This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CM34r5JVvVrHwMpjMjwHYjZb5iA.roa File: CM34r5JVvVrHwMpjMjwHYjZb5iA.roa (raw, json) Hash identifier: yxIs2fHctQUYmW64clZdo+7ZmJg8UIlKZcjonXx+qWw= Subject key identifier: 08:CD:F8:AF:92:55:BD:5A:C7:C0:CA:63:32:3C:07:62:36:5B:E6:20 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B459F0DC299764ECFF639D8425ECC418B Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CM34r5JVvVrHwMpjMjwHYjZb5iA.roa Signing time: Mon 22 Dec 2025 10:33:30 +0000 ROA not before: Mon 22 Dec 2025 10:33:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59432 IP address blocks: 45.81.154.0/24 maxlen: 24 45.90.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:9f:0d:c2:99:76:4e:cf:f6:39:d8:42:5e:cc:41:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 22 10:33:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=08cdf8af9255bd5ac7c0ca63323c0762365be620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:75:98:a0:c2:81:8e:9d:42:0b:d2:b8:01: 5b:bf:82:76:b3:c1:c6:76:71:7c:41:6c:73:74:ba: 1e:9e:0d:16:22:f2:31:5e:0b:c8:34:d7:96:d8:e5: c3:44:90:f4:5e:1b:5a:b6:2e:39:c1:9d:c7:b4:33: a5:c9:27:f7:fc:6b:7c:33:30:2f:f4:2d:e4:30:5a: dc:5d:69:0d:58:a7:d0:90:2d:38:fd:e3:93:ff:e9: 5c:c2:a0:58:41:7f:ea:08:4b:88:c7:c3:5a:4b:71: ee:32:4d:eb:e0:30:06:82:d3:5b:48:18:a3:df:38: 3e:c8:23:88:23:d1:1e:63:36:8d:56:d9:63:1f:08: a9:eb:97:5d:a3:37:c3:d6:57:1a:1d:1e:6d:f1:62: bd:4b:9c:39:63:84:12:6b:07:e7:db:a6:e0:d7:fe: 1f:91:a9:f3:48:1e:3d:ca:e9:33:36:e4:77:90:13: 49:b3:c3:8d:67:9e:7f:9b:e7:e6:85:f7:7c:1e:98: 9f:f9:b0:28:64:a0:1d:db:5e:3c:a7:3b:8c:4f:ae: 90:54:ae:60:13:e0:2d:4d:5c:58:a9:13:d7:3b:f4: af:56:b6:49:a7:2e:9a:ea:9a:14:c7:a9:d9:e9:eb: 27:61:ff:57:bf:85:6a:ea:58:55:9b:e2:e9:d4:cc: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CD:F8:AF:92:55:BD:5A:C7:C0:CA:63:32:3C:07:62:36:5B:E6:20 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CM34r5JVvVrHwMpjMjwHYjZb5iA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.154.0/24 45.90.16.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:8b:d6:dc:62:37:53:b9:c7:c3:59:a4:f5:ce:30:f8:0c:3a: c9:50:6e:f0:db:2c:ab:8b:29:dc:ec:2b:0b:0a:df:99:38:30: 2e:ef:85:92:9d:b6:30:7f:10:3d:6a:53:18:25:81:01:95:24: c9:aa:0c:29:03:90:b3:1e:ea:37:c9:88:d0:92:66:cf:a6:14: 99:98:d7:d7:65:a3:03:5d:7c:ed:77:ce:21:bd:98:43:41:a1: 95:80:c9:cd:fc:d1:77:ef:b0:bc:1b:4a:f4:b7:c4:6d:86:71: e3:b4:d2:24:aa:77:0f:86:8f:d3:5f:15:70:82:39:9c:15:9f: 26:91:0f:e5:92:e3:3d:9f:c8:ad:bc:b5:86:ff:74:7c:8f:10: 24:9b:eb:85:17:17:4c:2e:ab:2e:62:cc:1c:35:ce:b9:73:64: 36:9b:14:a5:61:3a:2b:68:92:37:fe:9a:fb:e6:11:a9:ce:92: 7a:f8:de:cb:9f:4f:4d:60:1e:58:ac:de:2c:c0:7c:2f:14:23: c0:13:25:9a:32:6c:64:85:30:16:c1:a3:bf:7d:76:f9:ee:76: 47:a7:39:33:ee:d2:e2:6a:d5:4a:4d:8c:fb:0a:dc:61:54:24: 2c:c8:c5:05:96:c5:be:4b:a4:e1:42:b1:09:d9:1d:c4:b2:08: 56:5b:e1:73 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtFnw3CmXZOz/Y52EJezEGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjIyMTAzMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGNkZjhhZjkyNTViZDVhYzdjMGNhNjMzMjNjMDc2MjM2NWJlNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdt1mKDCgY6dQgvSuAFbv4J2s8HG dnF8QWxzdLoeng0WIvIxXgvINNeW2OXDRJD0Xhtati45wZ3HtDOlySf3/Gt8MzAv 9C3kMFrcXWkNWKfQkC04/eOT/+lcwqBYQX/qCEuIx8NaS3HuMk3r4DAGgtNbSBij 3zg+yCOII9EeYzaNVtljHwip65ddozfD1lcaHR5t8WK9S5w5Y4QSawfn26bg1/4f kanzSB49yukzNuR3kBNJs8ONZ55/m+fmhfd8Hpif+bAoZKAd2148pzuMT66QVK5g E+AtTVxYqRPXO/SvVrZJpy6a6poUx6nZ6esnYf9Xv4Vq6lhVm+Lp1MyJCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAjN+K+SVb1ax8DKYzI8B2I2W+YgMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvQ00zNHI1SlZ2VnJId01wak1qd0hZalpiNWlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVGaAwQA LVoQMA0GCSqGSIb3DQEBCwUAA4IBAQB6i9bcYjdTucfDWaT1zjD4DDrJUG7w2yyr iync7CsLCt+ZODAu74WSnbYwfxA9alMYJYEBlSTJqgwpA5CzHuo3yYjQkmbPphSZ mNfXZaMDXXztd84hvZhDQaGVgMnN/NF377C8G0r0t8RthnHjtNIkqncPho/TXxVw gjmcFZ8mkQ/lkuM9n8itvLWG/3R8jxAkm+uFFxdMLqsuYswcNc65c2Q2mxSlYTor aJI3/pr75hGpzpJ6+N7Ln09NYB5YrN4swHwvFCPAEyWaMmxkhTAWwaO/fXb57nZH pzkz7tLiatVKTYz7CtxhVCQsyMUFlsW+S6ThQrEJ2R3EsghWW+Fz -----END CERTIFICATE-----Generated at Tue Dec 23 04:07:44 2025 by rpki-client