This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CwLyd1hvwwCpFrY0FJN9R0kCAHM.roa File: CwLyd1hvwwCpFrY0FJN9R0kCAHM.roa (raw, json) Hash identifier: +InSu+wwGa8+l0ZRRpkm67RN4rfJwmt9k3CDaWDpGUM= Subject key identifier: 0B:02:F2:77:58:6F:C3:00:A9:16:B6:34:14:93:7D:47:49:02:00:73 Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019ABAD5F52AA45701CBB3029EBDE2BC93CD Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CwLyd1hvwwCpFrY0FJN9R0kCAHM.roa Signing time: Tue 25 Nov 2025 11:46:15 +0000 ROA not before: Tue 25 Nov 2025 11:46:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197537 IP address blocks: 45.156.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 05:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:d5:f5:2a:a4:57:01:cb:b3:02:9e:bd:e2:bc:93:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Nov 25 11:46:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b02f277586fc300a916b63414937d4749020073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:5c:97:b5:6a:4b:26:c6:eb:7d:b7:70:10: 1b:4c:20:ef:f1:ff:25:d3:2e:50:84:8b:9c:a0:ba: 44:a1:84:b1:8c:ca:fe:97:48:fc:a6:7e:c2:5c:99: e1:29:80:bc:57:ef:9e:60:36:03:f4:2c:2f:cb:e6: 31:84:c8:e1:a7:ec:4a:af:aa:d5:6f:2b:c1:b3:2a: 2e:d4:22:5c:d3:d5:f6:f7:a6:b3:61:ef:63:fd:c4: 9b:40:44:5b:b9:cd:b8:7d:fe:b6:35:2b:2e:6e:fc: 03:49:0c:a9:41:1b:45:2b:1c:5e:27:ff:be:45:1f: 40:32:9b:43:31:d5:69:b3:75:70:88:3e:1b:34:5f: 72:8f:d9:1e:2f:27:a7:28:fe:21:41:a0:cd:be:6f: 33:c7:41:3d:af:f5:e3:6d:20:8a:7d:4f:64:ce:36: e4:b7:22:fb:05:03:c4:fd:8e:32:22:41:a7:58:c7: 1c:8e:b7:e5:58:be:4c:54:c3:04:a1:29:e4:cc:92: 45:56:f7:f9:c5:ce:40:a8:dd:f5:44:f2:34:1f:3f: c6:22:67:5b:2d:c0:e5:6a:9a:fe:b7:d0:52:53:b0: 9c:18:8e:cb:22:6d:e7:15:15:fc:6a:dd:77:36:f3: 26:df:d8:5a:bf:42:35:0b:de:bf:ef:53:19:2d:5a: f4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:02:F2:77:58:6F:C3:00:A9:16:B6:34:14:93:7D:47:49:02:00:73 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CwLyd1hvwwCpFrY0FJN9R0kCAHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.147.0/24 Signature Algorithm: sha256WithRSAEncryption 30:a9:2d:3a:6d:88:ec:92:52:ad:06:ac:fc:1d:91:ef:3d:3a: 35:a8:8e:4a:fc:31:92:5d:84:23:8f:d3:d9:b8:d0:ee:af:47: bc:0f:e9:a1:f0:29:ff:aa:c9:72:39:19:25:6f:51:3c:69:5b: af:8d:1a:3f:6d:21:75:3a:ef:f6:6d:48:c6:de:36:65:a4:e9: 69:47:1d:c0:2f:2a:63:0e:7e:ae:71:83:e1:11:08:81:fb:27: e3:f1:8b:9c:03:e1:bd:d0:da:38:5e:a0:f4:34:64:fa:db:9b: 1c:64:b3:75:7a:95:14:b7:b4:b3:cf:b4:4d:05:a9:a0:3a:5c: 99:e4:fc:0d:c6:13:fc:91:49:6a:7a:53:42:1f:41:3e:ef:35: e5:4e:b6:12:40:aa:5f:da:fe:13:87:b0:f8:f4:47:1e:f8:2d: 1c:27:74:47:73:11:b7:8e:bb:2b:03:4c:55:95:9a:51:0d:02: eb:a7:d2:0a:68:30:16:f9:aa:8c:0e:0c:5f:2d:97:fd:b5:1f: a9:2e:b7:62:fe:d7:7a:d6:20:30:f7:f8:80:cf:cb:27:e5:35: 77:b0:8e:06:1c:e9:9c:df:9c:29:bc:94:7f:87:56:02:fb:8b: b1:4e:b9:93:84:54:95:68:bb:9f:8f:69:53:4c:e3:83:54:c1: e1:fb:81:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq61fUqpFcBy7MCnr3ivJPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjUxMTI1MTE0NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjAyZjI3NzU4NmZjMzAwYTkxNmI2MzQxNDkzN2Q0NzQ5MDIwMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonFcl7VqSybG6323cBAbTCDv8f8l 0y5QhIucoLpEoYSxjMr+l0j8pn7CXJnhKYC8V++eYDYD9Cwvy+YxhMjhp+xKr6rV byvBsyou1CJc09X296azYe9j/cSbQERbuc24ff62NSsubvwDSQypQRtFKxxeJ/++ RR9AMptDMdVps3VwiD4bNF9yj9keLyenKP4hQaDNvm8zx0E9r/XjbSCKfU9kzjbk tyL7BQPE/Y4yIkGnWMccjrflWL5MVMMEoSnkzJJFVvf5xc5AqN31RPI0Hz/GImdb LcDlapr+t9BSU7CcGI7LIm3nFRX8at13NvMm39hav0I1C96/71MZLVr0LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAsC8ndYb8MAqRa2NBSTfUdJAgBzMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvQ3dMeWQxaHZ3d0NwRnJZMEZKTjlSMGtDQUhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZyTMA0G CSqGSIb3DQEBCwUAA4IBAQAwqS06bYjsklKtBqz8HZHvPTo1qI5K/DGSXYQjj9PZ uNDur0e8D+mh8Cn/qslyORklb1E8aVuvjRo/bSF1Ou/2bUjG3jZlpOlpRx3ALypj Dn6ucYPhEQiB+yfj8YucA+G90No4XqD0NGT625scZLN1epUUt7Szz7RNBamgOlyZ 5PwNxhP8kUlqelNCH0E+7zXlTrYSQKpf2v4Th7D49Ece+C0cJ3RHcxG3jrsrA0xV lZpRDQLrp9IKaDAW+aqMDgxfLZf9tR+pLrdi/td61iAw9/iAz8sn5TV3sI4GHOmc 35wpvJR/h1YC+4uxTrmThFSVaLufj2lTTOODVMHh+4EG -----END CERTIFICATE-----Generated at Wed Nov 26 10:09:24 2025 by rpki-client