This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/V-b-2I3iEEIVeiGH0dH9bmUShSo.roa File: V-b-2I3iEEIVeiGH0dH9bmUShSo.roa (raw, json) Hash identifier: rtQWMZJe02xbUkvplDdtZ0fDlJmFKLRYx2vE0SO8gTw= Subject key identifier: 57:E6:FE:D8:8D:E2:10:42:15:7A:21:87:D1:D1:FD:6E:65:12:85:2A Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019B075F60B9B9825C2B7ACECE9E08CC34C2 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/V-b-2I3iEEIVeiGH0dH9bmUShSo.roa Signing time: Wed 10 Dec 2025 08:27:29 +0000 ROA not before: Wed 10 Dec 2025 08:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.156.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:5f:60:b9:b9:82:5c:2b:7a:ce:ce:9e:08:cc:34:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Dec 10 08:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=57e6fed88de21042157a2187d1d1fd6e6512852a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:f4:98:63:a7:e6:a5:40:0f:7c:9f:08:a3: af:f4:72:15:79:92:fd:ce:37:7e:b3:3d:6a:c0:b0: 67:e2:f8:b9:e3:c0:d2:02:dc:77:53:8e:72:d9:fe: 17:c1:84:4d:a2:be:f0:53:10:76:7a:c7:20:e2:c4: ef:71:38:59:c8:46:8a:18:e1:1b:45:05:d6:25:36: bb:ee:fd:33:d4:53:1e:47:b1:b8:d8:55:d0:b5:c9: 67:21:a3:28:ec:c3:ba:6b:b2:fc:0b:12:69:af:14: e4:6c:a9:f3:d6:0f:e5:cb:33:13:ce:ba:23:63:8c: f0:22:9d:58:64:75:22:5e:3e:a0:24:94:8f:67:cb: 43:b7:2c:09:5b:ad:55:3a:5f:6d:9e:84:d4:dc:d2: 99:6f:ae:5a:cb:b6:47:98:fa:ed:26:4d:ac:0c:36: 86:62:c0:41:93:7a:39:4a:4d:da:6c:32:45:21:be: fe:4e:ef:e2:a3:f1:44:ac:de:20:97:d9:0b:9d:2f: 8c:ae:bc:46:2f:52:99:6a:a3:9e:a2:d3:da:fe:99: f2:84:0e:d9:90:bc:21:dc:11:34:b0:12:ce:08:f7: 88:9d:7f:b9:6c:1f:e7:d5:8b:ad:8e:20:6a:2e:a5: 94:44:be:84:40:6a:e3:01:7f:0b:dd:80:0a:2e:fe: c7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E6:FE:D8:8D:E2:10:42:15:7A:21:87:D1:D1:FD:6E:65:12:85:2A X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/V-b-2I3iEEIVeiGH0dH9bmUShSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.144.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:93:b8:fd:ff:bb:e8:ab:d1:fc:3a:b7:a7:b8:58:e4:a8:95: b2:3a:1b:b1:0d:f5:6c:03:d4:8c:b6:b0:4f:26:fd:e5:95:56: 64:1a:8b:02:fd:5c:12:53:a3:8a:80:a1:09:c7:32:2a:8a:d1: 62:b0:98:3c:1a:ce:16:3d:b3:69:aa:7f:3e:45:c8:6a:a7:a1: dd:5b:16:7e:e2:74:0b:b0:5e:32:36:4e:b3:a2:ba:ff:97:6d: 94:d7:06:ca:5a:7c:f4:0a:a0:bf:a8:49:55:8e:4a:42:f2:e9: 79:f0:c9:88:0d:7b:7f:fe:7d:1e:e9:9a:09:a3:39:0e:4e:fe: 48:b3:77:58:de:14:26:f3:13:44:6e:3e:da:a6:08:79:10:c9: d6:af:1f:b0:7a:22:05:d4:ba:d8:0f:d4:aa:45:f6:f4:58:38: f8:5c:c1:e8:3b:7d:95:77:27:73:c0:8a:a3:ba:c0:4d:66:35: a5:a9:a9:1a:1b:5f:1f:47:a5:c5:f7:16:92:4a:2c:df:f4:3b: 0f:e0:22:70:51:da:16:09:92:c4:f0:95:52:94:37:43:a7:d6: 1c:18:cf:c7:e8:60:12:f6:84:9e:12:eb:cc:60:b6:d5:2a:cb: 2a:b2:88:73:fb:42:4b:ab:51:c2:4c:4e:b9:51:57:32:6e:f8: 6d:fa:8a:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHX2C5uYJcK3rOzp4IzDTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjUxMjEwMDgyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2U2ZmVkODhkZTIxMDQyMTU3YTIxODdkMWQxZmQ2ZTY1MTI4NTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQb0mGOn5qVAD3yfCKOv9HIVeZL9 zjd+sz1qwLBn4vi548DSAtx3U45y2f4XwYRNor7wUxB2escg4sTvcThZyEaKGOEb RQXWJTa77v0z1FMeR7G42FXQtclnIaMo7MO6a7L8CxJprxTkbKnz1g/lyzMTzroj Y4zwIp1YZHUiXj6gJJSPZ8tDtywJW61VOl9tnoTU3NKZb65ay7ZHmPrtJk2sDDaG YsBBk3o5Sk3abDJFIb7+Tu/io/FErN4gl9kLnS+MrrxGL1KZaqOeotPa/pnyhA7Z kLwh3BE0sBLOCPeInX+5bB/n1YutjiBqLqWURL6EQGrjAX8L3YAKLv7HnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFfm/tiN4hBCFXohh9HR/W5lEoUqMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvVi1iLTJJM2lFRUlWZWlHSDBkSDlibVVTaFNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZyQMA0G CSqGSIb3DQEBCwUAA4IBAQBbk7j9/7voq9H8OrenuFjkqJWyOhuxDfVsA9SMtrBP Jv3llVZkGosC/VwSU6OKgKEJxzIqitFisJg8Gs4WPbNpqn8+Rchqp6HdWxZ+4nQL sF4yNk6zorr/l22U1wbKWnz0CqC/qElVjkpC8ul58MmIDXt//n0e6ZoJozkOTv5I s3dY3hQm8xNEbj7apgh5EMnWrx+weiIF1LrYD9SqRfb0WDj4XMHoO32VdydzwIqj usBNZjWlqakaG18fR6XF9xaSSizf9DsP4CJwUdoWCZLE8JVSlDdDp9YcGM/H6GAS 9oSeEuvMYLbVKssqsohz+0JLq1HCTE65UVcybvht+orp -----END CERTIFICATE-----Generated at Thu Dec 11 03:50:41 2025 by rpki-client