This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/4a-EzwC6jcEZNutp1wLJOJsSJ5U.roa File: 4a-EzwC6jcEZNutp1wLJOJsSJ5U.roa (raw, json) Hash identifier: 60NeFyIQuFnQCA7ZWZ86ut/ZRlrjaBqbGPGUjZkcqBo= Subject key identifier: E1:AF:84:CF:00:BA:8D:C1:19:36:EB:69:D7:02:C9:38:9B:12:27:95 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019AFF077393B0BAF5E5B4EED96ACA338EE1 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/4a-EzwC6jcEZNutp1wLJOJsSJ5U.roa Signing time: Mon 08 Dec 2025 17:34:29 +0000 ROA not before: Mon 08 Dec 2025 17:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44382 IP address blocks: 45.141.148.0/24 maxlen: 24 194.116.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:07:73:93:b0:ba:f5:e5:b4:ee:d9:6a:ca:33:8e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Dec 8 17:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e1af84cf00ba8dc11936eb69d702c9389b122795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4b:9a:35:bb:30:b9:cb:ba:fb:37:65:22:28: 3e:2e:ed:4f:df:c1:cb:54:2e:94:64:dc:42:04:a3: 28:90:fd:68:31:a7:e1:71:2d:49:de:93:91:6e:df: 21:1b:fd:08:ca:3b:35:3c:8c:1a:68:a0:ef:45:f2: 50:79:0d:e4:1b:83:c6:2f:37:8c:5f:ff:be:d5:46: 99:e8:e6:32:74:09:4b:23:72:2d:d0:b0:a1:04:b3: e8:f5:0a:a1:6d:17:d6:cb:ec:c4:37:70:f5:02:51: c2:2e:5e:a8:43:ce:37:b3:92:6e:7b:ac:90:8b:ad: 51:87:1b:03:90:51:37:fc:ff:26:53:d4:75:e3:e2: 28:d9:b3:ee:35:49:dd:9b:35:3e:b0:76:47:f4:4d: 25:30:3c:aa:1f:90:ef:7f:b2:0c:a2:cf:e9:b5:13: b8:4f:b9:66:75:4f:1b:95:22:a9:6a:cc:a3:ff:ea: 2e:d0:76:8d:24:45:97:27:a3:0b:9a:0c:d5:1e:52: b7:70:4b:06:c2:4b:ea:5c:fe:8f:69:52:a2:89:4b: 15:17:66:08:a0:af:89:3e:f6:33:ad:30:5e:a8:e3: f7:eb:4b:52:cf:1d:2b:67:fe:15:59:f4:93:fb:f2: 76:b6:96:ce:ec:6e:6c:04:1b:98:9b:75:95:2c:4c: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AF:84:CF:00:BA:8D:C1:19:36:EB:69:D7:02:C9:38:9B:12:27:95 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/4a-EzwC6jcEZNutp1wLJOJsSJ5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.148.0/24 194.116.236.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c8:d7:a6:06:d4:e0:c3:0f:f7:c7:db:fc:c4:b3:27:9b:81: 7d:02:7d:31:77:21:14:f6:1b:de:91:ee:a4:f8:f8:23:53:4b: f3:e4:21:b9:4c:ec:d2:51:11:b3:e0:c7:7a:43:c3:11:7f:50: 52:c0:64:ba:40:4e:d7:3b:bb:37:f9:54:e5:fb:9a:a7:1b:6b: 8a:d1:24:4f:ef:d8:7f:51:e7:75:86:97:8e:5e:2c:d5:b7:fd: 51:7b:60:81:e0:a7:f3:fd:15:3a:a3:32:29:ec:d0:50:62:12: 17:cb:8a:88:5b:c4:ca:10:60:4a:ce:55:53:d9:17:8e:a7:8b: 2c:b7:03:61:67:6f:52:41:15:16:55:7c:59:e4:92:01:1f:fd: 6d:dd:1e:11:32:6e:83:5b:ab:84:50:d3:30:c7:a0:d2:3a:c3: b2:66:04:79:64:31:a5:c1:c8:1f:ee:7c:9c:c5:b4:e3:4b:ca: 6e:84:49:32:d4:5a:14:97:43:57:f3:40:22:36:da:d5:7f:82: 4c:ab:b7:a0:2b:72:59:9e:c9:e3:6d:94:70:7e:a4:a2:bc:c6: e4:42:c8:f4:42:1a:e8:4f:5c:67:07:63:7f:79:1e:4d:b8:aa: ed:56:6a:d7:74:58:39:bf:a1:c4:ef:b2:61:ce:a9:0a:e8:d2: 37:28:fa:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZr/B3OTsLr15bTu2WrKM47hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMjA4MTczNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWFmODRjZjAwYmE4ZGMxMTkzNmViNjlkNzAyYzkzODliMTIyNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kuaNbswucu6+zdlIig+Lu1P38HL VC6UZNxCBKMokP1oMafhcS1J3pORbt8hG/0Iyjs1PIwaaKDvRfJQeQ3kG4PGLzeM X/++1UaZ6OYydAlLI3It0LChBLPo9QqhbRfWy+zEN3D1AlHCLl6oQ843s5Jue6yQ i61RhxsDkFE3/P8mU9R14+Io2bPuNUndmzU+sHZH9E0lMDyqH5Dvf7IMos/ptRO4 T7lmdU8blSKpasyj/+ou0HaNJEWXJ6MLmgzVHlK3cEsGwkvqXP6PaVKiiUsVF2YI oK+JPvYzrTBeqOP360tSzx0rZ/4VWfST+/J2tpbO7G5sBBuYm3WVLExNswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOGvhM8Auo3BGTbradcCyTibEieVMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvNGEtRXp3QzZqY0VaTnV0cDF3TEpPSnNTSjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY2UAwQA wnTsMA0GCSqGSIb3DQEBCwUAA4IBAQCCyNemBtTgww/3x9v8xLMnm4F9An0xdyEU 9hveke6k+PgjU0vz5CG5TOzSURGz4Md6Q8MRf1BSwGS6QE7XO7s3+VTl+5qnG2uK 0SRP79h/Ued1hpeOXizVt/1Re2CB4Kfz/RU6ozIp7NBQYhIXy4qIW8TKEGBKzlVT 2ReOp4sstwNhZ29SQRUWVXxZ5JIBH/1t3R4RMm6DW6uEUNMwx6DSOsOyZgR5ZDGl wcgf7nycxbTjS8puhEky1FoUl0NX80AiNtrVf4JMq7egK3JZnsnjbZRwfqSivMbk Qsj0QhroT1xnB2N/eR5NuKrtVmrXdFg5v6HE77JhzqkK6NI3KPqo -----END CERTIFICATE-----Generated at Sat Dec 13 08:10:36 2025 by rpki-client