This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/c5HdWUcnb9avfH7VyB-fyRHw7eY.roa File: c5HdWUcnb9avfH7VyB-fyRHw7eY.roa (raw, json) Hash identifier: GGCIVXKsoNzmWovG/BFsg2GjwaIvm+vo2UR8DlePDS0= Subject key identifier: 73:91:DD:59:47:27:6F:D6:AF:7C:7E:D5:C8:1F:9F:C9:11:F0:ED:E6 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B08FD32E02E756EAFCB61142AFCC02873 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/c5HdWUcnb9avfH7VyB-fyRHw7eY.roa Signing time: Wed 10 Dec 2025 15:59:29 +0000 ROA not before: Wed 10 Dec 2025 15:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212219 IP address blocks: 45.136.6.0/24 maxlen: 24 45.141.151.0/24 maxlen: 24 45.147.46.0/24 maxlen: 24 45.147.47.0/24 maxlen: 24 194.146.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fd:32:e0:2e:75:6e:af:cb:61:14:2a:fc:c0:28:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Dec 10 15:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7391dd5947276fd6af7c7ed5c81f9fc911f0ede6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:52:2b:07:14:17:97:a0:99:3c:4c:c4:a2: d1:c4:8e:bf:34:39:c9:49:f6:1c:88:c2:5a:4a:b4: e1:1a:aa:26:99:db:59:1a:16:2a:ac:40:9d:75:85: f2:02:e3:97:06:0f:fa:e5:90:f5:7c:01:87:b7:3c: dc:5a:16:a8:9b:7e:51:8e:7d:ef:7f:c1:b2:2b:8b: 6b:d7:08:76:64:ef:78:c9:2a:08:d0:1e:af:da:41: c1:a2:5e:da:ce:fa:71:82:81:bc:ff:5d:8d:fb:d5: 21:fb:b9:14:bf:3b:a5:58:da:10:ca:1d:a1:c4:71: dc:8b:60:3a:15:1d:3a:ff:9b:10:98:eb:54:ad:0d: ef:69:40:8e:f9:8b:b2:34:52:9d:98:5b:c6:9c:14: 9f:90:25:e8:9e:95:ab:06:d7:6a:18:79:c1:4b:e6: 71:c5:5c:c8:3e:81:aa:f2:fb:c6:b6:fa:35:91:09: fa:52:2b:4e:a0:59:2a:fc:eb:e6:89:79:9a:a0:a9: a6:c2:e4:a1:86:bc:14:cf:07:69:31:70:e6:51:68: 2c:99:90:9d:9d:09:a3:04:91:99:b4:9c:b7:71:8e: f0:63:59:58:3a:94:98:6b:1c:7e:14:0b:d9:31:97: d2:0d:ec:e6:cc:60:ac:b3:70:5c:47:dc:bf:0d:0a: 2a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:91:DD:59:47:27:6F:D6:AF:7C:7E:D5:C8:1F:9F:C9:11:F0:ED:E6 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/c5HdWUcnb9avfH7VyB-fyRHw7eY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.6.0/24 45.141.151.0/24 45.147.46.0/23 194.146.36.0/24 Signature Algorithm: sha256WithRSAEncryption 09:41:7e:30:d3:09:aa:4b:7a:5a:88:d0:fc:2d:1b:94:d3:39: 73:ae:e4:0a:94:56:17:a0:34:02:2d:f9:41:66:1c:1e:89:e1: d3:7a:0e:03:ac:ed:29:85:3e:2b:00:20:0c:55:bd:94:ff:ab: 6d:9f:6c:18:7e:c4:ea:ae:12:2c:79:db:ea:07:3d:df:43:54: 0c:11:e2:14:ab:39:6d:94:b9:7c:b1:ec:10:17:68:dd:ea:2f: 72:f4:5f:db:b7:8c:30:6e:6d:50:5f:be:c1:04:73:4c:18:4d: c1:a5:8c:75:24:57:eb:c9:47:a4:ed:9f:3f:54:59:bb:45:c9: 7c:6c:86:f0:20:a0:6f:bd:bb:18:7c:f6:89:32:c0:da:69:aa: d5:03:d8:00:93:75:02:42:e1:4d:93:bb:4b:ec:8b:17:50:26: 79:46:a1:ba:d3:72:0f:a8:7d:ca:3b:9f:c4:79:d6:e1:db:96: d8:69:10:d1:f4:e0:b0:49:85:43:ec:98:d4:d1:44:79:d2:01: 7d:1b:64:4e:44:fe:df:b5:d8:69:a2:49:5a:e5:fd:da:03:f6: 2f:59:d3:07:e7:c4:4d:77:bd:64:b0:a0:f9:f3:65:08:13:54: b8:70:2e:c3:d2:bf:52:21:63:49:4a:c3:d6:04:e5:e6:24:09: 9e:f0:cf:12 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsI/TLgLnVur8thFCr8wChzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMjEwMTU1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzkxZGQ1OTQ3Mjc2ZmQ2YWY3YzdlZDVjODFmOWZjOTExZjBlZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw9SKwcUF5egmTxMxKLRxI6/NDnJ SfYciMJaSrThGqommdtZGhYqrECddYXyAuOXBg/65ZD1fAGHtzzcWhaom35Rjn3v f8GyK4tr1wh2ZO94ySoI0B6v2kHBol7azvpxgoG8/12N+9Uh+7kUvzulWNoQyh2h xHHci2A6FR06/5sQmOtUrQ3vaUCO+YuyNFKdmFvGnBSfkCXonpWrBtdqGHnBS+Zx xVzIPoGq8vvGtvo1kQn6UitOoFkq/OvmiXmaoKmmwuShhrwUzwdpMXDmUWgsmZCd nQmjBJGZtJy3cY7wY1lYOpSYaxx+FAvZMZfSDezmzGCss3BcR9y/DQoqrwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHOR3VlHJ2/Wr3x+1cgfn8kR8O3mMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvYzVIZFdVY25iOWF2Zkg3VnlCLWZ5Ukh3N2VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYgGAwQA LY2XAwQBLZMuAwQAwpIkMA0GCSqGSIb3DQEBCwUAA4IBAQAJQX4w0wmqS3paiND8 LRuU0zlzruQKlFYXoDQCLflBZhweieHTeg4DrO0phT4rACAMVb2U/6ttn2wYfsTq rhIsedvqBz3fQ1QMEeIUqzltlLl8sewQF2jd6i9y9F/bt4wwbm1QX77BBHNMGE3B pYx1JFfryUek7Z8/VFm7Rcl8bIbwIKBvvbsYfPaJMsDaaarVA9gAk3UCQuFNk7tL 7IsXUCZ5RqG603IPqH3KO5/Eedbh25bYaRDR9OCwSYVD7JjU0UR50gF9G2RORP7f tdhpokla5f3aA/YvWdMH58RNd71ksKD582UIE1S4cC7D0r9SIWNJSsPWBOXmJAme 8M8S -----END CERTIFICATE-----Generated at Sat Dec 13 08:17:14 2025 by rpki-client