This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/RlijeiTmPD6sHGSu-ts_JAvGtZo.roa File: RlijeiTmPD6sHGSu-ts_JAvGtZo.roa (raw, json) Hash identifier: yj1wHoLM8feflkvyzQlTnJgBwYE0hD/9rQyGYXqCs2w= Subject key identifier: 46:58:A3:7A:24:E6:3C:3E:AC:1C:64:AE:FA:DB:3F:24:0B:C6:B5:9A Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019A71173494DAB4C82E347AAF22722E0B49 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/RlijeiTmPD6sHGSu-ts_JAvGtZo.roa Signing time: Tue 11 Nov 2025 04:05:37 +0000 ROA not before: Tue 11 Nov 2025 04:05:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203061 IP address blocks: 5.180.220.0/23 maxlen: 23 5.180.222.0/23 maxlen: 23 45.10.232.0/23 maxlen: 23 91.204.48.0/23 maxlen: 23 91.204.50.0/23 maxlen: 23 92.118.12.0/23 maxlen: 23 92.118.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:17:34:94:da:b4:c8:2e:34:7a:af:22:72:2e:0b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Nov 11 04:05:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4658a37a24e63c3eac1c64aefadb3f240bc6b59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:15:fb:29:a9:5b:1d:cd:77:99:06:c3:f9:cf: ed:73:9a:72:72:b3:60:fe:3d:2b:15:8e:46:7c:64: 81:2a:46:cf:03:33:5a:9c:a5:05:9f:4b:be:bc:2e: 7f:47:7a:26:10:2f:1e:b0:8e:40:99:31:3c:02:b1: 96:05:95:0a:8c:2c:fe:37:75:8c:64:0a:52:e1:ec: 52:3a:1b:6f:55:38:db:9e:8c:cb:2e:9c:df:5f:32: 4b:06:4b:20:43:ab:00:a9:97:cb:6d:34:04:e9:99: 71:dc:81:6e:5d:8f:85:86:be:b1:c6:cb:d5:d1:8e: b1:2e:ba:41:1c:7b:80:f0:ad:21:32:be:8e:12:0e: 1c:7d:c7:a1:71:03:74:67:ef:b7:50:0c:7c:42:3a: b0:8b:51:1c:b1:90:f7:bc:5c:9c:80:d6:75:0c:f2: 33:f7:4e:1b:60:78:0c:70:5e:3e:2d:24:f9:d2:55: dc:6f:96:35:71:4c:cf:66:28:ab:88:fa:8a:48:a8: d8:77:f2:a4:48:bd:fd:45:a1:31:07:97:0b:9b:ca: 2d:6f:d2:44:53:9e:7f:dd:1a:31:1e:5d:28:0a:e5: 43:98:27:2e:9a:b7:79:ec:28:a7:8d:10:97:84:af: c5:e5:d5:90:5f:06:03:33:a4:fb:1a:cd:97:e6:4f: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:58:A3:7A:24:E6:3C:3E:AC:1C:64:AE:FA:DB:3F:24:0B:C6:B5:9A X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/RlijeiTmPD6sHGSu-ts_JAvGtZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.220.0/22 45.10.232.0/23 91.204.48.0/22 92.118.12.0/22 Signature Algorithm: sha256WithRSAEncryption 66:1c:70:b1:1c:0d:1a:6c:7f:19:a4:8f:3d:19:f2:53:fc:16: dc:58:84:89:95:f6:c6:dc:1b:20:1b:44:9f:ae:09:0f:f0:6d: 5e:7d:62:5d:9f:a9:83:e1:75:0c:32:fb:a3:63:38:90:39:a5: 1e:5d:c4:29:01:02:b6:41:e3:ca:eb:17:3b:51:2e:db:91:9a: 82:01:19:16:d5:fe:9c:5e:99:fd:d9:d4:77:9b:c6:c7:99:96: 4f:2b:44:15:e1:3a:80:3c:61:a3:17:95:44:d0:3e:1f:c2:a8: 3e:05:2f:61:bb:e5:04:36:a9:83:1f:54:fe:a5:d9:68:65:18: 34:b8:2a:12:78:9f:fd:5c:f1:1f:d9:c1:86:c7:b1:84:9d:e3: f2:d2:10:2b:b9:5c:6c:14:02:86:7a:2c:7f:37:9b:f7:25:64: 64:07:9e:bb:2f:5f:73:81:3e:82:93:b6:9f:e0:06:fa:c5:5c: f1:07:da:d5:f1:32:81:6b:5b:34:81:c6:b9:6b:9c:2a:2c:9f: a9:a7:94:d3:83:d2:d4:ad:cd:a0:38:f7:fc:45:9e:1a:0a:30: d0:a4:82:20:bc:e6:03:06:c1:86:13:fb:a4:1e:50:9a:c9:e2: 87:6c:64:13:df:7a:00:2b:24:0b:7d:34:67:eb:44:2a:27:e8: d4:23:43:7b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZpxFzSU2rTILjR6ryJyLgtJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjUxMTExMDQwNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjU4YTM3YTI0ZTYzYzNlYWMxYzY0YWVmYWRiM2YyNDBiYzZiNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xX7KalbHc13mQbD+c/tc5pycrNg /j0rFY5GfGSBKkbPAzNanKUFn0u+vC5/R3omEC8esI5AmTE8ArGWBZUKjCz+N3WM ZApS4exSOhtvVTjbnozLLpzfXzJLBksgQ6sAqZfLbTQE6Zlx3IFuXY+Fhr6xxsvV 0Y6xLrpBHHuA8K0hMr6OEg4cfcehcQN0Z++3UAx8Qjqwi1EcsZD3vFycgNZ1DPIz 904bYHgMcF4+LST50lXcb5Y1cUzPZiiriPqKSKjYd/KkSL39RaExB5cLm8otb9JE U55/3RoxHl0oCuVDmCcumrd57CinjRCXhK/F5dWQXwYDM6T7Gs2X5k+tywIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEZYo3ok5jw+rBxkrvrbPyQLxrWaMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvUmxpamVpVG1QRDZzSEdTdS10c19KQXZHdFpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBbTcAwQB LQroAwQCW8wwAwQCXHYMMA0GCSqGSIb3DQEBCwUAA4IBAQBmHHCxHA0abH8ZpI89 GfJT/BbcWISJlfbG3BsgG0SfrgkP8G1efWJdn6mD4XUMMvujYziQOaUeXcQpAQK2 QePK6xc7US7bkZqCARkW1f6cXpn92dR3m8bHmZZPK0QV4TqAPGGjF5VE0D4fwqg+ BS9hu+UENqmDH1T+pdloZRg0uCoSeJ/9XPEf2cGGx7GEnePy0hAruVxsFAKGeix/ N5v3JWRkB567L19zgT6Ck7af4Ab6xVzxB9rV8TKBa1s0gca5a5wqLJ+pp5TTg9LU rc2gOPf8RZ4aCjDQpIIgvOYDBsGGE/ukHlCayeKHbGQT33oAKyQLfTRn60QqJ+jU I0N7 -----END CERTIFICATE-----Generated at Sat Dec 6 21:31:59 2025 by rpki-client