This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-hVanR_FPCjv_aTLCNO0RAiVGS0.roa File: 1-hVanR_FPCjv_aTLCNO0RAiVGS0.roa (raw, json) Hash identifier: KproQy06PBqXsE6K/0QrxPjb1wQmcYSTrX8ZPG1y0gw= Subject key identifier: FA:15:5A:9D:1F:C5:3C:28:EF:FD:A4:CB:08:D3:B4:44:08:95:19:2D Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019AB4E19D8456F5F9AD4C7D8B2A31F4982C Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-hVanR_FPCjv_aTLCNO0RAiVGS0.roa Signing time: Mon 24 Nov 2025 08:01:15 +0000 ROA not before: Mon 24 Nov 2025 08:01:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 45.155.240.0/24 maxlen: 24 45.155.241.0/24 maxlen: 24 194.143.210.0/24 maxlen: 24 194.143.217.0/24 maxlen: 24 194.143.218.0/24 maxlen: 24 194.143.222.0/24 maxlen: 24 195.114.203.0/24 maxlen: 24 195.114.205.0/24 maxlen: 24 213.220.2.0/24 maxlen: 24 213.220.4.0/24 maxlen: 24 213.220.6.0/24 maxlen: 24 213.220.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:e1:9d:84:56:f5:f9:ad:4c:7d:8b:2a:31:f4:98:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Nov 24 08:01:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa155a9d1fc53c28effda4cb08d3b4440895192d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:a6:85:b7:ce:6c:b2:d2:d4:30:c3:05:fe: ad:25:4f:11:d7:0f:d7:ba:09:7c:11:29:5c:6f:23: 97:1e:30:59:07:2a:92:b0:70:db:23:b0:63:f5:33: 1a:f4:30:f9:d1:34:3b:3c:3a:8a:f6:ba:8a:19:7f: a9:a2:89:6c:83:28:43:a1:fc:bb:33:8e:01:cc:c3: 3f:99:27:e7:96:52:70:a5:cb:40:ad:e0:3e:c3:e7: 24:12:ea:9f:5a:0d:e7:25:71:e4:e8:5e:a1:56:aa: 7c:06:2f:e1:14:2d:32:c7:8c:82:9b:f3:a0:47:02: 8e:23:85:f1:14:d3:a5:c2:6f:a3:d9:62:17:69:de: c6:72:10:2e:83:74:b3:93:af:81:96:5b:66:6d:8f: 48:10:ff:65:c2:0d:11:a6:45:55:1b:ec:03:04:fd: b0:05:f2:c9:5f:90:b4:52:60:51:e8:a8:83:5b:e7: 11:4e:ea:a9:31:1e:8a:81:50:2c:74:5a:83:d0:60: 5b:90:86:30:92:65:e8:1b:06:c6:5e:4d:22:bd:9e: 10:75:cb:fb:40:03:e6:27:ae:44:44:9d:27:0e:de: a3:31:d0:1a:f6:fb:10:e7:02:01:83:26:15:ff:a4: c9:42:79:af:43:b9:c0:ed:58:b1:e6:cf:0c:bd:78: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:15:5A:9D:1F:C5:3C:28:EF:FD:A4:CB:08:D3:B4:44:08:95:19:2D X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-hVanR_FPCjv_aTLCNO0RAiVGS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.240.0/23 194.143.210.0/24 194.143.217.0-194.143.218.255 194.143.222.0/24 195.114.203.0/24 195.114.205.0/24 213.220.2.0/24 213.220.4.0/24 213.220.6.0/24 213.220.41.0/24 Signature