This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/dI10wjGorSO1arzLrOl5lZns2Ws.roa File: dI10wjGorSO1arzLrOl5lZns2Ws.roa (raw, json) Hash identifier: vCuXZv4HXZm3lD9RFF3OWx/4MhkKhjeibESJzayE+jE= Subject key identifier: 74:8D:74:C2:31:A8:AD:23:B5:6A:BC:CB:AC:E9:79:95:99:EC:D9:6B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019A9CF167B025490D4F840BDD98E1B0D265 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/dI10wjGorSO1arzLrOl5lZns2Ws.roa Signing time: Wed 19 Nov 2025 16:27:37 +0000 ROA not before: Wed 19 Nov 2025 16:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207350 IP address blocks: 45.159.148.0/24 maxlen: 24 2a05:9080:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:f1:67:b0:25:49:0d:4f:84:0b:dd:98:e1:b0:d2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Nov 19 16:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=748d74c231a8ad23b56abccbace9799599ecd96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:c8:7d:91:ed:7e:25:3d:6c:d3:e4:97:bf: 4d:8f:10:09:b4:e1:aa:b3:fa:5f:d9:cd:8c:80:3a: 9d:55:85:56:1a:f9:d8:5e:3b:41:01:51:0a:80:62: 7c:4b:3b:6a:2b:a9:4e:90:b6:9b:85:2f:bd:ba:6d: 29:b5:c5:a0:c2:5e:0c:44:5c:33:81:e6:9b:7e:18: 0c:bb:d9:b1:7c:1d:e0:c4:49:8e:3d:d4:af:39:57: e6:f6:93:8c:d0:9a:05:41:32:da:96:6e:29:97:b4: 3c:35:df:db:ae:b2:93:c3:5b:e9:81:9f:9c:f3:c9: e0:5b:ca:af:c4:ed:de:99:a4:1b:cd:4a:d4:fe:8a: 2a:20:55:93:9e:44:1a:f0:3f:ca:af:9c:92:f8:83: 48:ef:15:9e:09:05:2c:b1:44:eb:c9:4b:94:df:5f: 9a:88:b0:31:1c:5b:4d:f2:1b:83:bf:4a:86:1c:fe: e6:8b:64:1d:73:02:d0:cb:44:5f:5a:ce:d9:6b:9b: 74:05:ba:2b:7f:83:e0:a0:3a:9d:b8:af:cc:a8:34: ba:4d:ca:88:73:08:7e:e0:f8:9f:5b:6a:85:9e:4e: e0:f2:51:ab:28:00:e7:c4:b0:7b:01:98:bb:17:07: a4:8f:b2:b0:f3:12:96:0a:d6:f8:84:fa:e5:88:5e: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8D:74:C2:31:A8:AD:23:B5:6A:BC:CB:AC:E9:79:95:99:EC:D9:6B X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/dI10wjGorSO1arzLrOl5lZns2Ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.148.0/24 IPv6: 2a05:9080:1::/48 Signature Algorithm: sha256WithRSAEncryption 75:8c:2a:fc:68:45:d6:01:c9:87:ba:9a:d1:88:9a:c6:06:ff: d5:f0:df:8b:6b:84:12:60:31:f7:75:30:b9:70:2e:df:5a:a0: 95:6d:60:7c:54:b2:13:a7:7a:b0:fd:bc:e2:1d:c5:0c:98:57: 05:d5:60:92:44:35:7b:55:34:b3:23:d5:52:71:1b:6b:37:15: a3:67:6a:fc:03:2f:51:ce:d7:c4:04:4e:23:29:82:a5:5e:f0: dd:bb:fa:c4:b9:11:29:b7:e5:a5:bf:10:c9:52:b8:31:e4:85: 0c:62:5e:49:93:a9:11:db:38:cc:c2:5b:4a:07:01:bd:55:18: a3:50:20:20:e6:d2:59:aa:8b:02:fb:80:65:d4:18:15:34:28: 8d:c1:4b:b1:d5:1b:3f:a9:87:1a:a6:d7:ea:6f:34:cd:51:a4: 03:79:ac:b9:9c:aa:47:c7:10:0e:24:63:93:45:f9:0e:33:3d: a2:13:6e:91:5a:d1:10:15:fa:2d:6b:d8:04:ed:6e:da:fe:4d: 90:23:a2:be:52:d0:78:0a:6c:2c:ee:1c:19:81:64:59:8f:09: 07:28:10:4d:27:4e:05:ca:7a:22:5c:83:49:fe:0e:10:ff:66: 3f:de:1f:c1:e6:6b:6d:6b:b8:98:ba:94:19:8d:e9:20:bd:49: 0c:0c:40:86 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqc8WewJUkNT4QL3ZjhsNJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMTE5MTYyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDhkNzRjMjMxYThhZDIzYjU2YWJjY2JhY2U5Nzk5NTk5ZWNkOTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju3IfZHtfiU9bNPkl79NjxAJtOGq s/pf2c2MgDqdVYVWGvnYXjtBAVEKgGJ8SztqK6lOkLabhS+9um0ptcWgwl4MRFwz geabfhgMu9mxfB3gxEmOPdSvOVfm9pOM0JoFQTLalm4pl7Q8Nd/brrKTw1vpgZ+c 88ngW8qvxO3emaQbzUrU/ooqIFWTnkQa8D/Kr5yS+INI7xWeCQUssUTryUuU31+a iLAxHFtN8huDv0qGHP7mi2QdcwLQy0RfWs7Za5t0Bborf4PgoDqduK/MqDS6TcqI cwh+4PifW2qFnk7g8lGrKADnxLB7AZi7Fwekj7Kw8xKWCtb4hPrliF4PjQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHSNdMIxqK0jtWq8y6zpeZWZ7NlrMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZEkxMHdqR29yU08xYXJ6THJPbDVsWm5zMldzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZ+UMA8E AgACMAkDBwAqBZCAAAEwDQYJKoZIhvcNAQELBQADggEBAHWMKvxoRdYByYe6mtGI msYG/9Xw34trhBJgMfd1MLlwLt9aoJVtYHxUshOnerD9vOIdxQyYVwXVYJJENXtV NLMj1VJxG2s3FaNnavwDL1HO18QETiMpgqVe8N27+sS5ESm35aW/EMlSuDHkhQxi XkmTqRHbOMzCW0oHAb1VGKNQICDm0lmqiwL7gGXUGBU0KI3BS7HVGz+phxqm1+pv NM1RpAN5rLmcqkfHEA4kY5NF+Q4zPaITbpFa0RAV+i1r2ATtbtr+TZAjor5S0HgK bCzuHBmBZFmPCQcoEE0nTgXKeiJcg0n+DhD/Zj/eH8Hma21ruJi6lBmN6SC9SQwM QIY= -----END CERTIFICATE-----Generated at Thu Nov 20 10:22:13 2025 by rpki-client