This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-Z-VJ1Ms32GjdpMHy4Gt2fXpC7o.roa File: 1-Z-VJ1Ms32GjdpMHy4Gt2fXpC7o.roa (raw, json) Hash identifier: BLjg1ZutxDLP0LD83fUNb6XlKzTK1eWAEiysqvfQvfg= Subject key identifier: F9:9F:95:27:53:2C:DF:61:A3:76:93:07:CB:81:AD:D9:F5:E9:0B:BA Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019AF437D10A8DFDB4037BF77D46D1F3142B Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-Z-VJ1Ms32GjdpMHy4Gt2fXpC7o.roa Signing time: Sat 06 Dec 2025 15:11:29 +0000 ROA not before: Sat 06 Dec 2025 15:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 45.11.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:37:d1:0a:8d:fd:b4:03:7b:f7:7d:46:d1:f3:14:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Dec 6 15:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f99f9527532cdf61a3769307cb81add9f5e90bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:15:2f:5f:36:1f:1b:01:41:d8:90:ca:86: d8:a3:06:39:32:6e:de:20:c3:13:7f:5e:b6:3e:c0: 90:fc:3a:5e:c1:91:11:af:2f:ff:74:da:42:35:78: 6a:1e:c2:25:6c:c1:72:ab:87:b3:65:51:3a:18:95: 7d:57:d9:e6:45:b6:76:d0:b2:29:b2:f0:d6:d3:6e: f7:b5:ca:f2:f0:29:56:27:24:14:b8:16:42:11:4a: 77:e6:e7:f2:ae:fb:7d:6b:5e:15:0d:ff:31:ca:3c: 58:73:c3:a6:23:11:66:e4:de:6d:17:99:6e:c7:72: a4:36:9b:b6:5b:72:bc:33:f9:38:85:60:92:49:49: 3f:6b:74:4f:81:48:71:b1:38:4e:ac:8e:47:00:5d: b4:9b:41:9c:2e:ab:2d:30:c0:ee:d1:31:f1:65:81: 6f:07:e9:c8:4c:73:f4:f1:11:d0:bb:f6:5f:1c:3f: 53:db:1a:9a:2e:20:b8:73:a3:b6:19:81:af:a9:8c: 5d:13:9a:85:f8:f8:6c:8e:b4:6d:53:c7:7c:30:4e: ce:ee:69:7d:88:b4:4f:0e:ba:31:ee:b6:47:9b:53: 9c:23:2b:2b:ec:08:b4:1a:46:b0:ad:60:60:59:6c: df:77:9a:6d:ec:14:ce:23:41:84:32:32:2f:be:82: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9F:95:27:53:2C:DF:61:A3:76:93:07:CB:81:AD:D9:F5:E9:0B:BA X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-Z-VJ1Ms32GjdpMHy4Gt2fXpC7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.190.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:54:29:0d:bc:7d:27:26:45:13:22:ec:ce:1c:05:38:a1:b3: b1:9d:93:46:e9:09:4d:60:e6:1b:64:51:6b:ee:39:fc:9e:5a: 41:87:1d:0e:fe:05:b0:9e:d1:fb:bb:35:45:a6:65:c1:f4:1f: 16:61:2b:e0:48:1f:09:81:05:c1:26:41:59:3c:8b:03:00:6a: 92:82:4a:85:94:ea:84:f6:9c:de:3f:ba:a5:f1:44:0f:27:bd: a2:18:da:ac:e6:8f:ec:a0:a0:a6:77:b6:2b:b3:44:73:e3:06: 0d:5b:31:16:99:9f:a6:f8:d1:c1:43:a3:02:9b:92:44:2e:14: 3d:58:35:b3:f0:59:d7:27:bb:70:15:6f:85:47:68:ce:b3:4b: 22:96:c2:67:b8:d4:6c:79:23:7c:2c:5b:ad:a0:e0:31:2c:fb: dc:13:33:79:f0:cb:e3:ac:c9:c5:29:51:80:fe:90:0c:74:a9: 6e:40:10:d7:9d:d2:67:0e:1b:d5:15:df:66:61:87:fe:3e:1d: 42:1f:63:0d:a1:ce:fb:9a:14:02:9a:bf:f9:ee:cf:d6:b6:0d: 31:55:30:ae:51:c9:a3:b2:99:ec:34:6b:c5:bc:a3:10:5c:76: a3:ff:07:d4:a1:fe:47:2c:87:fc:97:b0:49:34:ac:36:3e:a2: 9e:b1:f4:93 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZr0N9EKjf20A3v3fUbR8xQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjUxMjA2MTUxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTlmOTUyNzUzMmNkZjYxYTM3NjkzMDdjYjgxYWRkOWY1ZTkwYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3MVL182HxsBQdiQyobYowY5Mm7e IMMTf162PsCQ/DpewZERry//dNpCNXhqHsIlbMFyq4ezZVE6GJV9V9nmRbZ20LIp svDW0273tcry8ClWJyQUuBZCEUp35ufyrvt9a14VDf8xyjxYc8OmIxFm5N5tF5lu x3KkNpu2W3K8M/k4hWCSSUk/a3RPgUhxsThOrI5HAF20m0GcLqstMMDu0THxZYFv B+nITHP08RHQu/ZfHD9T2xqaLiC4c6O2GYGvqYxdE5qF+PhsjrRtU8d8ME7O7ml9 iLRPDrox7rZHm1OcIysr7Ai0GkawrWBgWWzfd5pt7BTOI0GEMjIvvoJTmQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmflSdTLN9ho3aTB8uBrdn16Qu6MB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvMS1aLVZKMU1zMzJHamRwTUh5NEd0MmZYcEM3by5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTAvMzk1MzI4LWY0NjEtNDRiNy1iMDMxLTNmOGI1NWRhMWFj NC8xL0JSOHBSaTU2ZmFmclgwWGFlSFB4VGtBXzQ2cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0LvjAN BgkqhkiG9w0BAQsFAAOCAQEATlQpDbx9JyZFEyLszhwFOKGzsZ2TRukJTWDmG2RR a+45/J5aQYcdDv4FsJ7R+7s1RaZlwfQfFmEr4EgfCYEFwSZBWTyLAwBqkoJKhZTq hPac3j+6pfFEDye9ohjarOaP7KCgpne2K7NEc+MGDVsxFpmfpvjRwUOjApuSRC4U PVg1s/BZ1ye7cBVvhUdozrNLIpbCZ7jUbHkjfCxbraDgMSz73BMzefDL46zJxSlR gP6QDHSpbkAQ153SZw4b1RXfZmGH/j4dQh9jDaHO+5oUApq/+e7P1rYNMVUwrlHJ o7KZ7DRrxbyjEFx2o/8H1KH+RyyH/JewSTSsNj6inrH0kw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:14:42 2025 by rpki-client