a9:12: e4:57:2c:e5:86:32:f1:ff:31:48:77:d3:fc:15:d4:4e:0b:3a: 2f:67:5a:62:a7:f2:9d:8f:1b:67:12:c3:5c:5a:df:69:94:38: 75:09:d6:6e:25:47:60:e0:07:ce:20:d0:07:bf:de:76:68:44: 02:9b:f9:e5:ba:fb:0e:ae:3e:e1:a5:2b:4b:07:a9:86:e4:19: 6f:a0:3f:16:2e:a3:39:a4:7e:83:f4:2f:c9:68:c9:ce:86:cf: a8:25:5c:b4:18:3d:28:b1:7c:e4:01:08:bc:d8:0a:a1:84:e8: b8:dd:ae:13:85:b8:ad:ba:64:9c:67:d7:ca:bc:fd:f2:e7:39: e8:3e:e5:eb:32:e3:19:78:3a:5b:9d:23:29:2e:98:da:db:1f: 83:4a:e7:14:35:6e:5c:7c:e2:9b:14:8e:5f:53:87:8d:dc:7e: 07:6c:c9:9d:21:36:1e:91:da:57:75:c8:6c:a2:db:09:6d:fd: 9d:2d:e9:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrjQqn4wcs3fqXtoX8vId1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjAzMDgwOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDc3Mjc1ODA0NTA4ZDI0YTg5YzY2OWE5YTIzNDkxOGQ4NzI1NDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz53zreCJuOm1PP+aFCFwTWhBXw/M eBK1iG1TwBx+p5MtqfyZxdF/F5AlF4Q31n/PvNJY11+xVMbPmDtHAkCaV9Pjn8Vd Q53/YLvnuRQL70n/f6qrZK0x0YSqtG9uKvCar7ikvFSPcgodFRTQGZk/3HS6XOnL oDdS5uTB05TdpN8fvrkvbAa4kwLmrZPGdh6ssYuWxF65KBvj76I7Kl1qkZGc4yqu HKCN31Tr9zdRBPp/9/WsnVduW5YsvnU5EshTa2dyB5MySdCZf7PdlJZSvknczxRL PVbspSeD369LzFS2xxGNdVbG5p+PFN6xOfhrju4DeUQpnowdhETy0WPKLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPR3J1gEUI0kqJxmmpojSRjYclQuMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvOUhjbldBUlFqU1NvbkdhYW1pTkpHTmh5VkM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu7MA0G CSqGSIb3DQEBCwUAA4IBAQCf5OjbDb3AwWC2qjVXC30uE2W49KKZwL3CxWaODlAx uFtDzxGpFid5nPZzKwyaH82KN429VCxIaX+tWpa6lO0upkoA2m/2qRLkVyzlhjLx /zFId9P8FdROCzovZ1pip/KdjxtnEsNcWt9plDh1CdZuJUdg4AfOINAHv952aEQC m/nluvsOrj7hpStLB6mG5BlvoD8WLqM5pH6D9C/JaMnOhs+oJVy0GD0osXzkAQi8 2AqhhOi43a4ThbitumScZ9fKvP3y5znoPuXrMuMZeDpbnSMpLpja2x+DSucUNW5c fOKbFI5fU4eN3H4HbMmdITYekdpXdchsotsJbf2dLelB -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:24 2025 by rpki-client