This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/J44Z4Tgcw-AV9S54DTd0WYqvfaQ.roa File: J44Z4Tgcw-AV9S54DTd0WYqvfaQ.roa (raw, json) Hash identifier: NmfJXb6jXjFVf2V7NROr+VC6Vzihrgt41O4Lov0gIgI= Subject key identifier: 27:8E:19:E1:38:1C:C3:E0:15:F5:2E:78:0D:37:74:59:8A:AF:7D:A4 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019AA81145318F23832D24BD89135AAE04F2 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/J44Z4Tgcw-AV9S54DTd0WYqvfaQ.roa Signing time: Fri 21 Nov 2025 20:18:15 +0000 ROA not before: Fri 21 Nov 2025 20:18:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44547 IP address blocks: 45.136.7.0/24 maxlen: 24 194.146.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a8:11:45:31:8f:23:83:2d:24:bd:89:13:5a:ae:04:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Nov 21 20:18:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=278e19e1381cc3e015f52e780d3774598aaf7da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:ad:5a:6c:1d:16:db:a8:c4:fb:4d:17:16: 6d:dc:d9:88:0b:e5:f8:ae:2f:6a:b5:57:80:2f:b1: 9c:4d:9d:3b:5b:f4:85:b8:13:54:98:65:1a:82:14: a2:27:88:c5:6b:7e:7c:cb:86:ab:7a:02:e9:f8:1c: e7:c5:0b:82:18:a5:9a:19:a5:e8:0d:aa:5b:58:ee: 21:07:ee:04:65:9c:27:62:90:b8:bb:b8:59:76:38: 9e:3e:59:d9:70:61:18:bc:37:36:08:31:7b:1f:e8: 88:4c:15:27:42:90:cf:f8:33:ab:85:4a:bf:3c:b6: 6d:7c:35:8f:48:fb:60:65:f2:ff:ad:1a:d5:f5:a8: 5e:32:d3:8f:54:ef:e8:31:d3:00:fb:f7:74:aa:da: fa:e2:1a:f1:7b:46:b6:9a:e9:55:0d:49:cb:a2:7e: a7:80:a5:5b:62:5b:93:ac:8e:58:0a:cc:4f:be:3b: d6:68:24:06:65:1c:22:ca:08:ed:4a:a1:25:ee:46: 2c:99:a0:49:6f:71:52:0e:b0:9b:ec:c0:c7:c5:f8: 78:ba:d1:5a:1b:1b:44:46:8f:68:eb:31:01:d3:d6: d0:3c:a8:e8:ec:47:7c:6f:30:cf:dc:f9:f0:7e:81: 6a:9d:c7:05:ff:f8:67:68:b5:70:11:71:b5:0c:3f: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8E:19:E1:38:1C:C3:E0:15:F5:2E:78:0D:37:74:59:8A:AF:7D:A4 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/J44Z4Tgcw-AV9S54DTd0WYqvfaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.7.0/24 194.146.26.0/24 Signature Algorithm: sha256WithRSAEncryption 43:fb:56:b3:7c:5c:2e:71:0f:3b:28:a3:a3:83:00:f8:0f:a4: 1c:5e:41:23:77:04:b7:71:6b:79:90:4b:31:73:73:2f:ff:53: d9:98:76:f7:a0:80:4b:0c:85:e3:85:1e:a3:60:79:ea:a9:5e: 9d:f4:6a:1b:eb:6f:bf:00:56:35:e8:f5:71:4b:93:9a:22:02: 57:8b:c9:d7:1e:1f:31:56:83:e9:99:1a:5e:da:1c:4b:7a:bc: f0:21:17:ee:b0:ce:05:dd:25:b1:a1:f8:db:1f:d7:1b:ca:03: 90:46:09:e1:d3:38:6a:9c:c8:04:9b:3a:b2:9c:bd:99:26:2b: b1:5a:ef:33:02:7c:2a:7c:5c:b1:eb:e4:09:e8:06:1c:a3:4b: 8c:8b:fb:98:13:28:35:bc:ff:0b:5c:22:5a:cb:d1:35:46:3f: f7:13:b9:e3:b0:77:8b:a5:88:67:7a:f7:43:25:e3:65:37:8f: c0:3d:a0:68:17:6d:0e:5d:f7:97:82:b0:da:04:37:a0:36:2c: 8b:e0:1e:10:4b:0a:95:80:a5:54:04:fa:22:75:d3:c1:d7:69: 09:9a:91:fd:03:c6:e3:65:52:a7:88:b6:61:4c:e7:ce:2a:f1: 5d:09:9a:78:23:8e:4a:d9:4d:2c:63:c2:21:7e:3a:1f:a5:77: 0d:dc:b3:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqoEUUxjyODLSS9iRNargTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMTIxMjAxODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzhlMTllMTM4MWNjM2UwMTVmNTJlNzgwZDM3NzQ1OThhYWY3ZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXatWmwdFtuoxPtNFxZt3NmIC+X4 ri9qtVeAL7GcTZ07W/SFuBNUmGUaghSiJ4jFa358y4aregLp+BznxQuCGKWaGaXo DapbWO4hB+4EZZwnYpC4u7hZdjiePlnZcGEYvDc2CDF7H+iITBUnQpDP+DOrhUq/ PLZtfDWPSPtgZfL/rRrV9aheMtOPVO/oMdMA+/d0qtr64hrxe0a2mulVDUnLon6n gKVbYluTrI5YCsxPvjvWaCQGZRwiygjtSqEl7kYsmaBJb3FSDrCb7MDHxfh4utFa GxtERo9o6zEB09bQPKjo7Ed8bzDP3PnwfoFqnccF//hnaLVwEXG1DD8dSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCeOGeE4HMPgFfUueA03dFmKr32kMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvSjQ0WjRUZ2N3LUFWOVM1NERUZDBXWXF2ZmFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYgHAwQA wpIaMA0GCSqGSIb3DQEBCwUAA4IBAQBD+1azfFwucQ87KKOjgwD4D6QcXkEjdwS3 cWt5kEsxc3Mv/1PZmHb3oIBLDIXjhR6jYHnqqV6d9Gob62+/AFY16PVxS5OaIgJX i8nXHh8xVoPpmRpe2hxLerzwIRfusM4F3SWxofjbH9cbygOQRgnh0zhqnMgEmzqy nL2ZJiuxWu8zAnwqfFyx6+QJ6AYco0uMi/uYEyg1vP8LXCJay9E1Rj/3E7njsHeL pYhnevdDJeNlN4/APaBoF20OXfeXgrDaBDegNiyL4B4QSwqVgKVUBPoiddPB12kJ mpH9A8bjZVKniLZhTOfOKvFdCZp4I45K2U0sY8IhfjofpXcN3LN7 -----END CERTIFICATE-----Generated at Fri Dec 5 18:22:20 2025 by rpki-client