Algorithm: sha256WithRSAEncryption 04:d4:2e:5e:0e:50:0d:ef:fc:4d:77:86:eb:b4:9e:1c:78:2c: 2e:d9:ed:f1:96:93:14:39:b6:23:33:6f:8d:4e:49:45:da:dd: dd:89:14:a8:ee:a4:82:53:56:6d:3a:04:09:06:6b:fe:84:3e: 67:7a:fc:30:c9:c9:e8:ce:e1:85:79:73:dd:21:b6:1c:a1:e2: 61:5e:37:c7:66:a7:9b:9a:a8:02:37:a4:44:66:57:32:3c:e5: c2:ac:e6:3f:66:3c:ed:88:c1:cf:bc:81:ca:3c:53:e7:f4:b5: cd:f6:00:99:90:96:10:5d:d9:64:dc:00:15:43:ba:15:93:2a: 4a:3a:39:aa:3a:0d:d9:a7:87:5c:72:76:6e:39:7e:30:68:59: 7d:21:82:17:ac:5e:80:df:65:96:32:48:47:37:da:58:33:bd: 86:7f:a6:f1:52:15:57:39:56:2f:bc:f8:1f:ff:33:05:11:b7: 42:04:6e:c2:1b:33:45:4b:1b:6f:07:50:6f:2a:b6:fe:37:18: 80:b3:f0:e8:a5:b2:e7:29:c0:83:9b:56:63:9b:87:a7:5f:fe: 33:1a:c4:e1:40:c5:39:97:c8:71:56:3f:5d:14:f8:3a:59:55: 4a:cb:24:60:48:b3:94:3e:c8:26:da:e2:5c:1e:b3:be:ea:86: 77:4c:8a:6c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZq04Z2EVvX5rUx9iyox9JgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMTI0MDgwMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTE1NWE5ZDFmYzUzYzI4ZWZmZGE0Y2IwOGQzYjQ0NDA4OTUxOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1qmhbfObLLS1DDDBf6tJU8R1w/X ugl8ESlcbyOXHjBZByqSsHDbI7Bj9TMa9DD50TQ7PDqK9rqKGX+poolsgyhDofy7 M44BzMM/mSfnllJwpctAreA+w+ckEuqfWg3nJXHk6F6hVqp8Bi/hFC0yx4yCm/Og RwKOI4XxFNOlwm+j2WIXad7GchAug3Szk6+BlltmbY9IEP9lwg0RpkVVG+wDBP2w BfLJX5C0UmBR6KiDW+cRTuqpMR6KgVAsdFqD0GBbkIYwkmXoGwbGXk0ivZ4Qdcv7 QAPmJ65ERJ0nDt6jMdAa9vsQ5wIBgyYV/6TJQnmvQ7nA7Vix5s8MvXgbAQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPoVWp0fxTwo7/2kywjTtEQIlRktMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvMS1oVmFuUl9GUENqdl9hVExDTk8wUkFpVkdTMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWEvMWY5NDkzLWQ0NjgtNGE3Yy04YzRiLTFkZGVjNGNjZTI0 Yy8xL0JuSGN4Nm1zYzFISEhndkNKNHowWDlBZ3JpNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBdBggrBgEFBQcBBwEB/wROMEwwSgQCAAEwRAMEAS2b8AME AMKP0jAMAwQAwo/ZAwQAwo/aAwQAwo/eAwQAw3LLAwQAw3LNAwQA1dwCAwQA1dwE AwQA1dwGAwQA1dwpMA0GCSqGSIb3DQEBCwUAA4IBAQAE1C5eDlAN7/xNd4brtJ4c eCwu2e3xlpMUObYjM2+NTklF2t3diRSo7qSCU1ZtOgQJBmv+hD5nevwwycnozuGF eXPdIbYcoeJhXjfHZqebmqgCN6REZlcyPOXCrOY/ZjztiMHPvIHKPFPn9LXN9gCZ kJYQXdlk3AAVQ7oVkypKOjmqOg3Zp4dccnZuOX4waFl9IYIXrF6A32WWMkhHN9pY M72Gf6bxUhVXOVYvvPgf/zMFEbdCBG7CGzNFSxtvB1BvKrb+NxiAs/DopbLnKcCD m1Zjm4enX/4zGsThQMU5l8hxVj9dFPg6WVVKyyRgSLOUPsgm2uJcHrO+6oZ3TIps -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:44 2025 by rpki-client